last executing test programs: 3.006737762s ago: executing program 1 (id=630): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00'}) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x14, r0, 0x719, 0x0, 0x0, {0x34}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB="feaaee62", @ANYRES16=r0, @ANYBLOB="00042bbd7000fbdbdf250b000000080001007063690011000200303030303a30303a31302e300000000008000b0004000000"], 0x38}, 0x1, 0x0, 0x0, 0x440}, 0x200400a0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) write(r1, &(0x7f0000000000)="240000001a005fb75c2f084bf912b70002000000000000000000000008001e80ffffff00", 0x24) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001880)=ANY=[@ANYBLOB="1965b691952598f1eae712dc424138a35f3a6bc7", @ANYRES16=r2, @ANYBLOB="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"], 0x988}, 0x1, 0x0, 0x0, 0x8044000}, 0x8000045) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000600)={&(0x7f0000000400), 0xc, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x9, 0x0, 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0x1, 0x100, 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r4], 0xc63b9e35) 2.603524441s ago: executing program 0 (id=635): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f00000004c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x39f75329}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xbf40000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x4, 0x1, 0x0, 0xb, 0x3, 0x30, 0x8}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @ldst={0x3, 0x2, 0x3, 0xa, 0x2, 0xfffffffffffffff0, 0xfffffffffffffffc}], &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0xa4) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000900)=r3, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800140000000401a80004000800024004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x40c0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x28011, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r6, &(0x7f0000000e00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @dev}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@ip_retopts={{0x10, 0x0, 0x20}}], 0x10}}], 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) write$binfmt_script(r8, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r9, 0x10c, 0x8, 0x0, &(0x7f0000000080)) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5699cf6333934c17, 0x30, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x832, 0xffffffffffffffff, 0x0) 2.531097791s ago: executing program 4 (id=636): r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) 2.437495137s ago: executing program 0 (id=637): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf5, &(0x7f0000000000), &(0x7f0000000080)=0x4) 2.339661426s ago: executing program 4 (id=638): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="18000000040000000000000000000000289ca65c", @ANYRES32, @ANYBLOB], 0x18}], 0x1}, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) unshare(0x68040200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000)=0xa50, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc0000, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000240)={0x0, 0xb, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="34000000020101010000000000081a400000035c0840034000000000fe0f0000e6e53bd48479a2fdf2a00b00000000ab222dc84913ce6200004aa5", @ANYBLOB="d6704b7dba959b8ab67506397d857851c59d593ef5bde8ba02fec9f1d2a53ef6cbd06de99f82b068f3a46f8f8ace0733dca83aa22204bd71b6f54a700bd71adefa5f2f405084a7473bb220c95826e46b19a9aef490090a918546ba307266"], 0x34}, 0x1, 0x0, 0x0, 0x40001c4}, 0x20008080) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2.339076693s ago: executing program 0 (id=639): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="18000000040000000000000000000000289ca65c", @ANYRES32, @ANYBLOB], 0x18}], 0x1}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) unshare(0x68040200) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000)=0xa50, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc0000, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000240)={0x0, 0xb, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="34000000020101010000000000081a400000035c0840034000000000fe0f0000e6e53bd48479a2fdf2a00b00000000ab222dc84913ce6200004aa5", @ANYBLOB="d6704b7dba959b8ab67506397d857851c59d593ef5bde8ba02fec9f1d2a53ef6cbd06de99f82b068f3a46f8f8ace0733dca83aa22204bd71b6f54a700bd71adefa5f2f405084a7473bb220c95826e46b19a9aef490090a918546ba307266"], 0x34}, 0x1, 0x0, 0x0, 0x40001c4}, 0x20008080) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2.023055505s ago: executing program 1 (id=640): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r3 = socket(0x23, 0x5, 0x0) listen(r3, 0x0) accept$ax25(r3, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) socket(0x0, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000001000000000000000000000063010400000000009500000000000000bbf12fe423408b11ebcbe9265d07c51a8f3bbf413a1ef564456f9cea1e2f7d8559495b895fb1d238fe738d035e226a65d1c379cce1a80ca1419d173a4a9d1db2d324bf7c97519ccb571bf87b5f2150a5f2aefe9922767574742fa903145054cb4d3f281f6faf9bfdcc91c1b2adb37b2c38914a68253fdff415952376a859d5560b7308029c15b88cece5d17d4520e79ee872506ac50d0645fbc462"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x55) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x24008011) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES32=r7, @ANYRESHEX=r1, @ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES16=r2, @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r8, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r8, 0x0, 0xc, &(0x7f0000000000)=0xb, 0x4) setsockopt$inet_int(r8, 0x0, 0x7, &(0x7f0000000280)=0x800, 0x4) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x2d, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vcan0\x00'}) 1.332555257s ago: executing program 2 (id=643): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x0, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000000)={'syztnl1\x00', 0x0}) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg$unix(r0, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 1.33196296s ago: executing program 0 (id=644): ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x8000200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x8, 0x5, 0x0, 0x1, [@broadcast]}]}}}]}, 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.295020111s ago: executing program 4 (id=645): socket$igmp6(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x128, 0x13, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xe1, 0x8, "b7e835c5d120a3adcac5eaa11980f559255ece50965057e28e0b1865dc391fbe3709e1252fa92499c802af059c6507d0404f39eb61dcff2e538dc5888755f0391bb8bb191efafa59c90463660283f165f37b3201f454ce5f199f29d152af1bccdc4cec465e6c82c6243bc579022ee2453efb5becdb03b64cd77b55fb53414dbc0ce07db6bfd0b0086c337e6e264466f90ead4bb90cdb4161e7fec4a38c059397f3bfa02d33e258b2e5578123aa14f49a64e2a9d2cb8ce776b06b2eec941ccb25407780231d716a9e8410eb90a7190710a9115a488112be55f5a5ce6ae0"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x128}, 0x1, 0x0, 0x0, 0x4040}, 0xc000) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 1.157924548s ago: executing program 2 (id=646): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000001308000340000000000800024000000000080006400000000108000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r4 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000080)=0x2, 0x4) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000dc0)={0x70, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @broadcast, @random="c8384065698d", {}, @value}, 0x0, @val={0x8c, 0x18, {0x0, "c71454387838", @long="ccb2abdd8c733c5a7b0452c9015b1471"}}}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}]]}, 0x70}}, 0x0) 1.051819518s ago: executing program 1 (id=647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0xfffffff5}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}}, 0x0) 1.010867838s ago: executing program 3 (id=648): sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00'}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r7 = socket$inet(0x2, 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r7}, 0x20) r8 = accept4$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @private}, &(0x7f0000000540)=0x10, 0x80800) setsockopt$IP_VS_SO_SET_EDIT(r8, 0x0, 0x483, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000000300e50100000600000000206a90a53594ccb5d301ef40", @ANYRES32=r11, @ANYBLOB="20000100", @ANYRES32=r11, @ANYBLOB="01000000ffffffff00000000000000000000000086dd0000"], 0x38}}, 0x0) sendmsg$sock(r4, 0x0, 0x4000004) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000002300006900000008000300", @ANYRES32=0x0, @ANYBLOB="0500d20007000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4044) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000040), 0x4) r13 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r5) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="130825bd7000fedbdf250200000006040a004e200000000000000000000000000001140007000000000000000000000040000090b9bf1a00caf679d4456dfa00000114010900fe8800000000000000000000000001010000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe1f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) 984.498148ms ago: executing program 2 (id=649): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)={@ifindex, 0xffffffffffffffff, 0x9, 0xc}, 0x20) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x60, &(0x7f00000006c0)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0x64}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x44, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x44]}}]}]}]}, 0x44}}, 0x0) 931.723644ms ago: executing program 4 (id=650): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) ioctl$sock_netdev_private(r0, 0x8932, &(0x7f0000000180)="263472af3a") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000d80)={{0x3c, @multicast1, 0x4e21, 0x2, 'sh\x00', 0x1c, 0x9, 0xc}, {@multicast2, 0x4e24, 0x3, 0x1, 0x0, 0x400}}, 0x44) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f00000002c0)=[{0x6, 0x0, 0x8, 0xe8}, {0x6, 0x1, 0x9, 0x6}, {0x400, 0x5, 0x0, 0x2}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabcf99e33aaa386dd6012020000003a00fe8000000000010000000000000000bbff0200000000000000000000000000018600907800"/70], 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x4888, 0x9}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000040)="27050200590200000600002fb96dbcf706e10500000088641100114408000300b8bf4a31accb", 0x26}], 0x1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00'}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @multicast}) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000d40)={'wg1\x00'}) write$binfmt_aout(r2, &(0x7f0000000480)=ANY=[], 0x420) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(0xffffffffffffffff, 0x1) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) 931.146187ms ago: executing program 0 (id=651): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000044000000000006907864010102ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="cc00000090780000080a00000000000000001d12ac3272000000006f0000000000008000"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_group_source_req(r1, 0x0, 0x30, &(0x7f0000003d00)={0x0, {{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @multicast1}}}, 0x108) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x5, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x1a43) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x7, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x0, @dev, 'veth1_to_team\x00'}}, 0x1e) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'gre0\x00'}}, 0x1e) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f00000000c0)={0x18, 0x0, {0x2, @local, 'veth1_to_batadv\x00'}}, 0x1e) close(r6) write$binfmt_elf64(r4, &(0x7f0000001b80)=ANY=[], 0x7f8) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b705000000000000611074000000000004000000000000049500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) socket$nl_xfrm(0x10, 0x3, 0x6) 878.940781ms ago: executing program 1 (id=652): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @rand_addr=0x64010101}}}, &(0x7f0000000280)=0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="62416ad15355febec1"], 0x9) write$cgroup_devices(r3, &(0x7f0000000700)={'c', ' *:* ', 'r\x00'}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25OPTRT(r4, 0x89e7, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r5, 0xffffffffffffc000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x18, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x2}, {0x4}, {0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1d, 0x1, 0x0, 0x2, 0x0, 0x1}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 732.053454ms ago: executing program 2 (id=653): unshare(0x0) socket$inet6(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='GPL\x00', 0x3}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write(r2, &(0x7f0000003300)="ac", 0x1) write(r0, 0x0, 0x0) listen(0xffffffffffffffff, 0x200007) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x7, 0x10, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}], 0x20}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 706.559378ms ago: executing program 3 (id=654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0xfff5}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}}, 0x0) 651.326939ms ago: executing program 1 (id=655): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x145840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000005f0f11cf00751ea946a1c7d461128000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000005f0f11cf00751ea946a1c7d461128000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000077b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000080), &(0x7f0000000100)=r4}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1808000000000000bdfb970d18827e4c61dd46011f7d000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000bc0900000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1808000000000000bdfb970d18827e4c61dd46011f7d000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000bc0900000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'ipvlan1\x00', {'pim6reg\x00'}, 0x1}) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'ipvlan1\x00', {'pim6reg\x00'}, 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000540)=@newtaction={0x130, 0x30, 0x1, 0x0, 0x0, {}, [{0x11c, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x39}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x48, 0x5, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast1}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0x84, 0x1d, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x87c, 0xfffff47e, 0x6, 0xdea2, 0x4}, 0x30}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8000, 0x0, 0x1, 0x3, 0x8}, 0x14}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x3, 0x2, 0xffffffff}, 0x50}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x130}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast1, @private}}}}) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0x20) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000002c0)) (async) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000002c0)) socket$alg(0x26, 0x5, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="591f30ae5b4912c96d093f15984e7313a652c33749d5e74c26a035b0f838233d466454b7f6e8420cfee66039bfbb4dff", 0x30) accept$alg(r8, 0x0, 0x0) (async) r9 = accept$alg(r8, 0x0, 0x0) recvmmsg(r9, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)=""/49, 0x31}], 0x1}}], 0x1, 0x0, 0x0) (async) recvmmsg(r9, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)=""/49, 0x31}], 0x1}}], 0x1, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, r7, 0x0, 0x7e, &(0x7f0000000400)='/proc/sy\xf3/net\xafipv4/v^\x18sync_qlen_max\x000j\xaeF\xd7\xcb\"\xdbY\x121w\xc0\xcb\xb9\x15\x83\xcf\x01&8\x16\x88\xf8om\xe0s{i\xb0xBMw]x\v\x8e\x90^`Y\x941YG\xbcn)\x94\x93{t[\x01{N\x04\xf1|\xaf\x05`\x046\xaf\x83i\xb1\x88m\xfd\xfc\x02;`}V\x88\xa9a\xe0\x96\x896\x88\xcb\xa5\x97'}, 0x30) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) ioctl$sock_rose_SIOCRSCLRRT(r6, 0x89e4) 551.720964ms ago: executing program 3 (id=656): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x0, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000000)={'syztnl1\x00', 0x0}) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg$unix(r0, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 537.491359ms ago: executing program 4 (id=657): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x88}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x2e9}]}}}]}, 0x54}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x700, 0x700, 0x7f, 0x3, {{0xe, 0x4, 0x3, 0x8, 0x38, 0x64, 0x0, 0x4e, 0x4, 0x0, @broadcast, @local, {[@cipso={0x86, 0x22, 0x7ffffffffffffffc, [{0x0, 0x2}, {0x0, 0x9, "66ecfc185c898f"}, {0x0, 0x11, "e1c064acb807f419be229aefc9fae4"}]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000ac0)={0x4c, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="f4000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000003b00000008000300", @ANYRES32=0x0, @ANYBLOB="d800330040000000ff90801f42ffffffffffffffffffffffffff000000000301007206032503030303dd1fb32cae2bf99dc87a60d47aec103bbffea56b0df2c0c137be24242afc2fa14426f7c63874fb2e5806a90ccc719b9f850e62038c66a1a8c3d81caeb65ef8b3dd5164163408efc3435e758edfddedd9694377bf56b47882d43e39a6d8cd7d26f7f61482d14855e31c66d11419b2c30201072acdea7978a6a2c611b5877e373d90e906f86359e464912bd24aad692ac615d41ddd1304b4e50d038cded66bf0aa262c654132de9589"], 0xf4}}, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x22, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xd, 0x9, 0x1, 0xc, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x55}, @exit, @map_fd={0x18, 0x8, 0x1, 0x0, r6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @call={0x85, 0x0, 0x0, 0x9d}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x74cf, 0x100}, 0x10, 0x874d, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000001c0)=[{0x0, 0x2, 0x0, 0x5}], 0x10, 0x8001}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1b, &(0x7f0000000340)=@raw=[@jmp, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x38}}, @ringbuf_query, @jmp, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query, @btf_id], &(0x7f0000000440)='GPL\x00', 0x401, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000780), &(0x7f0000000980)=[{0x1, 0x1}, {0x5, 0x2, 0x6}, {0x0, 0x2, 0x0, 0x7}, {0x0, 0x3, 0x6}, {0x0, 0x1}, {0x0, 0x0, 0x5, 0x5}, {0x0, 0x3, 0x0, 0x8}], 0x10, 0x7}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r7}, 0x38) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000200001000000000000000000022000000000000000f9000008000100ac1414aa050016002f000000"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2c, r11, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x2c}}, 0x8000) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r13, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="0100000000000000000039000000080003004ef9847f9901a7f2eea2881428c4d59615e99e6b94943a21f3a76a", @ANYRES32=r15, @ANYBLOB="18005a801400018005000700000000000500060000000000"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 437.905141ms ago: executing program 3 (id=658): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116200000000008510000002000000850000000000000095000000000000009500a505ef7b154f"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000080), 0x10) (async) bind$llc(r4, &(0x7f0000000080), 0x10) listen(r4, 0x0) (async) listen(r4, 0x0) listen(r4, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) (async) socket$phonet(0x23, 0x2, 0x1) r5 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="98000000", @ANYRES16=r5, @ANYBLOB="000429bd7000fedbdf251a00000008000300", @ANYRES32=0x0, @ANYBLOB="1c002e8006000100060000000600010009000000060002000200000008000300", @ANYRES32=r3, @ANYBLOB="10002e800c0004000202aaaaaaaaaaaa08000300", @ANYRES32=r3, @ANYBLOB="0c000600020000000200000034002e8006000300a0aa0000060002000000000006000300a3aa0000060001000400000005000500010000000800060001000000a9f9cad2384a3da889cb8b2e2ab0e76c31348ac070427c889192948445e743ae4f17717c3cb9749d0ca5b2a818449bec4e2560d7672ebbbdfc77e1ac990f7b1d6ac7fe79da4c1daeef44c85251380b3c37ace2901389e4e08b6aeac141a5f53493074c80f1c0277caf1a9ca3156172f630883cba7895e750d9e4a1830a75e38c"], 0x98}, 0x1, 0x0, 0x0, 0x8000804}, 0x4044001) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000340)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r1) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r1) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600093582c137153e37080c188009ac0f000300", 0x33fe0}], 0x1}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in=@remote, @in=@remote}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000300)=0x9d) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) 388.188631ms ago: executing program 1 (id=659): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000080), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="850000003c000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x39) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000640)="18", &(0x7f0000000180)=""/109}, 0x20) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r8, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000003080)={0x29c, 0x23, 0x1, 0x0, 0x0, "", [@nested={0x255, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="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"]}]}, 0x29c}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 387.175108ms ago: executing program 2 (id=660): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000038000000000000000000000095"], &(0x7f0000000240)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002400090000e4ffffffffffff05"], 0x14}}, 0x0) (fail_nth: 3) 251.730699ms ago: executing program 2 (id=661): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000df0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000f80)=ANY=[@ANYBLOB="73000000000000000a004e220000f0fcfc0100000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000a004e2100000003ff0200000000000000000000000000014a3cfd75000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e23000001ff2001000000000000000000000000000205000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e23000000acfe8000000000000000000000000000bbf2ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000002ff0100000000000000000000000000017f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000a004e2100000008ff0100000000000000000000000000010200"/715], 0x390) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r2 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}, 0xd0010100}}, 0x80, 0x0}, 0x0) 98.393297ms ago: executing program 3 (id=662): pipe(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000140)=0x4) write$cgroup_subtree(r2, &(0x7f0000004a80)={[{0x0, 'freezer'}]}, 0x9) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000}) write$cgroup_type(r2, &(0x7f0000004a40), 0xfdef) 36.038445ms ago: executing program 0 (id=663): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001280)=[{{&(0x7f0000000100)={0xa, 0x0, 0x201, @remote, 0x7}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000140)="87", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000b80)='k', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) 1.904444ms ago: executing program 3 (id=664): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e21, 0x5, @remote, 0x8}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000080)="e88554b8ff70fde0e1bc83142a98d44fea529a87049d70a1fb1580a73258b6cd5dffab6159d0c10f2e61a1b85b37f0049f5e2040a33efdf8355ccd886147b952d07a6d6779f3d7fba99099af9b48780b83d26b629a7632eb1d0705326eaa37b7251c54905b451fac17f3f90d07d19e4a70540a92aac2e5b118e697d2867382e91112689e03c5c30acb653a455e398a6dae73efc90d2bb4b985286345201f45f8f9b8c74e9fc2d632d75c671cd8b38b7fca6f1f5215f7ab2a021fd222aeb1d6fe5d2dec18d256dff67ae555bfd5dd20de432c63ddfefae0cf4a7f5dcc5f169cafd6fee685c3", 0xe5}], 0x1, &(0x7f0000000280)=[@tclass={{0x14, 0x29, 0x43, 0x1}}, @tclass={{0x14, 0x29, 0x43, 0xc0}}, @dstopts={{0x30, 0x29, 0x37, {0x3b, 0x2, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x4}, @ra={0x5, 0x2, 0x3}, @pad1, @ra={0x5, 0x2, 0xca35}, @pad1]}}}, @dstopts={{0x190, 0x29, 0x37, {0x2e, 0x2e, '\x00', [@generic={0x1, 0xd8, "eaa3fc872246d081211eb04b03d78635bc2e6d243435445afca07d175f54d4423e3e8d5c42245837bfcec8f5d6892729c8095e183e22d4a157b9c71e1dd49189e8f2ec662f08ea93bbe00028483dd24a2f72311d5e47de21f701c3b85267f08e087dacb976f17c6df91fe15ebf50f907955a001252f1dbd122f73f7b0a4a3516512557761f39d398c09978a36c67ae7a688e1609590cd2467bdb4ae7bf73412b52453caef4094b1b6fd72f541a4188d987756581d2417a3bfc6fc78fc4c67e6d300474a608acc4ca11db8b652b8cc017da2592b278b1b530"}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x3, 0xa, 0x3, 0x6, [0x8, 0x5, 0x3, 0xa2a, 0x11]}}, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x20, {0x2, 0x6, 0x97, 0x8, [0x3, 0x7f, 0x0]}}, @calipso={0x7, 0x30, {0x0, 0xa, 0x9, 0x401, [0x67c, 0x2, 0x1, 0xb, 0x10000]}}]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x32, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x4}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xc0000}}, @dstopts={{0x20, 0x29, 0x37, {0x32, 0x0, '\x00', [@ra]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x3c, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7f}}], 0x298}, 0x804) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x8901, &(0x7f0000000440)={r3}) r4 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x50, 0x117, 0x4, 0xd4e5}], 0x18}, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0xf, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x8}, {&(0x7f0000000140)=""/9, 0x10062}, {&(0x7f0000000300)=""/225, 0x5b}, {&(0x7f0000000400)=""/28, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000000)=""/35, 0xffffffffffffffe0}}], 0x2, 0x0, &(0x7f0000008000)={0x0, 0x989680}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000c00000018000180140002006d6163767461703000000000000000000c000380040003"], 0x38}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9f66}) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r8, 0x0, 0x0, 0x4}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000380), 0x12) socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r10, 0x8916, &(0x7f00000002c0)={'wg1\x00', {0x2, 0x0, @broadcast}}) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000001300)={0x2880008, r6}) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r6) socket$inet_icmp_raw(0x2, 0x3, 0x1) 0s ago: executing program 4 (id=665): sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00'}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r7 = socket$inet(0x2, 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r7}, 0x20) r8 = accept4$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @private}, &(0x7f0000000540)=0x10, 0x80800) setsockopt$IP_VS_SO_SET_EDIT(r8, 0x0, 0x483, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000000300e50100000600000000206a90a53594ccb5d301ef40", @ANYRES32=r11, @ANYBLOB="20000100", @ANYRES32=r11, @ANYBLOB="01000000ffffffff00000000000000000000000086dd0000"], 0x38}}, 0x0) sendmsg$sock(r4, 0x0, 0x4000004) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000002300006900000008000300", @ANYRES32=0x0, @ANYBLOB="0500d20007000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4044) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000040), 0x4) r13 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r5) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="130825bd7000fedbdf250200000006040a004e200000000000000000000000000001140007000000000000000000000040000090b9bf1a00caf679d4456dfa00000114010900fe8800000000000000000000000001010000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe1f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.112' (ED25519) to the list of known hosts. [ 54.353706][ T5213] cgroup: Unknown subsys name 'net' [ 54.514136][ T5213] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.933092][ T5213] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.262844][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.272390][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.282772][ T5232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.289773][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.297852][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.306686][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.314212][ T5232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.322562][ T5242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.330782][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.336498][ T5241] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.338777][ T5232] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.347306][ T5241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.353133][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.359953][ T5241] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.366792][ T5232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.375140][ T5241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.382001][ T5232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.388201][ T5241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.395790][ T5232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.402458][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.408087][ T5242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.416130][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.424983][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.434922][ T4618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.438052][ T5232] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.445192][ T5241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.459684][ T5241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.464703][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.474259][ T5232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.481786][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.023812][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 59.078923][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 59.090508][ T5223] chnl_net:caif_netlink_parms(): no params data found [ 59.185412][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 59.308675][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 59.347677][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.355028][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.364272][ T5229] bridge_slave_0: entered allmulticast mode [ 59.371382][ T5229] bridge_slave_0: entered promiscuous mode [ 59.428779][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.435883][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.443637][ T5229] bridge_slave_1: entered allmulticast mode [ 59.450993][ T5229] bridge_slave_1: entered promiscuous mode [ 59.502207][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.509801][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.517293][ T5224] bridge_slave_0: entered allmulticast mode [ 59.524119][ T5224] bridge_slave_0: entered promiscuous mode [ 59.538797][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.545942][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.553286][ T5224] bridge_slave_1: entered allmulticast mode [ 59.560809][ T5224] bridge_slave_1: entered promiscuous mode [ 59.567891][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.575039][ T5223] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.582953][ T5223] bridge_slave_0: entered allmulticast mode [ 59.589890][ T5223] bridge_slave_0: entered promiscuous mode [ 59.606230][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.614410][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.621713][ T5226] bridge_slave_0: entered allmulticast mode [ 59.629347][ T5226] bridge_slave_0: entered promiscuous mode [ 59.662956][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.670939][ T5223] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.679095][ T5223] bridge_slave_1: entered allmulticast mode [ 59.685844][ T5223] bridge_slave_1: entered promiscuous mode [ 59.696250][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.706345][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.713640][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.721322][ T5226] bridge_slave_1: entered allmulticast mode [ 59.728731][ T5226] bridge_slave_1: entered promiscuous mode [ 59.753354][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.776293][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.819077][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.850931][ T5223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.875221][ T5229] team0: Port device team_slave_0 added [ 59.901171][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.908533][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.915841][ T5227] bridge_slave_0: entered allmulticast mode [ 59.923040][ T5227] bridge_slave_0: entered promiscuous mode [ 59.946360][ T5223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.970392][ T5229] team0: Port device team_slave_1 added [ 59.990885][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.003371][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.013063][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.020514][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.027883][ T5227] bridge_slave_1: entered allmulticast mode [ 60.034676][ T5227] bridge_slave_1: entered promiscuous mode [ 60.055104][ T5224] team0: Port device team_slave_0 added [ 60.064204][ T5224] team0: Port device team_slave_1 added [ 60.088698][ T5223] team0: Port device team_slave_0 added [ 60.143892][ T5223] team0: Port device team_slave_1 added [ 60.165291][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.188878][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.195863][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.222885][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.235517][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.242677][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.269251][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.282667][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.289799][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.316851][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.352133][ T5226] team0: Port device team_slave_0 added [ 60.361139][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.371274][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.378725][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.405147][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.428762][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.435728][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.462107][ T5223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.475879][ T5226] team0: Port device team_slave_1 added [ 60.507407][ T5227] team0: Port device team_slave_0 added [ 60.507694][ T5241] Bluetooth: hci0: command tx timeout [ 60.516795][ T54] Bluetooth: hci1: command tx timeout [ 60.533063][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.543300][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.569858][ T5223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.587309][ T54] Bluetooth: hci2: command tx timeout [ 60.587324][ T5241] Bluetooth: hci4: command tx timeout [ 60.597088][ T5241] Bluetooth: hci3: command tx timeout [ 60.623473][ T5227] team0: Port device team_slave_1 added [ 60.645403][ T5229] hsr_slave_0: entered promiscuous mode [ 60.653022][ T5229] hsr_slave_1: entered promiscuous mode [ 60.666725][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.674010][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.700356][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.744344][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.751517][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.778327][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.815043][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.822260][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.849108][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.877767][ T5224] hsr_slave_0: entered promiscuous mode [ 60.885338][ T5224] hsr_slave_1: entered promiscuous mode [ 60.892091][ T5224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.900204][ T5224] Cannot create hsr debugfs directory [ 60.912950][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.919968][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.946433][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.983081][ T5223] hsr_slave_0: entered promiscuous mode [ 60.989614][ T5223] hsr_slave_1: entered promiscuous mode [ 60.995746][ T5223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.004095][ T5223] Cannot create hsr debugfs directory [ 61.102271][ T5226] hsr_slave_0: entered promiscuous mode [ 61.109090][ T5226] hsr_slave_1: entered promiscuous mode [ 61.115124][ T5226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.122932][ T5226] Cannot create hsr debugfs directory [ 61.206404][ T5227] hsr_slave_0: entered promiscuous mode [ 61.212969][ T5227] hsr_slave_1: entered promiscuous mode [ 61.219586][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.227309][ T5227] Cannot create hsr debugfs directory [ 61.567552][ T5224] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.584149][ T5224] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.610662][ T5224] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.622183][ T5224] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.675172][ T5223] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.685090][ T5223] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.709493][ T5223] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.720907][ T5223] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.783625][ T5229] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.810201][ T5229] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.821631][ T5229] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.831432][ T5229] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.935271][ T5226] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.982678][ T5226] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.010095][ T5226] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.045524][ T5226] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.092191][ T5227] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.104103][ T5227] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.120604][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.143538][ T5227] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.173186][ T5227] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.203645][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.239781][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.281092][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.292033][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.299329][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.331370][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.350630][ T5280] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.357828][ T5280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.386435][ T5280] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.393626][ T5280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.444412][ T5275] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.451645][ T5275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.480282][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.536369][ T5275] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.543555][ T5275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.589557][ T5241] Bluetooth: hci0: command tx timeout [ 62.595008][ T5241] Bluetooth: hci1: command tx timeout [ 62.618495][ T5275] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.625604][ T5275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.667666][ T5241] Bluetooth: hci2: command tx timeout [ 62.672732][ T54] Bluetooth: hci3: command tx timeout [ 62.673075][ T5235] Bluetooth: hci4: command tx timeout [ 62.731064][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.785767][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.826544][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.859748][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.900030][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.926103][ T5279] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.933345][ T5279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.968070][ T5279] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.975165][ T5279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.988953][ T5279] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.996142][ T5279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.064062][ T5279] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.071459][ T5279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.164342][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.263346][ T5224] veth0_vlan: entered promiscuous mode [ 63.322380][ T5224] veth1_vlan: entered promiscuous mode [ 63.370101][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.452610][ T5223] veth0_vlan: entered promiscuous mode [ 63.515941][ T5223] veth1_vlan: entered promiscuous mode [ 63.541628][ T5224] veth0_macvtap: entered promiscuous mode [ 63.590254][ T5224] veth1_macvtap: entered promiscuous mode [ 63.613539][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.662645][ T5223] veth0_macvtap: entered promiscuous mode [ 63.684423][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.705139][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.732930][ T5223] veth1_macvtap: entered promiscuous mode [ 63.747794][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.782891][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.795756][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.808025][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.827704][ T5224] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.837647][ T5224] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.846369][ T5224] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.855130][ T5224] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.880830][ T5226] veth0_vlan: entered promiscuous mode [ 63.903700][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.914922][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.926349][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.945674][ T5226] veth1_vlan: entered promiscuous mode [ 63.988676][ T5223] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.998188][ T5223] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.006989][ T5223] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.015787][ T5223] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.073157][ T5227] veth0_vlan: entered promiscuous mode [ 64.137011][ T2523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.144823][ T5229] veth0_vlan: entered promiscuous mode [ 64.154318][ T2523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.175396][ T5226] veth0_macvtap: entered promiscuous mode [ 64.198016][ T5229] veth1_vlan: entered promiscuous mode [ 64.225140][ T5226] veth1_macvtap: entered promiscuous mode [ 64.245562][ T5227] veth1_vlan: entered promiscuous mode [ 64.308002][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.315869][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.357670][ T5227] veth0_macvtap: entered promiscuous mode [ 64.369684][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.383965][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.391213][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.401217][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.403475][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.421956][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.435390][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.458837][ T5229] veth0_macvtap: entered promiscuous mode [ 64.469389][ T5227] veth1_macvtap: entered promiscuous mode [ 64.480122][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.494065][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.504562][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.518513][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.531570][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.575938][ T5229] veth1_macvtap: entered promiscuous mode [ 64.584948][ T5226] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.596093][ T5226] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.608378][ T5226] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.617869][ T5226] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.646708][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.662995][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.672696][ T5235] Bluetooth: hci0: command tx timeout [ 64.680447][ T5241] Bluetooth: hci1: command tx timeout [ 64.692534][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.730868][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.747903][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.748836][ T5235] Bluetooth: hci3: command tx timeout [ 64.763916][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.763992][ T5241] Bluetooth: hci4: command tx timeout [ 64.774405][ T54] Bluetooth: hci2: command tx timeout [ 64.780756][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.795438][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.808304][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.848446][ T5309] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 64.849160][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.879795][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.893636][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.931425][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.943102][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.954297][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.966193][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.001607][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.017656][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.029344][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.041493][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.051787][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.062374][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.072588][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.083894][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.095058][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.108294][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.118981][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.130221][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.142496][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.153352][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.164172][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.174315][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.185215][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.198084][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.215040][ T5227] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.225405][ T5227] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.245825][ T5227] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.255744][ T5227] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.367671][ T5229] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.380594][ T5229] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.396937][ T5229] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.412660][ T5229] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.480209][ T2523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.497200][ T2523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.542782][ T5326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7'. [ 65.577383][ T5326] vlan2: entered promiscuous mode [ 65.582591][ T5326] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 65.595357][ T5326] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 65.651318][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.667757][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.850312][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.871998][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.898460][ T5333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 65.943167][ T5335] Zero length message leads to an empty skb [ 65.985362][ T2523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.998996][ T5337] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1'. [ 66.011154][ T2523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.164515][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.170744][ T5340] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.177120][ T2523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.206470][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.235285][ T5340] trusted_key: syz.3.11 sent an empty control message without MSG_MORE. [ 66.246021][ T2523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.291462][ T5345] Cannot find add_set index 0 as target [ 66.291569][ T5343] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11'. [ 66.732876][ T5362] ieee802154 phy0 wpan0: encryption failed: -90 [ 66.756690][ T5235] Bluetooth: hci0: command tx timeout [ 66.762148][ T5235] Bluetooth: hci1: command tx timeout [ 66.830083][ T5235] Bluetooth: hci3: command tx timeout [ 66.835553][ T5235] Bluetooth: hci2: command tx timeout [ 66.841093][ T54] Bluetooth: hci4: command tx timeout [ 66.959061][ T5368] netlink: 'syz.1.19': attribute type 1 has an invalid length. [ 67.005248][ T5368] netlink: 9348 bytes leftover after parsing attributes in process `syz.1.19'. [ 67.033226][ T5362] syz.2.17 (5362) used greatest stack depth: 18096 bytes left [ 67.106519][ T5374] netlink: 732 bytes leftover after parsing attributes in process `syz.4.20'. [ 67.150822][ T5374] netlink: 732 bytes leftover after parsing attributes in process `syz.4.20'. [ 67.196396][ T5374] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 67.318000][ T5384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21'. [ 67.386368][ T5384] vlan2: entered promiscuous mode [ 67.417077][ T5384] dummy0: entered promiscuous mode [ 67.716376][ T5395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27'. [ 67.716467][ T5401] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 68.110711][ T5416] netlink: 68 bytes leftover after parsing attributes in process `syz.4.33'. [ 68.345493][ T5427] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 68.444668][ T5435] FAULT_INJECTION: forcing a failure. [ 68.444668][ T5435] name failslab, interval 1, probability 0, space 0, times 1 [ 68.449219][ T5438] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 68.472600][ T5435] CPU: 0 UID: 0 PID: 5435 Comm: syz.0.40 Not tainted 6.10.0-syzkaller-12605-g8e0c0ec9b7dc #0 [ 68.482834][ T5435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 68.492924][ T5435] Call Trace: [ 68.496201][ T5435] [ 68.499128][ T5435] dump_stack_lvl+0x241/0x360 [ 68.503909][ T5435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.509121][ T5435] ? __pfx__printk+0x10/0x10 [ 68.513723][ T5435] should_fail_ex+0x3b0/0x4e0 [ 68.518492][ T5435] should_failslab+0xac/0x100 [ 68.523167][ T5435] ? sctp_add_bind_addr+0x89/0x3a0 [ 68.528275][ T5435] __kmalloc_cache_noprof+0x6c/0x2c0 [ 68.533568][ T5435] sctp_add_bind_addr+0x89/0x3a0 [ 68.538506][ T5435] sctp_copy_local_addr_list+0x311/0x500 [ 68.544139][ T5435] ? sctp_copy_local_addr_list+0xab/0x500 [ 68.549857][ T5435] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 68.556017][ T5435] ? sctp_v6_is_any+0x60/0x70 [ 68.560700][ T5435] sctp_bind_addr_copy+0xad/0x3b0 [ 68.565722][ T5435] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 68.572049][ T5435] sctp_connect_new_asoc+0x2f3/0x6c0 [ 68.577329][ T5435] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 68.583126][ T5435] ? sctp_sendmsg+0xbb9/0x3520 [ 68.587887][ T5435] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 68.593429][ T5435] ? security_sctp_bind_connect+0x90/0xb0 [ 68.599149][ T5435] sctp_sendmsg+0x219a/0x3520 [ 68.603835][ T5435] ? __pfx_sctp_sendmsg+0x10/0x10 [ 68.608860][ T5435] ? __pfx_aa_sk_perm+0x10/0x10 [ 68.613737][ T5435] ? inet_sendmsg+0x330/0x390 [ 68.618433][ T5435] __sock_sendmsg+0x1a6/0x270 [ 68.623111][ T5435] ____sys_sendmsg+0x525/0x7d0 [ 68.627967][ T5435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 68.633261][ T5435] __sys_sendmmsg+0x3b2/0x740 [ 68.637941][ T5435] ? __pfx___sys_sendmmsg+0x10/0x10 [ 68.643164][ T5435] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 68.649057][ T5435] ? ksys_write+0x23e/0x2c0 [ 68.653571][ T5435] ? __pfx_lock_release+0x10/0x10 [ 68.658695][ T5435] ? vfs_write+0x7c4/0xc90 [ 68.663120][ T5435] ? __mutex_unlock_slowpath+0x21d/0x750 [ 68.668750][ T5435] ? __pfx_vfs_write+0x10/0x10 [ 68.673577][ T5435] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 68.679554][ T5435] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 68.685881][ T5435] ? do_syscall_64+0x100/0x230 [ 68.690644][ T5435] __x64_sys_sendmmsg+0xa0/0xb0 [ 68.695495][ T5435] do_syscall_64+0xf3/0x230 [ 68.699991][ T5435] ? clear_bhb_loop+0x35/0x90 [ 68.704666][ T5435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.710564][ T5435] RIP: 0033:0x7f72af1773b9 [ 68.714976][ T5435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.734585][ T5435] RSP: 002b:00007f72affcc048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 68.743005][ T5435] RAX: ffffffffffffffda RBX: 00007f72af305f80 RCX: 00007f72af1773b9 [ 68.750976][ T5435] RDX: 0000000000000001 RSI: 0000000020001900 RDI: 0000000000000003 [ 68.758940][ T5435] RBP: 00007f72affcc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 68.766901][ T5435] R10: 000000000000c0c0 R11: 0000000000000246 R12: 0000000000000002 [ 68.774971][ T5435] R13: 000000000000000b R14: 00007f72af305f80 R15: 00007ffc07749b58 [ 68.782974][ T5435] [ 68.918179][ T5438] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.364802][ T5460] ieee802154 phy0 wpan0: encryption failed: -90 [ 70.035087][ T5481] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 70.584773][ T5503] Bluetooth: MGMT ver 1.23 [ 70.602290][ T5499] __nla_validate_parse: 9 callbacks suppressed [ 70.602312][ T5499] netlink: 120 bytes leftover after parsing attributes in process `syz.2.59'. [ 70.643998][ T5508] netlink: 152 bytes leftover after parsing attributes in process `syz.1.61'. [ 70.664319][ T5508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.61'. [ 70.904647][ T5522] netlink: 20 bytes leftover after parsing attributes in process `syz.0.67'. [ 71.187819][ T5535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.73'. [ 71.314411][ T5518] netlink: 32 bytes leftover after parsing attributes in process `syz.4.64'. [ 71.757904][ T5554] netlink: 152 bytes leftover after parsing attributes in process `syz.3.78'. [ 71.791341][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.806667][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.900012][ T5554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.78'. [ 72.427241][ T5581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.85'. [ 73.057105][ T5604] netlink: 68 bytes leftover after parsing attributes in process `syz.3.92'. [ 73.480318][ T5622] wireguard0: entered promiscuous mode [ 73.507610][ T5622] wireguard0: entered allmulticast mode [ 74.478323][ T5657] netlink: 'syz.3.110': attribute type 1 has an invalid length. [ 74.809523][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.820374][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.829149][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.837685][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.845529][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.855718][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.129787][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.325476][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.598549][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.928579][ T5694] x_tables: duplicate underflow at hook 3 [ 75.938507][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.136131][ T5668] chnl_net:caif_netlink_parms(): no params data found [ 76.206939][ T5716] __nla_validate_parse: 7 callbacks suppressed [ 76.206959][ T5716] netlink: 60 bytes leftover after parsing attributes in process `syz.1.123'. [ 76.316131][ T4680] udevd[4680]: worker [5225] terminated by signal 33 (Unknown signal 33) [ 76.341256][ T4680] udevd[4680]: worker [5225] failed while handling '/devices/netdevsim4/net/eth1' [ 76.649919][ T5668] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.677129][ T5668] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.684417][ T5668] bridge_slave_0: entered allmulticast mode [ 76.725919][ T5668] bridge_slave_0: entered promiscuous mode [ 76.769490][ T5668] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.795603][ T5668] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.832929][ T5668] bridge_slave_1: entered allmulticast mode [ 76.850973][ T5668] bridge_slave_1: entered promiscuous mode [ 76.881564][ T35] bridge_slave_1: left allmulticast mode [ 76.904430][ T35] bridge_slave_1: left promiscuous mode [ 76.912753][ T5235] Bluetooth: hci4: command tx timeout [ 76.940630][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.027730][ T35] bridge_slave_0: left allmulticast mode [ 77.035498][ T35] bridge_slave_0: left promiscuous mode [ 77.057022][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.347562][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.357393][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.362145][ T5740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.129'. [ 77.374773][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.411878][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.421631][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.429124][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.574738][ T5732] netlink: 32 bytes leftover after parsing attributes in process `syz.0.127'. [ 77.853362][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.866103][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.880894][ T35] bond0 (unregistering): Released all slaves [ 77.922526][ T5668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.006393][ T5668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.281179][ T5668] team0: Port device team_slave_0 added [ 78.308427][ T5754] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 78.330138][ T5754] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 78.368803][ T5668] team0: Port device team_slave_1 added [ 78.575728][ T5668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.584690][ T5668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.618988][ T5668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.657334][ T5775] sch_tbf: burst 65535 is lower than device lo mtu (65550) ! [ 78.723775][ T5668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.747272][ T5668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.805678][ T5668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.987125][ T5235] Bluetooth: hci4: command tx timeout [ 79.021084][ T35] hsr_slave_0: left promiscuous mode [ 79.028782][ T35] hsr_slave_1: left promiscuous mode [ 79.037516][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.045101][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.074202][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.084325][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.111089][ T35] veth1_macvtap: left promiscuous mode [ 79.120125][ T35] veth0_macvtap: left promiscuous mode [ 79.125720][ T35] veth1_vlan: left promiscuous mode [ 79.132064][ T35] veth0_vlan: left promiscuous mode [ 79.479920][ T5235] Bluetooth: hci3: command tx timeout [ 79.580374][ T35] team0 (unregistering): Port device team_slave_1 removed [ 79.626087][ T35] team0 (unregistering): Port device team_slave_0 removed [ 80.035812][ T5801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 80.260628][ T5803] netlink: 388 bytes leftover after parsing attributes in process `syz.3.140'. [ 80.368296][ T5668] hsr_slave_0: entered promiscuous mode [ 80.386919][ T5668] hsr_slave_1: entered promiscuous mode [ 80.503351][ T5808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'. [ 80.702995][ T5742] chnl_net:caif_netlink_parms(): no params data found [ 81.069254][ T5235] Bluetooth: hci4: command tx timeout [ 81.164748][ T5831] netlink: 'syz.2.143': attribute type 1 has an invalid length. [ 81.181812][ T5838] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 81.195692][ T5828] netlink: 'syz.2.143': attribute type 10 has an invalid length. [ 81.207744][ T5831] netlink: 616 bytes leftover after parsing attributes in process `syz.2.143'. [ 81.277394][ T5828] team0: Failed to send options change via netlink (err -105) [ 81.299843][ T5828] team0: Port device netdevsim0 added [ 81.420876][ T9] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 81.444702][ T5842] netlink: 'syz.2.143': attribute type 10 has an invalid length. [ 81.472185][ T5842] team0: Failed to send options change via netlink (err -105) [ 81.481180][ T5842] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 81.491441][ T5842] team0: Port device netdevsim0 removed [ 81.508628][ T5842] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 81.525895][ T5854] FAULT_INJECTION: forcing a failure. [ 81.525895][ T5854] name failslab, interval 1, probability 0, space 0, times 0 [ 81.547564][ T5854] CPU: 1 UID: 0 PID: 5854 Comm: syz.3.148 Not tainted 6.10.0-syzkaller-12605-g8e0c0ec9b7dc #0 [ 81.556730][ T5235] Bluetooth: hci3: command tx timeout [ 81.557829][ T5854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 81.573271][ T5854] Call Trace: [ 81.576570][ T5854] [ 81.579528][ T5854] dump_stack_lvl+0x241/0x360 [ 81.584236][ T5854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.589643][ T5854] ? __pfx__printk+0x10/0x10 [ 81.594265][ T5854] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 81.599752][ T5854] ? __pfx___might_resched+0x10/0x10 [ 81.605079][ T5854] should_fail_ex+0x3b0/0x4e0 [ 81.609800][ T5854] should_failslab+0xac/0x100 [ 81.614508][ T5854] ? sctp_association_new+0x8a/0x23f0 [ 81.619908][ T5854] __kmalloc_cache_noprof+0x6c/0x2c0 [ 81.625218][ T5854] ? __asan_memcpy+0x40/0x70 [ 81.629829][ T5854] sctp_association_new+0x8a/0x23f0 [ 81.635050][ T5854] ? sctp_do_bind+0x679/0x950 [ 81.639765][ T5854] ? __ipv6_addr_type+0x112/0x2f0 [ 81.644817][ T5854] sctp_connect_new_asoc+0x2d8/0x6c0 [ 81.650127][ T5854] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 81.655957][ T5854] ? sctp_sendmsg+0xbb9/0x3520 [ 81.660750][ T5854] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 81.666331][ T5854] ? security_sctp_bind_connect+0x90/0xb0 [ 81.672085][ T5854] sctp_sendmsg+0x219a/0x3520 [ 81.676811][ T5854] ? __pfx_sctp_sendmsg+0x10/0x10 [ 81.681866][ T5854] ? __pfx_aa_sk_perm+0x10/0x10 [ 81.686841][ T5854] ? inet_sendmsg+0x330/0x390 [ 81.691542][ T5854] __sock_sendmsg+0x1a6/0x270 [ 81.696219][ T5854] ____sys_sendmsg+0x525/0x7d0 [ 81.700988][ T5854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.706293][ T5854] __sys_sendmmsg+0x3b2/0x740 [ 81.710985][ T5854] ? __pfx___sys_sendmmsg+0x10/0x10 [ 81.716227][ T5854] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 81.722122][ T5854] ? ksys_write+0x23e/0x2c0 [ 81.726623][ T5854] ? __pfx_lock_release+0x10/0x10 [ 81.731654][ T5854] ? vfs_write+0x7c4/0xc90 [ 81.736099][ T5854] ? __mutex_unlock_slowpath+0x21d/0x750 [ 81.741767][ T5854] ? __pfx_vfs_write+0x10/0x10 [ 81.746590][ T5854] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 81.752605][ T5854] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.758963][ T5854] ? do_syscall_64+0x100/0x230 [ 81.763752][ T5854] __x64_sys_sendmmsg+0xa0/0xb0 [ 81.768636][ T5854] do_syscall_64+0xf3/0x230 [ 81.773174][ T5854] ? clear_bhb_loop+0x35/0x90 [ 81.777882][ T5854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.783803][ T5854] RIP: 0033:0x7fae883773b9 [ 81.788246][ T5854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.807873][ T5854] RSP: 002b:00007fae89107048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 81.816404][ T5854] RAX: ffffffffffffffda RBX: 00007fae88505f80 RCX: 00007fae883773b9 [ 81.824397][ T5854] RDX: 0000000000000002 RSI: 0000000020001280 RDI: 0000000000000003 [ 81.832390][ T5854] RBP: 00007fae891070a0 R08: 0000000000000000 R09: 0000000000000000 [ 81.840377][ T5854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.848339][ T5854] R13: 000000000000000b R14: 00007fae88505f80 R15: 00007ffc37602878 [ 81.856317][ T5854] [ 81.891822][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.909875][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.920119][ T5742] bridge_slave_0: entered allmulticast mode [ 81.945063][ T5742] bridge_slave_0: entered promiscuous mode [ 81.950031][ T5863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.151'. [ 82.027911][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.045636][ T942] cfg80211: failed to load regulatory.db [ 82.066849][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.074118][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.103296][ T5742] bridge_slave_1: entered allmulticast mode [ 82.128112][ T5742] bridge_slave_1: entered promiscuous mode [ 82.274614][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.374791][ T5873] netlink: 36 bytes leftover after parsing attributes in process `syz.2.154'. [ 82.379529][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.458734][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.611693][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.667999][ T5742] team0: Port device team_slave_0 added [ 82.727979][ T5742] team0: Port device team_slave_1 added [ 82.823071][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.934168][ T5871] netlink: 32 bytes leftover after parsing attributes in process `syz.0.153'. [ 82.985431][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.005446][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.078340][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.139772][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.157062][ T5235] Bluetooth: hci4: command tx timeout [ 83.297364][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.313785][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.333456][ T5896] netlink: 'syz.3.157': attribute type 1 has an invalid length. [ 83.348044][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.348119][ T5896] netlink: 616 bytes leftover after parsing attributes in process `syz.3.157'. [ 83.371859][ T5893] netlink: 'syz.3.157': attribute type 10 has an invalid length. [ 83.401813][ T5893] team0: Failed to send options change via netlink (err -105) [ 83.409638][ T5893] team0: Port device netdevsim0 added [ 83.434944][ T5668] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.447819][ T5899] netlink: 'syz.2.158': attribute type 1 has an invalid length. [ 83.463928][ T5899] netlink: 616 bytes leftover after parsing attributes in process `syz.2.158'. [ 83.482496][ T5900] netlink: 'syz.3.157': attribute type 10 has an invalid length. [ 83.493501][ T5900] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 83.516463][ T5900] team0: Failed to send options change via netlink (err -105) [ 83.524753][ T5900] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 83.537063][ T5900] team0: Port device netdevsim0 removed [ 83.545050][ T5900] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 83.554626][ T5898] netlink: 'syz.2.158': attribute type 10 has an invalid length. [ 83.599561][ T5898] bond0: (slave netdevsim0): Releasing backup interface [ 83.623996][ T5898] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 83.633848][ T5898] team0: Failed to send options change via netlink (err -105) [ 83.642737][ T5235] Bluetooth: hci3: command tx timeout [ 83.642975][ T5898] team0: Port device netdevsim0 added [ 83.656999][ T5668] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.674905][ T5668] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.738488][ T5902] netlink: 'syz.2.158': attribute type 10 has an invalid length. [ 83.756285][ T5902] team0: Failed to send options change via netlink (err -105) [ 83.765444][ T5902] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 83.779986][ T5902] team0: Port device netdevsim0 removed [ 83.789080][ T5902] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 83.802652][ T5668] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.841926][ T5742] hsr_slave_0: entered promiscuous mode [ 83.854729][ T5742] hsr_slave_1: entered promiscuous mode [ 83.879516][ T5742] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.902849][ T5742] Cannot create hsr debugfs directory [ 83.930581][ T5913] FAULT_INJECTION: forcing a failure. [ 83.930581][ T5913] name failslab, interval 1, probability 0, space 0, times 0 [ 83.944276][ T5913] CPU: 0 UID: 0 PID: 5913 Comm: syz.2.160 Not tainted 6.10.0-syzkaller-12605-g8e0c0ec9b7dc #0 [ 83.954815][ T5913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 83.965057][ T5913] Call Trace: [ 83.968353][ T5913] [ 83.971283][ T5913] dump_stack_lvl+0x241/0x360 [ 83.975962][ T5913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.981162][ T5913] ? __pfx__printk+0x10/0x10 [ 83.985760][ T5913] should_fail_ex+0x3b0/0x4e0 [ 83.990439][ T5913] should_failslab+0xac/0x100 [ 83.995116][ T5913] ? sctp_add_bind_addr+0x89/0x3a0 [ 84.000221][ T5913] __kmalloc_cache_noprof+0x6c/0x2c0 [ 84.005505][ T5913] sctp_add_bind_addr+0x89/0x3a0 [ 84.010442][ T5913] sctp_copy_local_addr_list+0x311/0x500 [ 84.016079][ T5913] ? sctp_copy_local_addr_list+0xab/0x500 [ 84.021794][ T5913] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 84.027980][ T5913] ? sctp_v6_is_any+0x60/0x70 [ 84.032661][ T5913] sctp_bind_addr_copy+0xad/0x3b0 [ 84.037683][ T5913] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 84.044008][ T5913] sctp_connect_new_asoc+0x2f3/0x6c0 [ 84.049296][ T5913] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 84.055095][ T5913] ? sctp_sendmsg+0xbb9/0x3520 [ 84.059857][ T5913] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 84.065402][ T5913] ? security_sctp_bind_connect+0x90/0xb0 [ 84.071124][ T5913] sctp_sendmsg+0x219a/0x3520 [ 84.075817][ T5913] ? __pfx_sctp_sendmsg+0x10/0x10 [ 84.080846][ T5913] ? __pfx_aa_sk_perm+0x10/0x10 [ 84.086220][ T5913] ? inet_sendmsg+0x330/0x390 [ 84.090941][ T5913] __sock_sendmsg+0x1a6/0x270 [ 84.095615][ T5913] ____sys_sendmsg+0x525/0x7d0 [ 84.100392][ T5913] ? __pfx_____sys_sendmsg+0x10/0x10 [ 84.105859][ T5913] __sys_sendmmsg+0x3b2/0x740 [ 84.110570][ T5913] ? __pfx___sys_sendmmsg+0x10/0x10 [ 84.115815][ T5913] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 84.121728][ T5913] ? ksys_write+0x23e/0x2c0 [ 84.126238][ T5913] ? __pfx_lock_release+0x10/0x10 [ 84.131273][ T5913] ? vfs_write+0x7c4/0xc90 [ 84.135698][ T5913] ? __mutex_unlock_slowpath+0x21d/0x750 [ 84.141326][ T5913] ? __pfx_vfs_write+0x10/0x10 [ 84.146107][ T5913] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 84.152084][ T5913] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 84.158412][ T5913] ? do_syscall_64+0x100/0x230 [ 84.163217][ T5913] __x64_sys_sendmmsg+0xa0/0xb0 [ 84.168089][ T5913] do_syscall_64+0xf3/0x230 [ 84.172610][ T5913] ? clear_bhb_loop+0x35/0x90 [ 84.177309][ T5913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.183212][ T5913] RIP: 0033:0x7f918fb773b9 [ 84.187626][ T5913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.207228][ T5913] RSP: 002b:00007f9190911048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 84.215644][ T5913] RAX: ffffffffffffffda RBX: 00007f918fd05f80 RCX: 00007f918fb773b9 [ 84.223607][ T5913] RDX: 0000000000000001 RSI: 0000000020001900 RDI: 0000000000000003 [ 84.231569][ T5913] RBP: 00007f91909110a0 R08: 0000000000000000 R09: 0000000000000000 [ 84.239649][ T5913] R10: 000000000000c0c0 R11: 0000000000000246 R12: 0000000000000002 [ 84.247805][ T5913] R13: 000000000000000b R14: 00007f918fd05f80 R15: 00007ffe79c756a8 [ 84.255787][ T5913] [ 84.519200][ T5922] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 84.756942][ T35] bridge_slave_1: left allmulticast mode [ 84.767163][ T35] bridge_slave_1: left promiscuous mode [ 84.780664][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.799447][ T5934] netlink: 156 bytes leftover after parsing attributes in process `syz.3.163'. [ 84.813430][ T35] bridge_slave_0: left allmulticast mode [ 84.820227][ T35] bridge_slave_0: left promiscuous mode [ 84.831680][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.951398][ T5937] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 85.269374][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.284633][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.296484][ T35] bond0 (unregistering): Released all slaves [ 85.336709][ T5939] netlink: 'syz.0.164': attribute type 10 has an invalid length. [ 85.395137][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.413630][ T5939] bond0: (slave team0): Enslaving as an active interface with an up link [ 85.426046][ T5941] bond0: (slave team0): Releasing backup interface [ 85.436390][ T5941] bridge0: port 3(team0) entered blocking state [ 85.446531][ T5941] bridge0: port 3(team0) entered disabled state [ 85.453174][ T5941] team0: entered allmulticast mode [ 85.458787][ T5941] team_slave_0: entered allmulticast mode [ 85.464529][ T5941] team_slave_1: entered allmulticast mode [ 85.473429][ T5941] team0: entered promiscuous mode [ 85.480412][ T5941] team_slave_0: entered promiscuous mode [ 85.486288][ T5941] team_slave_1: entered promiscuous mode [ 85.714656][ T5235] Bluetooth: hci3: command tx timeout [ 86.028014][ T5961] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.169'. [ 86.059599][ T35] hsr_slave_0: left promiscuous mode [ 86.081006][ T35] hsr_slave_1: left promiscuous mode [ 86.091424][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.109168][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.127083][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.134545][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.199346][ T35] veth1_macvtap: left promiscuous mode [ 86.204949][ T35] veth0_macvtap: left promiscuous mode [ 86.211374][ T35] veth1_vlan: left promiscuous mode [ 86.216806][ T35] veth0_vlan: left promiscuous mode [ 86.796352][ T5988] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 86.899330][ T35] team0 (unregistering): Port device team_slave_1 removed [ 86.963417][ T35] team0 (unregistering): Port device team_slave_0 removed [ 87.220405][ T5996] validate_nla: 1 callbacks suppressed [ 87.220424][ T5996] netlink: 'syz.3.174': attribute type 1 has an invalid length. [ 87.235212][ T5996] netlink: 616 bytes leftover after parsing attributes in process `syz.3.174'. [ 87.382861][ T5995] netlink: 'syz.3.174': attribute type 10 has an invalid length. [ 87.407803][ T5995] bond0: (slave netdevsim0): Releasing backup interface [ 87.424570][ T5995] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 87.434044][ T5995] team0: Failed to send options change via netlink (err -105) [ 87.441713][ T5995] team0: Port device netdevsim0 added [ 87.449758][ T5997] netlink: 'syz.3.174': attribute type 10 has an invalid length. [ 87.471583][ T5997] team0: Failed to send options change via netlink (err -105) [ 87.481215][ T5997] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 87.491304][ T5997] team0: Port device netdevsim0 removed [ 87.499372][ T5997] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 87.644428][ T5668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.738509][ T5668] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.781842][ T6003] netlink: 'syz.3.176': attribute type 10 has an invalid length. [ 87.850448][ T6003] bond0: (slave netdevsim0): Releasing backup interface [ 87.884977][ T6005] netlink: 'syz.3.176': attribute type 1 has an invalid length. [ 87.890150][ T6003] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 87.893237][ T6005] netlink: 616 bytes leftover after parsing attributes in process `syz.3.176'. [ 87.923844][ T6003] team0: Failed to send options change via netlink (err -105) [ 87.953796][ T6003] team0: Port device netdevsim0 added [ 87.981929][ T6015] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 87.995643][ T6012] netlink: 'syz.3.176': attribute type 10 has an invalid length. [ 88.042780][ T6012] team0: Failed to send options change via netlink (err -105) [ 88.073670][ T6012] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 88.084101][ T6012] team0: Port device netdevsim0 removed [ 88.099292][ T6012] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 88.110742][ T942] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.118522][ T942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.211857][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.219066][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.322288][ T5742] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.345892][ T6029] netlink: 156 bytes leftover after parsing attributes in process `syz.0.182'. [ 88.346028][ T5742] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.463301][ T5742] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.495034][ T5742] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.510257][ T6029] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 88.778270][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.853908][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.895346][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.902581][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.941303][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.948528][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.064828][ T5668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.269777][ T6068] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:0 [ 89.521069][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.693743][ T5742] veth0_vlan: entered promiscuous mode [ 89.785305][ T5742] veth1_vlan: entered promiscuous mode [ 89.927719][ T5668] veth0_vlan: entered promiscuous mode [ 89.959161][ T5668] veth1_vlan: entered promiscuous mode [ 89.970967][ T5742] veth0_macvtap: entered promiscuous mode [ 89.985743][ T5742] veth1_macvtap: entered promiscuous mode [ 90.067546][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.091085][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.106763][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.121089][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.134949][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.147184][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.162272][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.164519][ T6059] netlink: 32 bytes leftover after parsing attributes in process `syz.2.184'. [ 90.174354][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.191822][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.203133][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.214600][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.227803][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.238604][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.251390][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.301523][ T5668] veth0_macvtap: entered promiscuous mode [ 90.356133][ T5742] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.376097][ T5742] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.392409][ T5742] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.401551][ T5742] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.514971][ T5668] veth1_macvtap: entered promiscuous mode [ 90.525551][ T6099] netlink: 'syz.0.191': attribute type 1 has an invalid length. [ 90.558071][ T6099] netlink: 616 bytes leftover after parsing attributes in process `syz.0.191'. [ 90.584632][ T6096] netlink: 'syz.0.191': attribute type 10 has an invalid length. [ 90.641271][ T6096] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 90.651460][ T6096] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 90.665560][ T6108] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:0 [ 90.677100][ T6096] team0: Failed to send options change via netlink (err -105) [ 90.684601][ T6096] team0: Port device netdevsim0 added [ 90.716278][ T5280] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 90.742115][ T6103] netlink: 'syz.0.191': attribute type 10 has an invalid length. [ 90.765230][ T6103] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 90.776288][ T6103] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 90.796360][ T6103] team0: Failed to send options change via netlink (err -105) [ 90.804854][ T6103] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 90.831015][ T6103] team0: Port device netdevsim0 removed [ 90.841389][ T6103] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 90.876512][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.890215][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.902490][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.913522][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.924610][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.935952][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.946535][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.958088][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.971223][ T5668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.012220][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.027786][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.046665][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.057889][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.068517][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.091807][ T6120] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 91.091988][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.116226][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.128135][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.139788][ T5668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.183128][ T5668] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.194578][ T5668] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.203757][ T5668] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.213057][ T5668] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.329328][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.349489][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.408508][ T5698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.430430][ T5698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.471231][ T5698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.497509][ T5698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.603411][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.648228][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.239069][ T6158] netlink: 'syz.4.205': attribute type 10 has an invalid length. [ 92.262036][ T6159] netlink: 'syz.4.205': attribute type 1 has an invalid length. [ 92.287157][ T6159] netlink: 616 bytes leftover after parsing attributes in process `syz.4.205'. [ 92.320476][ T6158] team0: Failed to send options change via netlink (err -105) [ 92.330682][ T6168] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:0 [ 92.343435][ T6158] team0: Port device netdevsim0 added [ 92.388572][ T8] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 92.420065][ T6167] netlink: 'syz.4.205': attribute type 10 has an invalid length. [ 92.479217][ T6167] team0: Failed to send options change via netlink (err -105) [ 92.497468][ T6167] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 92.527900][ T6167] team0: Port device netdevsim0 removed [ 92.563570][ T6167] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 92.852471][ T6152] netlink: 32 bytes leftover after parsing attributes in process `syz.0.202'. [ 93.281517][ T6177] netlink: 32 bytes leftover after parsing attributes in process `syz.1.208'. [ 93.752475][ T6215] netlink: 'syz.3.220': attribute type 10 has an invalid length. [ 93.817789][ T6220] netlink: 'syz.3.220': attribute type 1 has an invalid length. [ 93.826880][ T6215] bond0: (slave netdevsim0): Releasing backup interface [ 93.843256][ T6215] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 93.854023][ T6220] netlink: 616 bytes leftover after parsing attributes in process `syz.3.220'. [ 93.854918][ T6215] team0: Failed to send options change via netlink (err -105) [ 93.885047][ T6215] team0: Port device netdevsim0 added [ 93.964366][ T6228] netlink: 'syz.3.220': attribute type 10 has an invalid length. [ 93.988912][ T6228] team0: Failed to send options change via netlink (err -105) [ 94.001124][ T6228] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 94.016052][ T6228] team0: Port device netdevsim0 removed [ 94.027196][ T6228] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 94.537559][ T6250] netlink: 32 bytes leftover after parsing attributes in process `syz.0.231'. [ 94.628631][ T6236] netlink: 32 bytes leftover after parsing attributes in process `syz.1.226'. [ 94.651125][ T6259] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 95.202955][ T6273] netlink: 'syz.4.237': attribute type 10 has an invalid length. [ 95.239076][ T6273] bond0: (slave netdevsim0): Releasing backup interface [ 95.258166][ T6273] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 95.272142][ T6277] netlink: 'syz.4.237': attribute type 1 has an invalid length. [ 95.281519][ T6273] team0: Failed to send options change via netlink (err -105) [ 95.291945][ T6279] netlink: 'syz.1.238': attribute type 1 has an invalid length. [ 95.299900][ T6277] netlink: 616 bytes leftover after parsing attributes in process `syz.4.237'. [ 95.311206][ T6279] netlink: 616 bytes leftover after parsing attributes in process `syz.1.238'. [ 95.318721][ T6273] team0: Port device netdevsim0 added [ 95.344869][ T6274] netlink: 'syz.1.238': attribute type 10 has an invalid length. [ 95.371879][ T6274] team0: Failed to send options change via netlink (err -105) [ 95.391053][ T6274] team0: Port device netdevsim0 added [ 95.437203][ T6282] team0: Failed to send options change via netlink (err -105) [ 95.471263][ T6282] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 95.492795][ T6282] team0: Port device netdevsim0 removed [ 95.504989][ T6282] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 95.523841][ T6283] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 95.550367][ T6283] team0: Failed to send options change via netlink (err -105) [ 95.560489][ T6283] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 95.572051][ T6290] netlink: 616 bytes leftover after parsing attributes in process `syz.0.241'. [ 95.583205][ T6283] team0: Port device netdevsim0 removed [ 95.595637][ T6283] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 95.632684][ T6287] bond0: (slave netdevsim0): Releasing backup interface [ 95.669294][ T6287] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 95.684999][ T6287] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 95.693664][ T6287] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 95.703900][ T6287] team0: Failed to send options change via netlink (err -105) [ 95.714522][ T6287] team0: Port device netdevsim0 added [ 95.757070][ T6291] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 95.764753][ T6291] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 95.786808][ T6291] team0: Failed to send options change via netlink (err -105) [ 95.794461][ T6291] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 95.828215][ T6291] team0: Port device netdevsim0 removed [ 95.864283][ T6291] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 96.156987][ T6311] bond0: (slave netdevsim0): Releasing backup interface [ 96.158380][ T6315] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 96.180208][ T6311] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 96.202910][ T6311] team0: Failed to send options change via netlink (err -105) [ 96.216968][ T6319] netlink: 616 bytes leftover after parsing attributes in process `syz.4.250'. [ 96.226851][ T6311] team0: Port device netdevsim0 added [ 96.267570][ T54] Bluetooth: hci3: command 0x0405 tx timeout [ 96.280277][ T6311] team0: Failed to send options change via netlink (err -105) [ 96.290402][ T6311] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 96.302741][ T6311] team0: Port device netdevsim0 removed [ 96.312500][ T6311] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 96.759236][ T6334] bond0: (slave netdevsim0): Releasing backup interface [ 96.806373][ T6334] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 96.820826][ T6334] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 96.833694][ T6334] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 96.851526][ T6334] team0: Failed to send options change via netlink (err -105) [ 96.863987][ T6334] team0: Port device netdevsim0 added [ 97.027490][ T6352] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 97.043665][ T6352] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 97.054796][ T6352] team0: Failed to send options change via netlink (err -105) [ 97.066157][ T6352] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 97.095394][ T6352] team0: Port device netdevsim0 removed [ 97.113834][ T6352] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 97.417807][ T6365] validate_nla: 11 callbacks suppressed [ 97.417829][ T6365] netlink: 'syz.0.264': attribute type 1 has an invalid length. [ 97.457533][ T6369] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 98.030626][ T6396] FAULT_INJECTION: forcing a failure. [ 98.030626][ T6396] name failslab, interval 1, probability 0, space 0, times 0 [ 98.049763][ T6396] CPU: 0 UID: 0 PID: 6396 Comm: syz.3.273 Not tainted 6.10.0-syzkaller-12605-g8e0c0ec9b7dc #0 [ 98.060050][ T6396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 98.070219][ T6396] Call Trace: [ 98.073522][ T6396] [ 98.076471][ T6396] dump_stack_lvl+0x241/0x360 [ 98.081165][ T6396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.086409][ T6396] ? __pfx__printk+0x10/0x10 [ 98.091037][ T6396] should_fail_ex+0x3b0/0x4e0 [ 98.095751][ T6396] should_failslab+0xac/0x100 [ 98.100460][ T6396] ? sctp_add_bind_addr+0x89/0x3a0 [ 98.105599][ T6396] __kmalloc_cache_noprof+0x6c/0x2c0 [ 98.110920][ T6396] sctp_add_bind_addr+0x89/0x3a0 [ 98.115893][ T6396] sctp_copy_local_addr_list+0x311/0x500 [ 98.121564][ T6396] ? sctp_copy_local_addr_list+0xab/0x500 [ 98.127320][ T6396] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 98.133607][ T6396] ? sctp_v6_is_any+0x60/0x70 [ 98.138323][ T6396] sctp_bind_addr_copy+0xad/0x3b0 [ 98.143374][ T6396] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 98.149734][ T6396] sctp_connect_new_asoc+0x2f3/0x6c0 [ 98.155049][ T6396] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 98.160876][ T6396] ? sctp_sendmsg+0xbb9/0x3520 [ 98.165674][ T6396] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 98.171248][ T6396] ? security_sctp_bind_connect+0x90/0xb0 [ 98.176996][ T6396] sctp_sendmsg+0x219a/0x3520 [ 98.182041][ T6396] ? __pfx_sctp_sendmsg+0x10/0x10 [ 98.187090][ T6396] ? __pfx_aa_sk_perm+0x10/0x10 [ 98.192156][ T6396] ? inet_sendmsg+0x330/0x390 [ 98.196863][ T6396] __sock_sendmsg+0x1a6/0x270 [ 98.201612][ T6396] ____sys_sendmsg+0x525/0x7d0 [ 98.206413][ T6396] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.211732][ T6396] __sys_sendmmsg+0x3b2/0x740 [ 98.216428][ T6396] ? __pfx___sys_sendmmsg+0x10/0x10 [ 98.221661][ T6396] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 98.227821][ T6396] ? ksys_write+0x23e/0x2c0 [ 98.232326][ T6396] ? __pfx_lock_release+0x10/0x10 [ 98.237360][ T6396] ? vfs_write+0x7c4/0xc90 [ 98.241776][ T6396] ? __mutex_unlock_slowpath+0x21d/0x750 [ 98.247405][ T6396] ? __pfx_vfs_write+0x10/0x10 [ 98.252182][ T6396] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 98.258156][ T6396] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 98.264475][ T6396] ? do_syscall_64+0x100/0x230 [ 98.269232][ T6396] __x64_sys_sendmmsg+0xa0/0xb0 [ 98.274168][ T6396] do_syscall_64+0xf3/0x230 [ 98.278668][ T6396] ? clear_bhb_loop+0x35/0x90 [ 98.283343][ T6396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.289227][ T6396] RIP: 0033:0x7fae883773b9 [ 98.293724][ T6396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.313334][ T6396] RSP: 002b:00007fae89107048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 98.321748][ T6396] RAX: ffffffffffffffda RBX: 00007fae88505f80 RCX: 00007fae883773b9 [ 98.329709][ T6396] RDX: 0000000000000002 RSI: 0000000020001280 RDI: 0000000000000003 [ 98.337676][ T6396] RBP: 00007fae891070a0 R08: 0000000000000000 R09: 0000000000000000 [ 98.345635][ T6396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.353681][ T6396] R13: 000000000000000b R14: 00007fae88505f80 R15: 00007ffc37602878 [ 98.361659][ T6396] [ 98.579261][ T6415] netlink: 'syz.3.278': attribute type 10 has an invalid length. [ 98.612232][ T6414] __nla_validate_parse: 2 callbacks suppressed [ 98.612249][ T6414] netlink: 32 bytes leftover after parsing attributes in process `syz.1.279'. [ 98.630637][ T6415] bond0: (slave netdevsim0): Releasing backup interface [ 98.659603][ T6415] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 98.672058][ T6420] netlink: 'syz.3.278': attribute type 1 has an invalid length. [ 98.680092][ T6415] team0: Failed to send options change via netlink (err -105) [ 98.689055][ T6420] netlink: 616 bytes leftover after parsing attributes in process `syz.3.278'. [ 98.700426][ T6415] team0: Port device netdevsim0 added [ 98.702223][ T6423] netlink: 'syz.4.281': attribute type 1 has an invalid length. [ 98.715158][ T6419] netlink: 'syz.4.281': attribute type 10 has an invalid length. [ 98.737751][ T6423] netlink: 616 bytes leftover after parsing attributes in process `syz.4.281'. [ 98.772461][ T6419] bond0: (slave netdevsim0): Releasing backup interface [ 98.823213][ T6419] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 98.839379][ T6419] team0: Failed to send options change via netlink (err -105) [ 98.847577][ T6419] team0: Port device netdevsim0 added [ 98.863057][ T6427] netlink: 'syz.4.281': attribute type 10 has an invalid length. [ 98.878869][ T6427] team0: Failed to send options change via netlink (err -105) [ 98.887506][ T6427] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 98.897601][ T6427] team0: Port device netdevsim0 removed [ 98.906029][ T6427] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 98.921544][ T6429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.279'. [ 98.944772][ T6415] netlink: 'syz.3.278': attribute type 10 has an invalid length. [ 98.970038][ T6415] team0: Failed to send options change via netlink (err -105) [ 98.982245][ T6415] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 98.996722][ T6415] team0: Port device netdevsim0 removed [ 99.016354][ T6415] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 99.232126][ T6446] netlink: 20 bytes leftover after parsing attributes in process `syz.3.288'. [ 99.556973][ T6459] tap0: tun_chr_ioctl cmd 2147767521 [ 99.766926][ T6472] x_tables: duplicate underflow at hook 3 [ 99.839826][ T6470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.905776][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.301'. [ 99.926094][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.301'. [ 99.937946][ T6470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.961863][ T6470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.122714][ T6495] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 100.142780][ T6497] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 100.214280][ C1] eth0: bad gso: type: 1, size: 1408 [ 100.249664][ T6492] netlink: 'syz.4.305': attribute type 3 has an invalid length. [ 100.268996][ T6492] netlink: 'syz.4.305': attribute type 3 has an invalid length. [ 100.298899][ T6492] netlink: 20 bytes leftover after parsing attributes in process `syz.4.305'. [ 100.435685][ T6514] netlink: 32 bytes leftover after parsing attributes in process `syz.2.313'. [ 100.465555][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 101.177637][ T6559] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 101.454244][ T6564] netlink: 'syz.4.324': attribute type 3 has an invalid length. [ 101.657320][ T6582] bond0: (slave netdevsim0): Releasing backup interface [ 101.676211][ T6582] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 101.698080][ T6582] team0: Failed to send options change via netlink (err -105) [ 101.717490][ T6582] team0: Port device netdevsim0 added [ 101.730550][ T6584] vlan2: entered promiscuous mode [ 101.746491][ T6584] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 101.762247][ T6584] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 101.819656][ T6582] team0: Failed to send options change via netlink (err -105) [ 101.835911][ T6582] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 101.856464][ T6582] team0: Port device netdevsim0 removed [ 101.882327][ T6582] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 101.920564][ T6588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.075486][ T6600] vlan2: entered promiscuous mode [ 102.084353][ T6600] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 102.104502][ T6600] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 102.935357][ T6638] validate_nla: 5 callbacks suppressed [ 102.935378][ T6638] netlink: 'syz.4.347': attribute type 10 has an invalid length. [ 103.005537][ T6640] netlink: 'syz.4.347': attribute type 1 has an invalid length. [ 103.025411][ T6638] bond0: (slave netdevsim0): Releasing backup interface [ 103.044597][ T6638] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 103.056484][ T6638] team0: Failed to send options change via netlink (err -105) [ 103.071741][ T6638] team0: Port device netdevsim0 added [ 103.086853][ T6644] netlink: 'syz.4.347': attribute type 10 has an invalid length. [ 103.116340][ T6644] team0: Failed to send options change via netlink (err -105) [ 103.133324][ T6644] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 103.144808][ T6646] netlink: 'syz.2.348': attribute type 1 has an invalid length. [ 103.158516][ T6644] team0: Port device netdevsim0 removed [ 103.168219][ T6644] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 103.183922][ T6641] netlink: 'syz.2.348': attribute type 10 has an invalid length. [ 103.222091][ T6641] bond0: (slave netdevsim0): Releasing backup interface [ 103.261336][ T6641] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 103.274085][ T6641] team0: Failed to send options change via netlink (err -105) [ 103.284739][ T6641] team0: Port device netdevsim0 added [ 103.315247][ T6651] netlink: 'syz.2.348': attribute type 10 has an invalid length. [ 103.386351][ T6651] team0: Failed to send options change via netlink (err -105) [ 103.399032][ T6651] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 103.425104][ T6651] team0: Port device netdevsim0 removed [ 103.434683][ T6651] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 103.724208][ T6678] __nla_validate_parse: 11 callbacks suppressed [ 103.724230][ T6678] netlink: 20 bytes leftover after parsing attributes in process `syz.2.360'. [ 103.881790][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 104.561486][ T6679] netlink: 32 bytes leftover after parsing attributes in process `syz.1.359'. [ 104.608479][ T6703] FAULT_INJECTION: forcing a failure. [ 104.608479][ T6703] name failslab, interval 1, probability 0, space 0, times 0 [ 104.657144][ T6703] CPU: 0 UID: 0 PID: 6703 Comm: syz.0.367 Not tainted 6.10.0-syzkaller-12605-g8e0c0ec9b7dc #0 [ 104.667442][ T6703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 104.677615][ T6703] Call Trace: [ 104.680915][ T6703] [ 104.683873][ T6703] dump_stack_lvl+0x241/0x360 [ 104.688583][ T6703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.693840][ T6703] ? __pfx__printk+0x10/0x10 [ 104.698477][ T6703] should_fail_ex+0x3b0/0x4e0 [ 104.703184][ T6703] should_failslab+0xac/0x100 [ 104.707939][ T6703] ? sctp_add_bind_addr+0x89/0x3a0 [ 104.713082][ T6703] __kmalloc_cache_noprof+0x6c/0x2c0 [ 104.718401][ T6703] sctp_add_bind_addr+0x89/0x3a0 [ 104.723373][ T6703] sctp_copy_local_addr_list+0x311/0x500 [ 104.729034][ T6703] ? sctp_copy_local_addr_list+0xab/0x500 [ 104.734867][ T6703] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 104.741049][ T6703] ? sctp_v6_is_any+0x60/0x70 [ 104.745772][ T6703] sctp_bind_addr_copy+0xad/0x3b0 [ 104.750922][ T6703] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 104.757290][ T6703] sctp_connect_new_asoc+0x2f3/0x6c0 [ 104.762607][ T6703] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 104.768438][ T6703] ? sctp_sendmsg+0xbb9/0x3520 [ 104.773231][ T6703] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 104.778810][ T6703] ? security_sctp_bind_connect+0x90/0xb0 [ 104.784573][ T6703] sctp_sendmsg+0x219a/0x3520 [ 104.789291][ T6703] ? __pfx_sctp_sendmsg+0x10/0x10 [ 104.794347][ T6703] ? __pfx_aa_sk_perm+0x10/0x10 [ 104.799249][ T6703] ? inet_sendmsg+0x330/0x390 [ 104.803953][ T6703] __sock_sendmsg+0x1a6/0x270 [ 104.808661][ T6703] ____sys_sendmsg+0x525/0x7d0 [ 104.813463][ T6703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.818795][ T6703] __sys_sendmmsg+0x3b2/0x740 [ 104.823514][ T6703] ? __pfx___sys_sendmmsg+0x10/0x10 [ 104.828775][ T6703] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 104.834702][ T6703] ? ksys_write+0x23e/0x2c0 [ 104.839241][ T6703] ? __pfx_lock_release+0x10/0x10 [ 104.844305][ T6703] ? vfs_write+0x7c4/0xc90 [ 104.848759][ T6703] ? __mutex_unlock_slowpath+0x21d/0x750 [ 104.854422][ T6703] ? __pfx_vfs_write+0x10/0x10 [ 104.859237][ T6703] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 104.865253][ T6703] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 104.871611][ T6703] ? do_syscall_64+0x100/0x230 [ 104.876403][ T6703] __x64_sys_sendmmsg+0xa0/0xb0 [ 104.881289][ T6703] do_syscall_64+0xf3/0x230 [ 104.885820][ T6703] ? clear_bhb_loop+0x35/0x90 [ 104.890532][ T6703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.896452][ T6703] RIP: 0033:0x7f72af1773b9 [ 104.900889][ T6703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.920605][ T6703] RSP: 002b:00007f72affcc048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 104.929053][ T6703] RAX: ffffffffffffffda RBX: 00007f72af305f80 RCX: 00007f72af1773b9 [ 104.937050][ T6703] RDX: 0000000000000001 RSI: 0000000020001900 RDI: 0000000000000003 [ 104.945132][ T6703] RBP: 00007f72affcc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 104.953221][ T6703] R10: 000000000000c0c0 R11: 0000000000000246 R12: 0000000000000002 [ 104.961217][ T6703] R13: 000000000000000b R14: 00007f72af305f80 R15: 00007ffc07749b58 [ 104.969231][ T6703] [ 105.514835][ T6732] netlink: 68 bytes leftover after parsing attributes in process `syz.2.376'. [ 105.594063][ T6741] netlink: 48 bytes leftover after parsing attributes in process `syz.2.379'. [ 105.916099][ T6754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.382'. [ 106.016109][ T6758] x_tables: duplicate underflow at hook 1 [ 106.649954][ T6789] netlink: 68 bytes leftover after parsing attributes in process `syz.4.390'. [ 107.014107][ T6814] netlink: 36 bytes leftover after parsing attributes in process `syz.0.401'. [ 107.035361][ T6814] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.043633][ T6814] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.318102][ T6836] netlink: 68 bytes leftover after parsing attributes in process `syz.0.405'. [ 107.999246][ T6874] FAULT_INJECTION: forcing a failure. [ 107.999246][ T6874] name failslab, interval 1, probability 0, space 0, times 0 [ 108.032020][ T6874] CPU: 1 UID: 0 PID: 6874 Comm: syz.4.413 Not tainted 6.10.0-syzkaller-12605-g8e0c0ec9b7dc #0 [ 108.042320][ T6874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 108.052404][ T6874] Call Trace: [ 108.055701][ T6874] [ 108.058646][ T6874] dump_stack_lvl+0x241/0x360 [ 108.063371][ T6874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.068585][ T6874] ? __pfx__printk+0x10/0x10 [ 108.073214][ T6874] should_fail_ex+0x3b0/0x4e0 [ 108.077925][ T6874] should_failslab+0xac/0x100 [ 108.082622][ T6874] ? sctp_add_bind_addr+0x89/0x3a0 [ 108.087758][ T6874] __kmalloc_cache_noprof+0x6c/0x2c0 [ 108.093090][ T6874] sctp_add_bind_addr+0x89/0x3a0 [ 108.098053][ T6874] sctp_copy_local_addr_list+0x311/0x500 [ 108.103692][ T6874] ? sctp_copy_local_addr_list+0xab/0x500 [ 108.109431][ T6874] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 108.115635][ T6874] ? sctp_v6_is_any+0x60/0x70 [ 108.120350][ T6874] sctp_bind_addr_copy+0xad/0x3b0 [ 108.125402][ T6874] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 108.131739][ T6874] sctp_connect_new_asoc+0x2f3/0x6c0 [ 108.137040][ T6874] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 108.142857][ T6874] ? sctp_sendmsg+0xbb9/0x3520 [ 108.147668][ T6874] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 108.153219][ T6874] ? security_sctp_bind_connect+0x90/0xb0 [ 108.158944][ T6874] sctp_sendmsg+0x219a/0x3520 [ 108.163646][ T6874] ? __pfx_sctp_sendmsg+0x10/0x10 [ 108.168680][ T6874] ? __pfx_aa_sk_perm+0x10/0x10 [ 108.173536][ T6874] ? inet_sendmsg+0x330/0x390 [ 108.178213][ T6874] __sock_sendmsg+0x1a6/0x270 [ 108.182900][ T6874] ____sys_sendmsg+0x525/0x7d0 [ 108.187675][ T6874] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.192973][ T6874] __sys_sendmmsg+0x3b2/0x740 [ 108.197657][ T6874] ? __pfx___sys_sendmmsg+0x10/0x10 [ 108.202882][ T6874] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 108.208778][ T6874] ? ksys_write+0x23e/0x2c0 [ 108.213276][ T6874] ? __pfx_lock_release+0x10/0x10 [ 108.218309][ T6874] ? vfs_write+0x7c4/0xc90 [ 108.222726][ T6874] ? __mutex_unlock_slowpath+0x21d/0x750 [ 108.228353][ T6874] ? __pfx_vfs_write+0x10/0x10 [ 108.233130][ T6874] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 108.239113][ T6874] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 108.245459][ T6874] ? do_syscall_64+0x100/0x230 [ 108.250240][ T6874] __x64_sys_sendmmsg+0xa0/0xb0 [ 108.255106][ T6874] do_syscall_64+0xf3/0x230 [ 108.259612][ T6874] ? clear_bhb_loop+0x35/0x90 [ 108.264291][ T6874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.270183][ T6874] RIP: 0033:0x7fbb65d773b9 [ 108.274591][ T6874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.294201][ T6874] RSP: 002b:00007fbb66ac8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 108.302647][ T6874] RAX: ffffffffffffffda RBX: 00007fbb65f05f80 RCX: 00007fbb65d773b9 [ 108.310709][ T6874] RDX: 0000000000000002 RSI: 0000000020001280 RDI: 0000000000000003 [ 108.318671][ T6874] RBP: 00007fbb66ac80a0 R08: 0000000000000000 R09: 0000000000000000 [ 108.326665][ T6874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.334624][ T6874] R13: 000000000000000b R14: 00007fbb65f05f80 R15: 00007fffca2dbf78 [ 108.342606][ T6874] [ 108.533485][ T6884] netlink: 'syz.4.416': attribute type 4 has an invalid length. [ 108.561864][ T6887] netlink: 'syz.0.417': attribute type 4 has an invalid length. [ 108.754341][ T6897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.420'. [ 108.815154][ T6897] netlink: 68 bytes leftover after parsing attributes in process `syz.3.420'. [ 108.944521][ T6903] netlink: 'syz.2.423': attribute type 4 has an invalid length. [ 109.118938][ T6916] netlink: 'syz.2.426': attribute type 10 has an invalid length. [ 109.142548][ T6916] bond0: (slave netdevsim0): Releasing backup interface [ 109.163925][ T6916] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 109.174464][ T6916] team0: Failed to send options change via netlink (err -105) [ 109.181621][ T6921] netlink: 'syz.2.426': attribute type 1 has an invalid length. [ 109.183297][ T6916] team0: Port device netdevsim0 added [ 109.195952][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 109.196825][ T6923] x_tables: duplicate entry at hook 3 [ 109.205506][ T6921] netlink: 616 bytes leftover after parsing attributes in process `syz.2.426'. [ 109.266863][ T6916] netlink: 'syz.2.426': attribute type 10 has an invalid length. [ 109.301699][ T6916] team0: Failed to send options change via netlink (err -105) [ 109.324010][ T6916] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 109.339966][ T6916] team0: Port device netdevsim0 removed [ 109.352401][ T6916] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 109.517709][ T6929] warning: `syz.2.431' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.548574][ T6927] netlink: 'syz.3.430': attribute type 10 has an invalid length. [ 109.590715][ T6927] bond0: (slave netdevsim0): Releasing backup interface [ 109.613611][ T6927] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 109.628219][ T6930] netlink: 'syz.3.430': attribute type 1 has an invalid length. [ 109.642092][ T6927] team0: Failed to send options change via netlink (err -105) [ 109.653973][ T6927] team0: Port device netdevsim0 added [ 109.658555][ T6930] netlink: 616 bytes leftover after parsing attributes in process `syz.3.430'. [ 109.705465][ T6930] netlink: 'syz.3.430': attribute type 10 has an invalid length. [ 109.748556][ T6930] team0: Failed to send options change via netlink (err -105) [ 109.758815][ T6930] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 109.768946][ T6930] team0: Port device netdevsim0 removed [ 109.781171][ T6930] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 109.954338][ T6942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.435'. [ 110.006421][ T6942] vlan2: entered promiscuous mode [ 110.024370][ T6942] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 110.059153][ T6942] mac80211_hwsim hwsim14 wlan0: left promiscuous mode [ 110.406166][ T6966] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 110.435690][ T5277] IPVS: starting estimator thread 0... [ 110.446306][ T6970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.446'. [ 110.505475][ T6970] netlink: 68 bytes leftover after parsing attributes in process `syz.2.446'. [ 110.545527][ T6968] IPVS: using max 18 ests per chain, 43200 per kthread [ 110.836481][ T6986] FAULT_INJECTION: forcing a failure. [ 110.836481][ T6986] name failslab, interval 1, probability 0, space 0, times 0 [ 110.875641][ T6986] CPU: 1 UID: 0 PID: 6986 Comm: syz.4.451 Not tainted 6.10.0-syzkaller-12605-g8e0c0ec9b7dc #0 [ 110.885933][ T6986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 110.896099][ T6986] Call Trace: [ 110.899571][ T6986] [ 110.902517][ T6986] dump_stack_lvl+0x241/0x360 [ 110.907223][ T6986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.912527][ T6986] ? __pfx__printk+0x10/0x10 [ 110.917147][ T6986] should_fail_ex+0x3b0/0x4e0 [ 110.921854][ T6986] should_failslab+0xac/0x100 [ 110.926574][ T6986] ? sctp_add_bind_addr+0x89/0x3a0 [ 110.931717][ T6986] __kmalloc_cache_noprof+0x6c/0x2c0 [ 110.937037][ T6986] sctp_add_bind_addr+0x89/0x3a0 [ 110.942100][ T6986] sctp_copy_local_addr_list+0x311/0x500 [ 110.947758][ T6986] ? sctp_copy_local_addr_list+0xab/0x500 [ 110.953504][ T6986] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 110.959856][ T6986] ? sctp_v6_is_any+0x60/0x70 [ 110.964653][ T6986] sctp_bind_addr_copy+0xad/0x3b0 [ 110.969796][ T6986] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 110.976154][ T6986] sctp_connect_new_asoc+0x2f3/0x6c0 [ 110.981469][ T6986] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 110.987306][ T6986] ? sctp_sendmsg+0xbb9/0x3520 [ 110.992105][ T6986] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 110.997683][ T6986] ? security_sctp_bind_connect+0x90/0xb0 [ 111.003440][ T6986] sctp_sendmsg+0x219a/0x3520 [ 111.008158][ T6986] ? __pfx_sctp_sendmsg+0x10/0x10 [ 111.013209][ T6986] ? __pfx_aa_sk_perm+0x10/0x10 [ 111.018097][ T6986] ? inet_sendmsg+0x330/0x390 [ 111.022945][ T6986] __sock_sendmsg+0x1a6/0x270 [ 111.027732][ T6986] ____sys_sendmsg+0x525/0x7d0 [ 111.032532][ T6986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.037856][ T6986] __sys_sendmmsg+0x3b2/0x740 [ 111.042567][ T6986] ? __pfx___sys_sendmmsg+0x10/0x10 [ 111.047827][ T6986] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 111.053765][ T6986] ? ksys_write+0x23e/0x2c0 [ 111.058306][ T6986] ? __pfx_lock_release+0x10/0x10 [ 111.063364][ T6986] ? vfs_write+0x7c4/0xc90 [ 111.067805][ T6986] ? __mutex_unlock_slowpath+0x21d/0x750 [ 111.073462][ T6986] ? __pfx_vfs_write+0x10/0x10 [ 111.078281][ T6986] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 111.084290][ T6986] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 111.090650][ T6986] ? do_syscall_64+0x100/0x230 [ 111.095451][ T6986] __x64_sys_sendmmsg+0xa0/0xb0 [ 111.100341][ T6986] do_syscall_64+0xf3/0x230 [ 111.104883][ T6986] ? clear_bhb_loop+0x35/0x90 [ 111.109592][ T6986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.115509][ T6986] RIP: 0033:0x7fbb65d773b9 [ 111.119948][ T6986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.141835][ T6986] RSP: 002b:00007fbb66ac8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 111.150272][ T6986] RAX: ffffffffffffffda RBX: 00007fbb65f05f80 RCX: 00007fbb65d773b9 [ 111.158260][ T6986] RDX: 0000000000000001 RSI: 0000000020001900 RDI: 0000000000000003 [ 111.166334][ T6986] RBP: 00007fbb66ac80a0 R08: 0000000000000000 R09: 0000000000000000 [ 111.174320][ T6986] R10: 000000000000c0c0 R11: 0000000000000246 R12: 0000000000000002 [ 111.182306][ T6986] R13: 000000000000000b R14: 00007fbb65f05f80 R15: 00007fffca2dbf78 [ 111.190499][ T6986] [ 111.427809][ T7000] netlink: 68 bytes leftover after parsing attributes in process `syz.4.458'. [ 111.477088][ T7007] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 111.517356][ T7010] netlink: 20 bytes leftover after parsing attributes in process `syz.0.457'. [ 111.580401][ T7015] Cannot find add_set index 0 as target [ 111.885526][ T7037] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 112.839150][ T7065] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 112.869788][ T7067] FAULT_INJECTION: forcing a failure. [ 112.869788][ T7067] name failslab, interval 1, probability 0, space 0, times 0 [ 112.908589][ T7067] CPU: 0 UID: 0 PID: 7067 Comm: syz.1.477 Not tainted 6.10.0-syzkaller-12605-g8e0c0ec9b7dc #0 [ 112.918878][ T7067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 112.928953][ T7067] Call Trace: [ 112.932251][ T7067] [ 112.935173][ T7067] dump_stack_lvl+0x241/0x360 [ 112.939852][ T7067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.945051][ T7067] ? __pfx__printk+0x10/0x10 [ 112.949652][ T7067] ? __kmalloc_node_track_caller_noprof+0xb2/0x440 [ 112.956161][ T7067] ? __pfx___might_resched+0x10/0x10 [ 112.961443][ T7067] should_fail_ex+0x3b0/0x4e0 [ 112.966153][ T7067] should_failslab+0xac/0x100 [ 112.970842][ T7067] __kmalloc_node_track_caller_noprof+0xda/0x440 [ 112.977178][ T7067] ? kobject_set_name_vargs+0x61/0x120 [ 112.982662][ T7067] kstrdup+0x3a/0x80 [ 112.986567][ T7067] kobject_set_name_vargs+0x61/0x120 [ 112.991864][ T7067] dev_set_name+0xd5/0x120 [ 112.996289][ T7067] ? __pfx_dev_set_name+0x10/0x10 [ 113.001315][ T7067] ? device_initialize+0x266/0x460 [ 113.006426][ T7067] netdev_register_kobject+0xb7/0x320 [ 113.012146][ T7067] register_netdevice+0x12c5/0x1b00 [ 113.017358][ T7067] ? __pfx_register_netdevice+0x10/0x10 [ 113.022900][ T7067] ? tun_net_initialize+0x153/0x480 [ 113.028090][ T7067] ? __pfx_tun_net_initialize+0x10/0x10 [ 113.033726][ T7067] tun_set_iff+0x85f/0xe80 [ 113.038165][ T7067] __tun_chr_ioctl+0x866/0x2400 [ 113.043039][ T7067] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 113.048343][ T7067] ? __fget_files+0x3f6/0x470 [ 113.053027][ T7067] ? __fget_files+0x29/0x470 [ 113.057622][ T7067] ? bpf_lsm_file_ioctl+0x9/0x10 [ 113.062556][ T7067] ? security_file_ioctl+0x87/0xb0 [ 113.067675][ T7067] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 113.072873][ T7067] __se_sys_ioctl+0xfc/0x170 [ 113.077464][ T7067] do_syscall_64+0xf3/0x230 [ 113.081963][ T7067] ? clear_bhb_loop+0x35/0x90 [ 113.086640][ T7067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.092525][ T7067] RIP: 0033:0x7fa4903773b9 [ 113.096933][ T7067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.116548][ T7067] RSP: 002b:00007fa4911d7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.124972][ T7067] RAX: ffffffffffffffda RBX: 00007fa490505f80 RCX: 00007fa4903773b9 [ 113.132939][ T7067] RDX: 00000000200000c0 RSI: 00000000400454ca RDI: 0000000000000009 [ 113.140902][ T7067] RBP: 00007fa4911d70a0 R08: 0000000000000000 R09: 0000000000000000 [ 113.148864][ T7067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.156835][ T7067] R13: 000000000000000b R14: 00007fa490505f80 R15: 00007fff46849328 [ 113.164819][ T7067] [ 113.470281][ T7096] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 114.030610][ T7127] ipip0: entered promiscuous mode [ 114.594857][ T7138] __nla_validate_parse: 7 callbacks suppressed [ 114.594878][ T7138] netlink: 68 bytes leftover after parsing attributes in process `syz.0.498'. [ 114.841958][ T7151] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 114.914254][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'. [ 114.952793][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'. [ 114.991648][ T7155] wireguard0: entered promiscuous mode [ 114.998030][ T7155] wireguard0: entered allmulticast mode [ 115.133440][ T7166] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 115.304872][ T7174] netlink: 68 bytes leftover after parsing attributes in process `syz.1.510'. [ 115.513166][ T7181] netlink: 68 bytes leftover after parsing attributes in process `syz.1.513'. [ 115.727335][ T7187] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 115.755779][ T7187] macvlan2: entered allmulticast mode [ 115.771125][ T7187] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 115.785326][ T7187] mac80211_hwsim hwsim14 wlan0: left promiscuous mode [ 115.906342][ T7198] netlink: 'syz.2.519': attribute type 33 has an invalid length. [ 115.936876][ T7198] netlink: 152 bytes leftover after parsing attributes in process `syz.2.519'. [ 116.276641][ T7213] tipc: Can't bind to reserved service type 2 [ 116.612851][ T7233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.528'. [ 116.651072][ T7230] netlink: 68 bytes leftover after parsing attributes in process `syz.1.527'. [ 116.843042][ T7245] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 116.861930][ T7245] macvlan2: entered allmulticast mode [ 116.867807][ T7245] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 116.887338][ T7245] mac80211_hwsim hwsim12 wlan0: left promiscuous mode [ 117.185223][ T7254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.535'. [ 117.232240][ T7254] vlan2: entered promiscuous mode [ 117.247385][ T7254] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 117.278904][ T7254] mac80211_hwsim hwsim12 wlan0: left promiscuous mode [ 117.439582][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'. [ 117.921160][ T7280] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 117.957721][ T7280] macvlan2: entered allmulticast mode [ 117.963713][ T7280] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 117.984156][ T7280] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 118.000304][ T7289] netlink: 'syz.1.543': attribute type 75 has an invalid length. [ 118.103714][ T7292] vlan2: entered promiscuous mode [ 118.113234][ T7292] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 118.114024][ T7294] FAULT_INJECTION: forcing a failure. [ 118.114024][ T7294] name failslab, interval 1, probability 0, space 0, times 0 [ 118.133856][ T7292] mac80211_hwsim hwsim14 wlan0: left promiscuous mode [ 118.152887][ T7294] CPU: 1 UID: 0 PID: 7294 Comm: syz.0.549 Not tainted 6.10.0-syzkaller-12605-g8e0c0ec9b7dc #0 [ 118.163176][ T7294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 118.173345][ T7294] Call Trace: [ 118.176635][ T7294] [ 118.179586][ T7294] dump_stack_lvl+0x241/0x360 [ 118.184289][ T7294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.189503][ T7294] ? __pfx__printk+0x10/0x10 [ 118.194114][ T7294] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 118.200118][ T7294] ? __pfx___might_resched+0x10/0x10 [ 118.205425][ T7294] should_fail_ex+0x3b0/0x4e0 [ 118.210109][ T7294] should_failslab+0xac/0x100 [ 118.214784][ T7294] ? __alloc_skb+0x1c3/0x440 [ 118.219367][ T7294] kmem_cache_alloc_node_noprof+0x71/0x320 [ 118.225165][ T7294] __alloc_skb+0x1c3/0x440 [ 118.229577][ T7294] ? __pfx___alloc_skb+0x10/0x10 [ 118.234507][ T7294] ? netlink_autobind+0xd6/0x2f0 [ 118.239436][ T7294] ? netlink_autobind+0x2b0/0x2f0 [ 118.244453][ T7294] netlink_sendmsg+0x638/0xcb0 [ 118.249308][ T7294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.254588][ T7294] ? __import_iovec+0x536/0x820 [ 118.259428][ T7294] ? aa_sock_msg_perm+0x91/0x160 [ 118.264353][ T7294] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 118.269629][ T7294] ? security_socket_sendmsg+0x87/0xb0 [ 118.275082][ T7294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.280358][ T7294] __sock_sendmsg+0x221/0x270 [ 118.285032][ T7294] ____sys_sendmsg+0x525/0x7d0 [ 118.289800][ T7294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.295092][ T7294] __sys_sendmsg+0x2b0/0x3a0 [ 118.299685][ T7294] ? __pfx___sys_sendmsg+0x10/0x10 [ 118.304877][ T7294] ? vfs_write+0x7c4/0xc90 [ 118.309316][ T7294] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 118.315724][ T7294] ? do_syscall_64+0x100/0x230 [ 118.320509][ T7294] ? do_syscall_64+0xb6/0x230 [ 118.325179][ T7294] do_syscall_64+0xf3/0x230 [ 118.329672][ T7294] ? clear_bhb_loop+0x35/0x90 [ 118.334341][ T7294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.340224][ T7294] RIP: 0033:0x7f72af1773b9 [ 118.344628][ T7294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.364229][ T7294] RSP: 002b:00007f72affcc048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.372635][ T7294] RAX: ffffffffffffffda RBX: 00007f72af305f80 RCX: 00007f72af1773b9 [ 118.380606][ T7294] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 118.388577][ T7294] RBP: 00007f72affcc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 118.396547][ T7294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.404511][ T7294] R13: 000000000000000b R14: 00007f72af305f80 R15: 00007ffc07749b58 [ 118.412490][ T7294] [ 118.864330][ T7316] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 119.418602][ T7338] netlink: 'syz.3.559': attribute type 31 has an invalid length. [ 120.697835][ T7388] __nla_validate_parse: 3 callbacks suppressed [ 120.697855][ T7388] netlink: 32 bytes leftover after parsing attributes in process `syz.3.578'. [ 120.713987][ T7353] netlink: 32 bytes leftover after parsing attributes in process `syz.1.567'. [ 120.738317][ T7388] netlink: 224 bytes leftover after parsing attributes in process `syz.3.578'. [ 121.224521][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.587'. [ 121.252186][ T7419] bond_slave_0: entered promiscuous mode [ 121.258340][ T7419] bond_slave_1: entered promiscuous mode [ 121.264128][ T7419] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 121.307643][ T7419] macvtap1: entered promiscuous mode [ 121.320709][ T7419] bond0: entered promiscuous mode [ 121.329543][ T7419] macvtap1: entered allmulticast mode [ 121.339793][ T7419] bond0: entered allmulticast mode [ 121.350675][ T7419] bond_slave_0: entered allmulticast mode [ 121.358424][ T7419] bond_slave_1: entered allmulticast mode [ 121.371048][ T7419] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 121.389028][ T7419] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 121.407473][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.587'. [ 121.419594][ T7424] bond0: left allmulticast mode [ 121.424483][ T7424] bond_slave_0: left allmulticast mode [ 121.431033][ T7424] bond_slave_1: left allmulticast mode [ 121.436768][ T7424] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 121.444565][ T7424] bond0: left promiscuous mode [ 121.451634][ T7424] bond_slave_0: left promiscuous mode [ 121.457332][ T7424] bond_slave_1: left promiscuous mode [ 121.462947][ T7424] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 121.486078][ T7424] macvtap1: left promiscuous mode [ 121.501627][ T7424] macvtap1: left allmulticast mode [ 121.659868][ T7438] netlink: 32 bytes leftover after parsing attributes in process `syz.2.592'. [ 122.395938][ T7459] FAULT_INJECTION: forcing a failure. [ 122.395938][ T7459] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 122.443046][ T7459] CPU: 0 UID: 0 PID: 7459 Comm: syz.2.601 Not tainted 6.10.0-syzkaller-12605-g8e0c0ec9b7dc #0 [ 122.453384][ T7459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 122.463464][ T7459] Call Trace: [ 122.466761][ T7459] [ 122.469706][ T7459] dump_stack_lvl+0x241/0x360 [ 122.474411][ T7459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.479630][ T7459] ? __pfx__printk+0x10/0x10 [ 122.484245][ T7459] ? __pfx_lock_release+0x10/0x10 [ 122.489295][ T7459] ? __lock_acquire+0x137a/0x2040 [ 122.494354][ T7459] should_fail_ex+0x3b0/0x4e0 [ 122.499104][ T7459] _copy_from_user+0x2f/0xe0 [ 122.503711][ T7459] kstrtouint_from_user+0xc6/0x190 [ 122.508854][ T7459] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 122.514600][ T7459] ? __pfx_lock_acquire+0x10/0x10 [ 122.519656][ T7459] proc_fail_nth_write+0xaa/0x2d0 [ 122.524704][ T7459] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 122.530623][ T7459] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 122.536287][ T7459] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 122.541949][ T7459] vfs_write+0x2a2/0xc90 [ 122.546225][ T7459] ? __pfx_vfs_write+0x10/0x10 [ 122.551017][ T7459] ? __fget_files+0x29/0x470 [ 122.555650][ T7459] ? __fget_files+0x3f6/0x470 [ 122.560365][ T7459] ksys_write+0x1a0/0x2c0 [ 122.564728][ T7459] ? __pfx_ksys_write+0x10/0x10 [ 122.569605][ T7459] ? do_syscall_64+0x100/0x230 [ 122.574398][ T7459] ? do_syscall_64+0xb6/0x230 [ 122.579107][ T7459] do_syscall_64+0xf3/0x230 [ 122.583632][ T7459] ? clear_bhb_loop+0x35/0x90 [ 122.588340][ T7459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.594255][ T7459] RIP: 0033:0x7f918fb75e9f [ 122.598688][ T7459] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48 [ 122.618315][ T7459] RSP: 002b:00007f9190911040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 122.626759][ T7459] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f918fb75e9f [ 122.635012][ T7459] RDX: 0000000000000001 RSI: 00007f91909110b0 RDI: 0000000000000004 [ 122.643013][ T7459] RBP: 00007f91909110a0 R08: 0000000000000000 R09: 0000000000000000 [ 122.651016][ T7459] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 122.659019][ T7459] R13: 000000000000000b R14: 00007f918fd05f80 R15: 00007ffe79c756a8 [ 122.667040][ T7459] [ 123.035121][ T7494] FAULT_INJECTION: forcing a failure. [ 123.035121][ T7494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.067113][ T7494] CPU: 0 UID: 0 PID: 7494 Comm: syz.1.610 Not tainted 6.10.0-syzkaller-12605-g8e0c0ec9b7dc #0 [ 123.077591][ T7494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 123.088281][ T7494] Call Trace: [ 123.091576][ T7494] [ 123.094517][ T7494] dump_stack_lvl+0x241/0x360 [ 123.099261][ T7494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.104477][ T7494] ? __pfx__printk+0x10/0x10 [ 123.109090][ T7494] ? __pfx_lock_release+0x10/0x10 [ 123.114145][ T7494] should_fail_ex+0x3b0/0x4e0 [ 123.118851][ T7494] _copy_from_user+0x2f/0xe0 [ 123.123460][ T7494] copy_msghdr_from_user+0xae/0x680 [ 123.128682][ T7494] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 123.134520][ T7494] __sys_recvmsg+0x252/0x3e0 [ 123.139234][ T7494] ? __pfx___sys_recvmsg+0x10/0x10 [ 123.144385][ T7494] ? arch_do_signal_or_restart+0x316/0x860 [ 123.150230][ T7494] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 123.156580][ T7494] ? rcu_is_watching+0x15/0xb0 [ 123.161362][ T7494] ? trace_sys_enter+0x1f/0xd0 [ 123.166140][ T7494] do_syscall_64+0xf3/0x230 [ 123.170661][ T7494] ? clear_bhb_loop+0x35/0x90 [ 123.175361][ T7494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.181273][ T7494] RIP: 0033:0x7fa4903773b9 [ 123.185708][ T7494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.186421][ T7478] netlink: 32 bytes leftover after parsing attributes in process `syz.0.604'. [ 123.205310][ T7494] RSP: 002b:00007fa4911d7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 123.205341][ T7494] RAX: ffffffffffffffda RBX: 00007fa490505f80 RCX: 00007fa4903773b9 [ 123.205353][ T7494] RDX: 0000000000000002 RSI: 0000000020000500 RDI: 0000000000000003 [ 123.205363][ T7494] RBP: 00007fa4911d70a0 R08: 0000000000000000 R09: 0000000000000000 [ 123.205374][ T7494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.205384][ T7494] R13: 000000000000000b R14: 00007fa490505f80 R15: 00007fff46849328 [ 123.205411][ T7494] [ 123.404921][ T7497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.611'. [ 123.890021][ T7525] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 123.903421][ T7525] macvlan2: entered allmulticast mode [ 123.908978][ T7525] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 123.918981][ T7525] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 124.469532][ T7538] netlink: 'syz.1.621': attribute type 10 has an invalid length. [ 124.502897][ T7538] bond0: (slave netdevsim0): Releasing backup interface [ 124.529455][ T7538] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 124.552056][ T7538] team0: Failed to send options change via netlink (err -105) [ 124.559788][ T7538] team0: Port device netdevsim0 added [ 124.565590][ T7540] netlink: 'syz.1.621': attribute type 1 has an invalid length. [ 124.573522][ T7540] netlink: 616 bytes leftover after parsing attributes in process `syz.1.621'. [ 124.594199][ T7538] netlink: 'syz.1.621': attribute type 10 has an invalid length. [ 124.623934][ T7538] team0: Failed to send options change via netlink (err -105) [ 124.640355][ T7538] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 124.660386][ T7538] team0: Port device netdevsim0 removed [ 124.679748][ T7538] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 124.816423][ T7545] netlink: 32 bytes leftover after parsing attributes in process `syz.2.624'. [ 125.359817][ T7560] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 125.485038][ T7564] bridge2: entered promiscuous mode [ 125.500525][ T7564] bridge2: entered allmulticast mode [ 126.541140][ T7599] netlink: 'syz.3.641': attribute type 10 has an invalid length. [ 126.586225][ T7599] bond0: (slave netdevsim0): Releasing backup interface [ 126.601863][ T7583] __nla_validate_parse: 4 callbacks suppressed [ 126.601884][ T7583] netlink: 32 bytes leftover after parsing attributes in process `syz.0.639'. [ 126.640376][ T7601] netlink: 'syz.3.641': attribute type 1 has an invalid length. [ 126.654642][ T7601] netlink: 616 bytes leftover after parsing attributes in process `syz.3.641'. [ 126.662475][ T7586] netlink: 32 bytes leftover after parsing attributes in process `syz.4.638'. [ 126.674519][ T7599] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 126.693527][ T7599] team0: Failed to send options change via netlink (err -105) [ 126.715694][ T7599] team0: Port device netdevsim0 added [ 126.726679][ T7607] netlink: 'syz.3.641': attribute type 10 has an invalid length. [ 126.743686][ T7607] team0: Failed to send options change via netlink (err -105) [ 126.759690][ T7607] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 126.771127][ T7607] team0: Port device netdevsim0 removed [ 126.781065][ T7607] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 127.063936][ T7614] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 127.076522][ T7614] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 127.101490][ T7615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.645'. [ 127.119870][ T7615] vlan2: entered promiscuous mode [ 127.133976][ T7615] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 127.181503][ T7615] mac80211_hwsim hwsim14 wlan0: left promiscuous mode [ 127.421847][ T7623] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 127.444227][ T7623] macvlan2: entered allmulticast mode [ 127.454439][ T7623] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 127.471197][ T7631] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 127.884353][ T7658] bridge1: entered promiscuous mode [ 127.914466][ T7658] bridge1: entered allmulticast mode [ 128.044375][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.657'. [ 128.055038][ T7660] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.658'. [ 128.081001][ T7669] netlink: 'syz.1.659': attribute type 10 has an invalid length. [ 128.093613][ T7669] bond0: (slave netdevsim0): Releasing backup interface [ 128.110404][ T7669] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 128.120429][ T7669] team0: Failed to send options change via netlink (err -105) [ 128.128163][ T7669] team0: Port device netdevsim0 added [ 128.143439][ T7669] netlink: 'syz.1.659': attribute type 1 has an invalid length. [ 128.151410][ T7669] netlink: 616 bytes leftover after parsing attributes in process `syz.1.659'. [ 128.154815][ T7658] netlink: 24 bytes leftover after parsing attributes in process `syz.4.657'. [ 128.161271][ T7669] netlink: 'syz.1.659': attribute type 10 has an invalid length. [ 128.191304][ T7669] team0: Failed to send options change via netlink (err -105) [ 128.199290][ T7669] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 128.213071][ T7669] team0: Port device netdevsim0 removed [ 128.230513][ T7669] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 128.345461][ T7679] skb len=277 headroom=592 headlen=48 tailroom=0 [ 128.345461][ T7679] mac=(592,0) mac_len=0 net=(592,40) trans=632 [ 128.345461][ T7679] shinfo(txflags=0 nr_frags=1 gso(size=127 type=131072 segs=2)) [ 128.345461][ T7679] csum(0x60278 start=632 offset=6 ip_summed=0 complete_sw=0 valid=0 level=0) [ 128.345461][ T7679] hash(0x447399b9 sw=1 l4=1) proto=0x86dd pkttype=0 iif=0 [ 128.345461][ T7679] priority=0x0 mark=0x0 alloc_cpu=0 vlan_all=0x0 [ 128.345461][ T7679] encapsulation=0 inner(proto=0x0000, mac=0, net=0, trans=0) [ 128.395087][ T7679] dev name=sit0 feat=0x00000006401d7869 [ 128.400710][ T7679] sk family=10 type=2 proto=17 [ 128.405491][ T7679] skb linear: 00000000: 6c 04 b9 99 00 ed 11 7f fe 80 00 00 00 00 00 00 [ 128.414043][ T7679] skb linear: 00000010: 00 00 00 00 00 00 00 0b fe 80 00 00 00 00 00 00 [ 128.422566][ T7679] skb linear: 00000020: 00 00 00 00 00 00 00 bb 8d dd 4e 21 00 ed fe c5 [ 128.431083][ T7679] skb frag: 00000000: e8 85 54 b8 ff 70 fd e0 e1 bc 83 14 2a 98 d4 4f [ 128.439649][ T7679] skb frag: 00000010: ea 52 9a 87 04 9d 70 a1 fb 15 80 a7 32 58 b6 cd [ 128.448187][ T7679] skb frag: 00000020: 5d ff ab 61 59 d0 c1 0f 2e 61 a1 b8 5b 37 f0 04 [ 128.456726][ T7679] skb frag: 00000030: 9f 5e 20 40 a3 3e fd f8 35 5c cd 88 61 47 b9 52 [ 128.465228][ T7679] skb frag: 00000040: d0 7a 6d 67 79 f3 d7 fb a9 90 99 af 9b 48 78 0b [ 128.473767][ T7679] skb frag: 00000050: 83 d2 6b 62 9a 76 32 eb 1d 07 05 32 6e aa 37 b7 [ 128.482413][ T7679] skb frag: 00000060: 25 1c 54 90 5b 45 1f ac 17 f3 f9 0d 07 d1 9e 4a [ 128.490972][ T7679] skb frag: 00000070: 70 54 0a 92 aa c2 e5 b1 18 e6 97 d2 86 73 82 e9 [ 128.499616][ T7679] skb frag: 00000080: 11 12 68 9e 03 c5 c3 0a cb 65 3a 45 5e 39 8a 6d [ 128.508172][ T7679] skb frag: 00000090: ae 73 ef c9 0d 2b b4 b9 85 28 63 45 20 1f 45 f8 [ 128.516733][ T7679] skb frag: 000000a0: f9 b8 c7 4e 9f c2 d6 32 d7 5c 67 1c d8 b3 8b 7f [ 128.525260][ T7679] skb frag: 000000b0: ca 6f 1f 52 15 f7 ab 2a 02 1f d2 22 ae b1 d6 fe [ 128.533825][ T7679] skb frag: 000000c0: 5d 2d ec 18 d2 56 df f6 7a e5 55 bf d5 dd 20 de [ 128.542380][ T7679] skb frag: 000000d0: 43 2c 63 dd fe fa e0 cf 4a 7f 5d cc 5f 16 9c af [ 128.550940][ T7679] skb frag: 000000e0: d6 fe e6 85 c3 [ 128.556632][ T7679] ------------[ cut here ]------------ [ 128.562107][ T7679] sit0: caps=(0x00000006401d7869, 0x0000000000004009) [ 128.569424][ T7679] WARNING: CPU: 0 PID: 7679 at net/core/dev.c:3293 skb_warn_bad_offload+0x166/0x1a0 [ 128.578885][ T7679] Modules linked in: [ 128.582813][ T7679] CPU: 0 UID: 0 PID: 7679 Comm: syz.3.664 Not tainted 6.10.0-syzkaller-12605-g8e0c0ec9b7dc #0 [ 128.593112][ T7679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 128.603229][ T7679] RIP: 0010:skb_warn_bad_offload+0x166/0x1a0 [ 128.609295][ T7679] Code: e8 5f 94 77 f8 49 8b 04 24 48 8d 88 a0 03 00 00 48 85 c0 48 0f 44 cd 48 c7 c7 00 7d ec 8c 4c 89 f6 48 89 da e8 0b 6a d2 f7 90 <0f> 0b 90 90 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 44 89 f9 [ 128.628965][ T7679] RSP: 0018:ffffc90004bf7048 EFLAGS: 00010246 [ 128.635072][ T7679] RAX: 770c1f3663e60700 RBX: ffff8880618900b8 RCX: 0000000000040000 [ 128.643103][ T7679] RDX: ffffc90009d2a000 RSI: 000000000003ffff RDI: 0000000000040000 [ 128.651132][ T7679] RBP: ffffffff8cec7cc0 R08: ffffffff81559432 R09: fffffbfff1cb9f88 [ 128.659174][ T7679] R10: dffffc0000000000 R11: fffffbfff1cb9f88 R12: ffff88805bf973d8 [ 128.667206][ T7679] R13: dffffc0000000000 R14: ffff888061890130 R15: ffff888061890130 [ 128.675208][ T7679] FS: 00007fae891076c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 128.684200][ T7679] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.690843][ T7679] CR2: 000000110c2ca026 CR3: 0000000011c0c000 CR4: 00000000003506f0 [ 128.698875][ T7679] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 128.706907][ T7679] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 128.714899][ T7679] Call Trace: [ 128.718232][ T7679] [ 128.721182][ T7679] ? __warn+0x163/0x4e0 [ 128.725371][ T7679] ? skb_warn_bad_offload+0x166/0x1a0 [ 128.730814][ T7679] ? report_bug+0x2b3/0x500 [ 128.735343][ T7679] ? skb_warn_bad_offload+0x166/0x1a0 [ 128.740788][ T7679] ? handle_bug+0x3e/0x70 [ 128.745139][ T7679] ? exc_invalid_op+0x1a/0x50 [ 128.749874][ T7679] ? asm_exc_invalid_op+0x1a/0x20 [ 128.754937][ T7679] ? __warn_printk+0x292/0x360 [ 128.759766][ T7679] ? skb_warn_bad_offload+0x166/0x1a0 [ 128.765170][ T7679] ? skb_warn_bad_offload+0x165/0x1a0 [ 128.770703][ T7679] __skb_gso_segment+0x3be/0x4c0 [ 128.775681][ T7679] validate_xmit_skb+0x585/0x1120 [ 128.780775][ T7679] ? rcu_read_lock_bh_held+0x7e/0x120 [ 128.786175][ T7679] ? __pfx_validate_xmit_skb+0x10/0x10 [ 128.791719][ T7679] __dev_queue_xmit+0x17a4/0x3e90 [ 128.796818][ T7679] ? __dev_queue_xmit+0x2da/0x3e90 [ 128.801955][ T7679] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 128.807997][ T7679] ? __pfx___dev_queue_xmit+0x10/0x10 [ 128.813396][ T7679] ? neigh_connected_output+0x1d5/0x450 [ 128.818997][ T7679] ? read_seqbegin+0x157/0x2b0 [ 128.823788][ T7679] ? lockdep_hardirqs_on+0x99/0x150 [ 128.829043][ T7679] ? read_seqbegin+0x208/0x2b0 [ 128.833835][ T7679] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 128.839635][ T7679] ? neigh_connected_output+0x3a7/0x450 [ 128.845227][ T7679] ip6_finish_output2+0xffa/0x1680 [ 128.850420][ T7679] ? __pfx_lock_acquire+0x10/0x10 [ 128.855488][ T7679] ? ip6_finish_output2+0x712/0x1680 [ 128.860850][ T7679] ? nf_hook+0x9e/0x450 [ 128.865045][ T7679] ? __ip6_local_out+0x7c1/0x800 [ 128.870065][ T7679] ? __pfx_ip6_finish_output2+0x10/0x10 [ 128.875650][ T7679] ? skb_gso_transport_seglen+0x345/0x580 [ 128.881536][ T7679] ? skb_gso_validate_network_len+0x12e/0x290 [ 128.887763][ T7679] ip6_finish_output+0x41e/0x810 [ 128.892735][ T7679] ip6_send_skb+0x112/0x230 [ 128.897311][ T7679] udp_v6_send_skb+0xbf5/0x1870 [ 128.897848][ T7690] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 128.902178][ T7679] ? udpv6_sendmsg+0x1be1/0x3270 [ 128.902218][ T7679] udpv6_sendmsg+0x23b3/0x3270 [ 128.902237][ T7679] ? release_sock+0x30/0x1f0 [ 128.923641][ T7679] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 128.929263][ T7679] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 128.934416][ T7679] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 128.936069][ T7690] macvlan2: entered allmulticast mode [ 128.940804][ T7679] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 128.940834][ T7679] ? inet_send_prepare+0x1b7/0x260 [ 128.940855][ T7679] ? do_raw_spin_unlock+0x13c/0x8b0 [ 128.940886][ T7679] ? inet_send_prepare+0x1b7/0x260 [ 128.967494][ T7679] __sock_sendmsg+0xef/0x270 [ 128.972114][ T7679] ____sys_sendmsg+0x525/0x7d0 [ 128.976951][ T7679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.982283][ T7679] __sys_sendmsg+0x2b0/0x3a0 [ 128.986948][ T7679] ? __pfx___sys_sendmsg+0x10/0x10 [ 128.992136][ T7679] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 128.998532][ T7679] ? do_syscall_64+0x100/0x230 [ 129.003327][ T7679] ? do_syscall_64+0xb6/0x230 [ 129.008081][ T7679] do_syscall_64+0xf3/0x230 [ 129.012613][ T7679] ? clear_bhb_loop+0x35/0x90 [ 129.017356][ T7679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.023291][ T7679] RIP: 0033:0x7fae883773b9 [ 129.027761][ T7679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.047527][ T7679] RSP: 002b:00007fae89107048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.055984][ T7679] RAX: ffffffffffffffda RBX: 00007fae88505f80 RCX: 00007fae883773b9 [ 129.064028][ T7679] RDX: 0000000000000804 RSI: 0000000020000540 RDI: 0000000000000003 [ 129.072070][ T7679] RBP: 00007fae883e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 129.080192][ T7679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.088314][ T7679] R13: 000000000000000b R14: 00007fae88505f80 R15: 00007ffc37602878 [ 129.096331][ T7679] [ 129.099412][ T7679] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 129.106707][ T7679] CPU: 0 UID: 0 PID: 7679 Comm: syz.3.664 Not tainted 6.10.0-syzkaller-12605-g8e0c0ec9b7dc #0 [ 129.116970][ T7679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 129.127052][ T7679] Call Trace: [ 129.130347][ T7679] [ 129.133288][ T7679] dump_stack_lvl+0x241/0x360 [ 129.137999][ T7679] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.143224][ T7679] ? __pfx__printk+0x10/0x10 [ 129.147844][ T7679] ? vscnprintf+0x5d/0x90 [ 129.152205][ T7679] panic+0x349/0x860 [ 129.156123][ T7679] ? __warn+0x172/0x4e0 [ 129.160301][ T7679] ? __pfx_panic+0x10/0x10 [ 129.164753][ T7679] __warn+0x346/0x4e0 [ 129.168845][ T7679] ? skb_warn_bad_offload+0x166/0x1a0 [ 129.174252][ T7679] report_bug+0x2b3/0x500 [ 129.178599][ T7679] ? skb_warn_bad_offload+0x166/0x1a0 [ 129.183996][ T7679] handle_bug+0x3e/0x70 [ 129.188159][ T7679] exc_invalid_op+0x1a/0x50 [ 129.192678][ T7679] asm_exc_invalid_op+0x1a/0x20 [ 129.197530][ T7679] RIP: 0010:skb_warn_bad_offload+0x166/0x1a0 [ 129.203522][ T7679] Code: e8 5f 94 77 f8 49 8b 04 24 48 8d 88 a0 03 00 00 48 85 c0 48 0f 44 cd 48 c7 c7 00 7d ec 8c 4c 89 f6 48 89 da e8 0b 6a d2 f7 90 <0f> 0b 90 90 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 44 89 f9 [ 129.223121][ T7679] RSP: 0018:ffffc90004bf7048 EFLAGS: 00010246 [ 129.229214][ T7679] RAX: 770c1f3663e60700 RBX: ffff8880618900b8 RCX: 0000000000040000 [ 129.237199][ T7679] RDX: ffffc90009d2a000 RSI: 000000000003ffff RDI: 0000000000040000 [ 129.245417][ T7679] RBP: ffffffff8cec7cc0 R08: ffffffff81559432 R09: fffffbfff1cb9f88 [ 129.253391][ T7679] R10: dffffc0000000000 R11: fffffbfff1cb9f88 R12: ffff88805bf973d8 [ 129.261367][ T7679] R13: dffffc0000000000 R14: ffff888061890130 R15: ffff888061890130 [ 129.269341][ T7679] ? __warn_printk+0x292/0x360 [ 129.274121][ T7679] ? skb_warn_bad_offload+0x165/0x1a0 [ 129.279516][ T7679] __skb_gso_segment+0x3be/0x4c0 [ 129.284471][ T7679] validate_xmit_skb+0x585/0x1120 [ 129.289496][ T7679] ? rcu_read_lock_bh_held+0x7e/0x120 [ 129.294875][ T7679] ? __pfx_validate_xmit_skb+0x10/0x10 [ 129.300356][ T7679] __dev_queue_xmit+0x17a4/0x3e90 [ 129.305395][ T7679] ? __dev_queue_xmit+0x2da/0x3e90 [ 129.310501][ T7679] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 129.316484][ T7679] ? __pfx___dev_queue_xmit+0x10/0x10 [ 129.321863][ T7679] ? neigh_connected_output+0x1d5/0x450 [ 129.327408][ T7679] ? read_seqbegin+0x157/0x2b0 [ 129.332188][ T7679] ? lockdep_hardirqs_on+0x99/0x150 [ 129.337386][ T7679] ? read_seqbegin+0x208/0x2b0 [ 129.342160][ T7679] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 129.347897][ T7679] ? neigh_connected_output+0x3a7/0x450 [ 129.353454][ T7679] ip6_finish_output2+0xffa/0x1680 [ 129.358570][ T7679] ? __pfx_lock_acquire+0x10/0x10 [ 129.363615][ T7679] ? ip6_finish_output2+0x712/0x1680 [ 129.368894][ T7679] ? nf_hook+0x9e/0x450 [ 129.373135][ T7679] ? __ip6_local_out+0x7c1/0x800 [ 129.378087][ T7679] ? __pfx_ip6_finish_output2+0x10/0x10 [ 129.383639][ T7679] ? skb_gso_transport_seglen+0x345/0x580 [ 129.389367][ T7679] ? skb_gso_validate_network_len+0x12e/0x290 [ 129.395535][ T7679] ip6_finish_output+0x41e/0x810 [ 129.400494][ T7679] ip6_send_skb+0x112/0x230 [ 129.405006][ T7679] udp_v6_send_skb+0xbf5/0x1870 [ 129.409856][ T7679] ? udpv6_sendmsg+0x1be1/0x3270 [ 129.414785][ T7679] udpv6_sendmsg+0x23b3/0x3270 [ 129.419543][ T7679] ? release_sock+0x30/0x1f0 [ 129.424150][ T7679] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 129.429703][ T7679] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 129.434819][ T7679] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 129.441167][ T7679] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 129.446917][ T7679] ? inet_send_prepare+0x1b7/0x260 [ 129.452035][ T7679] ? do_raw_spin_unlock+0x13c/0x8b0 [ 129.457244][ T7679] ? inet_send_prepare+0x1b7/0x260 [ 129.462369][ T7679] __sock_sendmsg+0xef/0x270 [ 129.466968][ T7679] ____sys_sendmsg+0x525/0x7d0 [ 129.471759][ T7679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.477082][ T7679] __sys_sendmsg+0x2b0/0x3a0 [ 129.481689][ T7679] ? __pfx___sys_sendmsg+0x10/0x10 [ 129.486859][ T7679] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 129.493210][ T7679] ? do_syscall_64+0x100/0x230 [ 129.497985][ T7679] ? do_syscall_64+0xb6/0x230 [ 129.502671][ T7679] do_syscall_64+0xf3/0x230 [ 129.507174][ T7679] ? clear_bhb_loop+0x35/0x90 [ 129.511866][ T7679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.517761][ T7679] RIP: 0033:0x7fae883773b9 [ 129.522181][ T7679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.541792][ T7679] RSP: 002b:00007fae89107048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.550399][ T7679] RAX: ffffffffffffffda RBX: 00007fae88505f80 RCX: 00007fae883773b9 [ 129.558375][ T7679] RDX: 0000000000000804 RSI: 0000000020000540 RDI: 0000000000000003 [ 129.566356][ T7679] RBP: 00007fae883e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 129.574327][ T7679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.582300][ T7679] R13: 000000000000000b R14: 00007fae88505f80 R15: 00007ffc37602878 [ 129.590283][ T7679] [ 129.593413][ T7679] Kernel Offset: disabled [ 129.597756][ T7679] Rebooting in 86400 seconds..