last executing test programs: 15.987652237s ago: executing program 3 (id=6317): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711233"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000480)='sched_switch\x00', r6}, 0x10) (async, rerun: 64) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, 0x0) (async, rerun: 64) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$cgroup_int(r4, 0x0, 0x0) (async) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000001300)={0x2880008, r5}) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r7, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, 0x0}, 0x0) (async, rerun: 32) socket$inet(0x2, 0x0, 0x5) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r4, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async, rerun: 32) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x4005) (async, rerun: 32) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0a00180003030303030300001c005a801800018014000300100002000c0006000600c0070600ff0f"], 0x44}}, 0x0) 15.788873823s ago: executing program 3 (id=6320): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x4, 0x1, [0x0]}, &(0x7f0000000300)=0xa) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r1, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x50}}, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={r2, 0x2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000310000003377fbac141416e000000183070403b180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0xbc, 0x0, &(0x7f0000000f00)="ae02bf690aa925e2dd20c079881b518330324bc2581c1b07c88ce6cd3c0f36d723a0cd2d7396a7664f318a14e935e7edfec35737645274f64dc12eef8f1b33713bc5474c59f47cad34bed136705e4ea34359eed00888485fbd84ae407cc7d822258924d30494c0d8d551b7eb2e7c9de7b8338b9e17d7828b7f4aa917199f1686f29ac87029ad36b36e959fa10891e57d57324bc3eccf1050fe1999568189b7fe8b4e162529dffa51b0b1caf8b86e838a11275ab72a00252a21696f28"}, 0x50) 15.326716015s ago: executing program 3 (id=6323): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, r0}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x1d, 0x0, 0x2000000}, 0x18, &(0x7f0000000340)={&(0x7f00000003c0)="cd", 0x1}, 0x2, 0x0, 0x0, 0x5}, 0x0) 15.213880613s ago: executing program 3 (id=6325): r0 = socket$packet(0x11, 0x2, 0x300) socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x0, r2}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xc, 0x96, 0x4, 0xfffffffa, 0x10000, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x0, @void, @value, @value}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map=r6, r5, 0x16, 0x0, 0x0, @void, @value=r2}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYRES64=0x0, @ANYRES32=r7, @ANYBLOB="0a000600080211000700000080110001005a080039084eeef16f1600100000070000000000050612ff1f1078662a3a73cb34000200000000000800030008ac0f00000000"], 0x58}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$l2tp6(0x2, 0x2, 0x73) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1f, 0x13012, r0, 0x0) r8 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)) setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f00000001c0)=0x1, 0x4) 15.041263211s ago: executing program 3 (id=6327): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)}}], 0x4, 0x4048841) 14.65741015s ago: executing program 3 (id=6330): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xa6, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "005ff92900ddab4992020900"}]}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e22, @local}], 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x20, &(0x7f0000000180), &(0x7f0000000140)=0x3) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @val={@void, {0x8100, 0x3, 0x0, 0x1}}, {@canfd={0xd, {{0x1, 0x1}, 0x3d, 0x3, 0x0, 0x0, "6090c075b0001e295ec2984b122056db6632d1114053b761febc79a82746fe515e38f9bc8922b694d8fe8bcbe68bf4d7bd69d3d0260dd010747fe5db112685cd"}}}}, &(0x7f0000000200)={0x0, 0x4, [0x729, 0x312, 0xc2f, 0x314]}) syz_emit_ethernet(0x46, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x10, 0x3a, 0xff, @dev, @ipv4={'\x00', '\xff\xff', @loopback}, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x300}}}}}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) close(r6) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040004}, 0x840) 3.156442089s ago: executing program 4 (id=6431): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1, 0x16, &(0x7f0000000540)=ANY=[@ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x2, 0x3, 0x49) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{0x0, 0x14}], 0x2}}], 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x6, 0x2, {0x0, "00000000000000000400004f00"}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8}]}}]}, 0x38}}, 0x0) r10 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MIGRATE(r10, 0x6609) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x31}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xb8, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2e}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20044055}, 0x20004014) 1.967144296s ago: executing program 4 (id=6438): socket$unix(0x1, 0x2, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000009000000f27d00000000000000000001000000000000de4daa2920a50d802a23e6eb028f9dab81ed09f7c42a24a33b40ba5e70605c838c407a7411f56b897fd4530189d590f62901567bc74e864af2fc6754d330626adfc75ab3259e7e64385f918123e8888667dab8de24dd8e2c4cf1381c8a147090fd7ff19403ead47f753a5ba074092958c69cf362a5aa8495f2faf5214d45b9bbdfe494d162e7164b4c1cdc55950d9f06541fafb6fcf87cc50c7fc7894a49058f0c1f8b5e43d3f86f6cc06c83f25b1e846dc1f57009488be8bf1db9e237fa28c108a0e31a8ac7c16d123c409b6bf96cb0749d039ba024c0d2b9e233ee4cf783bf1ae01bc88efbde83f200956ef6b78b0d4908b10e3c4eb4cede250f1a46fe6948107a97104439a1297a3fbeb7c7804f623aa9b58f6b9778c8781cb6b663d13e693fa68aca6ae51c20f7cae451c32db56ec4e683f7ad6c9c424455ba3a0e43a68e5443a77f51097768ad40761801b3806c943a"], 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000ce7fafee82db280000000000b502000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r3, 0x8b2c, &(0x7f0000000040)) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}}, 0x90) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) getpeername(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="3100030007"], 0xd) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fe80000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}}, 0x10008801) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\ba\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r8, @ANYBLOB="14002c8008000000010000000800000001000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) 1.731311911s ago: executing program 4 (id=6441): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="c50a00000000000061139c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r6, r7, 0x2, 0x0, 0x0, @void, @value}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040a4}, 0x24040045) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x97, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14711}, [@IFLA_OPERSTATE={0x0, 0x10, 0xb}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x3c}}, 0x0) 1.350938238s ago: executing program 4 (id=6446): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='rpcgss_oid_to_mech\x00', r5}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x33) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000097a1850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r8, r0, 0x0, r8}, 0x10) 1.336797666s ago: executing program 1 (id=6447): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f00000019c0)}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa3745cc92c1f80fc01a77c28bb77872fc4f9be9660bb62708d0f52f4958fb4cc51", 0x3e}, {&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424fdeff46058eaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb8f2a756b1704c036e3b0ff2d1e9d397a82e24debd371e6855b7dc2dea47d57a9dfbf4fb2ccb3f975c3851c6b5399ab80c4ba95604f70a69674cfe820d82fb06b243625a8a9e4ee52e7c2ec4d63241fb00efd1a485a36dfb4a7dd573c6584c4afc55b3ff0a93509fe41aa0e8892c95ccad3e0435071aff78177e946cf231de4f", 0xe9}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66", 0x4c, 0x11, 0x0, 0x0) 1.269109456s ago: executing program 0 (id=6448): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x8, &(0x7f00000004c0)=""/102400, &(0x7f0000000000)=0x19000) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25ADDFWD(r2, 0x890b, &(0x7f0000000080)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000180)={0x89}, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000e00)=0x26e48b92) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="a40000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000007c0012800e00010069703665727370616e0000006800028006000300060000000600020009000000050016001100000004001200080015008af50f00050008001100000014000600fc010000000000000000000000000001050016000200006fb6dcbd5af31f7d0000000000000000000000000005000b0008000000080003"], 0xa4}}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@empty, @broadcast, 0x1, 0x5, [@multicast2, @broadcast, @remote, @remote, @multicast1]}, 0x24) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r4}, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000001c0)='task_newtask\x00', r6}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) close(r8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) 1.202765705s ago: executing program 4 (id=6450): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x16) sendfile(r0, r1, 0x0, 0x8000002b) socket$packet(0x11, 0x3, 0x300) 1.139737834s ago: executing program 1 (id=6451): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000004000000bca30000000000002403000040feffff720af0ff0600000071a4f4ff000000001f030000000000002e0a0200000000002600000000ff000e61143400000000001d430000000000007a0a00fe00581c1f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[]}, 0x78) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x7001, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) 1.002289304s ago: executing program 0 (id=6452): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @local}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x1bc, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b}]}, @TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pim6reg\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x840) 974.459346ms ago: executing program 1 (id=6454): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000000000407910000000000000670000c200004800950005000000000071a13928b72c696950a4edd77f9876d874394900f3bde847f8c78119dfbc27abc969c82ce6f6f0b2e10179582eed3525598659f1307bc7dea42e897c2305fd2a9989f18e0b716808f6491a914b82ce112e8a52578b3a8078cfd0b7d34cd51a741cdf3bdf46d174934650e575b0f5097a4d8f97c4b165abe4bb2be76d95cdba3f0b3a790af9d04d66016aeb34cf29cfd883a854803074ce6d65e4f15f11719754006007593f2f12b706682b684633803352f0e8ce93a2570ca6dd0ff917652d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) 799.034647ms ago: executing program 2 (id=6455): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0xff], 0x0, [0x8, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 798.699187ms ago: executing program 1 (id=6456): r0 = socket(0x15, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x80000000}}}}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@newqdisc={0x88, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58}}]}, 0x88}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @any, 0x1}, 0xe) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 732.443996ms ago: executing program 0 (id=6457): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)=@updpolicy={0x324, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0xfffc, 0x1, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x200000000}}, [@extra_flags={0x8, 0x18, 0x3ff}, @sa={0xe4, 0x6, {{@in=@broadcast, @in=@private=0xa010100, 0x4e22, 0x401, 0x4e24, 0x6, 0x2, 0xa0, 0xb0, 0x32}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x3c}, @in=@multicast1, {0x7, 0x4f5, 0x32, 0x3, 0x1, 0x7, 0x8b, 0x3}, {0x2efc, 0x5, 0x3, 0xfd}, {0x0, 0x36e}, 0x70bd29, 0x3506, 0xa, 0x4, 0x3, 0x4}}, @algo_aead={0x51, 0x12, {{'aegis128-generic\x00'}, 0x28, 0x0, "da339aee1d"}}, @tmpl={0x104, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x33}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3501, 0x0, 0x3, 0x0, 0x80000001, 0xd9, 0x1}, {{@in=@multicast2, 0x4d4, 0x3c}, 0x0, @in6=@loopback, 0x0, 0x1, 0x2, 0xc, 0x34, 0x2e4, 0xc000}, {{@in=@private=0xa010100, 0x4d2, 0x3c}, 0xa, @in=@loopback, 0x3502, 0x3, 0x0, 0x2, 0x1, 0x9, 0x9e0}, {{@in=@local, 0x4d6, 0x32}, 0xa, @in=@rand_addr=0x64010102, 0x3503, 0x3, 0x1, 0x3, 0x4, 0x50, 0x6}]}, @address_filter={0x28, 0x1a, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0x6, 0x4}}]}, 0x324}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) pwrite64(r2, &(0x7f0000000240)="e1", 0x1, 0x7fffffffffffffff) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 589.470075ms ago: executing program 2 (id=6458): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c0000000200bc00000000000000000e0000000000000000000000000600000d0000000000000000000000000000000000000000000000000000009f174a6c2ea8955d4838671421384700000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000902000000000000000000000900000000000000000000000a020000000000"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) r3 = socket(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x4b) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="184000000000b7f1f72c6f4caacefb349500150000000000683db69a7f2a985c63b9e6e5eea796aa46f6a1be62533ccd7eff162dff821aa1935d8b6c510b8d5a23e3afcb94"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) (async) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x8) (async) r7 = socket(0x10, 0x80002, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'hsr0\x00', 0x0}) (rerun: 32) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000000c0)={r9, 0x3, 0x6, @dev}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r9], 0x20}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32, @ANYBLOB="00000002000000000c001a8008000580040007"], 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=@newqdisc={0xc0, 0x24, 0x10, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x6}, {0x0, 0x2}, {0xfff2, 0x6}}, [@TCA_STAB={0x9c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x2, 0x4, 0xa400000, 0x0, 0x4, 0x6, 0x3}}, {0xa, 0x2, [0x101, 0xa, 0x17d]}}, {{0x1c, 0x1, {0x62, 0x3, 0x0, 0x4, 0x2, 0xffffff81, 0x4}}, {0x4}}, {{0x1c, 0x1, {0x1d, 0x7, 0x2, 0x2, 0x2, 0x3, 0x8001, 0x1}}, {0x6, 0x2, [0xe]}}, {{0x1c, 0x1, {0x0, 0x7, 0x2, 0x0, 0x1, 0x56, 0x5e0, 0x6}}, {0x10, 0x2, [0x1, 0x3a50, 0xfffc, 0x4, 0x15, 0x972]}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000001280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES8=r4, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="ac01028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYRESHEX=r8, @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000700000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400e5eb000008000100", @ANYRES32=0x0, @ANYBLOB="3801028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400050000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004004700000008000600", @ANYRES32, @ANYRESOCT=r6], 0x39c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000180)={0x7, 'ipvlan1\x00', {0x7}, 0x4}) (async) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x4000080) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_batadv\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="14010000160011040000000000000000fe880000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x114}}, 0x0) 532.433208ms ago: executing program 0 (id=6459): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x300, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x14}}, 0xc0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@mpls_getnetconf={0x14, 0x52, 0xede0b80134918adb, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x0) 353.80305ms ago: executing program 2 (id=6460): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0xfffd, @remote}, 0xffffffffffffffdb) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0x10000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x213a, 0x4) sendmmsg$inet(r0, &(0x7f0000001980)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) sendmmsg$inet(r0, &(0x7f0000007180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000080)="29000300010003", 0x7) recvmmsg(r0, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002110, 0x0) 339.018313ms ago: executing program 0 (id=6461): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f00000019c0)}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa3745cc92c1f80fc01a77c28bb77872fc4f9be9660bb62708d0f52f4958fb4cc51", 0x3e}, {&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424fdeff46058eaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb8f2a756b1704c036e3b0ff2d1e9d397a82e24debd371e6855b7dc2dea47d57a9dfbf4fb2ccb3f975c3851c6b5399ab80c4ba95604f70a69674cfe820d82fb06b243625a8a9e4ee52e7c2ec4d63241fb00efd1a485a36dfb4a7dd573c6584c4afc55b3ff0a93509fe41aa0e8892c95ccad3e0435071aff78177e946cf231de4f", 0xe9}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66", 0x4c, 0x11, 0x0, 0x0) 248.352255ms ago: executing program 2 (id=6462): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x22, 0x0, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ITS={0x8}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x50}}, 0x240008d0) 231.129158ms ago: executing program 1 (id=6463): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x2, &(0x7f0000000140), 0x4) (async) syz_genetlink_get_family_id$auto(&(0x7f0000000000)='[!!\x00', r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY={0xe}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10}]}, 0x48}}, 0x0) 230.259552ms ago: executing program 4 (id=6464): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x40, r5, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @probe_request={{{}, {}, @broadcast, @device_b}, @void, @void, @void, @void, @val={0x72, 0x6}}}]}, 0x40}}, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010102}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 164.078768ms ago: executing program 0 (id=6465): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[]}, 0x78) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="dcfcffff1b00090000000000fbdbcf250600000049011f800800ed007f000001050099f8ff0000000000fe00ac14143f1400ea00fc0000000000000061621787c4205cd30800000000000000fe85611ecd9246f148c23a6826377f1d59e93a43a0e5e9a2add857f2741fdaeac7f1f9b1b75787b606607e4dde20744dae8e9d267d08d384dbd55f886d6c243df74eedd78560372bdcdc37db67d866b79bdec534f889503d94948fb6d8ecb107c38af9ea52fb92d46f3d406fdc6aa0023403880ef90672f75007fa5a0000000000000000"], 0x160}}, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, 0x0, &(0x7f0000000040)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in6, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="e80000001b00010028bd7000fddbdf25ac141440000000000000000000000000fc0100000000000000000000000000004e2400004e220001020080206702000000e719194dacfee0", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="060000000000000005000000000000000600000000000000060000000000000000080000000000000100000000000080000000000000000096ffffffffffffff10080000000000000900000000000000f98e000000000000c872f52b0000000005000000be6b6e000200020300000000040000000000000028001700030000002cbd70002dbd700028bd70002dbd70002df6aa1973580000fbffffff03000000"], 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r9, 0x11b, 0x3f, 0xfffffffffffffffd, &(0x7f0000000040)=0x60) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @empty}], 0x10) sendmmsg$inet6(r10, &(0x7f0000003c40)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000400)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r10, 0x84, 0x79, &(0x7f0000000340)={0x0, 0xa4bb, 0x7}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) r12 = socket$igmp6(0xa, 0x3, 0x2) setsockopt(r12, 0xff, 0x3, &(0x7f0000000900)="7c73c6e9", 0x4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00!', @ANYRES16=r7, @ANYBLOB="01000000000000000000030000000a0009000180c2000000000008000300", @ANYRES32=r11, @ANYBLOB], 0x28}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r7, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x385}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000810}, 0x8011) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x7001, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) 114.821775ms ago: executing program 2 (id=6466): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="1b", 0x1}], 0x1}}], 0x1, 0x8000) accept$nfc_llcp(r1, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x1401, 0x7fc32be5eb343aa7}, 0x5c}}, 0x0) (async) recvmsg$can_raw(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000811) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r5, r4}) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000100)={r5}) (async) socket$packet(0x11, 0x2, 0x300) (async) syz_emit_ethernet(0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb2ac7fd5d244d86dd603ff82200092c00"], 0x0) 7.827435ms ago: executing program 1 (id=6467): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000013f82e"], 0x48) 0s ago: executing program 2 (id=6468): socket(0x11, 0x800000003, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0xff], 0x0, [0x8, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) kernel console output (not intermixed with test programs): 294883][T18144] ? __pfx_____sys_sendmsg+0x10/0x10 [ 581.300223][T18144] __sys_sendmsg+0x2b0/0x3a0 [ 581.304866][T18144] ? __pfx___sys_sendmsg+0x10/0x10 [ 581.310015][T18144] ? vfs_write+0x7c4/0xc90 [ 581.314517][T18144] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 581.320881][T18144] ? do_syscall_64+0x100/0x230 [ 581.325674][T18144] ? do_syscall_64+0xb6/0x230 [ 581.330385][T18144] do_syscall_64+0xf3/0x230 [ 581.334923][T18144] ? clear_bhb_loop+0x35/0x90 [ 581.339640][T18144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.345561][T18144] RIP: 0033:0x7fcfbe97def9 [ 581.349994][T18144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.369647][T18144] RSP: 002b:00007fcfbf7c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 581.378182][T18144] RAX: ffffffffffffffda RBX: 00007fcfbeb35f80 RCX: 00007fcfbe97def9 [ 581.386181][T18144] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 581.394177][T18144] RBP: 00007fcfbf7c0090 R08: 0000000000000000 R09: 0000000000000000 [ 581.402184][T18144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.410180][T18144] R13: 0000000000000000 R14: 00007fcfbeb35f80 R15: 00007ffdf0990b98 [ 581.418217][T18144] [ 581.685457][T18162] netlink: 'syz.4.5303': attribute type 3 has an invalid length. [ 581.721836][T18164] netlink: 'syz.0.5304': attribute type 11 has an invalid length. [ 581.782888][T18167] netlink: 'syz.3.5306': attribute type 1 has an invalid length. [ 581.793252][T18168] netlink: 'syz.0.5304': attribute type 11 has an invalid length. [ 581.803267][T18167] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5306'. [ 582.349070][T18200] FAULT_INJECTION: forcing a failure. [ 582.349070][T18200] name failslab, interval 1, probability 0, space 0, times 0 [ 582.398222][T18200] CPU: 1 UID: 0 PID: 18200 Comm: syz.0.5316 Not tainted 6.11.0-rc6-syzkaller-00204-gd1aaaa2e0a67 #0 [ 582.409059][T18200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 582.419151][T18200] Call Trace: [ 582.422499][T18200] [ 582.425458][T18200] dump_stack_lvl+0x241/0x360 [ 582.430177][T18200] ? __pfx_dump_stack_lvl+0x10/0x10 [ 582.435408][T18200] ? __pfx__printk+0x10/0x10 [ 582.440036][T18200] should_fail_ex+0x3b0/0x4e0 [ 582.444758][T18200] should_failslab+0xac/0x100 [ 582.449490][T18200] ? __hw_addr_add_ex+0x1a8/0x610 [ 582.454527][T18200] __kmalloc_cache_noprof+0x6c/0x2c0 [ 582.459831][T18200] __hw_addr_add_ex+0x1a8/0x610 [ 582.464704][T18200] dev_addr_init+0x143/0x230 [ 582.469302][T18200] ? __pfx_dev_addr_init+0x10/0x10 [ 582.474428][T18200] alloc_netdev_mqs+0x2a1/0x1000 [ 582.479383][T18200] ? __pfx_ipgre_tunnel_setup+0x10/0x10 [ 582.485020][T18200] ? security_capable+0x90/0xb0 [ 582.489894][T18200] rtnl_create_link+0x2f9/0xc20 [ 582.494766][T18200] rtnl_newlink+0x1423/0x20a0 [ 582.499454][T18200] ? rtnl_newlink+0xae1/0x20a0 [ 582.504260][T18200] ? __pfx_rtnl_newlink+0x10/0x10 [ 582.509298][T18200] ? __pfx___mutex_trylock_common+0x10/0x10 [ 582.515242][T18200] ? rcu_is_watching+0x15/0xb0 [ 582.520023][T18200] ? trace_contention_end+0x3c/0x120 [ 582.525321][T18200] ? __mutex_lock+0x2ef/0xd70 [ 582.530007][T18200] ? __pfx_lock_release+0x10/0x10 [ 582.535062][T18200] ? __pfx_rtnl_newlink+0x10/0x10 [ 582.540096][T18200] rtnetlink_rcv_msg+0x73f/0xcf0 [ 582.545051][T18200] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 582.550187][T18200] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 582.555658][T18200] ? ref_tracker_free+0x643/0x7e0 [ 582.560708][T18200] netlink_rcv_skb+0x1e3/0x430 [ 582.565484][T18200] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 582.570964][T18200] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 582.576303][T18200] ? netlink_deliver_tap+0x2e/0x1b0 [ 582.581508][T18200] netlink_unicast+0x7f6/0x990 [ 582.586287][T18200] ? __pfx_netlink_unicast+0x10/0x10 [ 582.591576][T18200] ? __virt_addr_valid+0x183/0x530 [ 582.596694][T18200] ? __check_object_size+0x49c/0x900 [ 582.601987][T18200] ? bpf_lsm_netlink_send+0x9/0x10 [ 582.607132][T18200] netlink_sendmsg+0x8e4/0xcb0 [ 582.611919][T18200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 582.617290][T18200] ? __import_iovec+0x536/0x820 [ 582.622165][T18200] ? aa_sock_msg_perm+0x91/0x160 [ 582.627163][T18200] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 582.632466][T18200] ? security_socket_sendmsg+0x87/0xb0 [ 582.637942][T18200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 582.643233][T18200] __sock_sendmsg+0x221/0x270 [ 582.647952][T18200] ____sys_sendmsg+0x525/0x7d0 [ 582.652757][T18200] ? __pfx_____sys_sendmsg+0x10/0x10 [ 582.658065][T18200] __sys_sendmsg+0x2b0/0x3a0 [ 582.662666][T18200] ? __pfx___sys_sendmsg+0x10/0x10 [ 582.667788][T18200] ? vfs_write+0x7c4/0xc90 [ 582.672268][T18200] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 582.678613][T18200] ? do_syscall_64+0x100/0x230 [ 582.683388][T18200] ? do_syscall_64+0xb6/0x230 [ 582.688071][T18200] do_syscall_64+0xf3/0x230 [ 582.692576][T18200] ? clear_bhb_loop+0x35/0x90 [ 582.697272][T18200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.703170][T18200] RIP: 0033:0x7fc99d97def9 [ 582.707584][T18200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.727184][T18200] RSP: 002b:00007fc99e695038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 582.735635][T18200] RAX: ffffffffffffffda RBX: 00007fc99db35f80 RCX: 00007fc99d97def9 [ 582.743623][T18200] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 582.751606][T18200] RBP: 00007fc99e695090 R08: 0000000000000000 R09: 0000000000000000 [ 582.759583][T18200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.767556][T18200] R13: 0000000000000000 R14: 00007fc99db35f80 R15: 00007ffd1339c5c8 [ 582.775579][T18200] [ 582.985832][T18219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.069643][T18224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.148622][T18205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.268516][T18225] delete_channel: no stack [ 583.420368][T18239] bridge8: entered promiscuous mode [ 583.441498][T18239] bridge8: entered allmulticast mode [ 583.498894][T18239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5328'. [ 583.628156][T18252] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5333'. [ 583.924900][T18269] xt_TCPMSS: Only works on TCP SYN packets [ 584.483756][T18298] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5352'. [ 584.568225][T18300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.617075][T18307] FAULT_INJECTION: forcing a failure. [ 584.617075][T18307] name failslab, interval 1, probability 0, space 0, times 0 [ 584.630104][T18307] CPU: 1 UID: 0 PID: 18307 Comm: syz.2.5356 Not tainted 6.11.0-rc6-syzkaller-00204-gd1aaaa2e0a67 #0 [ 584.640899][T18307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 584.650985][T18307] Call Trace: [ 584.654269][T18307] [ 584.657240][T18307] dump_stack_lvl+0x241/0x360 [ 584.661946][T18307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 584.667158][T18307] ? __pfx__printk+0x10/0x10 [ 584.671754][T18307] ? __kmalloc_node_noprof+0xb7/0x440 [ 584.677137][T18307] ? __pfx___might_resched+0x10/0x10 [ 584.682435][T18307] should_fail_ex+0x3b0/0x4e0 [ 584.687131][T18307] should_failslab+0xac/0x100 [ 584.691930][T18307] __kmalloc_node_noprof+0xdf/0x440 [ 584.697134][T18307] ? __kvmalloc_node_noprof+0x72/0x190 [ 584.702611][T18307] __kvmalloc_node_noprof+0x72/0x190 [ 584.707911][T18307] alloc_netdev_mqs+0x8ab/0x1000 [ 584.712868][T18307] rtnl_create_link+0x2f9/0xc20 [ 584.717758][T18307] rtnl_newlink+0x1423/0x20a0 [ 584.722462][T18307] ? rtnl_newlink+0xae1/0x20a0 [ 584.727266][T18307] ? __pfx_rtnl_newlink+0x10/0x10 [ 584.732312][T18307] ? __pfx___mutex_trylock_common+0x10/0x10 [ 584.738232][T18307] ? rcu_is_watching+0x15/0xb0 [ 584.743017][T18307] ? trace_contention_end+0x3c/0x120 [ 584.748308][T18307] ? __mutex_lock+0x2ef/0xd70 [ 584.753012][T18307] ? __pfx_lock_release+0x10/0x10 [ 584.758062][T18307] ? __pfx_rtnl_newlink+0x10/0x10 [ 584.763102][T18307] rtnetlink_rcv_msg+0x73f/0xcf0 [ 584.768056][T18307] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 584.773187][T18307] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 584.778667][T18307] ? ref_tracker_free+0x643/0x7e0 [ 584.783721][T18307] netlink_rcv_skb+0x1e3/0x430 [ 584.788493][T18307] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 584.793970][T18307] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 584.799280][T18307] ? netlink_deliver_tap+0x2e/0x1b0 [ 584.804487][T18307] netlink_unicast+0x7f6/0x990 [ 584.809275][T18307] ? __pfx_netlink_unicast+0x10/0x10 [ 584.814583][T18307] ? __virt_addr_valid+0x183/0x530 [ 584.819716][T18307] ? __check_object_size+0x49c/0x900 [ 584.825021][T18307] ? bpf_lsm_netlink_send+0x9/0x10 [ 584.830150][T18307] netlink_sendmsg+0x8e4/0xcb0 [ 584.834933][T18307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.840230][T18307] ? __import_iovec+0x536/0x820 [ 584.845088][T18307] ? aa_sock_msg_perm+0x91/0x160 [ 584.850036][T18307] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 584.855331][T18307] ? security_socket_sendmsg+0x87/0xb0 [ 584.860805][T18307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.866097][T18307] __sock_sendmsg+0x221/0x270 [ 584.870794][T18307] ____sys_sendmsg+0x525/0x7d0 [ 584.875580][T18307] ? __pfx_____sys_sendmsg+0x10/0x10 [ 584.880895][T18307] __sys_sendmsg+0x2b0/0x3a0 [ 584.885505][T18307] ? __pfx___sys_sendmsg+0x10/0x10 [ 584.890625][T18307] ? vfs_write+0x7c4/0xc90 [ 584.895084][T18307] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 584.901426][T18307] ? do_syscall_64+0x100/0x230 [ 584.906222][T18307] ? do_syscall_64+0xb6/0x230 [ 584.910904][T18307] do_syscall_64+0xf3/0x230 [ 584.915426][T18307] ? clear_bhb_loop+0x35/0x90 [ 584.920117][T18307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.926026][T18307] RIP: 0033:0x7f140797def9 [ 584.930447][T18307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.950068][T18307] RSP: 002b:00007f1408699038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 584.958489][T18307] RAX: ffffffffffffffda RBX: 00007f1407b35f80 RCX: 00007f140797def9 [ 584.966464][T18307] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 584.974438][T18307] RBP: 00007f1408699090 R08: 0000000000000000 R09: 0000000000000000 [ 584.982415][T18307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 584.990397][T18307] R13: 0000000000000000 R14: 00007f1407b35f80 R15: 00007ffdee332258 [ 584.998388][T18307] [ 585.086085][T18311] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5357'. [ 585.131983][T18312] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5357'. [ 585.245620][T18296] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 585.624576][T18343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5371'. [ 585.634359][T18343] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5371'. [ 585.703821][T18346] IPVS: nq: SCTP 127.0.0.1:0 - no destination available [ 585.721359][T18348] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5370'. [ 586.185142][T18368] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.5380'. [ 586.200195][T18368] openvswitch: netlink: Actions may not be safe on all matching packets [ 586.299622][T18373] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5382'. [ 586.363406][T18375] tunl0: entered promiscuous mode [ 586.403048][T18375] netlink: 'syz.4.5383': attribute type 3 has an invalid length. [ 586.431718][T18375] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5383'. [ 586.465363][T18377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.491074][ T5250] Bluetooth: hci0: command 0x0406 tx timeout [ 586.547857][T18383] netlink: 'syz.0.5386': attribute type 33 has an invalid length. [ 586.672404][T18386] netlink: 'syz.4.5387': attribute type 3 has an invalid length. [ 586.697395][T18386] netlink: 'syz.4.5387': attribute type 3 has an invalid length. [ 586.780141][T18391] can: request_module (can-proto-0) failed. [ 586.788978][T18395] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.5390'. [ 587.289941][T18417] netlink: 'syz.4.5399': attribute type 8 has an invalid length. [ 587.933777][T18437] IPVS: length: 24 != 6168 [ 588.151401][T18451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.601107][T18457] netlink: 'syz.4.5413': attribute type 1 has an invalid length. [ 588.631190][T18457] netlink: 'syz.4.5413': attribute type 2 has an invalid length. [ 588.750392][T18473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.922510][T18481] netlink: 'syz.4.5422': attribute type 13 has an invalid length. [ 588.936923][T18481] macvtap0: refused to change device tx_queue_len [ 589.025414][T18485] netlink: 'syz.3.5424': attribute type 10 has an invalid length. [ 589.033749][T18485] wlan1: mtu less than device minimum [ 589.039149][T18485] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 589.065199][T18489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.206872][T18495] netlink: 'syz.3.5427': attribute type 1 has an invalid length. [ 589.262688][T18495] bond2: entered promiscuous mode [ 589.274717][T18499] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 589.305652][T18499] bond2: (slave ip6gretap1): making interface the new active one [ 589.328782][T18499] ip6gretap1: entered promiscuous mode [ 589.340206][T18499] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 589.366567][T18495] bond2: left promiscuous mode [ 589.378015][T18495] ip6gretap1: left promiscuous mode [ 589.386589][T18495] 8021q: adding VLAN 0 to HW filter on device bond2 [ 589.487447][T18506] Cannot find add_set index 0 as target [ 589.700854][T18512] __nla_validate_parse: 9 callbacks suppressed [ 589.700877][T18512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5433'. [ 589.747112][T18517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.789513][T18515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.145892][T18538] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5442'. [ 590.362190][T18549] delete_channel: no stack [ 590.498456][T18556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5450'. [ 590.567441][T18558] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 590.592269][T18561] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5451'. [ 590.608989][T18561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5451'. [ 590.849982][T18570] wg2: entered promiscuous mode [ 590.861447][T18570] wg2: entered allmulticast mode [ 590.911909][T18575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.014445][T18579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5454'. [ 591.093189][T18579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5454'. [ 591.110863][T18579] bridge8: entered promiscuous mode [ 591.119637][T18579] bridge8: entered allmulticast mode [ 591.555278][T18603] nbd: device at index 1 is going down [ 591.772080][T18620] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.5467'. [ 591.800499][T18620] openvswitch: netlink: Missing key (keys=400040, expected=2000) [ 591.897742][T18627] unknown channel width for channel at 909000KHz? [ 591.993109][T18634] netlink: 'syz.4.5474': attribute type 11 has an invalid length. [ 592.551771][T18661] Bluetooth: MGMT ver 1.23 [ 592.574899][T18665] bridge9: entered promiscuous mode [ 592.580235][T18665] bridge9: entered allmulticast mode [ 592.650168][T18665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5484'. [ 592.817441][T18670] bridge7: entered promiscuous mode [ 592.833428][T18670] bridge7: entered allmulticast mode [ 592.947396][T18670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5485'. [ 592.981631][T18681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 594.361023][ T5427] IPVS: starting estimator thread 0... [ 594.374625][T18766] syzkaller1: entered promiscuous mode [ 594.380218][T18766] syzkaller1: entered allmulticast mode [ 594.492583][T18770] IPVS: using max 17 ests per chain, 40800 per kthread [ 594.685115][T18785] netlink: get zone limit has 4 unknown bytes [ 594.712736][T18785] __nla_validate_parse: 3 callbacks suppressed [ 594.712755][T18785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5522'. [ 594.887519][T18802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5526'. [ 594.912482][T18802] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5526'. [ 594.940743][T18802] netlink: 272 bytes leftover after parsing attributes in process `syz.1.5526'. [ 594.960446][T18802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5526'. [ 594.984614][T18800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.038221][T18810] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5530'. [ 595.380719][T18825] FAULT_INJECTION: forcing a failure. [ 595.380719][T18825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.396232][T18825] CPU: 1 UID: 0 PID: 18825 Comm: syz.4.5534 Not tainted 6.11.0-rc6-syzkaller-00204-gd1aaaa2e0a67 #0 [ 595.407031][T18825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 595.417089][T18825] Call Trace: [ 595.420369][T18825] [ 595.423304][T18825] dump_stack_lvl+0x241/0x360 [ 595.427999][T18825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 595.433226][T18825] ? __pfx__printk+0x10/0x10 [ 595.437819][T18825] ? snprintf+0xda/0x120 [ 595.442082][T18825] should_fail_ex+0x3b0/0x4e0 [ 595.446809][T18825] _copy_to_user+0x2f/0xb0 [ 595.451243][T18825] simple_read_from_buffer+0xca/0x150 [ 595.456651][T18825] proc_fail_nth_read+0x1ec/0x260 [ 595.461706][T18825] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 595.467286][T18825] ? rw_verify_area+0x520/0x6b0 [ 595.472159][T18825] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 595.477710][T18825] vfs_read+0x204/0xbc0 [ 595.481865][T18825] ? __pfx_lock_release+0x10/0x10 [ 595.486906][T18825] ? do_sock_setsockopt+0x3e2/0x720 [ 595.492112][T18825] ? __pfx_vfs_read+0x10/0x10 [ 595.496810][T18825] ? __fget_files+0x29/0x470 [ 595.501444][T18825] ? __fget_files+0x3f6/0x470 [ 595.506208][T18825] ksys_read+0x1a0/0x2c0 [ 595.510469][T18825] ? __pfx_ksys_read+0x10/0x10 [ 595.515238][T18825] ? do_syscall_64+0x100/0x230 [ 595.520011][T18825] ? do_syscall_64+0xb6/0x230 [ 595.524704][T18825] do_syscall_64+0xf3/0x230 [ 595.529213][T18825] ? clear_bhb_loop+0x35/0x90 [ 595.533900][T18825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.539827][T18825] RIP: 0033:0x7fcfbe97c93c [ 595.544243][T18825] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 595.563852][T18825] RSP: 002b:00007fcfbf7c0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 595.572277][T18825] RAX: ffffffffffffffda RBX: 00007fcfbeb35f80 RCX: 00007fcfbe97c93c [ 595.580252][T18825] RDX: 000000000000000f RSI: 00007fcfbf7c00a0 RDI: 0000000000000005 [ 595.588221][T18825] RBP: 00007fcfbf7c0090 R08: 0000000000000000 R09: 0000000000000000 [ 595.596305][T18825] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 595.604284][T18825] R13: 0000000000000000 R14: 00007fcfbeb35f80 R15: 00007ffdf0990b98 [ 595.612292][T18825] [ 595.758939][T18830] IPVS: Error connecting to the multicast addr [ 595.949047][T18840] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5541'. [ 595.968617][T18844] dccp_invalid_packet: P.Data Offset(100) too large [ 596.020182][T18844] dccp_invalid_packet: P.Data Offset(100) too large [ 596.039293][T18848] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5543'. [ 596.065940][T18844] dccp_invalid_packet: P.Data Offset(100) too large [ 596.183935][T18850] validate_nla: 2 callbacks suppressed [ 596.183960][T18850] netlink: 'syz.0.5542': attribute type 8 has an invalid length. [ 596.233124][T18850] netlink: 'syz.0.5542': attribute type 7 has an invalid length. [ 596.261223][T18850] netlink: 187184 bytes leftover after parsing attributes in process `syz.0.5542'. [ 596.317227][T18855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5545'. [ 596.710001][T18878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.943345][T18889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 597.592579][T18923] pimreg: entered allmulticast mode [ 597.625640][T18923] pimreg: left allmulticast mode [ 597.799680][T18935] netlink: 'syz.3.5573': attribute type 7 has an invalid length. [ 597.813976][T18935] netlink: 'syz.3.5573': attribute type 8 has an invalid length. [ 597.846937][T18935] erspan0: entered promiscuous mode [ 597.855371][T18935] batadv_slave_1: entered promiscuous mode [ 597.899931][T18935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 597.915126][T18935] Cannot create hsr debugfs directory [ 597.926302][T18935] hsr0: Interlink (gretap0) is not up; please bring it up to get a fully working HSR network [ 598.196554][T18952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 598.313995][T18962] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 598.710198][T18984] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 598.809917][T18985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 599.016841][T18997] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 599.017283][T19002] syzkaller1: entered promiscuous mode [ 599.038160][T19002] syzkaller1: entered allmulticast mode [ 599.613853][T19043] netlink: 'syz.2.5609': attribute type 2 has an invalid length. [ 599.856922][T19052] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 599.992972][T19059] netlink: 'syz.4.5614': attribute type 1 has an invalid length. [ 600.029939][T19059] __nla_validate_parse: 13 callbacks suppressed [ 600.029961][T19059] netlink: 9344 bytes leftover after parsing attributes in process `syz.4.5614'. [ 600.060821][T19059] netlink: 'syz.4.5614': attribute type 1 has an invalid length. [ 600.078592][T19068] IPVS: set_ctl: invalid protocol: 4614 0.0.0.0:65530 [ 600.196577][T19078] IPv6: sit1: Disabled Multicast RS [ 600.498548][T19095] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 600.537943][T19100] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5625'. [ 600.577117][T19097] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 600.666632][T19105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5625'. [ 600.925771][T19119] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5633'. [ 601.228158][T19141] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 601.486965][T19157] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5647'. [ 601.518081][T19160] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5646'. [ 601.541051][T19160] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 601.562411][T19160] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5646'. [ 601.582261][T19160] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 601.678722][T19164] sctp: [Deprecated]: syz.4.5648 (pid 19164) Use of int in max_burst socket option deprecated. [ 601.678722][T19164] Use struct sctp_assoc_value instead [ 602.024526][T19175] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 602.270299][T19195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5657'. [ 602.520328][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 602.582873][T19217] FAULT_INJECTION: forcing a failure. [ 602.582873][T19217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 602.604372][T19217] CPU: 0 UID: 0 PID: 19217 Comm: syz.1.5664 Not tainted 6.11.0-rc6-syzkaller-00204-gd1aaaa2e0a67 #0 [ 602.615193][T19217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 602.625282][T19217] Call Trace: [ 602.628587][T19217] [ 602.631540][T19217] dump_stack_lvl+0x241/0x360 [ 602.636263][T19217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 602.641505][T19217] ? __pfx__printk+0x10/0x10 [ 602.646136][T19217] ? __pfx_lock_release+0x10/0x10 [ 602.651215][T19217] should_fail_ex+0x3b0/0x4e0 [ 602.655950][T19217] _copy_from_iter+0x1f6/0x1960 [ 602.660842][T19217] ? __virt_addr_valid+0x183/0x530 [ 602.665994][T19217] ? __pfx_lock_release+0x10/0x10 [ 602.671071][T19217] ? __alloc_skb+0x28f/0x440 [ 602.675696][T19217] ? __pfx__copy_from_iter+0x10/0x10 [ 602.681020][T19217] ? __virt_addr_valid+0x183/0x530 [ 602.686163][T19217] ? __virt_addr_valid+0x183/0x530 [ 602.691308][T19217] ? __virt_addr_valid+0x45f/0x530 [ 602.696470][T19217] ? __check_object_size+0x49c/0x900 [ 602.701810][T19217] netlink_sendmsg+0x73d/0xcb0 [ 602.706628][T19217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 602.711953][T19217] ? __import_iovec+0x536/0x820 [ 602.716845][T19217] ? aa_sock_msg_perm+0x91/0x160 [ 602.721947][T19217] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 602.727274][T19217] ? security_socket_sendmsg+0x87/0xb0 [ 602.732791][T19217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 602.738136][T19217] __sock_sendmsg+0x221/0x270 [ 602.742862][T19217] ____sys_sendmsg+0x525/0x7d0 [ 602.747677][T19217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 602.753018][T19217] __sys_sendmsg+0x2b0/0x3a0 [ 602.757652][T19217] ? __pfx___sys_sendmsg+0x10/0x10 [ 602.762804][T19217] ? vfs_write+0x7c4/0xc90 [ 602.767319][T19217] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 602.773700][T19217] ? do_syscall_64+0x100/0x230 [ 602.778507][T19217] ? do_syscall_64+0xb6/0x230 [ 602.783226][T19217] do_syscall_64+0xf3/0x230 [ 602.787773][T19217] ? clear_bhb_loop+0x35/0x90 [ 602.792462][T19217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.798368][T19217] RIP: 0033:0x7fd55d57def9 [ 602.802782][T19217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.822665][T19217] RSP: 002b:00007fd55e301038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 602.831124][T19217] RAX: ffffffffffffffda RBX: 00007fd55d735f80 RCX: 00007fd55d57def9 [ 602.839134][T19217] RDX: 0000000000000000 RSI: 0000000020000a80 RDI: 0000000000000004 [ 602.847141][T19217] RBP: 00007fd55e301090 R08: 0000000000000000 R09: 0000000000000000 [ 602.855142][T19217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.863139][T19217] R13: 0000000000000000 R14: 00007fd55d735f80 R15: 00007ffc11757f28 [ 602.871167][T19217] [ 603.179837][T19245] netlink: 'syz.1.5673': attribute type 1 has an invalid length. [ 603.188940][T19245] netlink: 616 bytes leftover after parsing attributes in process `syz.1.5673'. [ 603.254230][T19247] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5674'. [ 603.454889][T19251] netlink: 'syz.4.5676': attribute type 3 has an invalid length. [ 603.514931][T19255] Unknown options in mask 1f4 [ 603.568360][T19257] xt_l2tp: v2 sid > 0xffff: 262144 [ 603.793612][T19269] FAULT_INJECTION: forcing a failure. [ 603.793612][T19269] name failslab, interval 1, probability 0, space 0, times 0 [ 603.807474][T19269] CPU: 1 UID: 0 PID: 19269 Comm: syz.2.5680 Not tainted 6.11.0-rc6-syzkaller-00204-gd1aaaa2e0a67 #0 [ 603.818271][T19269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 603.828334][T19269] Call Trace: [ 603.831617][T19269] [ 603.834547][T19269] dump_stack_lvl+0x241/0x360 [ 603.839232][T19269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 603.844440][T19269] ? __pfx__printk+0x10/0x10 [ 603.849077][T19269] ? ref_tracker_alloc+0x332/0x490 [ 603.854192][T19269] should_fail_ex+0x3b0/0x4e0 [ 603.858878][T19269] ? skb_clone+0x20c/0x390 [ 603.863329][T19269] should_failslab+0xac/0x100 [ 603.868055][T19269] ? skb_clone+0x20c/0x390 [ 603.872509][T19269] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 603.877922][T19269] skb_clone+0x20c/0x390 [ 603.882216][T19269] __netlink_deliver_tap+0x3cc/0x7c0 [ 603.887547][T19269] ? netlink_deliver_tap+0x2e/0x1b0 [ 603.892773][T19269] netlink_deliver_tap+0x19d/0x1b0 [ 603.897915][T19269] netlink_unicast+0x7c4/0x990 [ 603.902730][T19269] ? __pfx_netlink_unicast+0x10/0x10 [ 603.908055][T19269] ? __virt_addr_valid+0x183/0x530 [ 603.913198][T19269] ? __check_object_size+0x49c/0x900 [ 603.918520][T19269] ? bpf_lsm_netlink_send+0x9/0x10 [ 603.923673][T19269] netlink_sendmsg+0x8e4/0xcb0 [ 603.928491][T19269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.933807][T19269] ? __import_iovec+0x536/0x820 [ 603.938691][T19269] ? aa_sock_msg_perm+0x91/0x160 [ 603.943666][T19269] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 603.948981][T19269] ? security_socket_sendmsg+0x87/0xb0 [ 603.954454][T19269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.959742][T19269] __sock_sendmsg+0x221/0x270 [ 603.964487][T19269] ____sys_sendmsg+0x525/0x7d0 [ 603.969303][T19269] ? __pfx_____sys_sendmsg+0x10/0x10 [ 603.974643][T19269] __sys_sendmsg+0x2b0/0x3a0 [ 603.979275][T19269] ? __pfx___sys_sendmsg+0x10/0x10 [ 603.984397][T19269] ? vfs_write+0x7c4/0xc90 [ 603.988850][T19269] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 603.995187][T19269] ? do_syscall_64+0x100/0x230 [ 603.999954][T19269] ? do_syscall_64+0xb6/0x230 [ 604.004630][T19269] do_syscall_64+0xf3/0x230 [ 604.009138][T19269] ? clear_bhb_loop+0x35/0x90 [ 604.013833][T19269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.019761][T19269] RIP: 0033:0x7f140797def9 [ 604.024196][T19269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.043806][T19269] RSP: 002b:00007f14073de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 604.052229][T19269] RAX: ffffffffffffffda RBX: 00007f1407b36130 RCX: 00007f140797def9 [ 604.060211][T19269] RDX: 0000000000000000 RSI: 0000000020000a80 RDI: 0000000000000004 [ 604.068192][T19269] RBP: 00007f14073de090 R08: 0000000000000000 R09: 0000000000000000 [ 604.076183][T19269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.084173][T19269] R13: 0000000000000001 R14: 00007f1407b36130 R15: 00007ffdee332258 [ 604.092200][T19269] [ 604.585983][T19293] bond0: entered promiscuous mode [ 604.614874][T19293] bond_slave_0: entered promiscuous mode [ 604.620784][T19293] bond_slave_1: entered promiscuous mode [ 604.661541][T19293] bond0: entered allmulticast mode [ 604.666787][T19293] bond_slave_0: entered allmulticast mode [ 604.717083][T19293] bond_slave_1: entered allmulticast mode [ 604.740496][T19308] netlink: 'syz.4.5693': attribute type 3 has an invalid length. [ 604.752637][T19293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.237048][T19336] __nla_validate_parse: 7 callbacks suppressed [ 605.237067][T19336] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5701'. [ 605.273931][T19338] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 605.529196][T19350] FAULT_INJECTION: forcing a failure. [ 605.529196][T19350] name failslab, interval 1, probability 0, space 0, times 0 [ 605.572202][T19352] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5706'. [ 605.581848][T19350] CPU: 0 UID: 0 PID: 19350 Comm: syz.4.5707 Not tainted 6.11.0-rc6-syzkaller-00204-gd1aaaa2e0a67 #0 [ 605.592638][T19350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 605.602708][T19350] Call Trace: [ 605.606019][T19350] [ 605.608956][T19350] dump_stack_lvl+0x241/0x360 [ 605.613655][T19350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 605.618861][T19350] ? __pfx__printk+0x10/0x10 [ 605.623463][T19350] ? ref_tracker_alloc+0x332/0x490 [ 605.628583][T19350] should_fail_ex+0x3b0/0x4e0 [ 605.633278][T19350] ? skb_clone+0x20c/0x390 [ 605.637710][T19350] should_failslab+0xac/0x100 [ 605.642403][T19350] ? skb_clone+0x20c/0x390 [ 605.646832][T19350] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 605.652214][T19350] skb_clone+0x20c/0x390 [ 605.656557][T19350] __netlink_deliver_tap+0x3cc/0x7c0 [ 605.661859][T19350] ? netlink_deliver_tap+0x2e/0x1b0 [ 605.667061][T19350] netlink_deliver_tap+0x19d/0x1b0 [ 605.672186][T19350] netlink_unicast+0x7c4/0x990 [ 605.676980][T19350] ? __pfx_netlink_unicast+0x10/0x10 [ 605.682273][T19350] ? __virt_addr_valid+0x183/0x530 [ 605.687395][T19350] ? __check_object_size+0x49c/0x900 [ 605.692689][T19350] ? bpf_lsm_netlink_send+0x9/0x10 [ 605.697828][T19350] netlink_sendmsg+0x8e4/0xcb0 [ 605.702607][T19350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.708007][T19350] ? __import_iovec+0x536/0x820 [ 605.712914][T19350] ? aa_sock_msg_perm+0x91/0x160 [ 605.717865][T19350] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 605.723176][T19350] ? security_socket_sendmsg+0x87/0xb0 [ 605.728659][T19350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.733955][T19350] __sock_sendmsg+0x221/0x270 [ 605.738684][T19350] ____sys_sendmsg+0x525/0x7d0 [ 605.743473][T19350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 605.748790][T19350] __sys_sendmsg+0x2b0/0x3a0 [ 605.753418][T19350] ? __pfx___sys_sendmsg+0x10/0x10 [ 605.758550][T19350] ? vfs_write+0x7c4/0xc90 [ 605.763020][T19350] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 605.769398][T19350] ? do_syscall_64+0x100/0x230 [ 605.774190][T19350] ? do_syscall_64+0xb6/0x230 [ 605.778885][T19350] do_syscall_64+0xf3/0x230 [ 605.783401][T19350] ? clear_bhb_loop+0x35/0x90 [ 605.788103][T19350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.794011][T19350] RIP: 0033:0x7fcfbe97def9 [ 605.798436][T19350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.818067][T19350] RSP: 002b:00007fcfbf7c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 605.826515][T19350] RAX: ffffffffffffffda RBX: 00007fcfbeb35f80 RCX: 00007fcfbe97def9 [ 605.834496][T19350] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 605.842470][T19350] RBP: 00007fcfbf7c0090 R08: 0000000000000000 R09: 0000000000000000 [ 605.850445][T19350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.858429][T19350] R13: 0000000000000000 R14: 00007fcfbeb35f80 R15: 00007ffdf0990b98 [ 605.866428][T19350] [ 605.883982][T19352] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 605.957226][T19352] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5706'. [ 606.168258][T19362] netlink: 'syz.4.5711': attribute type 3 has an invalid length. [ 606.190685][T19363] netlink: 'syz.0.5710': attribute type 29 has an invalid length. [ 606.201619][T19360] netlink: 'syz.0.5710': attribute type 29 has an invalid length. [ 606.244198][T19338] --map-set only usable from mangle table [ 606.445807][T19366] bridge0: port 3(macvlan2) entered blocking state [ 606.471720][T19366] bridge0: port 3(macvlan2) entered disabled state [ 606.479606][T19366] macvlan2: entered allmulticast mode [ 606.501409][T19366] macvlan2: entered promiscuous mode [ 606.666908][T19386] netlink: 'syz.4.5719': attribute type 1 has an invalid length. [ 606.765781][T19386] bond1: entered promiscuous mode [ 606.802116][T19390] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 606.857313][T19400] netlink: 'syz.1.5722': attribute type 3 has an invalid length. [ 606.866939][T19390] bond1: (slave ip6gretap1): making interface the new active one [ 606.896260][T19390] ip6gretap1: entered promiscuous mode [ 606.913637][T19390] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 606.927805][T19386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5719'. [ 606.962306][T19386] bond1: left promiscuous mode [ 606.967223][T19386] ip6gretap1: left promiscuous mode [ 606.982598][T19386] 8021q: adding VLAN 0 to HW filter on device bond1 [ 607.227859][T19407] unknown channel width for channel at 909000KHz? [ 607.376370][T19410] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5728'. [ 607.401641][T19410] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 607.521554][T19417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5730'. [ 607.534689][T19417] bridge_slave_1: left allmulticast mode [ 607.548909][T19417] bridge_slave_1: left promiscuous mode [ 607.557078][T19417] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.578839][T19417] bridge_slave_0: left allmulticast mode [ 607.594770][T19417] bridge_slave_0: left promiscuous mode [ 607.607060][T19417] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.754344][T19428] netlink: 'syz.2.5734': attribute type 1 has an invalid length. [ 607.799106][T19428] bond1: entered promiscuous mode [ 607.826179][T19428] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 607.850463][T19428] bond1: (slave ip6gretap1): making interface the new active one [ 607.868481][T19428] ip6gretap1: entered promiscuous mode [ 607.888513][T19428] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 607.916655][T19438] netlink: 'syz.4.5737': attribute type 3 has an invalid length. [ 607.920272][T19433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5734'. [ 607.942103][T19433] bond1: left promiscuous mode [ 607.949477][T19433] ip6gretap1: left promiscuous mode [ 607.959919][T19433] 8021q: adding VLAN 0 to HW filter on device bond1 [ 607.970123][T19435] netlink: 2020 bytes leftover after parsing attributes in process `syz.3.5736'. [ 608.228051][T19446] netlink: 'syz.2.5741': attribute type 1 has an invalid length. [ 608.860865][T19461] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5746'. [ 608.892508][ T5242] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 608.904163][ T5242] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 608.931769][ T5242] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 608.942019][ T5242] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 608.950289][ T5242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 608.959078][ T5242] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 609.149035][T19481] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5751'. [ 609.878779][T19501] netlink: 'syz.1.5761': attribute type 4 has an invalid length. [ 609.990196][T19503] unknown channel width for channel at 909000KHz? [ 610.183943][T19511] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 610.243592][T19521] __nla_validate_parse: 4 callbacks suppressed [ 610.243613][T19521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5765'. [ 610.335096][T19468] chnl_net:caif_netlink_parms(): no params data found [ 610.530609][T19531] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 610.532269][T19468] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.546884][T19468] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.558810][T19468] bridge_slave_0: entered allmulticast mode [ 610.578901][T19468] bridge_slave_0: entered promiscuous mode [ 610.600293][T19468] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.613571][T19468] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.631990][T19468] bridge_slave_1: entered allmulticast mode [ 610.650035][T19468] bridge_slave_1: entered promiscuous mode [ 610.658806][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 610.745850][T19468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.769986][T19468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.943963][T19468] team0: Port device team_slave_0 added [ 610.972620][T19468] team0: Port device team_slave_1 added [ 611.051806][ T5242] Bluetooth: hci0: command tx timeout [ 611.101653][T19468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.118931][T19468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.149521][T19563] FAULT_INJECTION: forcing a failure. [ 611.149521][T19563] name failslab, interval 1, probability 0, space 0, times 0 [ 611.168439][T19563] CPU: 1 UID: 0 PID: 19563 Comm: syz.3.5778 Not tainted 6.11.0-rc6-syzkaller-00204-gd1aaaa2e0a67 #0 [ 611.179247][T19563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 611.189320][T19563] Call Trace: [ 611.191028][T19468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.192593][T19563] [ 611.192608][T19563] dump_stack_lvl+0x241/0x360 [ 611.207059][T19468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.210803][T19563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 611.210838][T19563] ? __pfx__printk+0x10/0x10 [ 611.218271][T19468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.222939][T19563] ? ref_tracker_alloc+0x332/0x490 [ 611.222974][T19563] should_fail_ex+0x3b0/0x4e0 [ 611.223014][T19563] ? skb_clone+0x20c/0x390 [ 611.223043][T19563] should_failslab+0xac/0x100 [ 611.223079][T19563] ? skb_clone+0x20c/0x390 [ 611.223108][T19563] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 611.223139][T19563] skb_clone+0x20c/0x390 [ 611.223173][T19563] __netlink_deliver_tap+0x3cc/0x7c0 [ 611.223211][T19563] ? netlink_deliver_tap+0x2e/0x1b0 [ 611.223234][T19563] netlink_deliver_tap+0x19d/0x1b0 [ 611.223260][T19563] netlink_sendskb+0x68/0x140 [ 611.223295][T19563] netlink_unicast+0x39d/0x990 [ 611.223326][T19563] ? __asan_memcpy+0x40/0x70 [ 611.223363][T19563] ? __pfx_netlink_unicast+0x10/0x10 [ 611.223409][T19563] netlink_rcv_skb+0x262/0x430 [ 611.223434][T19563] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 611.223463][T19563] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 611.223500][T19563] ? apparmor_capable+0x13b/0x1b0 [ 611.223533][T19563] ? bpf_lsm_capable+0x9/0x10 [ 611.223556][T19563] ? security_capable+0x90/0xb0 [ 611.223591][T19563] nfnetlink_rcv+0x297/0x2ad0 [ 611.223623][T19563] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 611.223664][T19563] ? __dev_queue_xmit+0x2da/0x3e90 [ 611.223696][T19563] ? __dev_queue_xmit+0x1763/0x3e90 [ 611.223724][T19563] ? kasan_save_track+0x51/0x80 [ 611.223761][T19563] ? do_syscall_64+0xf3/0x230 [ 611.223798][T19563] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 611.223821][T19563] ? __dev_queue_xmit+0x2da/0x3e90 [ 611.223853][T19563] ? __pfx___dev_queue_xmit+0x10/0x10 [ 611.223899][T19563] ? ref_tracker_free+0x643/0x7e0 [ 611.223920][T19563] ? __asan_memcpy+0x40/0x70 [ 611.223941][T19563] ? __pfx_ref_tracker_free+0x10/0x10 [ 611.223974][T19563] ? netlink_deliver_tap+0x2e/0x1b0 [ 611.223991][T19563] ? skb_clone+0x240/0x390 [ 611.224016][T19563] ? __pfx_lock_release+0x10/0x10 [ 611.224044][T19563] ? __netlink_deliver_tap+0x77e/0x7c0 [ 611.224078][T19563] ? netlink_deliver_tap+0x2e/0x1b0 [ 611.224099][T19563] netlink_unicast+0x7f6/0x990 [ 611.224136][T19563] ? __pfx_netlink_unicast+0x10/0x10 [ 611.224165][T19563] ? __virt_addr_valid+0x183/0x530 [ 611.224187][T19563] ? __check_object_size+0x49c/0x900 [ 611.224212][T19563] ? bpf_lsm_netlink_send+0x9/0x10 [ 611.224241][T19563] netlink_sendmsg+0x8e4/0xcb0 [ 611.224278][T19563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.224303][T19563] ? __import_iovec+0x536/0x820 [ 611.224328][T19563] ? aa_sock_msg_perm+0x91/0x160 [ 611.224354][T19563] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 611.224381][T19563] ? security_socket_sendmsg+0x87/0xb0 [ 611.224412][T19563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.224434][T19563] __sock_sendmsg+0x221/0x270 [ 611.224470][T19563] ____sys_sendmsg+0x525/0x7d0 [ 611.224507][T19563] ? __pfx_____sys_sendmsg+0x10/0x10 [ 611.224554][T19563] __sys_sendmsg+0x2b0/0x3a0 [ 611.224584][T19563] ? __pfx___sys_sendmsg+0x10/0x10 [ 611.224609][T19563] ? vfs_write+0x7c4/0xc90 [ 611.224685][T19563] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 611.224717][T19563] ? do_syscall_64+0x100/0x230 [ 611.224744][T19563] ? do_syscall_64+0xb6/0x230 [ 611.224769][T19563] do_syscall_64+0xf3/0x230 [ 611.224793][T19563] ? clear_bhb_loop+0x35/0x90 [ 611.224824][T19563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.224850][T19563] RIP: 0033:0x7f9aa117def9 [ 611.224870][T19563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.224889][T19563] RSP: 002b:00007f9aa1fbd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.224913][T19563] RAX: ffffffffffffffda RBX: 00007f9aa1335f80 RCX: 00007f9aa117def9 [ 611.224929][T19563] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 611.224943][T19563] RBP: 00007f9aa1fbd090 R08: 0000000000000000 R09: 0000000000000000 [ 611.224957][T19563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.224970][T19563] R13: 0000000000000000 R14: 00007f9aa1335f80 R15: 00007ffc5df245f8 [ 611.225003][T19563] [ 611.655861][T19468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.785449][T19468] hsr_slave_0: entered promiscuous mode [ 611.796223][T19468] hsr_slave_1: entered promiscuous mode [ 611.814424][T19468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 611.823286][T19468] Cannot create hsr debugfs directory [ 611.911394][T19584] netlink: 'syz.1.5784': attribute type 3 has an invalid length. [ 611.969903][ T5548] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.973866][T19586] netlink: 'syz.4.5785': attribute type 1 has an invalid length. [ 612.037248][T19586] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.5785'. [ 612.110666][ T5548] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.210833][ T5548] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.243735][T19592] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5786'. [ 612.253520][T19592] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5786'. [ 612.340423][ T5548] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.401410][T19604] FAULT_INJECTION: forcing a failure. [ 612.401410][T19604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.436098][T19604] CPU: 0 UID: 0 PID: 19604 Comm: syz.3.5790 Not tainted 6.11.0-rc6-syzkaller-00204-gd1aaaa2e0a67 #0 [ 612.446925][T19604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 612.457016][T19604] Call Trace: [ 612.460321][T19604] [ 612.463280][T19604] dump_stack_lvl+0x241/0x360 [ 612.468003][T19604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 612.473241][T19604] ? __pfx__printk+0x10/0x10 [ 612.477870][T19604] ? __pfx_lock_release+0x10/0x10 [ 612.482927][T19604] ? __lock_acquire+0x137a/0x2040 [ 612.487995][T19604] should_fail_ex+0x3b0/0x4e0 [ 612.492714][T19604] _copy_from_user+0x2f/0xe0 [ 612.497344][T19604] kstrtouint_from_user+0xc6/0x190 [ 612.502512][T19604] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 612.508271][T19604] ? __pfx_lock_acquire+0x10/0x10 [ 612.513347][T19604] proc_fail_nth_write+0xaa/0x2d0 [ 612.518401][T19604] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 612.524336][T19604] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 612.530002][T19604] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 612.535663][T19604] vfs_write+0x2a2/0xc90 [ 612.539948][T19604] ? __pfx_vfs_write+0x10/0x10 [ 612.544745][T19604] ? __fget_files+0x29/0x470 [ 612.549366][T19604] ? __fget_files+0x3f6/0x470 [ 612.554079][T19604] ksys_write+0x1a0/0x2c0 [ 612.558445][T19604] ? __pfx_ksys_write+0x10/0x10 [ 612.563330][T19604] ? do_syscall_64+0x100/0x230 [ 612.568108][T19604] ? do_syscall_64+0xb6/0x230 [ 612.572800][T19604] do_syscall_64+0xf3/0x230 [ 612.577318][T19604] ? clear_bhb_loop+0x35/0x90 [ 612.582007][T19604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.587906][T19604] RIP: 0033:0x7f9aa117c9df [ 612.592336][T19604] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 612.611950][T19604] RSP: 002b:00007f9aa1fbd030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 612.620367][T19604] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9aa117c9df [ 612.628335][T19604] RDX: 0000000000000001 RSI: 00007f9aa1fbd0a0 RDI: 0000000000000004 [ 612.636310][T19604] RBP: 00007f9aa1fbd090 R08: 0000000000000000 R09: 0000000000000000 [ 612.644284][T19604] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 612.652257][T19604] R13: 0000000000000000 R14: 00007f9aa1335f80 R15: 00007ffc5df245f8 [ 612.660250][T19604] [ 612.771544][T19607] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5791'. [ 613.140070][ T5242] Bluetooth: hci0: command tx timeout [ 613.298320][ T5548] bridge_slave_1: left allmulticast mode [ 613.319158][ T5548] bridge_slave_1: left promiscuous mode [ 613.334870][ T5548] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.354315][ T5548] bridge_slave_0: left allmulticast mode [ 613.370673][ T5548] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.623685][ T5548] @ (unregistering): (slave bond_slave_0): Releasing backup interface [ 614.638178][ T5548] @ (unregistering): (slave bond_slave_1): Releasing backup interface [ 614.649320][ T5548] @ (unregistering): (slave team0): Releasing backup interface [ 614.665895][ T5548] @ (unregistering): (slave dummy0): Releasing backup interface [ 614.676148][ T5548] @ (unregistering): Released all slaves [ 614.994119][ T5548] IPVS: stopping master sync thread 13415 ... [ 615.221357][ T5242] Bluetooth: hci0: command tx timeout [ 615.223442][T19660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.707192][T19468] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 616.748480][T19691] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5813'. [ 616.770608][T19684] delete_channel: no stack [ 616.807420][T19468] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 616.869150][T19468] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 617.024181][T19468] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 617.103328][ T5548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.110799][ T5548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.137646][T19698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.152045][ T5548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.159501][ T5548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.203073][ T5548] veth1_macvtap: left promiscuous mode [ 617.214652][ T5548] veth0_macvtap: left promiscuous mode [ 617.222056][ T5548] veth1_vlan: left promiscuous mode [ 617.227614][ T5548] veth0_vlan: left promiscuous mode [ 617.267887][T19700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.291962][ T5242] Bluetooth: hci0: command tx timeout [ 618.106511][ T5548] team0 (unregistering): Port device team_slave_1 removed [ 618.154535][ T5548] team0 (unregistering): Port device team_slave_0 removed [ 618.518182][ T5548] team0 (unregistering): Port device batadv0 removed [ 618.941745][T19718] openvswitch: netlink: Unknown nsh attribute 0 [ 619.040293][T19468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.073041][T19720] netlink: 'syz.3.5821': attribute type 11 has an invalid length. [ 619.098629][T19720] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5821'. [ 619.160215][T19468] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.254309][ T2568] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.261510][ T2568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.311855][ T2568] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.319044][ T2568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.474121][T19726] unknown channel width for channel at 909000KHz? [ 619.491563][T19727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5824'. [ 619.683214][T19732] netlink: 'syz.3.5826': attribute type 10 has an invalid length. [ 619.821765][T19732] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.823691][T19740] sctp: [Deprecated]: syz.2.5828 (pid 19740) Use of struct sctp_assoc_value in delayed_ack socket option. [ 619.823691][T19740] Use struct sctp_sack_info instead [ 619.846020][ T2568] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:0000:00ff:fe00:0000 error=-28 [ 619.869827][T19732] bond0: (slave team0): Enslaving as an active interface with an up link [ 620.192828][T19468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.348760][T19468] veth0_vlan: entered promiscuous mode [ 620.409176][T19468] veth1_vlan: entered promiscuous mode [ 620.483956][T19468] veth0_macvtap: entered promiscuous mode [ 620.523284][T19468] veth1_macvtap: entered promiscuous mode [ 620.598845][T19468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.609824][T19768] No such timeout policy "syz0" [ 620.634170][T19768] x_tables: duplicate underflow at hook 1 [ 620.643513][T19468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.691086][T19468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.721750][T19468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.753402][T19468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.802354][T19468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.843289][T19468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.943994][T19468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.973770][T19468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.999588][T19468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.015967][T19468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.026015][T19468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.036958][T19468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.048067][T19468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.059601][T19468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.082848][T19468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.093659][T19468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.105659][T19468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.176960][T19468] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.195758][T19468] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.209168][T19468] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.230210][T19468] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.427568][T19791] wg2: entered promiscuous mode [ 621.442067][T19791] wg2: entered allmulticast mode [ 621.460398][ T5548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.486653][ T5548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.534139][ T5548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.546584][ T5548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.590638][T19798] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5846'. [ 621.646938][T19797] openvswitch: netlink: Missing key (keys=20040, expected=100) [ 621.749418][ T5554] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 621.943282][T19821] delete_channel: no stack [ 622.569630][T19842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5857'. [ 622.784551][T19842] syzkaller1: entered promiscuous mode [ 622.797210][T19842] syzkaller1: entered allmulticast mode [ 622.802241][T19849] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5859'. [ 622.814737][ T5250] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 622.827134][ T5250] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 622.837605][ T5250] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 622.847237][ T5250] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 622.860651][ T5250] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 622.869037][ T5250] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 623.153794][T19854] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5861'. [ 623.182421][T19854] xt_policy: neither incoming nor outgoing policy selected [ 623.501783][T19866] netlink: 'syz.1.5865': attribute type 15 has an invalid length. [ 623.619212][T19848] chnl_net:caif_netlink_parms(): no params data found [ 623.749976][T19877] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5869'. [ 623.839969][T19883] nbd: couldn't find a device at index 1 [ 623.846606][T19883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5871'. [ 623.856963][T19883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5871'. [ 623.870168][T19883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5871'. [ 623.880254][T19883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5871'. [ 623.902992][T19848] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.917135][T19848] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.950751][T19848] bridge_slave_0: entered allmulticast mode [ 623.972624][T19848] bridge_slave_0: entered promiscuous mode [ 623.984005][T19881] netlink: 'syz.2.5870': attribute type 1 has an invalid length. [ 624.055628][T19881] bond2: entered promiscuous mode [ 624.067070][T19884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5870'. [ 624.079537][T19884] bond2: left promiscuous mode [ 624.085152][T19884] 8021q: adding VLAN 0 to HW filter on device bond2 [ 624.094361][T19887] unknown channel width for channel at 909000KHz? [ 624.096633][T19848] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.164436][T19848] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.196656][T19848] bridge_slave_1: entered allmulticast mode [ 624.212886][T19897] netlink: 'syz.1.5876': attribute type 3 has an invalid length. [ 624.225738][T19897] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5876'. [ 624.240812][T19848] bridge_slave_1: entered promiscuous mode [ 624.357575][T19848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.384350][T19848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.513578][T19848] team0: Port device team_slave_0 added [ 624.528596][T19848] team0: Port device team_slave_1 added [ 624.609416][T19848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.638713][T19848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.669196][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.669331][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.741882][T19848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.747878][T19919] FAULT_INJECTION: forcing a failure. [ 624.747878][T19919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.779340][T19919] CPU: 1 UID: 0 PID: 19919 Comm: syz.2.5885 Not tainted 6.11.0-rc6-syzkaller-00204-gd1aaaa2e0a67 #0 [ 624.790152][T19919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 624.800241][T19919] Call Trace: [ 624.803546][T19919] [ 624.806498][T19919] dump_stack_lvl+0x241/0x360 [ 624.811217][T19919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 624.816453][T19919] ? __pfx__printk+0x10/0x10 [ 624.821078][T19919] ? __pfx_lock_release+0x10/0x10 [ 624.826247][T19919] should_fail_ex+0x3b0/0x4e0 [ 624.831069][T19919] _copy_from_iter+0x1f6/0x1960 [ 624.835954][T19919] ? __virt_addr_valid+0x183/0x530 [ 624.841087][T19919] ? __pfx_lock_release+0x10/0x10 [ 624.846161][T19919] ? __pfx__copy_from_iter+0x10/0x10 [ 624.851475][T19919] ? __virt_addr_valid+0x183/0x530 [ 624.856697][T19919] ? __virt_addr_valid+0x183/0x530 [ 624.861822][T19919] ? __virt_addr_valid+0x45f/0x530 [ 624.866941][T19919] ? __check_object_size+0x49c/0x900 [ 624.872250][T19919] kernfs_fop_write_iter+0x1aa/0x500 [ 624.877550][T19919] vfs_write+0xa72/0xc90 [ 624.881802][T19919] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 624.887625][T19919] ? __pfx_vfs_write+0x10/0x10 [ 624.892438][T19919] ksys_write+0x1a0/0x2c0 [ 624.896791][T19919] ? __pfx_ksys_write+0x10/0x10 [ 624.901674][T19919] ? do_syscall_64+0x100/0x230 [ 624.906451][T19919] ? do_syscall_64+0xb6/0x230 [ 624.911139][T19919] do_syscall_64+0xf3/0x230 [ 624.915661][T19919] ? clear_bhb_loop+0x35/0x90 [ 624.920362][T19919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.926272][T19919] RIP: 0033:0x7f140797def9 [ 624.930707][T19919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.950323][T19919] RSP: 002b:00007f1408699038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 624.958745][T19919] RAX: ffffffffffffffda RBX: 00007f1407b35f80 RCX: 00007f140797def9 [ 624.966729][T19919] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000004 [ 624.974709][T19919] RBP: 00007f1408699090 R08: 0000000000000000 R09: 0000000000000000 [ 624.982694][T19919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.990690][T19919] R13: 0000000000000000 R14: 00007f1407b35f80 R15: 00007ffdee332258 [ 624.998690][T19919] [ 625.011965][ T5250] Bluetooth: hci3: command tx timeout [ 625.019059][T19848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.063807][T19848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.138057][T19848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.177628][T19927] netlink: 'syz.1.5886': attribute type 1 has an invalid length. [ 625.239754][T19927] bond2: entered promiscuous mode [ 625.312571][T19930] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 625.352330][T19930] bond2: (slave ip6gretap1): making interface the new active one [ 625.360227][T19930] ip6gretap1: entered promiscuous mode [ 625.368763][T19930] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 625.396043][T19927] bond2: left promiscuous mode [ 625.402788][T19927] ip6gretap1: left promiscuous mode [ 625.409397][T19927] 8021q: adding VLAN 0 to HW filter on device bond2 [ 625.486738][T19848] hsr_slave_0: entered promiscuous mode [ 625.506311][T19848] hsr_slave_1: entered promiscuous mode [ 625.534610][T19848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 625.547520][T19848] Cannot create hsr debugfs directory [ 625.727154][T19950] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 625.796670][T19956] gretap0: entered promiscuous mode [ 625.854450][T19956] batadv_slave_1: entered promiscuous mode [ 626.327507][T19848] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.331822][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 626.518077][T19848] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.588229][T19960] netlink: 'syz.1.5896': attribute type 21 has an invalid length. [ 626.694028][T19848] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.912265][T19848] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.051263][ T5250] Bluetooth: hci3: command tx timeout [ 627.287568][T19848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 627.307615][T20019] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20004 [ 627.311841][T19848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 627.346741][T19848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 627.387193][T19848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 627.646472][T19848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.690210][T19848] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.718392][ T5542] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.725686][ T5542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.772190][ T5542] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.779572][ T5542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.888151][T20029] veth0_macvtap: left promiscuous mode [ 628.064983][T20036] unknown channel width for channel at 909000KHz? [ 628.155403][T20047] __nla_validate_parse: 5 callbacks suppressed [ 628.155421][T20047] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5921'. [ 628.179756][T19848] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 628.201457][T19848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 628.448783][T20059] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5925'. [ 628.583485][T19848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.697121][T20070] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5928'. [ 628.721462][T20072] netlink: 'syz.2.5930': attribute type 1 has an invalid length. [ 628.788668][T20072] bond3: entered promiscuous mode [ 628.794743][T20076] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5931'. [ 628.804476][T19848] veth0_vlan: entered promiscuous mode [ 628.821633][T20072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5930'. [ 628.844406][T20072] bond3: left promiscuous mode [ 628.857071][T20072] 8021q: adding VLAN 0 to HW filter on device bond3 [ 628.883631][T20078] netlink: 'syz.0.5932': attribute type 1 has an invalid length. [ 628.917061][T19848] veth1_vlan: entered promiscuous mode [ 629.067921][T19848] veth0_macvtap: entered promiscuous mode [ 629.087469][T20085] netlink: 'syz.0.5935': attribute type 3 has an invalid length. [ 629.095082][T19848] veth1_macvtap: entered promiscuous mode [ 629.132435][ T5250] Bluetooth: hci3: command tx timeout [ 629.170423][T19848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.183645][T19848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.194152][T19848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.212142][T19848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.225616][T19848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.236285][T19848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.259560][T19848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.275246][T19848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.290903][T19848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.334941][T19848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.349640][T19848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.362822][T20097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5937'. [ 629.370048][T19848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.384124][T19848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.394464][T19848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.405146][T19848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.419133][T19848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.430392][T19848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.444206][T19848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.455534][T19848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.467625][T19848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.478536][T19848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.491125][T19848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.517321][T19848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.528509][T19848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.552836][T19848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.565311][T19848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.732594][ T5554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.740466][ T5554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.811108][ T5542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.829467][ T5542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.904855][T20104] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.5941'. [ 630.364153][T20130] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes. [ 630.607679][T20140] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5951'. [ 630.648632][T20142] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5952'. [ 630.658966][T20142] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5952'. [ 630.696523][T20140] netlink: 'syz.4.5951': attribute type 10 has an invalid length. [ 630.762065][T20140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.814342][T20140] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 631.211600][ T5250] Bluetooth: hci3: command tx timeout [ 631.422527][T20171] tipc: Started in network mode [ 631.437054][T20171] tipc: Node identity 02befea8a978, cluster identity 4711 [ 631.447794][T20171] tipc: Enabled bearer , priority 0 [ 631.458179][T20171] ªªªªªª: renamed from syzkaller0 [ 631.467428][T20171] tipc: Disabling bearer [ 631.492046][T20174] netlink: 'syz.2.5960': attribute type 1 has an invalid length. [ 631.574097][T20174] bond4: entered promiscuous mode [ 631.622671][T20177] bond4: left promiscuous mode [ 631.628183][T20177] 8021q: adding VLAN 0 to HW filter on device bond4 [ 632.048554][T20198] syzkaller0: entered promiscuous mode [ 632.068579][T20198] syzkaller0: entered allmulticast mode [ 632.119482][T20214] syzkaller0: entered allmulticast mode [ 632.196238][T20218] sctp: [Deprecated]: syz.2.5974 (pid 20218) Use of int in max_burst socket option. [ 632.196238][T20218] Use struct sctp_assoc_value instead [ 632.349498][T20224] netlink: 'syz.1.5976': attribute type 1 has an invalid length. [ 632.387290][T20224] bond3: entered promiscuous mode [ 634.627228][T20202] syzkaller0: left allmulticast mode [ 634.637742][T20224] __nla_validate_parse: 4 callbacks suppressed [ 634.637756][T20224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5976'. [ 634.658385][T20224] bond3: left promiscuous mode [ 634.663649][T20224] 8021q: adding VLAN 0 to HW filter on device bond3 [ 634.672442][T20238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5977'. [ 634.692182][T20238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5977'. [ 634.711511][T20238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5977'. [ 634.751177][T20244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5979'. [ 634.772693][T20247] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5980'. [ 634.993229][T20257] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5984'. [ 635.253113][T20269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5989'. [ 635.430500][T20280] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5993'. [ 635.853988][T20275] netlink: 'syz.4.5991': attribute type 1 has an invalid length. [ 635.960264][T20275] bond2: entered promiscuous mode [ 635.971629][T20282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5991'. [ 636.007363][T20282] bond2: left promiscuous mode [ 636.012727][T20282] 8021q: adding VLAN 0 to HW filter on device bond2 [ 636.024425][T20297] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 636.031745][T20297] IPv6: NLM_F_CREATE should be set when creating new route [ 636.039056][T20297] IPv6: NLM_F_CREATE should be set when creating new route [ 636.081996][T20297] ip6gretap0: entered promiscuous mode [ 636.103332][T20304] FAULT_INJECTION: forcing a failure. [ 636.103332][T20304] name failslab, interval 1, probability 0, space 0, times 0 [ 636.155788][T20304] CPU: 0 UID: 0 PID: 20304 Comm: syz.1.5999 Not tainted 6.11.0-rc6-syzkaller-00204-gd1aaaa2e0a67 #0 [ 636.166596][T20304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 636.176673][T20304] Call Trace: [ 636.179970][T20304] [ 636.182919][T20304] dump_stack_lvl+0x241/0x360 [ 636.187630][T20304] ? __pfx_dump_stack_lvl+0x10/0x10 [ 636.192852][T20304] ? __pfx__printk+0x10/0x10 [ 636.197481][T20304] ? __kmalloc_node_noprof+0xb7/0x440 [ 636.202886][T20304] ? __pfx___might_resched+0x10/0x10 [ 636.208211][T20304] should_fail_ex+0x3b0/0x4e0 [ 636.212927][T20304] should_failslab+0xac/0x100 [ 636.217637][T20304] __kmalloc_node_noprof+0xdf/0x440 [ 636.222859][T20304] ? crypto_create_tfm_node+0x88/0x3d0 [ 636.228351][T20304] crypto_create_tfm_node+0x88/0x3d0 [ 636.233694][T20304] crypto_alloc_tfm_node+0x161/0x360 [ 636.239026][T20304] esp_init_state+0x611/0x10b0 [ 636.243829][T20304] ? __pfx_esp_init_state+0x10/0x10 [ 636.249074][T20304] ? __xfrm_init_state+0x708/0xea0 [ 636.254219][T20304] ? __pfx_lock_release+0x10/0x10 [ 636.259297][T20304] __xfrm_init_state+0x9db/0xea0 [ 636.264264][T20304] xfrm_init_state+0x1f/0x80 [ 636.268871][T20304] pfkey_add+0x1dfe/0x3030 [ 636.273305][T20304] ? __pfx_pfkey_add+0x10/0x10 [ 636.278082][T20304] ? pfkey_broadcast+0x45/0x400 [ 636.282933][T20304] ? pfkey_broadcast+0x3e3/0x400 [ 636.287875][T20304] pfkey_sendmsg+0xbcc/0x1050 [ 636.292564][T20304] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 636.297799][T20304] ? __might_fault+0xaa/0x120 [ 636.302490][T20304] ? __pfx_lock_release+0x10/0x10 [ 636.307539][T20304] ? __import_iovec+0x536/0x820 [ 636.312413][T20304] ? aa_sock_msg_perm+0x91/0x160 [ 636.317356][T20304] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 636.322653][T20304] ? security_socket_sendmsg+0x87/0xb0 [ 636.328132][T20304] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 636.333335][T20304] __sock_sendmsg+0x221/0x270 [ 636.338051][T20304] ____sys_sendmsg+0x525/0x7d0 [ 636.342835][T20304] ? __pfx_____sys_sendmsg+0x10/0x10 [ 636.348144][T20304] __sys_sendmsg+0x2b0/0x3a0 [ 636.352745][T20304] ? __pfx___sys_sendmsg+0x10/0x10 [ 636.357860][T20304] ? vfs_write+0x7c4/0xc90 [ 636.362315][T20304] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 636.368650][T20304] ? do_syscall_64+0x100/0x230 [ 636.373432][T20304] ? do_syscall_64+0xb6/0x230 [ 636.378117][T20304] do_syscall_64+0xf3/0x230 [ 636.382664][T20304] ? clear_bhb_loop+0x35/0x90 [ 636.387366][T20304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.393266][T20304] RIP: 0033:0x7fd55d57def9 [ 636.397691][T20304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.417298][T20304] RSP: 002b:00007fd55e301038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 636.425727][T20304] RAX: ffffffffffffffda RBX: 00007fd55d735f80 RCX: 00007fd55d57def9 [ 636.433704][T20304] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 636.441678][T20304] RBP: 00007fd55e301090 R08: 0000000000000000 R09: 0000000000000000 [ 636.449649][T20304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.457618][T20304] R13: 0000000000000000 R14: 00007fd55d735f80 R15: 00007ffc11757f28 [ 636.465600][T20304] [ 636.616080][T20313] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 0 [ 637.233597][T20347] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 638.827369][T20438] netlink: 'syz.1.6038': attribute type 4 has an invalid length. [ 639.158662][T20451] syzkaller0: entered allmulticast mode [ 639.242257][T20451] syzkaller0 (unregistering): left allmulticast mode [ 639.528261][T20467] unknown channel width for channel at 909000KHz? [ 639.778708][T20479] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 639.989892][T20485] __nla_validate_parse: 15 callbacks suppressed [ 639.989915][T20485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6055'. [ 640.049917][T20485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6055'. [ 640.083476][T20485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6055'. [ 640.244727][T20490] bridge1: entered promiscuous mode [ 640.269241][T20492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6056'. [ 640.287386][T20490] bridge1: entered allmulticast mode [ 640.371156][T20498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6058'. [ 640.414728][T20500] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6058'. [ 640.538193][T20505] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6060'. [ 640.703745][T20511] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6064'. [ 640.733936][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 640.884296][T20520] Bluetooth: MGMT ver 1.23 [ 640.926093][T20520] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6065'. [ 641.214563][T20531] veth0_vlan: left promiscuous mode [ 641.253273][T20531] veth0_vlan: entered promiscuous mode [ 641.367868][T20536] bridge2: entered promiscuous mode [ 641.375828][T20536] bridge2: entered allmulticast mode [ 641.377324][T20541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6071'. [ 641.541605][T20550] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 641.704121][T20560] netlink: 'syz.3.6078': attribute type 3 has an invalid length. [ 641.985728][T20578] vlan3: entered promiscuous mode [ 642.009741][T20578] vlan3: entered allmulticast mode [ 642.026617][T20578] bond0: entered allmulticast mode [ 642.044343][T20578] bond_slave_0: entered allmulticast mode [ 642.064711][T20578] bond_slave_1: entered allmulticast mode [ 642.070489][T20578] dummy0: entered allmulticast mode [ 642.080770][T20578] bond0: entered promiscuous mode [ 642.086398][T20578] bond_slave_0: entered promiscuous mode [ 642.101290][T20578] bond_slave_1: entered promiscuous mode [ 642.108952][T20578] dummy0: entered promiscuous mode [ 642.129307][T20578] bond0: left allmulticast mode [ 642.143011][T20578] bond_slave_0: left allmulticast mode [ 642.164249][T20578] bond_slave_1: left allmulticast mode [ 642.182905][T20578] dummy0: left allmulticast mode [ 642.199219][T20578] bond0: left promiscuous mode [ 642.207451][T20578] bond_slave_0: left promiscuous mode [ 642.219113][T20578] bond_slave_1: left promiscuous mode [ 642.225706][T20578] dummy0: left promiscuous mode [ 642.289464][T20582] bridge11: entered promiscuous mode [ 642.302523][T20582] bridge11: entered allmulticast mode [ 642.631450][T20609] IPv6: sit2: Disabled Multicast RS [ 642.908906][T20627] netlink: 'syz.3.6104': attribute type 10 has an invalid length. [ 642.954308][T20627] team0: Port device netdevsim0 added [ 642.967428][T20631] netlink: 'syz.3.6104': attribute type 10 has an invalid length. [ 643.064005][T20631] team0: Port device netdevsim0 removed [ 643.522199][T20651] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 644.065584][T20677] netlink: 'syz.1.6121': attribute type 3 has an invalid length. [ 644.330775][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 644.903538][T20720] netlink: 'syz.1.6134': attribute type 1 has an invalid length. [ 644.928614][T20720] netlink: 'syz.1.6134': attribute type 1 has an invalid length. [ 644.955562][T20722] unknown channel width for channel at 909000KHz? [ 645.184058][T20731] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64 [ 645.834325][ T5242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 645.845970][ T5242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 645.855495][ T5242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 645.864313][ T5242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 645.882401][T20750] __nla_validate_parse: 9 callbacks suppressed [ 645.882419][T20750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6149'. [ 645.899979][T20750] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 645.909336][T20750] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 645.919569][ T5242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 645.927204][ T5242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 646.206305][T20422] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.369911][T20422] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.542960][T20422] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.587253][T20780] x_tables: unsorted underflow at hook 3 [ 646.697614][T20422] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.773564][T20787] unknown channel width for channel at 909000KHz? [ 646.904137][T20789] netlink: 'syz.0.6161': attribute type 39 has an invalid length. [ 646.912497][T20789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6161'. [ 646.924440][T20789] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.933772][T20789] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.960874][T20422] bridge_slave_1: left allmulticast mode [ 646.976027][T20422] bridge_slave_1: left promiscuous mode [ 646.987480][T20422] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.030378][T20422] bridge_slave_0: left allmulticast mode [ 647.036403][T20422] bridge_slave_0: left promiscuous mode [ 647.050628][T20422] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.646620][T20422] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 648.023179][ T5250] Bluetooth: hci1: command tx timeout [ 648.574518][T20422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.585168][T20422] bond_slave_0: left promiscuous mode [ 648.590682][T20422] bond_slave_0: left allmulticast mode [ 648.604693][T20422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 648.614836][T20422] bond_slave_1: left promiscuous mode [ 648.620318][T20422] bond_slave_1: left allmulticast mode [ 648.627934][T20422] bond0 (unregistering): Released all slaves [ 648.642983][T20422] bond1 (unregistering): Released all slaves [ 648.773050][T20422] bond2 (unregistering): Released all slaves [ 648.905143][T20422] bond3 (unregistering): Released all slaves [ 648.928755][T20791] bridge0: entered promiscuous mode [ 648.934391][T20791] bridge0: left promiscuous mode [ 649.166154][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 649.439384][T20817] unknown channel width for channel at 909000KHz? [ 649.450258][T20822] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 649.680648][T20749] chnl_net:caif_netlink_parms(): no params data found [ 650.091432][ T5250] Bluetooth: hci1: command tx timeout [ 650.208877][T20852] unknown channel width for channel at 909000KHz? [ 650.454001][T20855] netlink: 'syz.4.6184': attribute type 11 has an invalid length. [ 650.588345][T20422] hsr_slave_0: left promiscuous mode [ 650.623911][T20422] hsr_slave_1: left promiscuous mode [ 650.640178][T20422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.684160][T20422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.701227][T20422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.766291][T20422] veth1_macvtap: left promiscuous mode [ 650.781484][T20422] veth0_macvtap: left promiscuous mode [ 650.790731][T20422] veth1_vlan: left promiscuous mode [ 650.815885][T20422] veth0_vlan: left promiscuous mode [ 650.887096][T20876] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6192'. [ 651.967645][T20422] team0 (unregistering): Port device team_slave_1 removed [ 652.072853][T20422] team0 (unregistering): Port device team_slave_0 removed [ 652.174425][ T5250] Bluetooth: hci1: command tx timeout [ 652.895977][T20901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6197'. [ 652.952205][T20900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6197'. [ 652.965499][T20749] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.973206][T20749] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.980414][T20749] bridge_slave_0: entered allmulticast mode [ 652.988304][T20749] bridge_slave_0: entered promiscuous mode [ 653.061744][T20749] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.069040][T20749] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.096895][T20749] bridge_slave_1: entered allmulticast mode [ 653.106197][T20749] bridge_slave_1: entered promiscuous mode [ 653.211920][T20910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6200'. [ 653.312435][T20920] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6203'. [ 653.376385][T20749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.406439][T20749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.565018][T20749] team0: Port device team_slave_0 added [ 653.615033][T20749] team0: Port device team_slave_1 added [ 653.815485][T20749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.832006][T20749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.909484][T20749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.983260][T20749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.996412][T20422] IPVS: stop unused estimator thread 0... [ 654.007239][T20749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.087401][T20749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.251987][ T5250] Bluetooth: hci1: command tx timeout [ 654.319364][T20961] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6213'. [ 654.356824][T20749] hsr_slave_0: entered promiscuous mode [ 654.400183][T20749] hsr_slave_1: entered promiscuous mode [ 654.413129][T20749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 654.422391][T20749] Cannot create hsr debugfs directory [ 654.435400][T20963] gtp0: entered promiscuous mode [ 654.459140][T20963] gtp0: entered allmulticast mode [ 655.632154][T20983] netlink: 'syz.0.6223': attribute type 3 has an invalid length. [ 655.640025][T20983] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.6223'. [ 655.656908][T20993] netlink: 210620 bytes leftover after parsing attributes in process `syz.4.6224'. [ 655.687340][T20983] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 656.081647][T21014] openvswitch: netlink: Missing key (keys=100000040, expected=2000) [ 656.304797][T21028] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6237'. [ 656.395095][T20749] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 656.456440][T20749] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 656.502871][T21034] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6241'. [ 656.552796][T21039] bridge1: entered promiscuous mode [ 656.580963][T21039] bridge1: entered allmulticast mode [ 656.615420][T21048] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6244'. [ 656.625874][T20749] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 656.632379][T21050] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ1 [ 656.665048][T20749] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 656.837900][T21055] netlink: 'syz.2.6246': attribute type 1 has an invalid length. [ 656.863793][T21056] netlink: 'syz.2.6246': attribute type 1 has an invalid length. [ 657.009329][T20749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.052129][T21064] netlink: 'syz.0.6251': attribute type 1 has an invalid length. [ 657.119179][T21064] bond1: entered promiscuous mode [ 657.119715][T21073] netlink: 'syz.2.6253': attribute type 1 has an invalid length. [ 657.159699][T21064] bond1: left promiscuous mode [ 657.180854][T21064] 8021q: adding VLAN 0 to HW filter on device bond1 [ 657.194249][T20749] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.264904][ T5548] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.272123][ T5548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.306994][ T5548] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.314239][ T5548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.737547][T21101] xt_ipcomp: unknown flags B [ 657.905108][T21111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.989573][T20749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.069779][T21119] netlink: 'syz.4.6266': attribute type 1 has an invalid length. [ 658.112261][T21119] bond3: entered promiscuous mode [ 658.137324][T21119] __nla_validate_parse: 10 callbacks suppressed [ 658.137345][T21119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6266'. [ 658.160166][T21119] bond3: left promiscuous mode [ 658.165668][T21119] 8021q: adding VLAN 0 to HW filter on device bond3 [ 658.196131][T21122] team0: Port device vlan3 added [ 658.278182][T20749] veth0_vlan: entered promiscuous mode [ 658.315252][T20749] veth1_vlan: entered promiscuous mode [ 658.387151][T20749] veth0_macvtap: entered promiscuous mode [ 658.411900][T20749] veth1_macvtap: entered promiscuous mode [ 658.476738][T20749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.500236][T20749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.517400][T20749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.538227][T20749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.567045][T20749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.613711][T20749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.624195][T20749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.635293][T20749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.664766][T20749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.690444][T20749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.732142][T20749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.785936][T20749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.810948][T20749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.836965][T20749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.855263][T20749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.877728][T20749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.905936][T20749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.936734][T20749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.978027][T20749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.008290][T20749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.036869][T20749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.060693][T20749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.082788][T20749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.096379][T20749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 659.146757][T20749] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.181107][T20749] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.203395][T20749] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.224265][T20749] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.429461][ T5552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.458606][ T5552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.526517][ T5552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.538695][ T5552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.905949][T21181] bridge5: entered promiscuous mode [ 659.934529][T21181] bridge5: entered allmulticast mode [ 660.061531][T21181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6282'. [ 660.185714][T21190] bridge3: entered promiscuous mode [ 660.194436][T21190] bridge3: entered allmulticast mode [ 660.247009][T21190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6286'. [ 660.424733][ T5548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.447588][ T5548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.610444][ T5242] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 660.620296][ T5242] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 660.629235][ T5242] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 660.639742][ T5242] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 660.650482][ T5242] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 660.659232][ T5242] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 660.820352][T21212] netlink: 'syz.1.6294': attribute type 3 has an invalid length. [ 660.951873][T21217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6293'. [ 660.964600][T21217] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6293'. [ 661.160964][T21228] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 661.392314][T21237] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 661.503072][T21237] tipc: Enabled bearer , priority 10 [ 661.532448][T21242] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 661.635122][T21242] --map-set only usable from mangle table [ 661.696523][T21246] unknown channel width for channel at 909000KHz? [ 661.931906][T21251] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.939506][T21251] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.997584][T21257] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6306'. [ 662.034343][T21201] chnl_net:caif_netlink_parms(): no params data found [ 662.209741][T21263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6309'. [ 662.398156][T21274] netlink: 'syz.4.6311': attribute type 11 has an invalid length. [ 662.420226][T21274] netlink: 'syz.4.6311': attribute type 1 has an invalid length. [ 662.437732][T21201] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.438883][T21274] netlink: 199816 bytes leftover after parsing attributes in process `syz.4.6311'. [ 662.461380][T21201] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.483278][T21201] bridge_slave_0: entered allmulticast mode [ 662.490784][T21201] bridge_slave_0: entered promiscuous mode [ 662.515780][T21201] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.533912][T21201] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.579339][T21201] bridge_slave_1: entered allmulticast mode [ 662.595766][T21201] bridge_slave_1: entered promiscuous mode [ 662.631192][ T5296] tipc: Node number set to 2881945256 [ 662.708436][T21201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.732222][ T5242] Bluetooth: hci4: command tx timeout [ 662.746730][T21201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.892989][T21201] team0: Port device team_slave_0 added [ 662.933194][T21201] team0: Port device team_slave_1 added [ 663.054194][T21201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.075082][T21201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.135366][T21201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.155320][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 663.168206][T21201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.182460][T21310] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6322'. [ 663.184007][T21201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.201431][T21310] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6322'. [ 663.239868][T21201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.248102][T21310] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6322'. [ 663.292716][T21310] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6322'. [ 663.407103][T21201] hsr_slave_0: entered promiscuous mode [ 663.418058][T21201] hsr_slave_1: entered promiscuous mode [ 663.435527][T21201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 663.456061][T21201] Cannot create hsr debugfs directory [ 663.994417][T21201] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.037324][T21325] gretap1: entered promiscuous mode [ 664.050928][T21325] gretap1: entered allmulticast mode [ 664.228767][T20245] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.348619][T21201] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.454582][T20245] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.551124][T21337] netlink: 'syz.1.6333': attribute type 3 has an invalid length. [ 664.574556][T21201] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.705167][T20245] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.779397][ T5250] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 664.798849][T21201] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.809925][ T5250] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 664.817032][T16770] Bluetooth: hci4: command tx timeout [ 664.823326][T21346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6336'. [ 664.837572][ T5250] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 664.849486][ T5250] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 664.850081][T21346] netlink: 'syz.0.6336': attribute type 8 has an invalid length. [ 664.866263][ T5250] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 664.881424][ T5250] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 664.981399][T20245] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.077359][T21348] vxcan1: tx address claim with dest, not broadcast [ 665.231449][T21353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6339'. [ 665.410275][T21360] sctp: [Deprecated]: syz.1.6341 (pid 21360) Use of int in max_burst socket option deprecated. [ 665.410275][T21360] Use struct sctp_assoc_value instead [ 665.412750][T21201] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 665.484779][T21201] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 665.591703][T21201] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 665.738809][T21201] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 665.791433][T21370] netlink: 'syz.1.6344': attribute type 10 has an invalid length. [ 665.821547][T21370] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6344'. [ 665.838366][T21371] netlink: 'syz.1.6344': attribute type 10 has an invalid length. [ 665.846422][T20245] bridge_slave_1: left allmulticast mode [ 665.846448][T20245] bridge_slave_1: left promiscuous mode [ 665.846652][T20245] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.880167][T21371] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6344'. [ 665.912309][T20245] bridge_slave_0: left allmulticast mode [ 665.918583][T20245] bridge_slave_0: left promiscuous mode [ 665.948590][T20245] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.059251][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 666.294904][T21387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6350'. [ 666.655766][T20245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.667572][T20245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.684579][T20245] bond0 (unregistering): Released all slaves [ 666.697399][T20245] bond1 (unregistering): Released all slaves [ 666.824355][T20245] tipc: Disabling bearer [ 666.830133][T20245] tipc: Left network mode [ 666.901798][ T5250] Bluetooth: hci4: command tx timeout [ 666.971440][ T5250] Bluetooth: hci3: command tx timeout [ 667.080474][T21395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6354'. [ 667.247298][T21201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.342719][T21403] netlink: 'syz.1.6357': attribute type 1 has an invalid length. [ 667.399888][T21403] bond1: entered promiscuous mode [ 667.426671][T21405] unknown channel width for channel at 909000KHz? [ 667.435599][T21406] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 667.450643][T21406] bond1: (slave ip6gretap1): making interface the new active one [ 667.458724][T21406] ip6gretap1: entered promiscuous mode [ 667.466390][T21406] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 667.509104][T21410] bond1: left promiscuous mode [ 667.514452][T21410] ip6gretap1: left promiscuous mode [ 667.522514][T21410] 8021q: adding VLAN 0 to HW filter on device bond1 [ 667.547775][T21201] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.632020][ T5546] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.639209][ T5546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.677472][ T5546] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.684673][ T5546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.194249][T20245] hsr_slave_0: left promiscuous mode [ 668.272505][T20245] hsr_slave_1: left promiscuous mode [ 668.285875][T20245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.304155][T20245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.315194][T20245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.323100][T20245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.352193][T20245] veth1_macvtap: left promiscuous mode [ 668.357817][T20245] veth0_macvtap: left promiscuous mode [ 668.363647][T20245] veth1_vlan: left promiscuous mode [ 668.368950][T20245] veth0_vlan: left promiscuous mode [ 668.985368][ T5250] Bluetooth: hci4: command tx timeout [ 669.055479][ T5250] Bluetooth: hci3: command tx timeout [ 669.306166][T20245] team0 (unregistering): Port device team_slave_1 removed [ 669.358735][T20245] team0 (unregistering): Port device team_slave_0 removed [ 669.848336][T21451] __nla_validate_parse: 5 callbacks suppressed [ 669.848355][T21451] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6372'. [ 669.985776][T21430] netlink: 'syz.0.6366': attribute type 1 has an invalid length. [ 669.994350][T21430] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 670.031461][T21452] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6372'. [ 670.125319][T21459] netlink: 'syz.0.6373': attribute type 13 has an invalid length. [ 670.208223][T21464] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 670.327392][T21342] chnl_net:caif_netlink_parms(): no params data found [ 670.373016][T21472] FAULT_INJECTION: forcing a failure. [ 670.373016][T21472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.396713][T21472] CPU: 0 UID: 0 PID: 21472 Comm: syz.1.6377 Not tainted 6.11.0-rc6-syzkaller-00204-gd1aaaa2e0a67 #0 [ 670.407522][T21472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 670.417606][T21472] Call Trace: [ 670.420908][T21472] [ 670.423864][T21472] dump_stack_lvl+0x241/0x360 [ 670.428571][T21472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 670.433795][T21472] ? __pfx__printk+0x10/0x10 [ 670.438408][T21472] ? __pfx_lock_release+0x10/0x10 [ 670.443467][T21472] should_fail_ex+0x3b0/0x4e0 [ 670.448184][T21472] _copy_from_iter+0x1f6/0x1960 [ 670.453062][T21472] ? __virt_addr_valid+0x183/0x530 [ 670.458200][T21472] ? __pfx_lock_release+0x10/0x10 [ 670.463268][T21472] ? __alloc_skb+0x28f/0x440 [ 670.467885][T21472] ? __pfx__copy_from_iter+0x10/0x10 [ 670.473203][T21472] ? __virt_addr_valid+0x183/0x530 [ 670.478345][T21472] ? __virt_addr_valid+0x183/0x530 [ 670.483480][T21472] ? __virt_addr_valid+0x45f/0x530 [ 670.488616][T21472] ? __check_object_size+0x49c/0x900 [ 670.493940][T21472] netlink_sendmsg+0x73d/0xcb0 [ 670.498750][T21472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.504069][T21472] ? __import_iovec+0x536/0x820 [ 670.508964][T21472] ? aa_sock_msg_perm+0x91/0x160 [ 670.513929][T21472] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 670.519241][T21472] ? security_socket_sendmsg+0x87/0xb0 [ 670.524728][T21472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.530035][T21472] __sock_sendmsg+0x221/0x270 [ 670.534754][T21472] ____sys_sendmsg+0x525/0x7d0 [ 670.539552][T21472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 670.544881][T21472] __sys_sendmmsg+0x3b2/0x740 [ 670.549598][T21472] ? __pfx___sys_sendmmsg+0x10/0x10 [ 670.554892][T21472] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 670.560836][T21472] ? ksys_write+0x23e/0x2c0 [ 670.565369][T21472] ? __pfx_lock_release+0x10/0x10 [ 670.570427][T21472] ? vfs_write+0x7c4/0xc90 [ 670.574868][T21472] ? __mutex_unlock_slowpath+0x21d/0x750 [ 670.580528][T21472] ? __pfx_vfs_write+0x10/0x10 [ 670.585338][T21472] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 670.591350][T21472] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 670.597717][T21472] ? do_syscall_64+0x100/0x230 [ 670.602511][T21472] __x64_sys_sendmmsg+0xa0/0xb0 [ 670.607402][T21472] do_syscall_64+0xf3/0x230 [ 670.611926][T21472] ? clear_bhb_loop+0x35/0x90 [ 670.616639][T21472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.622564][T21472] RIP: 0033:0x7f4cc857def9 [ 670.627011][T21472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.646643][T21472] RSP: 002b:00007f4cc9343038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 670.655087][T21472] RAX: ffffffffffffffda RBX: 00007f4cc8735f80 RCX: 00007f4cc857def9 [ 670.663089][T21472] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000003 [ 670.671088][T21472] RBP: 00007f4cc9343090 R08: 0000000000000000 R09: 0000000000000000 [ 670.679076][T21472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.687067][T21472] R13: 0000000000000000 R14: 00007f4cc8735f80 R15: 00007ffc7ad78f08 [ 670.695078][T21472] [ 670.841138][T21342] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.852461][T21480] delete_channel: no stack [ 670.855326][T21342] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.876334][T21342] bridge_slave_0: entered allmulticast mode [ 670.884724][T21342] bridge_slave_0: entered promiscuous mode [ 670.894991][T21342] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.902357][T21342] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.909739][T21342] bridge_slave_1: entered allmulticast mode [ 670.927747][T21342] bridge_slave_1: entered promiscuous mode [ 670.970079][T21201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.026355][T21342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.100409][T21342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.132660][ T5250] Bluetooth: hci3: command tx timeout [ 671.228622][T21342] team0: Port device team_slave_0 added [ 671.299007][T21342] team0: Port device team_slave_1 added [ 671.439443][T21342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.451287][T21342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.479663][T21342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.500776][T21201] veth0_vlan: entered promiscuous mode [ 671.531642][T21342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.538636][T21342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.601016][T21342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.715310][T21201] veth1_vlan: entered promiscuous mode [ 671.796650][T21342] hsr_slave_0: entered promiscuous mode [ 671.804920][T21514] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6388'. [ 671.815748][T21342] hsr_slave_1: entered promiscuous mode [ 671.825004][T21342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 671.833505][T21342] Cannot create hsr debugfs directory [ 672.009695][T21517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6389'. [ 672.189039][T21201] veth0_macvtap: entered promiscuous mode [ 672.249306][T21201] veth1_macvtap: entered promiscuous mode [ 672.395654][T21201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.429251][T21201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.447607][T21201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.458311][T21201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.471449][T21201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.489165][T21201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.497751][T21540] openvswitch: netlink: Missing key (keys=1000040, expected=200000) [ 672.504711][T21201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.518546][T21201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.529029][T21201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.539806][T21201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.556004][T21201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.579271][T21201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.590303][T21201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.601565][T21201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.622739][T21201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.633235][T21201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.646590][T21201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.664313][T21201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.676812][T21201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.686815][T21201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.697923][T21201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.708916][T21201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.719993][T21201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.733405][T21201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.790842][T21201] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.816019][T21201] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.825931][T21201] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.834961][T21201] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.863183][T21548] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6399'. [ 672.878602][T21548] netlink: 21 bytes leftover after parsing attributes in process `syz.0.6399'. [ 672.902283][T21548] netlink: 21 bytes leftover after parsing attributes in process `syz.0.6399'. [ 672.926333][T21550] netlink: 'syz.1.6400': attribute type 1 has an invalid length. [ 672.957622][T21550] bond2: entered promiscuous mode [ 672.963136][T21552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6400'. [ 672.973851][T21552] bond2: left promiscuous mode [ 672.978921][T21552] 8021q: adding VLAN 0 to HW filter on device bond2 [ 673.003069][T21548] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6399'. [ 673.064120][T21557] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 673.147377][T21562] netlink: 'syz.0.6404': attribute type 1 has an invalid length. [ 673.211262][ T5250] Bluetooth: hci3: command tx timeout [ 673.278473][ T5548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.288014][ T5548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.389228][T21566] can: request_module (can-proto-0) failed. [ 673.397001][T21342] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 673.409337][T21342] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 673.426556][T21342] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 673.438671][ T5552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.447064][ T5552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.487771][T21342] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 673.701670][T21342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.728640][T21342] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.772913][ T5548] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.780151][ T5548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.811857][T21577] netlink: 'syz.1.6408': attribute type 25 has an invalid length. [ 673.819874][T21577] netlink: 'syz.1.6408': attribute type 7 has an invalid length. [ 673.846220][ T5548] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.853521][ T5548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.013689][T21584] netlink: 'syz.1.6411': attribute type 1 has an invalid length. [ 674.067287][T21584] bond3: entered promiscuous mode [ 674.075663][T21585] x_tables: unsorted entry at hook 2 [ 674.118116][T21584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6411'. [ 674.143756][T21584] bond3: left promiscuous mode [ 674.181827][T21584] 8021q: adding VLAN 0 to HW filter on device bond3 [ 674.479660][T21611] netlink: 'syz.4.6420': attribute type 3 has an invalid length. [ 674.619670][T21342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.864443][T21342] veth0_vlan: entered promiscuous mode [ 674.943957][T21342] veth1_vlan: entered promiscuous mode [ 675.095034][T21342] veth0_macvtap: entered promiscuous mode [ 675.117151][T21342] veth1_macvtap: entered promiscuous mode [ 675.155405][T21342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.175255][T21342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.202977][T21342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.244291][T21342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.260307][T21342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.282573][T21342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.306384][T21342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.327105][T21342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.350458][T21342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.370191][T21342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.393854][T21342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.405731][T21342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.423154][T21342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.436512][T21342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.447996][T21342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.462151][T21342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.475460][T21342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.486244][T21342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.502133][T21640] __nla_validate_parse: 1 callbacks suppressed [ 675.502151][T21640] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6429'. [ 675.525213][T21342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.549700][T21342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.571872][T21342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.596023][T21342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.617159][T21342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.637427][T21342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.661070][T21342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.681294][T21342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.710928][T21342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.733209][T21342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.766340][T21635] netlink: 'syz.0.6428': attribute type 8 has an invalid length. [ 675.811738][T21342] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.841040][T21342] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.859701][T21342] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.880947][T21342] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.014601][T21658] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6431'. [ 676.703256][T20422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.737445][T20422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.834509][ T5554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.859598][ T5554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.875380][T21673] Bluetooth: MGMT ver 1.23 [ 676.880440][T21675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6439'. [ 676.894648][T21673] netlink: 'syz.4.6438': attribute type 3 has an invalid length. [ 676.903245][T21673] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6438'. [ 677.306414][T21687] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6442'. [ 677.368563][ T5448] IPVS: starting estimator thread 0... [ 677.481116][T21694] IPVS: using max 17 ests per chain, 40800 per kthread [ 677.557421][T21702] netlink: 'syz.2.6449': attribute type 11 has an invalid length. [ 677.574025][T21698] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6448'. [ 677.597572][T21702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6449'. [ 677.829669][T21712] tipc: Failed to obtain node identity [ 677.854343][T21712] tipc: Enabling of bearer rejected, failed to enable media [ 678.040047][T21719] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6457'. [ 678.736013][T21748] ------------[ cut here ]------------ [ 678.741986][T21748] WARNING: CPU: 0 PID: 21748 at kernel/softirq.c:362 __local_bh_enable_ip+0x1be/0x200 [ 678.751583][T21748] Modules linked in: [ 678.755505][T21748] CPU: 0 UID: 0 PID: 21748 Comm: syz.4.6464 Not tainted 6.11.0-rc6-syzkaller-00204-gd1aaaa2e0a67 #0 [ 678.766292][T21748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 678.776376][T21748] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 678.782405][T21748] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 cc a2 18 90 80 e1 07 80 c1 03 38 [ 678.802043][T21748] RSP: 0018:ffffc9000997ef40 EFLAGS: 00010046 [ 678.808131][T21748] RAX: 0000000000000000 RBX: 1ffff9200132fdec RCX: ffffc9000997ef03 [ 678.816106][T21748] RDX: 0000000000000005 RSI: 0000000000000200 RDI: ffffffff8987805a [ 678.824081][T21748] RBP: ffffc9000997eff0 R08: ffffffff9018706f R09: 1ffffffff2030e0d [ 678.832077][T21748] R10: dffffc0000000000 R11: fffffbfff2030e0e R12: dffffc0000000000 [ 678.840077][T21748] R13: 1ffff11005f147a0 R14: ffffc9000997ef80 R15: 0000000000000200 [ 678.848054][T21748] FS: 00007fcfbf7c06c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 678.856988][T21748] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 678.863569][T21748] CR2: 00007f1041a656c0 CR3: 000000007fb76000 CR4: 00000000003506f0 [ 678.871548][T21748] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 678.879516][T21748] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 678.887488][T21748] Call Trace: [ 678.890768][T21748] [ 678.893702][T21748] ? __warn+0x163/0x4e0 [ 678.897868][T21748] ? __local_bh_enable_ip+0x1be/0x200 [ 678.903258][T21748] ? report_bug+0x2b3/0x500 [ 678.907775][T21748] ? __local_bh_enable_ip+0x1be/0x200 [ 678.913167][T21748] ? handle_bug+0x3e/0x70 [ 678.917502][T21748] ? exc_invalid_op+0x1a/0x50 [ 678.922190][T21748] ? asm_exc_invalid_op+0x1a/0x20 [ 678.927232][T21748] ? __dev_queue_xmit+0x2da/0x3e90 [ 678.932354][T21748] ? __local_bh_enable_ip+0x1be/0x200 [ 678.937734][T21748] ? dev_hard_start_xmit+0x773/0x7e0 [ 678.943027][T21748] ? __dev_queue_xmit+0x2da/0x3e90 [ 678.948148][T21748] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 678.953878][T21748] ? __dev_queue_xmit+0x2da/0x3e90 [ 678.958996][T21748] __dev_queue_xmit+0x1763/0x3e90 [ 678.964043][T21748] ? kasan_save_track+0x51/0x80 [ 678.968910][T21748] ? ieee80211_do_stop+0x13d9/0x1f40 [ 678.974201][T21748] ? cfg80211_change_iface+0x782/0xf30 [ 678.979663][T21748] ? wext_ioctl_dispatch+0x58e/0x640 [ 678.984951][T21748] ? __dev_queue_xmit+0x2da/0x3e90 [ 678.990068][T21748] ? __se_sys_ioctl+0xfc/0x170 [ 678.994833][T21748] ? do_syscall_64+0xf3/0x230 [ 678.999513][T21748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.005588][T21748] ? __pfx___dev_queue_xmit+0x10/0x10 [ 679.010981][T21748] ? __copy_skb_header+0x437/0x5b0 [ 679.016100][T21748] ? __asan_memcpy+0x40/0x70 [ 679.020711][T21748] ? skb_clone+0x240/0x390 [ 679.025142][T21748] __netlink_deliver_tap+0x54d/0x7c0 [ 679.030439][T21748] ? netlink_deliver_tap+0x2e/0x1b0 [ 679.035643][T21748] netlink_deliver_tap+0x19d/0x1b0 [ 679.040762][T21748] netlink_broadcast_filtered+0xe60/0x12a0 [ 679.046605][T21748] genlmsg_multicast_netns+0x93/0xd0 [ 679.051911][T21748] nl80211_frame_tx_status+0x8fa/0xda0 [ 679.057419][T21748] ? __pfx_nl80211_frame_tx_status+0x10/0x10 [ 679.063427][T21748] ? do_raw_spin_unlock+0x13c/0x8b0 [ 679.068662][T21748] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 679.074567][T21748] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 679.080918][T21748] ? ieee80211_report_used_skb+0x1621/0x2470 [ 679.086908][T21748] ieee80211_report_used_skb+0x19eb/0x2470 [ 679.092736][T21748] ? __pfx_ieee80211_report_used_skb+0x10/0x10 [ 679.098912][T21748] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 679.104380][T21748] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 679.110295][T21748] ieee80211_free_txskb+0x24/0x40 [ 679.115337][T21748] ieee80211_do_stop+0x13d9/0x1f40 [ 679.120461][T21748] ? __ieee80211_stop_queue+0x1fe/0x460 [ 679.126014][T21748] ? _find_next_bit+0xec/0x120 [ 679.130789][T21748] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 679.136265][T21748] ? ieee80211_stop_vif_queues+0x15b/0x1a0 [ 679.142102][T21748] ? __pfx_ieee80211_stop_vif_queues+0x10/0x10 [ 679.148265][T21748] ? ieee80211_check_concurrent_iface+0x70e/0x7e0 [ 679.154690][T21748] ieee80211_if_change_type+0x4cd/0xad0 [ 679.160259][T21748] ieee80211_change_iface+0xd2/0x4f0 [ 679.165559][T21748] ? cfg80211_mlme_purge_registrations+0x1fa/0x230 [ 679.172072][T21748] cfg80211_change_iface+0x782/0xf30 [ 679.177377][T21748] cfg80211_wext_siwmode+0x1bb/0x290 [ 679.182671][T21748] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 679.188498][T21748] ? __pfx___mutex_lock+0x10/0x10 [ 679.193524][T21748] ? full_name_hash+0x93/0xe0 [ 679.198217][T21748] ioctl_standard_call+0xe3/0x290 [ 679.203249][T21748] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 679.209099][T21748] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 679.214909][T21748] wext_ioctl_dispatch+0x58e/0x640 [ 679.220027][T21748] ? __pfx_ioctl_standard_call+0x10/0x10 [ 679.225663][T21748] ? __pfx_ioctl_private_call+0x10/0x10 [ 679.231237][T21748] ? __pfx_wext_ioctl_dispatch+0x10/0x10 [ 679.236888][T21748] ? __might_fault+0xc6/0x120 [ 679.241586][T21748] wext_handle_ioctl+0x15f/0x270 [ 679.246533][T21748] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 679.252012][T21748] sock_ioctl+0x17f/0x8e0 [ 679.256356][T21748] ? __pfx_sock_ioctl+0x10/0x10 [ 679.261234][T21748] ? __fget_files+0x29/0x470 [ 679.265837][T21748] ? __fget_files+0x3f6/0x470 [ 679.270547][T21748] ? __fget_files+0x29/0x470 [ 679.275164][T21748] ? bpf_lsm_file_ioctl+0x9/0x10 [ 679.280106][T21748] ? security_file_ioctl+0x87/0xb0 [ 679.285221][T21748] ? __pfx_sock_ioctl+0x10/0x10 [ 679.290102][T21748] __se_sys_ioctl+0xfc/0x170 [ 679.294703][T21748] do_syscall_64+0xf3/0x230 [ 679.299215][T21748] ? clear_bhb_loop+0x35/0x90 [ 679.303904][T21748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.309811][T21748] RIP: 0033:0x7fcfbe97def9 [ 679.314231][T21748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.333842][T21748] RSP: 002b:00007fcfbf7c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 679.342270][T21748] RAX: ffffffffffffffda RBX: 00007fcfbeb35f80 RCX: 00007fcfbe97def9 [ 679.350265][T21748] RDX: 0000000020000000 RSI: 0000000000008b06 RDI: 0000000000000003 [ 679.358251][T21748] RBP: 00007fcfbe9f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 679.366244][T21748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.374224][T21748] R13: 0000000000000000 R14: 00007fcfbeb35f80 R15: 00007ffdf0990b98 [ 679.382222][T21748] [ 679.385241][T21748] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 679.392517][T21748] CPU: 0 UID: 0 PID: 21748 Comm: syz.4.6464 Not tainted 6.11.0-rc6-syzkaller-00204-gd1aaaa2e0a67 #0 [ 679.403293][T21748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 679.413347][T21748] Call Trace: [ 679.416625][T21748] [ 679.419558][T21748] dump_stack_lvl+0x241/0x360 [ 679.424250][T21748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 679.429458][T21748] ? __pfx__printk+0x10/0x10 [ 679.434062][T21748] ? vscnprintf+0x5d/0x90 [ 679.438401][T21748] panic+0x349/0x860 [ 679.442308][T21748] ? __warn+0x172/0x4e0 [ 679.446480][T21748] ? __pfx_panic+0x10/0x10 [ 679.450929][T21748] __warn+0x346/0x4e0 [ 679.454916][T21748] ? __local_bh_enable_ip+0x1be/0x200 [ 679.460307][T21748] report_bug+0x2b3/0x500 [ 679.464645][T21748] ? __local_bh_enable_ip+0x1be/0x200 [ 679.470025][T21748] handle_bug+0x3e/0x70 [ 679.474185][T21748] exc_invalid_op+0x1a/0x50 [ 679.478692][T21748] asm_exc_invalid_op+0x1a/0x20 [ 679.483563][T21748] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 679.489544][T21748] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 cc a2 18 90 80 e1 07 80 c1 03 38 [ 679.509145][T21748] RSP: 0018:ffffc9000997ef40 EFLAGS: 00010046 [ 679.515220][T21748] RAX: 0000000000000000 RBX: 1ffff9200132fdec RCX: ffffc9000997ef03 [ 679.523195][T21748] RDX: 0000000000000005 RSI: 0000000000000200 RDI: ffffffff8987805a [ 679.531166][T21748] RBP: ffffc9000997eff0 R08: ffffffff9018706f R09: 1ffffffff2030e0d [ 679.539139][T21748] R10: dffffc0000000000 R11: fffffbfff2030e0e R12: dffffc0000000000 [ 679.547112][T21748] R13: 1ffff11005f147a0 R14: ffffc9000997ef80 R15: 0000000000000200 [ 679.555094][T21748] ? __dev_queue_xmit+0x2da/0x3e90 [ 679.560215][T21748] ? dev_hard_start_xmit+0x773/0x7e0 [ 679.565500][T21748] ? __dev_queue_xmit+0x2da/0x3e90 [ 679.570610][T21748] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 679.576338][T21748] ? __dev_queue_xmit+0x2da/0x3e90 [ 679.581458][T21748] __dev_queue_xmit+0x1763/0x3e90 [ 679.586490][T21748] ? kasan_save_track+0x51/0x80 [ 679.591357][T21748] ? ieee80211_do_stop+0x13d9/0x1f40 [ 679.596646][T21748] ? cfg80211_change_iface+0x782/0xf30 [ 679.602122][T21748] ? wext_ioctl_dispatch+0x58e/0x640 [ 679.607408][T21748] ? __dev_queue_xmit+0x2da/0x3e90 [ 679.612530][T21748] ? __se_sys_ioctl+0xfc/0x170 [ 679.617300][T21748] ? do_syscall_64+0xf3/0x230 [ 679.621981][T21748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.628056][T21748] ? __pfx___dev_queue_xmit+0x10/0x10 [ 679.633447][T21748] ? __copy_skb_header+0x437/0x5b0 [ 679.638566][T21748] ? __asan_memcpy+0x40/0x70 [ 679.643269][T21748] ? skb_clone+0x240/0x390 [ 679.647695][T21748] __netlink_deliver_tap+0x54d/0x7c0 [ 679.652992][T21748] ? netlink_deliver_tap+0x2e/0x1b0 [ 679.658203][T21748] netlink_deliver_tap+0x19d/0x1b0 [ 679.663318][T21748] netlink_broadcast_filtered+0xe60/0x12a0 [ 679.669153][T21748] genlmsg_multicast_netns+0x93/0xd0 [ 679.674447][T21748] nl80211_frame_tx_status+0x8fa/0xda0 [ 679.679931][T21748] ? __pfx_nl80211_frame_tx_status+0x10/0x10 [ 679.685924][T21748] ? do_raw_spin_unlock+0x13c/0x8b0 [ 679.691141][T21748] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 679.697072][T21748] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 679.703480][T21748] ? ieee80211_report_used_skb+0x1621/0x2470 [ 679.709503][T21748] ieee80211_report_used_skb+0x19eb/0x2470 [ 679.715329][T21748] ? __pfx_ieee80211_report_used_skb+0x10/0x10 [ 679.721499][T21748] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 679.726971][T21748] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 679.732879][T21748] ieee80211_free_txskb+0x24/0x40 [ 679.737906][T21748] ieee80211_do_stop+0x13d9/0x1f40 [ 679.743034][T21748] ? __ieee80211_stop_queue+0x1fe/0x460 [ 679.748595][T21748] ? _find_next_bit+0xec/0x120 [ 679.753379][T21748] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 679.758845][T21748] ? ieee80211_stop_vif_queues+0x15b/0x1a0 [ 679.764661][T21748] ? __pfx_ieee80211_stop_vif_queues+0x10/0x10 [ 679.770821][T21748] ? ieee80211_check_concurrent_iface+0x70e/0x7e0 [ 679.777252][T21748] ieee80211_if_change_type+0x4cd/0xad0 [ 679.782827][T21748] ieee80211_change_iface+0xd2/0x4f0 [ 679.788124][T21748] ? cfg80211_mlme_purge_registrations+0x1fa/0x230 [ 679.794649][T21748] cfg80211_change_iface+0x782/0xf30 [ 679.799970][T21748] cfg80211_wext_siwmode+0x1bb/0x290 [ 679.805272][T21748] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 679.811092][T21748] ? __pfx___mutex_lock+0x10/0x10 [ 679.816148][T21748] ? full_name_hash+0x93/0xe0 [ 679.820850][T21748] ioctl_standard_call+0xe3/0x290 [ 679.825901][T21748] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 679.831723][T21748] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 679.837551][T21748] wext_ioctl_dispatch+0x58e/0x640 [ 679.842673][T21748] ? __pfx_ioctl_standard_call+0x10/0x10 [ 679.848327][T21748] ? __pfx_ioctl_private_call+0x10/0x10 [ 679.853915][T21748] ? __pfx_wext_ioctl_dispatch+0x10/0x10 [ 679.859556][T21748] ? __might_fault+0xc6/0x120 [ 679.864250][T21748] wext_handle_ioctl+0x15f/0x270 [ 679.869199][T21748] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 679.874684][T21748] sock_ioctl+0x17f/0x8e0 [ 679.879033][T21748] ? __pfx_sock_ioctl+0x10/0x10 [ 679.883894][T21748] ? __fget_files+0x29/0x470 [ 679.888495][T21748] ? __fget_files+0x3f6/0x470 [ 679.893178][T21748] ? __fget_files+0x29/0x470 [ 679.897792][T21748] ? bpf_lsm_file_ioctl+0x9/0x10 [ 679.902734][T21748] ? security_file_ioctl+0x87/0xb0 [ 679.907859][T21748] ? __pfx_sock_ioctl+0x10/0x10 [ 679.912719][T21748] __se_sys_ioctl+0xfc/0x170 [ 679.917314][T21748] do_syscall_64+0xf3/0x230 [ 679.921823][T21748] ? clear_bhb_loop+0x35/0x90 [ 679.926516][T21748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.932408][T21748] RIP: 0033:0x7fcfbe97def9 [ 679.936816][T21748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.956427][T21748] RSP: 002b:00007fcfbf7c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 679.964848][T21748] RAX: ffffffffffffffda RBX: 00007fcfbeb35f80 RCX: 00007fcfbe97def9 [ 679.972818][T21748] RDX: 0000000020000000 RSI: 0000000000008b06 RDI: 0000000000000003 [ 679.980780][T21748] RBP: 00007fcfbe9f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 679.988746][T21748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.996742][T21748] R13: 0000000000000000 R14: 00007fcfbeb35f80 R15: 00007ffdf0990b98 [ 680.004725][T21748] [ 680.008049][T21748] Kernel Offset: disabled [ 680.012514][T21748] Rebooting in 86400 seconds..