last executing test programs: 7.282355782s ago: executing program 3 (id=3467): socket$alg(0x26, 0x5, 0x0) r0 = socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x4, 0x0, 0x12}, 0x48) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000000)={'syztnl1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@getchain={0x2c, 0x66, 0x2, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xa, 0x2}, {0x8, 0xe}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x150996b2caa359d1, 0x842, 0xb8000000, {}, {}, {0x1, 0x1, 0x1}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "0087fcfd217fd12e"}}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0xc880) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_proto_private(r3, 0x89e1, &(0x7f00000007c0)="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") sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0xe403, r2, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev}, @IFLA_IPTUN_TOS={0x5}, @IFLA_IPTUN_ENCAP_SPORT={0x6}]}}}]}, 0x50}}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) socket(0x1, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x4, 0x0, 0x12}, 0x48) (async) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000000)={'syztnl1\x00', 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@getchain={0x2c, 0x66, 0x2, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xa, 0x2}, {0x8, 0xe}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x150996b2caa359d1, 0x842, 0xb8000000, {}, {}, {0x1, 0x1, 0x1}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "0087fcfd217fd12e"}}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0xc880) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_proto_private(r3, 0x89e1, &(0x7f00000007c0)="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") (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0xe403, r2, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev}, @IFLA_IPTUN_TOS={0x5}, @IFLA_IPTUN_ENCAP_SPORT={0x6}]}}}]}, 0x50}}, 0x0) (async) 7.131145768s ago: executing program 3 (id=3470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x3, 0x8000000, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}]}, 0x44}}, 0x0) 7.047247495s ago: executing program 3 (id=3471): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011000560000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000000c001a800800058004000580"], 0x2c}}, 0x0) 6.943861631s ago: executing program 3 (id=3474): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000006c0)=@gettaction={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff7fef00102e80e423c7", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@bridge_newneigh={0x38, 0x1c, 0xd105d1610db53515, 0x0, 0x0, {0x2, 0x0, 0x0, r3}, [@NDA_DST_IPV6={0x14, 0x1, @local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r11, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000240)={'veth1_to_bond\x00', 0x400}) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r13 = socket$nl_crypto(0x10, 0x3, 0x15) sendfile(r8, r13, &(0x7f00000001c0)=0x5, 0x8) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x400c000) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 6.696938464s ago: executing program 3 (id=3476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRESDEC=0x0], 0x0, 0x26, 0x0, 0x0, 0xffff1587}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xf, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1, @ANYRES32, @ANYBLOB="00000000000000ca00b702000014000000b7c10000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b700000000000000950000000026cd"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x88, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x5}, 0x10}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000003200)=ANY=[@ANYBLOB="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"/3232], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x3}, 0x10, &(0x7f0000005640)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001400)=""/119, 0x77}], 0x1, &(0x7f00000037c0)=""/153, 0x99}}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB="000000000000000024001a80200004801c000480080012000600000008000300020000000800180007000000"], 0x44}}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="a81000001e9e4813f1644ae870d155ad14c859ad3a72fd85fa5370d3afa0d1f654b30fc4b7aba0a2d7e86e0d1b00", @ANYRES16=0x0, @ANYBLOB="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"], 0x10a8}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000014002101000000000000000023"], 0x45}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000060000000008002e00d6ffffff"], 0x24}, 0x1, 0x0, 0x0, 0x24004064}, 0x20004004) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xaf, &(0x7f0000000680)=""/175, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1f, 0x8, 0x5e, 0x80, 0x500, 0xffffffffffffffff, 0xfffffffb, '\x00', 0x0, r8, 0x4, 0x2, 0x1}, 0x48) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r10 = accept$alg(r9, 0x0, 0x0) sendmsg$alg(r10, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000100)="f297c0eccf859705acf9834f5b4b6039", 0x10}, {&(0x7f0000001400)="c98812c1be8a", 0x10}, {&(0x7f00000012c0)="406f2bef596a8a313001", 0xa}], 0x3}, 0x0) recvmsg$kcm(r6, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) 6.472554682s ago: executing program 3 (id=3479): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff110000000a0006007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) 2.836113357s ago: executing program 4 (id=3528): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000006000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4}, 0x90) 2.706844974s ago: executing program 4 (id=3530): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0b140000001000010000000000000000000000000a140000001100010000000000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000004000088830000000000000000000000003482eb5bf3d99e10ea8fd4538e4992e52efa2006b6fa66eadc6509c5f3e4fcd8a649ebb03d10c06352f4875ed75f04dc8a4d5f8e027c744f6bcb87e21c9a02cf46e2a8e4f38b38f924ca850b742994d1705def094687873d84570403", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000000000005000a00f7000000"], 0x44}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x2b, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000eadfee035b3d2f7744ada10327fab0564180adeb6109ddf0f3de07767f23ac4b24ec596d612d1391a8ba4dbd236b5eb75bca7955e3125d3beebc45cc505305bbb8ed3cb9537b52f47e1c5d26bad27735b7d64eb37691cebf3eba2b4ca3ee35019a26bcd19477850dcc3944", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000bb000000bf090000000000005509010000000000950000000000000085000000d1000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000454804818500000082000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000b00000085000000060000002c73c0ff010000009771200010000000bf91000000000000b5020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x32, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaabf7d132b5a64080045000024000000000811907800000000000000000000000000109078020000000000000062e48ffc7a3d99c776b0d1f178ac35184bad9a0bf04849003989ed439b43323fe60b2f5d48c665f347978c4d52e10b18b184ec7dbbaa7b99984d"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000040), &(0x7f0000000500)}, 0x20) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1, 0x0, 0x9}, 0x20) 2.550325377s ago: executing program 4 (id=3534): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f00000008c0)=@ethtool_eeprom={0x0, 0x9, 0x9, 0x12d, "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"}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='[\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1e003300a0000300080211000001080211000000ffffffffffff000000000000"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={0x0, 0x43c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="0a0034000202020202020000040067000400cc00040008010600660000000000"], 0x3c}}, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x19, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0x1, "a78ce540065980"}]}}}}}}, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000880)={'macvlan1\x00', 0x0}) sendto$packet(r10, 0x0, 0x64, 0x0, &(0x7f00000001c0)={0x11, 0x1, r11, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000d52f1640e032945295759fb7ecc3052670e75bda915536f9ac493f793446afa557281b5a94f0d093ab8fd4fd71f49402f923bedc3f0c592fef987179a2740b2294f22c92bbaa13718ce44160c47983194c85d6ecee48e98298a6fe522c559364c9cbb3d1a32812554c5d3d939a66fa6298ce960dea24b85d9b284f0b839719e508e2c2aef2b84dbe30a8a85247ebe249a775b431ab25bf894f2916e866f7e94d5aa13c4e9e9c2d588c9f55f0e5e87fd6446ac6a77d", @ANYRES16=r8, @ANYBLOB="000125bd7000fbdbdf253500000008000300", @ANYRES32=r9, @ANYBLOB="0c009900000400002b0000000a000600ffffffffffff00000600fd00ffff00000500200100000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendfile(r5, r6, 0x0, 0x8000002b) 1.532048669s ago: executing program 4 (id=3539): syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000029c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x1000}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r1 = socket(0x9, 0x803, 0xfffffffc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000080000000008100000008000300", @ANYRES32=r3, @ANYBLOB="0a000600ffffffffffff0000060066008e8800002200330008030000080211000001080211000000ffffffffff"], 0x58}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x20}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f00000000c0)={0x0, r4}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000080)={0x0, r5}) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000000)={0x2880008, r4}) 1.193850437s ago: executing program 0 (id=3545): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000003f07040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) 1.056044731s ago: executing program 0 (id=3547): socket$inet6(0xa, 0x80002, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x4a8e42, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x200001) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x1, 0x5) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r6 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast1, 0x4}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a001fe0005cffe368181ea0fdbe1c4beb084fef000000000000000000000c00024000000000000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0x54}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x0) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r12, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r9, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r10, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="100025bd7000fddbdf25740000000c0099000900000040000000b1ceaa49933c79740654f6d253e4cfbfdeca08649e79eb2a0bf05265acf7b81857989fba476da0bc"], 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000000)) 1.055290512s ago: executing program 1 (id=3548): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0xa, [@union={0x4, 0x2, 0x0, 0x5, 0x1, 0x9, [{0xa, 0x5, 0x3ff}, {0xe, 0x3, 0x3a86}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x1, 0x2}, {0x1, 0x1}, {0x6, 0x2}, {0x10}]}, @fwd={0x1}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x4}]}]}, {0x0, [0x0, 0x61, 0x61, 0x5f, 0x61, 0x5f, 0x2e, 0x20]}}, &(0x7f00000000c0)=""/177, 0x92, 0xb1, 0x0, 0x1000}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xacea}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xeaa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe1e}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r3, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0xe}}}}, [@NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_IE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000880}, 0x20048840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='scmi_xfer_end\x00', r2}, 0x10) r5 = socket$pptp(0x18, 0x1, 0x2) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000540)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@getroute={0x14, 0x1a, 0x300, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048004) sendmsg$nl_route(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@getneigh={0x14, 0x1e, 0x100, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x448d0}, 0x4000004) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000780)={0x2, 0x4e20, @local}, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xc8, r1, 0x8, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x320}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xbac47b4, @private1, 0x100}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pim6reg\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff35c}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair(0x5, 0x6, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), r2) r11 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000ac0)={'ip6gre0\x00', &(0x7f0000000a40)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0xff, 0x6, 0x32, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7, 0x8, 0x9, 0x1}}) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r10, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_VERSION={0x8, 0x2, 0xef81}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r12}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x58}}, 0x4800) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000c40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r13, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r3, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000d40)='nv\x00', 0x3) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, 0x0, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x20000010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001180)={r5, 0x0, 0xdf, 0xe3, &(0x7f0000000e80)="146b3b845a91258614a3b5171bd1fa73bea7b1c0122fda3f0271f84f5117b982513c02d9feec40310debcf5388b5de832f8c8b3549d7e336615af4313510f146b36c877f854a87ee92282107df4ba2184557e7c91cca2f6a24926e3b5b75ec1ff0279b6ceef3e2c7fb8ed485769042a13690bdc5f587f68a1b2a453bb619cab49517296a032c9bf45c85a36311272f77c399340ae28b59d44ae04eaedc9d6a97e4c2f87c3c12482386a4fbe1c4b19d1f5b628d7f2dddb663fe7ecd4be823c5b043455695a599b7e5cd461fa156032e5d34be7f7196c2f293ca7b4ffad01299", &(0x7f0000000f80)=""/227, 0x3, 0x0, 0x13, 0xb5, &(0x7f0000001080)="6b1eeb85ca84de26fb3db3f1d780515b3db061", &(0x7f00000010c0)="9548826502680b0b7e490b0a1259677563bd996518a93ca5848814e502b902da319993cc7b12e4e27b84109089b83393b831c36ab43e8a70355076b78f06969fb9e823e82ceeb6f92a89f0ae69acbdaaaaa4df1418520bf0734f75c4ef44a2f047aeb242ab194b5e72d73076160cb1802f4490f58129386338b4fbda931c66056ed3f9fbbc4efdd0dfae6f8843776ecac8d9d3f5b438d26fbe504972984bd2a24c7a26e2ef76fa100e5d67e8ff863b78f6125982aa", 0x1, 0x0, 0xfb0}, 0x50) socket$packet(0x11, 0x3, 0x300) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000001200)={0x3, 0x3, 0x5, 0xffffffff}, 0x10) 994.365991ms ago: executing program 4 (id=3549): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a1150001006400142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000040), 0x4) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x1c8, &(0x7f0000000340)={@multicast, @random="777de85bf4dd", @void, {@ipv6={0x86dd, @tipc_packet={0x2, 0x6, "c0ffc8", 0x192, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x12}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@dstopts={0x89, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5a}, @pad1, @enc_lim={0x4, 0x1, 0x29}, @ra={0x5, 0x2, 0x3ff}, @enc_lim={0x4, 0x1, 0x4}]}, @srh={0x2f, 0x8, 0x4, 0x4, 0xe3, 0x0, 0x6, [@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @loopback]}, @dstopts={0x5c, 0x8, '\x00', [@jumbo={0xc2, 0x4, 0x908}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xfff0}, @enc_lim={0x4, 0x1, 0xb}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @hopopts={0x16, 0xa, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0x3, 0xffaa, [0x6, 0x9, 0x7, 0x5, 0x5]}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}, @pad1, @enc_lim={0x4, 0x1, 0x6}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x0, 0x2, 0x1, 0xf8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @srh={0x33, 0x2, 0x4, 0x1, 0x93, 0x50, 0x0, [@mcast2]}, @routing={0x2f, 0x6, 0x2, 0x40, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @private0]}], @payload_conn={{{0x1a, 0x0, 0x1, 0x1, 0x1, 0x6, 0x3, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x5, 0x0, 0x4e23, 0x4e21}}, [0x0, 0x0]}}}}}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) socket$inet6(0xa, 0x3, 0x20) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_smc(0x2b, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x36) syz_80211_inject_frame(0x0, 0x0, 0x0) 905.025484ms ago: executing program 2 (id=3550): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x17, 0x5, &(0x7f0000000040)=@framed={{0x64, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb}}]}]}}}]}, 0x78}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)='y', 0x1}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8}]}}]}, 0x3c}}, 0x0) close(0xffffffffffffffff) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000400)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000000c0)="02", 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r4, 0x1) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000)=@assoc_value, 0x8) (async, rerun: 32) socket$inet6_udplite(0xa, 0x2, 0x88) 752.046502ms ago: executing program 1 (id=3551): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x45}, 0x48) 711.839882ms ago: executing program 2 (id=3552): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0102b2b760430000000007000000240001800008000700"/38, @ANYRES32=0x0, @ANYBLOB="0600050000000000"], 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x49}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000008}, 0x4040000) 696.533163ms ago: executing program 0 (id=3553): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="000000000f000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4}, 0x90) 620.139868ms ago: executing program 1 (id=3554): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800007a85000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) 569.907611ms ago: executing program 2 (id=3555): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000080)=ANY=[@ANYBLOB="c40000001900f3fe0000000000000000fe8000000000000000000000000000bbac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000b86b6e0000000000000000000c000800080008e1ffffff"], 0xc4}}, 0x0) 551.916073ms ago: executing program 0 (id=3556): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000004107040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) 503.799605ms ago: executing program 1 (id=3557): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0b140000001000010000000000000000000000000a140000001100010000000000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000004000088830000000000000000000000003482eb5bf3d99e10ea8fd4538e4992e52efa2006b6fa66eadc6509c5f3e4fcd8a649ebb03d10c06352f4875ed75f04dc8a4d5f8e027c744f6bcb87e21c9a02cf46e2a8e4f38b38f924ca850b742994d1705def094687873d84570403", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000000000005000a00f7000000"], 0x44}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x2b, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000eadfee035b3d2f7744ada10327fab0564180adeb6109ddf0f3de07767f23ac4b24ec596d612d1391a8ba4dbd236b5eb75bca7955e3125d3beebc45cc505305bbb8ed3cb9537b52f47e1c5d26bad27735b7d64eb37691cebf3eba2b4ca3ee35019a26bcd19477850dcc3944", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000bb000000bf090000000000005509010000000000950000000000000085000000d1000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000454804818500000082000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000b00000085000000060000002c73c0ff010000009771200010000000bf91000000000000b5020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x32, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaabf7d132b5a64080045000024000000000811907800000000000000000000000000109078020000000000000062e48ffc7a3d99c776b0d1f178ac35184bad9a0bf04849003989ed439b43323fe60b2f5d48c665f347978c4d52e10b18b184ec7dbbaa7b99984d"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000040), &(0x7f0000000500)}, 0x20) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) sendmmsg$alg(r6, &(0x7f0000001840)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000040)=[@op={0x10, 0x29, 0x37}], 0x18}], 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1, 0x0, 0x9}, 0x20) 444.237ms ago: executing program 0 (id=3558): setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x66, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6002adf700303a00fe880000000000000000000000000001ff020000000000000000000000000001030090780000000060fd90630000000000000000000002000000ffffac0b14aa00000000000000000000ffffac1414aa"], 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd02000300"], 0xfdef) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, 0x0, 0x0) getsockopt$netlink(r2, 0x10e, 0x9, 0x0, &(0x7f0000000200)=0x1a) ppoll(&(0x7f0000000040)=[{}], 0x1, &(0x7f0000001340), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x27, 0x80000, 0x5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000880)={'tunl0\x00', &(0x7f0000000ac0)={'tunl0\x00', 0x0, 0x0, 0x7c8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @local}}}}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000180)={@remote, @private=0xa010102, @private=0xa010100}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1a, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, 0x0, 0x20000007) bind$alg(r3, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) 440.222016ms ago: executing program 1 (id=3559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x361342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200500000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002400038020000080080003400000000214000b"], 0xe4}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\twww'], 0xa) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006272696467650000180002800c002300000000000000010005002a"], 0x48}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x4) (async, rerun: 64) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x1f, 0x76000000, 0x1b, @local, @rand_addr=' \x01\x00', 0x7800, 0x7800, 0x85e0, 0x8}}) (async) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000009000)={0x0, 0x0, &(0x7f0000008fc0)={0x0}}, 0x0) (async, rerun: 64) socket$inet6_sctp(0xa, 0x0, 0x84) (rerun: 64) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendmmsg$inet(r6, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000240)="2720120a14554f11caa3ad922cce7cc4a9fde077c27ed8c14094a0f35b34801aee561055d8a5fd2d45c26f1ff512feb477fb7367ffc74f2ab87b8f63da41aac68010e3e69bf632c25c6431cb1cd657211a8974ac68e4488d6a022816dd431cd5d65782d922426dfc88ee4ccd4674290b89951671bc4df7fcf75d7c05f38cd08d88a1688d39ed3caecc370ac38351ce99fb4c60cadce875c52dd5e176322d483c022f68b541f2ee4fa6fa4a4867bbf7f8a4479c936b7553c3a96d377efc0a8f9c3d51c1d3e6d178c1a0985eff3560fe5fcab20e56a02b2bd553e40b", 0xdb}, {&(0x7f0000000340)="53d2c5fc3ea20257f5ab02e44bcfe6c930c7b603cef156c42750383eb827e9063cb2e7f9530d46eed7014e28e154ed46a9c078a5fcf6c93428be3045c3f01ef87e1025b11a7344be8cc585d0a00767b6c68ddbc1e9647a2e7108bc221cd4e382205824964620cb2625964fc3844059850cdb39afa0d2b0a2274655089c76d70b81f7b346d399499de62a4c7ffd5a45596eb29e7d72f7d0af3c2a29b33ce636957ce0e7d6baa34a35808218b5ad7efe789638ec045e534d18701c339b3616b2bcceae19", 0xc3}, {&(0x7f0000000440)="de97beb5e7", 0x5}, {&(0x7f0000000500)="ccc5368cc3932c32dfdb0d3d845730a7a988ee3644a315fa74604d23b14036024ee6d591563a1281fad5ac6d864851277cc4c7dee3ecaa8a068e88771e295324534a6bf71529641c775b407cb6abe18741c08b590889213c88f04afede72b997a4cb9c2af0d3959ae3f9c2a4aedcf62b1e172a95212188d356b2fca60499c244545f000c70d2e3d085360b2044050f53e0c97c6be83d945ceab1417239dd2a7ce9f0ae0d3bf482ead242b983d22d26e6f3a76033fb4bb9b427ffb4f2ea039ac84554cf2af593be9617215f26bfed72598fc5735c09aed34a9ccedd82ec99d231f935", 0xe2}, {&(0x7f0000000600)="5a3dba6a995f39fda71888c0a93e1648cfebfa4980dacd80656752ed0adde8378e71f9e9272429b810e1ed25e99b0ce4456c4e754cd8952bd025771bd39378cb5a14d1476c5c45812e452a8e1e735d32bec84c6f368479a5910cd5784b5ec22a43b687727c54b64cffa085519c876e267edea50e66abe77700f4494338b830a1a51d8cb1dcb3f46b16f1b5a13368da7bb1a67b6c5bba633d0ddc2b8b1c76f5472f7728fe81884f8b0f054f08a832c508af75e6277be10d0590d4f61c1190336fb72feb2111017ab1f105138226a295068e02c9d9a94408abb38113", 0xdb}, {&(0x7f0000000700)="d9d9f74282e950bee538aef3b9c1c464f5dc0f070355a4e7e5f660f5da0f55524e1df2134d780ed799a4096db6b41a8e6e8a227a09e1902faffc82e7710dcd8478c5e8a19b9c71c630d51cdb3f5e6e02912f0b27bb97cf5271a8b66a2646939b3989563c3dfeb1", 0x67}], 0x6, &(0x7f0000000940)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @broadcast}}}, @ip_retopts={{0x158, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0xd6, 0x3, 0xf, [{@empty, 0xc}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x6}, {@multicast2, 0x2}, {@multicast1, 0x8001}, {@multicast2, 0xd3dd}, {@private=0xa010102, 0x1000}]}, @cipso={0x86, 0x3d, 0x0, [{0x7, 0xa, "f9a679de33589a73"}, {0x5, 0xb, "b9e61815b6a76a99bc"}, {0x1, 0x9, "ed6a88aadf1f50"}, {0x7, 0xb, "faf34818c1d0d4c8bf"}, {0x0, 0xe, "06b3d5a48cc13b8cb24efdff"}]}, @noop, @rr={0x7, 0x13, 0x17, [@multicast2, @loopback, @local, @multicast2]}, @timestamp_prespec={0x44, 0x2c, 0xd8, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x9}, {@multicast2, 0x100}, {@multicast1, 0x1c000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x4e, 0xffffffffffffffff, [{0x6, 0x12, "d31d7d2e95ca6f2f3106f9b532bd435b"}, {0x2, 0x10, "940d916da1260a59b2cf00641ec3"}, {0x7, 0xf, "e6fd4a4581937acca65e0fd5f8"}, {0x7, 0x7, "64ada44e15"}, {0x2, 0x4, '=E'}, {0x7, 0xc, "c7c7cc13da54ed4e6e99"}]}, @generic={0x94, 0x4, "d91c"}, @cipso={0x86, 0x3d, 0x3, [{0x0, 0x2}, {0x6, 0xe, "ce69bda24d7ab8728bca19bd"}, {0x0, 0x9, "4b87d8843da507"}, {0x7, 0x2}, {0x2, 0xd, "95788047da77060286195a"}, {0x2, 0xf, "072cf1f7e3c4dbec7154f51e4f"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x85}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x1a8}}, {{&(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000800)="85c53b72", 0x4}, {&(0x7f0000000840)="d2e828ce5d6e82f0f8bd8c03cc005e3d2eb44d010fb403a1b787919bf1201e63ceab9fd7825bfb37b8c02a5b26e0f8c0554790aeecbf40b041bf6fccb56f378990f33e822a8ea84a7a78f6f49dc69de2e62e985e2e48bda28886b00d1d6de31a788a94f6f71d8d16414d018dbc6cabc3dd6b0aa493f4951d0e1ebba2a3060e5a78af69ae0bbeaa1a34", 0x89}, {&(0x7f0000000b00)="b8fd2f6d72f142511264ae6006dce470919375454f2be76fffb327b0d5d4b47752ce7bc1e67379dc1ee1229d8a26c128cedc61ca804a99814383886194fe63ecab09423c439e376b101db597536f4168b5cdec35e7b92a57a7f1c6f3242a99aa117a95c0e5f9aad469f3eba6f4607ab0f3e92725be9ce1be0b2af221d6df9e333df11e81269b8479320ea2f2d61951ba9dc3254cdf6d9143f720141eb0b1744b8c95087b04a8b77b0be6f618d0695281e8b6b58401bd40f6aed8dc53", 0xbc}], 0x3, &(0x7f0000000c00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x30}}], 0x2, 0x800) (async) accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x0, 0x800) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f00000004c0)={0x18, 0x0, {0x4, @multicast, 'pimreg0\x00'}}, 0x1e) (async) connect$llc(0xffffffffffffffff, &(0x7f0000001d80)={0x1a, 0x339, 0x5, 0xd, 0x8, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x10) (async) socket$inet6_udp(0xa, 0x2, 0x0) 307.63818ms ago: executing program 2 (id=3560): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000c00000203000000020000000000001200000000000000000000000d02000000000051"], 0x0, 0x40}, 0x20) 270.02191ms ago: executing program 2 (id=3561): unshare(0x30000) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x24, &(0x7f0000000000)={@ifindex=0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 32) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r2 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) bind$unix(r2, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r6, 0x0, 0x39000, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x3ff, 0x7, 0x9, 0x3408, r6, 0xe5c9, '\x00', r0, r5, 0x1, 0x0, 0x0, 0x7}, 0x48) (async) splice(r5, 0x0, r3, 0x0, 0x408cd, 0x0) splice(r5, &(0x7f0000000040)=0x6a, r4, &(0x7f00000000c0)=0x100000000, 0x7fffffffffffffff, 0xa) connect$unix(r6, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x44, &(0x7f0000000940)=[{&(0x7f0000004ec0)="66d5ab9e55cf218206c99fe603b6c389ff198ded7af6f4f6dca9aa266aacddfbc047d138d7044f40d67a82f6f6aa37c60d1ba03fe118d6e3b66c062d2d2d6be6be452df40eb6964652fba980db537f016e5c178ec0bd80ecdd5ac6a8a3b66286087b587272c01474bc3b9cac5d1deefe8c30060d8f39cd2778c1c6da29be7af903ac872c4cef4c09780789b9a3077c6678ec377fdee7a28f93fabb51c997ec47f08e78d69c5e1e6d27f3cdc0dac7a3faa408346549939f19505bf3452ccc5bec72b34dcea036e3206530774eb8a246374a584612720b06ada5c2e1766e518ace7ddf7af88404a5b97aebb0fe580707d16878531cce141c0ec42a61ac745188f72042a63a7b6c8e046646e504efedce2ecec54cfbd7f832390446e907b328c6f6aeeea521328a111b8e55fa275c3679c8a9cdc0fdb45efe6dfe5307202eff90bbcb218be7dbbe94e8d81e9637ffdaf54cd2580ee12ab4cbd57784b636c3ab99b23d973516cc504443dd63c24f3082b52b48b1c2376c0ff640924fe68c673944d115a7dc6a17514eeb1d1f3f7e5a84be9c5791a2aacbbb1f99ae31027ee941f8b3766aa5af174febdb2ea83dd29bed4edf1556f5ee39f8d354e639d8f49478c27736bfd7095b7937609a6b42e594a34f06b8b17cccdeab4c730b9e8f65e1bcb169bef465606a834866f88021a63768a30d6ce35f4ca28d19e50f59137c4cc7de738edbae0560c7e099e17ed3a1ae130cec5a57ac19e8719efb679c00cf61769c1ae0cea239a6b7b8d4d7d04e38cfbf140ef77434ce6081d341e924c07005b19b8a955426abba0d308d01bbfb7c2811c962e7e2d341c3bdec24456b21c0cec37a5b227ef764b14b37d29e176bb9ec863498cbcb84b00dc14620ec88892dfc0d7e757219e9993cbb50ccbb1445dc379e0051ecb6e6be82ee340558234c6dabc56b7ce18485b0606201719558b2ded1694267108df9666d983bc836f550e089fd73565a6ec967ae4e6c908f83e6361182764fa73ccc664228a0b02160466ca40f9d53b33fdec9bc2bb5c47a9558326d5e222a56f57344470c13dc61b3d2eb3d23b0939ce5bafcaac0fa41d9dc1aee44efc1837bc240f79800e130f4d4c4006d0a007f9fa8254d4fcc91042bdeeab871a8aee77227e11545ac645e97b946bd895a8d92ed716db9d2063a4d2c9a2318780c820303e871f5bfd61cf4b7626770cdb108eaa58d1d4fad51c2526a2a7010ad9cf249216e79ce5ce4853b18881e1fe1b37de38671ecb73a1fdcd476e7afe66475d6274332179df83a294e1fc33574dcc759cb72789dc27c16d60d24ee5b4b47a0123ed5ef66b0652c3779f64c8e75896b1b80ff45a4c5b7b1dc192bf94581633e29bc071ca53677a48fffdf76104d6f55548cf684a6e4b79014bdcf60dea0f062abf4e455e9a985dbc563f67c13427465119995fca58b9333e842849e866ed88c03c5ea92d4f4f47d14e17ab1d0ae660767f74252cc9b70d0607b9c37ba58a3bd10b8311c7404f99b409ca2ba43cc7422126ddbd7874b988d125cdfb95f7e252c68f9764cbd0f47ecec4aa740166fdf567f11deb1eed2bc9f70fd728b041583da9d634151a706c04c4d29ef6afad2874ab6d317c3a81f8514b95c0c67c0eedef6c17457bb3f4d380e61c6f93657b497ff006c7c6aded2ab28c82b0a1b3f5e85a62941ad46b96080693a1b7845ae290fc2fc34bccc5317fc9dfed69061057afcbe03e64b83f5b286fed2c9a1b527418fe1b49bd6f1b6e1f1c8714a14245247eb70a74042dd4329d2ec966de11ccd8a665bdf8c7969064a0c864c5bbba95ae5abb7cd21268e631224cffb1e37d57f0f6c4be35e33b4f98242610da46561e8e231dd560f340eb90ec4118081dce2a35f684010c3f70fe5302fae60bb32fbedb02a974d68634f1bcf58ac6a7310b1a49da1d6bf05df314968cf412dc526c12f5b5ea1d9fbd41fa987d29dd064d1368b722083593c0c679ff6d352507907da236b7a363128faf9d8edcbea73501552254a496c89aee6c4741253735b8d601c4fd0c11a030355ed5f9da8c71c7f8e718b0d0f8e90cfcfcb9566b242bca546e9565cc5010c1da3359aaffb81d9175faf81e72e79a18a58383b30d162d348b0519b8bb76509f7ceed8fae1c1b16910e49992f0e453b1ab8dfa0bf3fa9f9ba5b3c68152a7899b57ce01a6c77430043a7491ee451c637cc67cb531bc400e827187c56e24d9508ea7bd9ea7127d160ed1a75ae573885694c93dbf3719fd9ce4fe1ba8394c21335f419e1b96a0bf5125737463d62163b30e26508dbaf0240eeee12961f7d29a59baa97b3253de6e423a876f7709662c5991b4da0ba195732186d9b8c8f2e2f303c8a59806b989213eff3344ba6988e8ca30d008144717bdd46520a74d04a76b16600fba4d4bbfe3fbd02ce768c2e26412ce2b543c01b3d18c58e0b92870fe7acf2d22076d156b3ff6cab1041bbdea67bd424e14c5420c4b5dee57f209e60deefeef9459785733e3228cc7f0805338bb7d18561acbf3ad6e44621ac4da81ed53887e960724020287ac572000a6677d727ad5581d0f71609761a91a4adc41aa255ad83505d7dda1996ca89dd3fbee5c40231dedc31bbdc39991c74126dbc9ac8dfc6ab2ad604c55d3546b06cae44e9f0a1a0af5e202cc5f15850ce00922ce919e45d5770c91bff7efe5f25c392a58cc90c04cf5e9036689ff48988095fdaa173b8d4ce2a06af7f2ad7b3f54f3febf76f40f4349a3eb19b47f3ce21ee21fbd130dbf5065c1c519d1de5515703af11722136b74531440ca4fd2b04e4c3fed1ebd0ff3c00025eca92b80e7d97c59605a79241e9ff3abf6da5a80378738533ac3614d8a4ce1dba391f0a3706f337a46ae7cc689ed4bebaa9d9e69ac088e9ced8c74d8fbb2673c04a6802f264d592385ab7ad660756b4f6d9f262e41f0c5c56672b79e344518b1c7ff398e28e79402695f29444e005bc8b8e4e3cecde7ada78ca754bcdf9ffcc6bdfd8f7502a2abeab9dcbe003f97f8bca96446f57efa2edd4c36f618a571c8f788ca309f29bf7181f777daf51b0c422c4e4df00662577a21a75f321d1f77fa948015e3affe1a4feb7b71227dc0568a91d774e58f92795b0d3d4ae0ba4340e1553a9bd90594b06672c84120d61bd5b0f37cb53de0cd364ed232c3b18bce14ef95782f28921d37bdc349434b06a1b89a1bd7822c5d17b192355c435d8cfcc4280a55800b997f6adbf2ccc3ac2b8e5a450622cb5fd518a106808efe19933699a789276a719a39c8fff75fdff087972706a33dc8881c7816f681a474264a03928cd864d8cf2ce8f2f4d17350da74d07269ddf3d44a976c70d99df8673e2823d259d41ffcc8165b95e83e0ac562c1c535bac8ba6b6bc3e71d67866ca720367ec5af1cbeabebe34caf0ac534b9b960ee0d9ec878f9619238340a4dc3a19d25dd50121a09efd75caf002b6610039f552afd3b164253af75673f311bb527ff2ed882f3faee3d5839ea99343f4bcc450ab54932e41189b16e1284b9993159ef66ab82e242b3749523d3297f693aff5481c8c3fde2fbf21e712a9dddab6d507ec85384590503ca2f978c7cb590f4d3375cd03668131419ff388b9e5cfbbfdfc15b8be41c0a1ff4a9a4fa88ebf7a7b101850799bdf853673d31d88608dd160cdff447a74cf34c59596ff5e47056dc1da834d9f73e83a2bf6906b421563f94e49e64b1c25e1d7ff477caf6affb204c753dc8156fbe0461be56742eda22c5ca7fae5e743c61cf6f4a9a92113030ed31e77d90bbea051cabd4da2de402646137ec57fdb606bf56c7b2878a79dc46739cfce5db262918cafefdbea5445cb7b81d64b07ef527b3f913c1c8b2181319eae863282eb6c13f9d5f2522c7340976807641d4ea7c8e30cbbe5218db2d8406b1011c4efa62edbf2080a38b078b5d5b16b87d1c63f9b3588e08efa21c8b6a89492c8fde4f2eee163089e949b210d779e2dbd58d8aadb19b92aefd2f93e8e201153cd0a5dd313ce798cf5dd566eb495b1ebb693cdf99f72f26178bf94a7996494210511371acd1b3147568a671118829ccaa29aa94f901f19403ae48d861801412f341002cbf06d870d8cfd9806bfd308a1e56086451bcf8e56ee348904d1ed18295baf735758adf9f87e75712b917b1e5615831813338c279e57b01b320e8d3e7c2126128601fd4b33b1249e40b537a3eeadb2519ad800d38c7c7040a3b2c8ab28d703675a4bfe07e547f95bfcf8fa986821899a6e465edfe494b186f663edeab4a3fb2c2e80b46b9b51fe4510f37d1da52ae422c5a8507b90068002a07b6c36b2a57d2476134c9aad1b855194bbc863e711baeb6c212e8f46dd223345b5516b5af10d032c3d0a5bd2c505b3218a2826f1c374160137f9b1d5471b8806aa2961e1feaf5a397ea2b2835fd23e84741a6a28f2976f605e6c6de950032edd7191eafe1867adb511515be02e6c466ce7bd3f2b49c8c10db10f8757274d40947f4e83b2fdb100e0fa54c4cac25211655ebe78f75bf3eecc27e1bf8e1574cf7297e9df3098d0b7871bc65394e71b5e4771878cc507722fabe2d44a7a2dd30940673b6a418933a796b946ee72e3b22e45df255322bdebaa2167f5fb8ff01b6f0007cdb7e0fb94590f98299d313690c71caa01697922d68c997621e6c4caa5e2d45ab7ec738797845635ff6a6bf0d5486bf7ed0dfdad6d77f152ddd7caa6a7d2c65a76e91993a658801b038298099673dc1e59d07840b4cb1049c640f453b78c62f539c5ebe16aa3f1f34004e985c0d15eb816b033a83e4b90c15e30aca42788e61906e3680de48551c3660b02857211a57b9e4e42d7c243c66f3c402ed96dfb677d3a8a49891cdb8f863d0464ae9501d6466a041680f75072d35ccc845e69eb76f980c48a2f76c10afd6f384af5278d520f618c7adae761d7a05c0137226e336089a0bb9cc8d2629d33f06148133493dd480921cbc8cf4f7724103522fbe8841b5d098102961544571b607471001baceb1e5de23af80ec8e53636804d4d699e555b26228f8ca8d88ae5a9d20a620b5b197748649fc5226f852ac17cdbac938811171fc5116408b876f93825d126a29fcd5fc29873b402edb65fff97331f00fa61c7d2fccba56e34807be5173e3a63ab0a7f9b63aa0da712f36d844685eb263b3d946abc2d571e51982a6f7ab6fd39e3504900179e537905b4e10a432e35cb286311d6905c4604004d22420245e2fbf8241ca32c4ebe9f1e138937124c80379bacffa84c03c6da30ce1585e02c569dee609064a9b6229fd620766b59884e2404fee3f960a4e1879d7228fc3c2fa469da1b1dc8cc056589e013acba48889554c9122bcbbc1f7cc8af49cce9daf8740d4de3dad601dcf684e16c39daef89e6d08e43d4fe8e7a0ab095e3ac89cb6868abb10fdce7ec2a02bb54bb5e2f2300de6c4bc255e18aeed36db929cb1833608edad967366a4183fc0f29206bf5c716ec95a3a69a16a393070d1285dffc31cec3e61da562304b1ea23108aaa262a9e2e41c3705c16c0feb4192fd47f3d7f0365a3491322ba267699ace10a4760239215dd0003dc73219ab45abfa21b763a24dc5a8a746bce14ed01012154a13623655fd6e5eee5de28e0eb9629111538e20980c519554c2b0dbf441116af22d46328453de83076774ccb69ba7f09a86826ddefb5fc9809d323c3867244e0daf682a169da0d15756a812562241186650b01ff71e972a0f7d30e23c16cd3b82a6996d3861608347639e613052b88edfdb00", 0x1000}, {&(0x7f0000001e80)="b174229ea5607868626c87363fadc1eed69c0c3ab09884b5714993cb76ac52be22e4de39013a2e4812f63771b76dd79841674580df66c8319980c1047c509ca1dcf248bc604a7e37613b78cc85c0d7c77abced54756d0ced4036af4e260bd40db11727096fb29ccae345a951f1b3cc72534409dd9bd35fc3fc9e60005fa5cdad328159214f96c14ec00a6f18b9adf33e45939130ffff000000000000c08c9bb5cc55fe9699130cbf478f2abe7fde331293a99561a7fc30be372fcc077f121f2fa05bd2a5cab1a2aa23c3db562d8f823c6772704fb1ae0c1295c4ed", 0xfffffffffffffe9e}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4008001) (async) epoll_create1(0x80000) (async) recvmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000006c0)=""/268, 0x10c}, {&(0x7f0000000dc0)=""/4070, 0xfe6}], 0x2}, 0x0) (async) recvmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff99}, 0x12041) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000580)='\x00\x00\x00\x00\x00\x00\x00'}, 0x20) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r9, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000540)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r7, @ANYRESOCT=r3], 0xd0}}, 0x0) write$binfmt_elf64(r4, &(0x7f0000000400)=ANY=[@ANYRES64=r8], 0xfffffe3e) (async) connect$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r10 = socket$unix(0x1, 0x2, 0x0) connect$unix(r10, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmmsg(r6, &(0x7f0000000c40)=[{{&(0x7f00000005c0)=@ax25={{0x3, @default, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @default, @null, @null]}, 0x0, &(0x7f0000000640)=[{&(0x7f0000003e00)="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"}]}}, {{&(0x7f0000000800)=@nl=@unspec, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000880)="dfae2d80ab45b2f40310d34543eccace1444bf4dacf70000000000000004ac90e31e826aafc48edd5b3fd400000000000024d29ab2d090a74ef3ca0fee2b2c4d84c1eaff6cbea49b002dddcde688afb32070c2bde1be01c563f9dc0bf6109cc1420ff55d54620b79981ca2a72b35f598064fec9cd6ff17bd413500"/132}, {&(0x7f0000001dc0)="b3cd49bbebc532318b3c927be9f57ce97f81bc7fa51bb30fd0528e442065a6fd3bc4065ce0215be3d3b3dbce232d21ce2d4936f747e88ca6a74eabd4fd6ebc81f7b6c6e599bd246c699c78a5feaaff77d57f28926de58daa876976640fc1086b1d647f7e16a6f0c96909c4a2c9f5c41d933d96f7a2d418dc44e5c430f8af7df4f21c8adfd362b8d9195de36b2753acf4cb80f0e49fc5575b68a6"}, {&(0x7f0000000a00)="9fd6eb08db642f68e7f5728eec3b8fde8f7b0b503e793dfe900081012981e5ad29c26865c5ce9922fb74d6c23e7912b79f83fe97782ea8aac7f77adcde8bfc7b0643bd2dc1ab985c45f7b5e9700a4cdbed83117e644edca836a3ebb36288ce4e936e1788f9247addb6ccbdb6c1176ae005b7200ecd8109de107f22985dc5965b2d729d46d3ea01f79f797611f3"}, {&(0x7f0000000680)="1e10937c7794d0a041fab4d4d93b0d35ea7328d655e8917a57cc099c9d1a54603055f1893fe589f247a1e722c534eefedaed0c00d7"}, {&(0x7f0000000ac0)="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"}], 0x0, &(0x7f0000005ec0)=ANY=[@ANYBLOB="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"], 0xffffff4f}}], 0x1d, 0x8800) (async) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x9000000, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000b0603000000000000000000000000000900020073797a30000000000500010007000000100007800c00098008"], 0x38}}, 0x0) 214.290316ms ago: executing program 1 (id=3562): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x70}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x840, 0x1}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x51, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0xffffff80}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x2a, &(0x7f0000000440), 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm-aes-ce)\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r5, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r1, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) read(r5, 0x0, 0x0) pwrite64(r5, &(0x7f0000000340)="5da1", 0x2, 0x0) 71.711238ms ago: executing program 4 (id=3563): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x3a, @loopback, 0x4e20, 0x1, 'wlc\x00', 0x20, 0x5, 0x27}, 0x2c) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x10000, 0x0, 0xbdac}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0x3, 0x3}, 0x8) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000140)=@mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x40}, @broadcast, @device_a, @from_mac=@device_b, {0xe, 0x7}}, 0x88a4, 0x36, {0x0, 0x6, @default_ap_ssid}, @void, @val={0x2d, 0x1a, {0x80, 0x2, 0x0, 0x0, {0x5, 0x2, 0x0, 0xa, 0x0, 0x0, 0x1}, 0x400, 0x8, 0x1}}, [{0xdd, 0xcf, "4eb2008a200aaff200a80e3c03def2922036742196c07b016bc96799daf6725f5c79fc8a4f70bbb91f64d62af7bc53db0bd6008c204e2ae8b4bcebbd7095a5afb4f18517f28ce113b36e0ec947f21687d04655917d9afdfc23b231456b51a35c597c0dd020f7f6b4f4f09edac888f5cf827f7e80e71141ce0e52d7e952c9ee2af664e1c18f3791032c6e649b7cee7bb7c399d6452067595f799b0827e822ede04a5863b60648234b2dd6cb0c690d2e13562d16bc9e524c2017b9123d8f92a6c3a222f640aa0b7d26032bb9a4280b4e"}, {0xdd, 0xe2, "0701a3671a481670ddc6759eb88bb096796cb5f17b7466a55b6454095e6c60ba89797f2098ebc5d3c2acfc8df107f1d59dabc077302d419fc2ff5e65eda69452c90de9d3b66db0ee722ee73c3f14620fd8dcb71cc4c9e8ecfa515c9d9c9b6c0d4367f4bf99d722da9d7ca386e96c794a7ae5598a4e60e58b70d653695319d3b1709608f2ffccc877883411827de592393f86e4c0c396d58d7c421b293632dc8a8ad8f39d51b2bf3469dac9e34caa0df597d434b4382cbe7dcf036627ae2f5fd856fd1ffdfa6a316d8f407e4290335a7ad01fb5a909fa7bbc413fb279160c89a42cc7"}]}, 0x1f5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0xc, 0x3, 0x20, @loopback, @remote, 0x10, 0x1, 0xfffffffb, 0xc00000}}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pi6 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%ps \x00'}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x19, 0x9, 0x1ff, 0xfffff401, 0x345, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x8001, 0x4}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x48) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x48) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x4}]}, &(0x7f0000000480)='GPL\x00', 0x9, 0x0, &(0x7f00000004c0), 0x41100, 0x8, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x4, 0x4}, 0x8, 0x10, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000980)=[r4, r5, r6, r7, r8, 0xffffffffffffffff, r9], &(0x7f00000009c0)=[{0x5, 0x3, 0x6, 0x6}, {0x3, 0x4, 0x9, 0x2}], 0x10, 0x54}, 0x90) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000b00)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, {0x2, 0x4e22, @multicast1}, 0x8, 0x0, 0x0, 0x0, 0xeb0f, &(0x7f0000000ac0)='rose0\x00', 0x10001, 0x101, 0xf}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000b80)='btrfs_handle_em_exist\x00'}, 0x10) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r11, 0x84, 0xb, &(0x7f0000000c00)={0xd2, 0x10, 0x1f, 0xe, 0x8, 0x9, 0x9, 0xc, 0xdd, 0x40, 0x4, 0x0, 0x0, 0x7}, 0xe) write$cgroup_int(r10, &(0x7f0000000c40)=0x3, 0x12) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r11, 0x84, 0x1e, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) socket$can_bcm(0x1d, 0x2, 0x2) connect$qrtr(r0, &(0x7f0000000d00)={0x2a, 0xffffffffffffffff, 0xc003}, 0xc) r12 = socket$inet(0x2, 0x0, 0x6) ioctl$FS_IOC_RESVSP(r12, 0x40305828, &(0x7f0000000d40)={0x0, 0x4, 0x6, 0x9}) r13 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000d80)={{0x3, @bcast}, [@default, @null, @remote, @null, @remote, @null, @rose, @rose]}, &(0x7f0000000e00)=0x48, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r13, 0x40049366, &(0x7f0000000e40)=0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001000)={r9, &(0x7f0000000e80)="473ee4ee8dd431044f5427e27bd75ed76f20e0ae95c5b3d78eee3c5f83a81e1b5f6d03a23c32f9d3c4fa161d7707a374f49836c60d59d9a7d8b04ae39617ec225d7df4e98a6de5869fd915bf8e2c0011c6573b7d719f598b1c96bb09a92bdfe2ee9b50ac2f6ae770ccce848460778572d5b5762ab674b6db66e6f98b470683887b7ac703466375fdd355fb25cb18889a9cbacdcd0a799125117ee2b7924f91fcbfed4901a8cbaa986013", &(0x7f0000000f40)=""/136}, 0x20) syz_init_net_socket$ax25(0x3, 0x3, 0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000001040), &(0x7f0000001080)=0x4) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000010c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @empty, 0x4, 0xc3ef, 0x6, 0x500, 0x9, 0x600000, r3}) 39.793581ms ago: executing program 0 (id=3564): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x90) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000580)=[{&(0x7f0000000a40)={0x1c, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}, @generic="f4"]}, 0x1c}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010c00000000000000000c0000000c00038004000380040004000c00018008000100", @ANYRES32=r7], 0x2c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYRESOCT=r8], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0xc4) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r10 = socket(0x2c, 0x2, 0x10000006) setsockopt$RDS_CANCEL_SENT_TO(r10, 0x6a, 0x4, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000fc0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 2 (id=3565): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000013000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4}, 0x90) kernel console output (not intermixed with test programs): dge_slave_0) entered blocking state [ 178.176451][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.183803][ T9352] bridge_slave_0: entered allmulticast mode [ 178.199024][ T9352] bridge_slave_0: entered promiscuous mode [ 178.208581][ T9352] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.216046][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.224530][ T9352] bridge_slave_1: entered allmulticast mode [ 178.235034][ T9352] bridge_slave_1: entered promiscuous mode [ 178.301298][ T9462] netlink: 'syz.1.1289': attribute type 4 has an invalid length. [ 178.351512][ T9460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1288'. [ 178.403514][ T9352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.426268][ T9466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1291'. [ 178.509166][ T9352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.536420][ T9466] netlink: 'syz.1.1291': attribute type 1 has an invalid length. [ 178.544448][ T9466] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1291'. [ 178.553992][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1291'. [ 178.579403][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1291'. [ 178.599707][ T9469] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1291'. [ 178.688753][ T9352] team0: Port device team_slave_0 added [ 178.705688][ T9352] team0: Port device team_slave_1 added [ 178.798839][ T9352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.822131][ T9352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.857788][ T9352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.886229][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1297'. [ 178.913779][ T9485] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1299'. [ 178.922552][ T9488] netlink: 'syz.1.1300': attribute type 4 has an invalid length. [ 178.924403][ T9486] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 178.956075][ T9352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.963097][ T9352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.025755][ T9352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.086280][ T9493] netlink: 'syz.1.1302': attribute type 4 has an invalid length. [ 179.230028][ T9352] hsr_slave_0: entered promiscuous mode [ 179.251663][ T9352] hsr_slave_1: entered promiscuous mode [ 179.258683][ T9352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.266580][ T9352] Cannot create hsr debugfs directory [ 179.286344][ T5114] Bluetooth: hci1: command tx timeout [ 179.577389][ T9520] netlink: 'syz.4.1311': attribute type 4 has an invalid length. [ 179.594028][ T9519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1310'. [ 179.801509][ T9352] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 179.821477][ T9352] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.862544][ T9530] netlink: 'syz.1.1314': attribute type 29 has an invalid length. [ 179.882927][ T9531] netlink: 'syz.2.1315': attribute type 4 has an invalid length. [ 179.957965][ T9352] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 179.972521][ T9352] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.125923][ T9352] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 180.152352][ T9352] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.291759][ T9352] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 180.304123][ T9352] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.509644][ T9352] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 180.530204][ T9352] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 180.544769][ T9352] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 180.561789][ T9352] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 180.949315][ T9352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.018061][ T9352] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.051711][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.059046][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.183829][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.191091][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.306391][ T9352] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.365552][ T5114] Bluetooth: hci1: command tx timeout [ 181.653553][ T9352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.707371][ T9596] netlink: 'syz.1.1334': attribute type 4 has an invalid length. [ 181.762573][ T9352] veth0_vlan: entered promiscuous mode [ 181.798806][ T9352] veth1_vlan: entered promiscuous mode [ 181.902004][ T9603] netlink: 'syz.4.1337': attribute type 4 has an invalid length. [ 181.904479][ T9352] veth0_macvtap: entered promiscuous mode [ 181.948410][ T9352] veth1_macvtap: entered promiscuous mode [ 182.014015][ T9352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.034869][ T9352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.059871][ T9352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.094470][ T9352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.134961][ T9352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.148078][ T9352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.163509][ T9352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.184595][ T9352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.185554][ T9617] netlink: 'syz.1.1342': attribute type 4 has an invalid length. [ 182.195250][ T9352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.215368][ T9352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.225676][ T9352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.237667][ T9352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.258730][ T9352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.309965][ T9352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.343405][ T9352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.368759][ T9352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.379900][ T9352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.390028][ T9352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.401707][ T9352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.423814][ T9352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.445023][ T9352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.465179][ T9352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.483016][ T9352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.494567][ T9352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.506079][ T9352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.518359][ T9352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.554456][ T9352] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.593978][ T9352] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.618460][ T9352] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.649664][ T9352] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.946441][ T8528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.984425][ T8528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.048553][ T8528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.049902][ T9652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.068345][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 183.070477][ T8528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.252459][ T9663] __nla_validate_parse: 7 callbacks suppressed [ 183.252481][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1357'. [ 183.317823][ T9667] validate_nla: 1 callbacks suppressed [ 183.317846][ T9667] netlink: 'syz.0.1246': attribute type 33 has an invalid length. [ 183.445157][ T5114] Bluetooth: hci1: command tx timeout [ 183.513642][ T9679] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1246'. [ 183.535107][ T9679] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1246'. [ 183.551128][ T9683] netlink: 'syz.3.1361': attribute type 4 has an invalid length. [ 184.059715][ T9720] netlink: 'syz.0.1370': attribute type 29 has an invalid length. [ 184.080070][ T9720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1370'. [ 184.117597][ T9720] netlink: 'syz.0.1370': attribute type 29 has an invalid length. [ 184.155344][ T9720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1370'. [ 184.204273][ T9731] netlink: 'syz.0.1370': attribute type 29 has an invalid length. [ 184.225360][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1370'. [ 184.527961][ T9743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1376'. [ 184.560366][ T9743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1376'. [ 184.658311][ T9750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1379'. [ 184.717948][ T9750] netlink: 'syz.3.1379': attribute type 1 has an invalid length. [ 184.742309][ T9750] netlink: 9348 bytes leftover after parsing attributes in process `syz.3.1379'. [ 184.767432][ T9750] netlink: 'syz.3.1379': attribute type 1 has an invalid length. [ 184.790128][ T9748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.898967][ T9748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.909032][ T9767] netlink: 'syz.1.1384': attribute type 11 has an invalid length. [ 185.015706][ T9748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.086312][ T9775] IPVS: Unknown mcast interface: vcan0 [ 185.188902][ T9781] openvswitch: netlink: Tunnel attr 0 has unexpected len 13 expected 8 [ 185.315616][ T9786] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 185.351879][ T9786] netlink: 'syz.3.1391': attribute type 8 has an invalid length. [ 185.403554][ T9786] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 185.714100][ T9802] Bluetooth: hci3: invalid len left 7, exp >= 132 [ 186.265483][ T9837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.342663][ T9843] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 186.381500][ T9842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.391819][ T9845] netlink: 'syz.1.1412': attribute type 4 has an invalid length. [ 186.460531][ T9837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.532426][ T9837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.707525][ T9920] team0: Device sit1 is of different type [ 188.076991][ T9941] FAULT_INJECTION: forcing a failure. [ 188.076991][ T9941] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 188.114799][ T9941] CPU: 1 PID: 9941 Comm: syz.3.1443 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 188.124952][ T9941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 188.135155][ T9941] Call Trace: [ 188.138442][ T9941] [ 188.141382][ T9941] dump_stack_lvl+0x241/0x360 [ 188.146095][ T9941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.151314][ T9941] ? __pfx__printk+0x10/0x10 [ 188.155954][ T9941] ? __pfx_lock_release+0x10/0x10 [ 188.160999][ T9941] should_fail_ex+0x3b0/0x4e0 [ 188.165703][ T9941] _copy_from_user+0x2f/0xe0 [ 188.170316][ T9941] copy_msghdr_from_user+0xae/0x680 [ 188.175534][ T9941] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 188.181364][ T9941] __sys_sendmsg+0x23d/0x3a0 [ 188.185998][ T9941] ? __pfx___sys_sendmsg+0x10/0x10 [ 188.191141][ T9941] ? vfs_write+0x7c4/0xc90 [ 188.195624][ T9941] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 188.201971][ T9941] ? do_syscall_64+0x100/0x230 [ 188.206781][ T9941] ? do_syscall_64+0xb6/0x230 [ 188.211472][ T9941] do_syscall_64+0xf3/0x230 [ 188.215988][ T9941] ? clear_bhb_loop+0x35/0x90 [ 188.220682][ T9941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.226602][ T9941] RIP: 0033:0x7fde49375bd9 [ 188.231036][ T9941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.250677][ T9941] RSP: 002b:00007fde4a1ad048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.259147][ T9941] RAX: ffffffffffffffda RBX: 00007fde49503f60 RCX: 00007fde49375bd9 [ 188.267130][ T9941] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 188.275110][ T9941] RBP: 00007fde4a1ad0a0 R08: 0000000000000000 R09: 0000000000000000 [ 188.283089][ T9941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.291069][ T9941] R13: 000000000000004d R14: 00007fde49503f60 R15: 00007fff405f0cc8 [ 188.299159][ T9941] [ 188.673841][ T9960] __nla_validate_parse: 19 callbacks suppressed [ 188.673868][ T9960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1450'. [ 188.704080][ T9960] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1450'. [ 188.724342][ T9960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1450'. [ 188.991510][ T9976] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1456'. [ 189.225583][ T9994] validate_nla: 3 callbacks suppressed [ 189.225606][ T9994] netlink: 'syz.0.1460': attribute type 4 has an invalid length. [ 189.476765][T10008] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1465'. [ 189.499035][T10008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.680070][T10019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1469'. [ 189.859721][T10028] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1472'. [ 189.864365][T10026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.889226][ T5151] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 189.924973][ T5151] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 189.955404][ T2410] wlan1: authenticated [ 189.961634][T10026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.988232][T10032] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 189.988933][T10030] netlink: 'syz.3.1473': attribute type 4 has an invalid length. [ 189.995450][ T8545] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 190.062401][ T8545] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 190.062643][T10026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.071495][ T8545] wlan1: associated [ 190.148676][T10036] netlink: 'syz.3.1475': attribute type 4 has an invalid length. [ 190.314687][T10042] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1478'. [ 190.384364][T10047] netlink: 'syz.1.1480': attribute type 4 has an invalid length. [ 190.531429][T10056] delete_channel: no stack [ 190.551912][T10056] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1483'. [ 190.787495][T10071] netlink: 'syz.2.1487': attribute type 4 has an invalid length. [ 190.908679][T10075] netlink: 'syz.0.1488': attribute type 4 has an invalid length. [ 190.924776][T10078] netlink: 'syz.2.1489': attribute type 4 has an invalid length. [ 191.145512][T10088] netlink: 'syz.1.1495': attribute type 4 has an invalid length. [ 191.205244][T10091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.263663][T10099] FAULT_INJECTION: forcing a failure. [ 191.263663][T10099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.294317][T10099] CPU: 0 PID: 10099 Comm: syz.3.1500 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 191.304591][T10099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 191.314661][T10099] Call Trace: [ 191.317950][T10099] [ 191.320928][T10099] dump_stack_lvl+0x241/0x360 [ 191.325637][T10099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.330858][T10099] ? __pfx__printk+0x10/0x10 [ 191.335496][T10099] ? __pfx_lock_release+0x10/0x10 [ 191.340579][T10099] should_fail_ex+0x3b0/0x4e0 [ 191.345288][T10099] _copy_from_iter+0x1f6/0x1960 [ 191.350150][T10099] ? __virt_addr_valid+0x183/0x520 [ 191.355280][T10099] ? __pfx_lock_release+0x10/0x10 [ 191.360345][T10099] ? __alloc_skb+0x28f/0x440 [ 191.365057][T10099] ? __pfx__copy_from_iter+0x10/0x10 [ 191.370368][T10099] ? __virt_addr_valid+0x183/0x520 [ 191.375505][T10099] ? __virt_addr_valid+0x183/0x520 [ 191.380629][T10099] ? __virt_addr_valid+0x44e/0x520 [ 191.385757][T10099] ? __check_object_size+0x49c/0x900 [ 191.391063][T10099] netlink_sendmsg+0x73d/0xcb0 [ 191.395853][T10099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.401154][T10099] ? __import_iovec+0x536/0x820 [ 191.406011][T10099] ? aa_sock_msg_perm+0x91/0x160 [ 191.410965][T10099] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 191.416258][T10099] ? security_socket_sendmsg+0x87/0xb0 [ 191.421729][T10099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.427116][T10099] __sock_sendmsg+0x221/0x270 [ 191.431807][T10099] ____sys_sendmsg+0x525/0x7d0 [ 191.436598][T10099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.441952][T10099] __sys_sendmsg+0x2b0/0x3a0 [ 191.446565][T10099] ? __pfx___sys_sendmsg+0x10/0x10 [ 191.451718][T10099] ? vfs_write+0x7c4/0xc90 [ 191.456186][T10099] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 191.462556][T10099] ? do_syscall_64+0x100/0x230 [ 191.467419][T10099] ? do_syscall_64+0xb6/0x230 [ 191.472112][T10099] do_syscall_64+0xf3/0x230 [ 191.476629][T10099] ? clear_bhb_loop+0x35/0x90 [ 191.481333][T10099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.487237][T10099] RIP: 0033:0x7fde49375bd9 [ 191.491669][T10099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.511460][T10099] RSP: 002b:00007fde4a1ad048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.519885][T10099] RAX: ffffffffffffffda RBX: 00007fde49503f60 RCX: 00007fde49375bd9 [ 191.527864][T10099] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 191.535841][T10099] RBP: 00007fde4a1ad0a0 R08: 0000000000000000 R09: 0000000000000000 [ 191.543817][T10099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.551804][T10099] R13: 000000000000004d R14: 00007fde49503f60 R15: 00007fff405f0cc8 [ 191.559810][T10099] [ 191.583798][T10091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.669125][T10097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.876483][T10109] netlink: 'syz.2.1504': attribute type 4 has an invalid length. [ 192.321665][T10140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.413988][T10150] netlink: 'syz.0.1517': attribute type 4 has an invalid length. [ 192.535427][T10138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.780227][T10172] openvswitch: netlink: Message has 4 unknown bytes. [ 193.267319][T10195] pim6reg1: entered promiscuous mode [ 193.277450][T10195] pim6reg1: entered allmulticast mode [ 193.363774][T10199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1533'. [ 194.050138][T10234] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1547'. [ 194.699296][T10272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.729664][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.790094][T10272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.858130][T10277] xt_CT: You must specify a L4 protocol and not use inversions on it [ 194.870794][T10279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.999839][T10277] veth1_macvtap: left promiscuous mode [ 195.340373][T10295] validate_nla: 2 callbacks suppressed [ 195.340395][T10295] netlink: 'syz.4.1568': attribute type 4 has an invalid length. [ 195.425740][T10297] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 195.532749][T10301] team_slave_0: left promiscuous mode [ 195.550439][T10301] team_slave_0: left allmulticast mode [ 195.671487][T10308] vlan1: entered promiscuous mode [ 195.685116][T10308] vlan1: entered allmulticast mode [ 195.738379][T10315] vlan1: entered promiscuous mode [ 195.743476][T10315] vlan1: entered allmulticast mode [ 195.790143][T10317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1576'. [ 195.832622][T10320] netlink: 'syz.0.1577': attribute type 4 has an invalid length. [ 196.164523][T10344] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 196.195397][T10340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1583'. [ 196.235951][T10346] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 196.267290][T10352] netlink: 'syz.0.1586': attribute type 4 has an invalid length. [ 196.328724][T10300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.372959][T10354] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 196.489611][T10362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1588'. [ 196.509298][T10362] netlink: 'syz.0.1588': attribute type 19 has an invalid length. [ 196.876650][T10383] netlink: 'syz.4.1598': attribute type 3 has an invalid length. [ 197.034271][T10394] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1597'. [ 197.528508][T10416] netlink: 'syz.4.1607': attribute type 4 has an invalid length. [ 197.710553][T10427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1611'. [ 197.836636][T10434] sch_tbf: burst 0 is lower than device team0 mtu (1514) ! [ 198.042429][T10442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.110021][T10448] sctp: [Deprecated]: syz.2.1618 (pid 10448) Use of int in maxseg socket option. [ 198.110021][T10448] Use struct sctp_assoc_value instead [ 198.138832][T10446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1615'. [ 198.159454][T10446] openvswitch: netlink: Flow actions attr not present in new flow. [ 198.160420][T10442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.236906][T10453] netlink: 'syz.2.1619': attribute type 2 has an invalid length. [ 198.285465][T10442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.356954][T10459] netlink: 'syz.0.1620': attribute type 4 has an invalid length. [ 198.529577][T10468] netlink: 'syz.0.1622': attribute type 1 has an invalid length. [ 198.548476][T10468] netlink: 'syz.0.1622': attribute type 2 has an invalid length. [ 198.563933][T10468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1622'. [ 198.979834][T10492] netem: change failed [ 199.142619][T10498] xt_l2tp: v2 tid > 0xffff: 150994944 [ 199.197445][T10499] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1630'. [ 199.308067][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1630'. [ 199.957296][ T5151] IPVS: starting estimator thread 0... [ 200.066454][T10534] IPVS: using max 24 ests per chain, 57600 per kthread [ 200.281464][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1642'. [ 200.698471][T10566] netlink: 'syz.2.1649': attribute type 11 has an invalid length. [ 200.736026][T10566] netlink: 'syz.2.1649': attribute type 11 has an invalid length. [ 200.783873][T10566] debugfs: Directory 'netdev:' with parent 'phy15' already present! [ 200.791132][T10575] validate_nla: 6 callbacks suppressed [ 200.791157][T10575] netlink: 'syz.4.1652': attribute type 4 has an invalid length. [ 200.890525][T10579] Unsupported ieee802154 address type: 0 [ 201.365829][T10613] netlink: 'syz.1.1661': attribute type 1 has an invalid length. [ 201.386921][T10613] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.394257][T10613] IPv6: NLM_F_CREATE should be set when creating new route [ 201.401704][T10613] IPv6: NLM_F_CREATE should be set when creating new route [ 201.548963][T10618] netlink: 'syz.3.1664': attribute type 4 has an invalid length. [ 201.914634][T10631] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1669'. [ 201.925255][ T5114] Bluetooth: hci3: command 0x0406 tx timeout [ 201.935704][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1669'. [ 201.972380][T10634] netlink: 5312 bytes leftover after parsing attributes in process `syz.1.1670'. [ 201.984530][T10633] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1667'. [ 202.473695][T10654] netlink: 'syz.0.1676': attribute type 4 has an invalid length. [ 202.665892][T10666] No such timeout policy "syz0" [ 202.915645][T10679] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1682'. [ 202.945238][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1684'. [ 202.952316][T10680] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1683'. [ 202.978167][T10680] netlink: 'syz.4.1683': attribute type 1 has an invalid length. [ 203.167639][T10704] netlink: 'syz.1.1687': attribute type 25 has an invalid length. [ 203.229612][T10704] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.239064][T10704] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.240227][T10714] netlink: 'syz.3.1692': attribute type 4 has an invalid length. [ 203.248844][T10704] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.266069][T10704] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.663105][T10739] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 203.742349][T10745] netlink: 'syz.3.1698': attribute type 6 has an invalid length. [ 204.002377][T10757] netlink: 'syz.0.1703': attribute type 4 has an invalid length. [ 204.075299][T10762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.190646][T10762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.232214][T10768] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 204.277250][T10771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.439299][T10777] lo speed is unknown, defaulting to 1000 [ 204.463152][T10777] lo speed is unknown, defaulting to 1000 [ 204.478688][T10777] lo speed is unknown, defaulting to 1000 [ 204.620936][T10782] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 205.147635][ T5151] lo speed is unknown, defaulting to 1000 [ 205.157716][T10777] infiniband syz0: set active [ 205.163985][T10777] infiniband syz0: added lo [ 205.172416][T10806] netlink: 'syz.2.1716': attribute type 4 has an invalid length. [ 205.416402][T10777] RDS/IB: syz0: added [ 205.421963][T10777] smc: adding ib device syz0 with port count 1 [ 205.443773][T10777] smc: ib device syz0 port 1 has pnetid SYZ0 (user defined) [ 205.467103][ T9] lo speed is unknown, defaulting to 1000 [ 205.493857][T10777] lo speed is unknown, defaulting to 1000 [ 206.121677][T10830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.232978][T10777] lo speed is unknown, defaulting to 1000 [ 206.277303][T10830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.355660][T10843] netlink: 'syz.4.1729': attribute type 4 has an invalid length. [ 206.396703][T10830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.601656][T10852] netlink: 'syz.2.1732': attribute type 4 has an invalid length. [ 206.753906][T10777] lo speed is unknown, defaulting to 1000 [ 206.866412][T10863] __nla_validate_parse: 2 callbacks suppressed [ 206.866436][T10863] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1736'. [ 207.125596][T10875] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1735'. [ 207.249020][T10882] netlink: 'syz.0.1742': attribute type 4 has an invalid length. [ 207.329248][T10777] lo speed is unknown, defaulting to 1000 [ 207.406130][T10887] netlink: 'syz.0.1744': attribute type 4 has an invalid length. [ 207.561473][T10895] netlink: 'syz.0.1747': attribute type 4 has an invalid length. [ 207.585045][T10895] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1747'. [ 207.899403][T10777] lo speed is unknown, defaulting to 1000 [ 207.918824][T10907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.116415][T10899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.204461][T10899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.373557][T10777] lo speed is unknown, defaulting to 1000 [ 208.498011][T10930] C: renamed from lo (while UP) [ 208.519949][T10930] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 208.561133][T10933] Bluetooth: hci3: unsupported parameter 64512 [ 208.574979][T10933] Bluetooth: hci3: invalid length 0, exp 2 for type 15 [ 208.686165][T10936] pim6reg1: entered promiscuous mode [ 208.691657][T10936] pim6reg1: entered allmulticast mode [ 208.711609][T10777] lo speed is unknown, defaulting to 1000 [ 209.159969][T10956] netlink: 'syz.4.1766': attribute type 4 has an invalid length. [ 209.177311][T10777] lo speed is unknown, defaulting to 1000 [ 209.874034][T10992] netlink: 'syz.4.1778': attribute type 4 has an invalid length. [ 209.913157][T10994] pim6reg: entered allmulticast mode [ 209.955297][T10994] pim6reg: left allmulticast mode [ 210.041929][T11002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1781'. [ 210.164350][T11006] gretap0: refused to change device tx_queue_len [ 210.186145][T11006] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 210.676863][T11044] netlink: 'syz.2.1792': attribute type 10 has an invalid length. [ 210.727564][T11044] batman_adv: batadv0: Adding interface: team0 [ 210.756510][T11044] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.804480][T11044] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 210.829897][T11040] netlink: 'syz.2.1792': attribute type 10 has an invalid length. [ 210.854229][T11040] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1792'. [ 210.863901][T11040] team0: entered promiscuous mode [ 210.879846][T11040] team_slave_0: entered promiscuous mode [ 210.890206][T11040] team_slave_1: entered promiscuous mode [ 210.912617][T11040] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.925677][T11040] batman_adv: batadv0: Interface activated: team0 [ 210.943524][T11058] sock: sock_timestamping_bind_phc: sock not bind to device [ 210.951827][T11040] batman_adv: batadv0: Interface deactivated: team0 [ 210.966473][T11066] sock: sock_timestamping_bind_phc: sock not bind to device [ 210.974187][T11040] batman_adv: batadv0: Removing interface: team0 [ 210.993237][T11040] bridge0: port 3(team0) entered blocking state [ 211.003734][T11040] bridge0: port 3(team0) entered disabled state [ 211.011884][T11040] team0: entered allmulticast mode [ 211.017390][T11040] team_slave_0: entered allmulticast mode [ 211.023539][T11040] team_slave_1: entered allmulticast mode [ 211.034448][T11040] bridge0: port 3(team0) entered blocking state [ 211.040993][T11040] bridge0: port 3(team0) entered forwarding state [ 211.050611][T11054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1797'. [ 211.059952][T11054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1797'. [ 211.084443][T11064] vlan2: entered promiscuous mode [ 211.164385][T11070] netlink: 'syz.2.1801': attribute type 7 has an invalid length. [ 211.386506][T11086] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1807'. [ 211.434484][T11086] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 211.867542][T11120] netlink: 'syz.1.1816': attribute type 6 has an invalid length. [ 211.901621][T11126] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20001 [ 212.143524][T11139] netlink: 'syz.1.1824': attribute type 1 has an invalid length. [ 212.258766][T11152] netlink: 'syz.3.1823': attribute type 1 has an invalid length. [ 212.297312][T11152] netlink: 'syz.3.1823': attribute type 1 has an invalid length. [ 212.342685][T11152] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1823'. [ 212.608450][T11166] netlink: 'syz.4.1828': attribute type 3 has an invalid length. [ 212.724554][T11166] ieee802154 phy0 wpan0: encryption failed: -22 [ 212.824857][T11173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.917079][T11173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.971994][T11173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.072089][T11188] netlink: 'syz.4.1831': attribute type 4 has an invalid length. [ 215.371209][ T8526] bridge_slave_1: left allmulticast mode [ 215.377050][ T8526] bridge_slave_1: left promiscuous mode [ 215.405321][ T8526] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.501090][ T8526] bridge_slave_0: left allmulticast mode [ 215.517159][T11217] netlink: 'syz.0.1839': attribute type 4 has an invalid length. [ 215.529965][ T8526] bridge_slave_0: left promiscuous mode [ 215.550369][ T8526] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.566730][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1841'. [ 215.745293][T11235] netlink: 'syz.3.1844': attribute type 4 has an invalid length. [ 216.271671][ T8526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.285776][ T8526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.301325][ T8526] bond0 (unregistering): Released all slaves [ 216.475100][T11241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.625122][T11246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.706032][T11246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.741410][T11258] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1850'. [ 216.935454][T11265] netlink: 'syz.3.1856': attribute type 4 has an invalid length. [ 217.130093][T11270] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20000 [ 217.628566][T11261] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.1854'. [ 218.216754][ T2484] tipc: Subscription rejected, illegal request [ 218.667448][ T8526] hsr_slave_0: left promiscuous mode [ 218.699809][T11292] netlink: 304 bytes leftover after parsing attributes in process `syz.4.1865'. [ 218.732962][ T8526] hsr_slave_1: left promiscuous mode [ 218.792661][ T8526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.831443][ T8526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.906084][ T8526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.955329][ T8526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.121365][ T8526] veth1_macvtap: left promiscuous mode [ 219.160009][ T8526] veth0_macvtap: left promiscuous mode [ 219.195342][ T8526] veth1_vlan: left promiscuous mode [ 219.224755][ T8526] veth0_vlan: left promiscuous mode [ 219.568460][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1872'. [ 220.254097][ T8526] team0 (unregistering): Port device team_slave_1 removed [ 220.307355][ T8526] team0 (unregistering): Port device team_slave_0 removed [ 220.424680][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802b697400: rx timeout, send abort [ 220.435583][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802dbf1000: rx timeout, send abort [ 220.444203][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802b697400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 220.459210][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802dbf1000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 220.817893][T11323] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1876'. [ 221.033896][T11334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.092492][T11334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.315517][T11352] netlink: 'syz.4.1886': attribute type 10 has an invalid length. [ 221.613405][T11352] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 221.625678][T11369] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1891'. [ 221.739946][ T5107] Bluetooth: hci1: link tx timeout [ 221.746802][ T5107] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 221.793623][T11377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1893'. [ 221.802514][T11376] netlink: 'syz.2.1892': attribute type 9 has an invalid length. [ 221.802543][T11376] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1892'. [ 222.072061][T11388] netlink: 'syz.1.1896': attribute type 4 has an invalid length. [ 222.455734][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1902'. [ 222.646628][T11410] netlink: 'syz.0.1906': attribute type 4 has an invalid length. [ 222.826467][T11423] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 222.830075][T11419] netlink: 'syz.4.1909': attribute type 3 has an invalid length. [ 222.855541][T11423] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 222.861759][T11423] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 222.877504][T11423] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 222.989097][T11435] netlink: 'syz.3.1912': attribute type 4 has an invalid length. [ 223.058614][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1914'. [ 223.448388][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1924'. [ 223.529386][T11472] netlink: 'syz.3.1927': attribute type 4 has an invalid length. [ 223.546382][T11469] macvlan2: entered promiscuous mode [ 223.551747][T11469] vlan1: entered promiscuous mode [ 223.572131][T11469] macvlan2: entered allmulticast mode [ 223.585022][T11469] vlan1: entered allmulticast mode [ 223.602650][T11469] veth0_vlan: entered allmulticast mode [ 223.617588][T11469] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 223.681020][T11469] vlan1: left allmulticast mode [ 223.690922][T11469] veth0_vlan: left allmulticast mode [ 223.707459][T11469] vlan1: left promiscuous mode [ 223.769927][T11473] netlink: 'syz.2.1925': attribute type 2 has an invalid length. [ 223.781446][T11479] netlink: 'syz.2.1925': attribute type 2 has an invalid length. [ 223.843207][T11490] netlink: 'syz.1.1930': attribute type 2 has an invalid length. [ 223.851316][ T5107] Bluetooth: hci1: command 0x0405 tx timeout [ 224.086489][T11504] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1935'. [ 224.125675][T11508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1938'. [ 224.134656][T11504] IPv6: sit1: Disabled Multicast RS [ 224.369478][T11518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.499941][T11518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.502813][T11532] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1947'. [ 224.609038][T11518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.845551][T11543] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1950'. [ 224.873866][T11542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1951'. [ 225.277622][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1954'. [ 225.339424][T11557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.490948][T11557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.686041][T11579] netlink: 'syz.1.1961': attribute type 4 has an invalid length. [ 225.706274][T11582] netlink: 'syz.0.1963': attribute type 4 has an invalid length. [ 225.972963][T11600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.171862][T11613] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1973'. [ 226.287743][T11617] xt_limit: Overflow, try lower: 0/0 [ 226.306628][T11617] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.473783][T11628] netlink: 1300 bytes leftover after parsing attributes in process `syz.3.1974'. [ 226.688017][T11641] vlan2: entered allmulticast mode [ 226.693186][T11641] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 226.719830][T11641] mac80211_hwsim hwsim18 wlan1: left allmulticast mode [ 226.808084][T11650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.918057][T11650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.470848][T11682] vlan4: entered allmulticast mode [ 227.479477][T11682] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 227.489647][T11682] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 227.766289][T11693] validate_nla: 6 callbacks suppressed [ 227.766314][T11693] netlink: 'syz.3.1999': attribute type 4 has an invalid length. [ 228.064105][ T8533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.093533][ T8533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.316730][T11726] netlink: 'syz.0.2012': attribute type 4 has an invalid length. [ 228.380774][T11728] __nla_validate_parse: 10 callbacks suppressed [ 228.380799][T11728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2013'. [ 228.440666][T11730] netlink: 'syz.0.2014': attribute type 4 has an invalid length. [ 228.555350][T11734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2016'. [ 228.693692][T11740] netlink: 'syz.0.2018': attribute type 4 has an invalid length. [ 228.886247][T11748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2022'. [ 229.198750][T11765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2028'. [ 229.219657][T11767] netlink: 'syz.1.2029': attribute type 10 has an invalid length. [ 229.245168][T11767] netem: change failed [ 229.266637][T11771] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2030'. [ 229.325136][T11777] netlink: 'syz.2.2031': attribute type 4 has an invalid length. [ 229.493000][T11781] vlan4: entered promiscuous mode [ 229.502996][T11781] vlan4: entered allmulticast mode [ 229.814475][T11802] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2039'. [ 229.985090][T11816] netlink: 'syz.0.2045': attribute type 4 has an invalid length. [ 229.997591][T11815] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2043'. [ 230.127162][T11822] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 230.167195][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2049'. [ 230.197237][T11828] netlink: 'syz.1.2050': attribute type 2 has an invalid length. [ 230.205299][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2049'. [ 230.227313][T11828] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2050'. [ 230.371010][T11838] xt_HMARK: spi-set and port-set can't be combined [ 230.452795][T11845] netlink: 'syz.0.2057': attribute type 4 has an invalid length. [ 230.537033][T11851] netlink: 'syz.0.2059': attribute type 4 has an invalid length. [ 232.163581][T11900] 8021q: adding VLAN 0 to HW filter on device bond2 [ 232.197325][T11900] bond0: (slave bond2): Enslaving as an active interface with an up link [ 232.231493][T11914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.339991][T11914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.429308][T11914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.122732][T11948] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 233.207100][T11953] validate_nla: 2 callbacks suppressed [ 233.207123][T11953] netlink: 'syz.1.2092': attribute type 4 has an invalid length. [ 233.401250][T11957] __nla_validate_parse: 8 callbacks suppressed [ 233.401275][T11957] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2093'. [ 233.821381][T11980] lo speed is unknown, defaulting to 1000 [ 233.926767][T11983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2096'. [ 233.965454][T11983] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2096'. [ 234.000404][T11983] gtp0: entered promiscuous mode [ 234.035033][T11983] gtp0: entered allmulticast mode [ 234.199839][T11991] netlink: 'syz.0.2104': attribute type 4 has an invalid length. [ 234.776075][T12010] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2110'. [ 234.815275][T12012] netlink: 'syz.4.2111': attribute type 4 has an invalid length. [ 234.979223][T12018] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2114'. [ 235.026354][T12019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2113'. [ 235.070790][T12019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2113'. [ 235.094046][T12019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2113'. [ 235.196720][T12031] netlink: 'syz.4.2115': attribute type 4 has an invalid length. [ 235.405488][T12044] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.414987][T12039] netlink: 'syz.4.2117': attribute type 4 has an invalid length. [ 235.753771][T12052] netlink: 'syz.1.2124': attribute type 4 has an invalid length. [ 235.915123][T12063] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2126'. [ 235.958455][T12065] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2126'. [ 236.036313][T12068] netlink: 'syz.1.2127': attribute type 4 has an invalid length. [ 236.146497][T12079] netlink: 'syz.4.2130': attribute type 4 has an invalid length. [ 236.454474][T12094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.498347][T12096] netlink: 'syz.1.2137': attribute type 4 has an invalid length. [ 236.574078][T12094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.389697][T12145] netlink: 'syz.2.2150': attribute type 21 has an invalid length. [ 237.523096][T12149] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.570611][T12149] ÊügáG: entered promiscuous mode [ 237.765432][ T5114] Bluetooth: hci4: command 0x0405 tx timeout [ 237.972394][T12177] ɶƣ0GCTw: entered promiscuous mode [ 238.000852][T12177] ɶƣ0GC¦: entered promiscuous mode [ 238.514251][T12203] __nla_validate_parse: 4 callbacks suppressed [ 238.514274][T12203] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2169'. [ 238.539675][T12203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2169'. [ 238.539689][T12204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2169'. [ 238.657745][T12212] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 239.144955][T12235] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2181'. [ 239.154347][T12235] bridge_slave_1: left allmulticast mode [ 239.160877][T12235] bridge_slave_1: left promiscuous mode [ 239.167225][T12235] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.184049][T12235] bridge_slave_0: left allmulticast mode [ 239.193938][T12235] bridge_slave_0: left promiscuous mode [ 239.201840][T12235] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.249870][T12236] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2178'. [ 239.432596][T12249] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 4, id = 0 [ 239.443650][T12248] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 239.882946][T12269] batadv0: entered promiscuous mode [ 239.892458][T12271] FAULT_INJECTION: forcing a failure. [ 239.892458][T12271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.935971][T12271] CPU: 0 PID: 12271 Comm: syz.3.2191 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 239.946210][T12271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 239.956307][T12271] Call Trace: [ 239.959624][T12271] [ 239.962584][T12271] dump_stack_lvl+0x241/0x360 [ 239.967309][T12271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.972558][T12271] ? __pfx__printk+0x10/0x10 [ 239.977214][T12271] ? __pfx_lock_release+0x10/0x10 [ 239.982385][T12271] should_fail_ex+0x3b0/0x4e0 [ 239.987122][T12271] _copy_from_iter+0x1f6/0x1960 [ 239.992008][T12271] ? __virt_addr_valid+0x183/0x520 [ 239.997166][T12271] ? __pfx_lock_release+0x10/0x10 [ 240.002238][T12271] ? __alloc_skb+0x28f/0x440 [ 240.006916][T12271] ? __pfx__copy_from_iter+0x10/0x10 [ 240.012267][T12271] ? __virt_addr_valid+0x183/0x520 [ 240.017437][T12271] ? __virt_addr_valid+0x183/0x520 [ 240.022684][T12271] ? __virt_addr_valid+0x44e/0x520 [ 240.027848][T12271] ? __check_object_size+0x49c/0x900 [ 240.033215][T12271] netlink_sendmsg+0x73d/0xcb0 [ 240.038045][T12271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.043384][T12271] ? __import_iovec+0x536/0x820 [ 240.048266][T12271] ? aa_sock_msg_perm+0x91/0x160 [ 240.053270][T12271] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 240.058607][T12271] ? security_socket_sendmsg+0x87/0xb0 [ 240.064089][T12271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.069387][T12271] __sock_sendmsg+0x221/0x270 [ 240.074085][T12271] ____sys_sendmsg+0x525/0x7d0 [ 240.078875][T12271] ? __pfx_____sys_sendmsg+0x10/0x10 [ 240.084190][T12271] __sys_sendmsg+0x2b0/0x3a0 [ 240.088799][T12271] ? __pfx___sys_sendmsg+0x10/0x10 [ 240.093947][T12271] ? vfs_write+0x7c4/0xc90 [ 240.098416][T12271] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 240.104784][T12271] ? do_syscall_64+0x100/0x230 [ 240.109571][T12271] ? do_syscall_64+0xb6/0x230 [ 240.114262][T12271] do_syscall_64+0xf3/0x230 [ 240.118779][T12271] ? clear_bhb_loop+0x35/0x90 [ 240.123556][T12271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.129465][T12271] RIP: 0033:0x7fde49375bd9 [ 240.133913][T12271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.153530][T12271] RSP: 002b:00007fde4a1ad048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.161956][T12271] RAX: ffffffffffffffda RBX: 00007fde49503f60 RCX: 00007fde49375bd9 [ 240.169960][T12271] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 240.177936][T12271] RBP: 00007fde4a1ad0a0 R08: 0000000000000000 R09: 0000000000000000 [ 240.185913][T12271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.193911][T12271] R13: 000000000000004d R14: 00007fde49503f60 R15: 00007fff405f0cc8 [ 240.201915][T12271] [ 240.295420][T12278] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 240.539081][T12288] validate_nla: 3 callbacks suppressed [ 240.539103][T12288] netlink: 'syz.0.2198': attribute type 4 has an invalid length. [ 240.605560][T12294] netlink: 'syz.2.2200': attribute type 4 has an invalid length. [ 240.627243][T12293] netlink: 'syz.3.2199': attribute type 4 has an invalid length. [ 241.580957][T12338] netlink: 'syz.1.2212': attribute type 4 has an invalid length. [ 241.595147][T12340] netlink: 'syz.0.2213': attribute type 4 has an invalid length. [ 241.664207][ T5114] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.680608][ T5114] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.690201][ T5114] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.711706][ T5114] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.739182][T12347] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2215'. [ 241.748625][ T5114] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 241.764882][ T5114] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.901137][T12341] lo speed is unknown, defaulting to 1000 [ 241.976422][T12352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2217'. [ 242.050482][T12360] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2222'. [ 242.082104][T12360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2222'. [ 242.092456][T12362] netlink: 'syz.3.2223': attribute type 4 has an invalid length. [ 242.117975][T12360] netlink: 'syz.1.2222': attribute type 1 has an invalid length. [ 242.233502][ T8535] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.302269][T12364] vlan2: entered promiscuous mode [ 242.336157][T12364] ip6gretap0: entered promiscuous mode [ 242.364181][T12364] vlan2: entered allmulticast mode [ 242.372158][T12364] ip6gretap0: entered allmulticast mode [ 242.394545][T12364] ip6gretap0: left allmulticast mode [ 242.425113][T12364] ip6gretap0: left promiscuous mode [ 242.588152][ T8535] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.666320][T12381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.715362][ T8535] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.761556][T12381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.824141][T12385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.836592][ T8535] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.060912][T12341] chnl_net:caif_netlink_parms(): no params data found [ 243.168756][T12404] netlink: 'syz.3.2236': attribute type 4 has an invalid length. [ 243.198570][ T8535] bridge_slave_1: left allmulticast mode [ 243.212685][ T8535] bridge_slave_1: left promiscuous mode [ 243.242523][ T8535] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.256589][ T8535] bridge_slave_0: left allmulticast mode [ 243.262459][ T8535] bridge_slave_0: left promiscuous mode [ 243.268951][ T8535] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.389462][T12414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2237'. [ 243.846599][ T5107] Bluetooth: hci5: command tx timeout [ 244.155385][ T8535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.187587][ T8535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.212660][ T8535] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 244.244216][ T8535] bond0 (unregistering): Released all slaves [ 244.263557][ T8535] bond1 (unregistering): Released all slaves [ 244.417155][T12341] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.424767][T12341] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.432686][T12341] bridge_slave_0: entered allmulticast mode [ 244.440799][T12341] bridge_slave_0: entered promiscuous mode [ 244.450973][T12450] FAULT_INJECTION: forcing a failure. [ 244.450973][T12450] name failslab, interval 1, probability 0, space 0, times 0 [ 244.465681][T12341] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.465794][T12451] netlink: 'syz.3.2246': attribute type 4 has an invalid length. [ 244.472985][T12341] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.490234][T12450] CPU: 1 PID: 12450 Comm: syz.1.2247 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 244.500440][T12450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 244.510531][T12450] Call Trace: [ 244.513842][T12450] [ 244.516803][T12450] dump_stack_lvl+0x241/0x360 [ 244.521521][T12450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.525329][T12341] bridge_slave_1: entered allmulticast mode [ 244.526735][T12450] ? __pfx__printk+0x10/0x10 [ 244.534627][T12341] bridge_slave_1: entered promiscuous mode [ 244.537210][T12450] ? ref_tracker_alloc+0x332/0x490 [ 244.537254][T12450] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 244.537292][T12450] should_fail_ex+0x3b0/0x4e0 [ 244.537334][T12450] ? skb_clone+0x20c/0x390 [ 244.563031][T12450] should_failslab+0x9/0x20 [ 244.567584][T12450] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 244.573034][T12450] skb_clone+0x20c/0x390 [ 244.577310][T12450] __netlink_deliver_tap+0x3cc/0x7c0 [ 244.582626][T12450] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.587837][T12450] netlink_deliver_tap+0x19d/0x1b0 [ 244.592961][T12450] netlink_sendskb+0x68/0x140 [ 244.597683][T12450] netlink_unicast+0x39d/0x990 [ 244.602455][T12450] ? __asan_memcpy+0x40/0x70 [ 244.607063][T12450] ? __pfx_netlink_unicast+0x10/0x10 [ 244.612368][T12450] netlink_rcv_skb+0x262/0x430 [ 244.617146][T12450] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 244.622620][T12450] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 244.627940][T12450] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.633203][T12450] netlink_unicast+0x7f0/0x990 [ 244.638001][T12450] ? __pfx_netlink_unicast+0x10/0x10 [ 244.643291][T12450] ? __virt_addr_valid+0x183/0x520 [ 244.648423][T12450] ? __check_object_size+0x49c/0x900 [ 244.653838][T12450] ? bpf_lsm_netlink_send+0x9/0x10 [ 244.658992][T12450] netlink_sendmsg+0x8e4/0xcb0 [ 244.663890][T12450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.669204][T12450] ? __import_iovec+0x536/0x820 [ 244.674066][T12450] ? aa_sock_msg_perm+0x91/0x160 [ 244.679046][T12450] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 244.684337][T12450] ? security_socket_sendmsg+0x87/0xb0 [ 244.689814][T12450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.695111][T12450] __sock_sendmsg+0x221/0x270 [ 244.699801][T12450] ____sys_sendmsg+0x525/0x7d0 [ 244.704588][T12450] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.709906][T12450] __sys_sendmsg+0x2b0/0x3a0 [ 244.714513][T12450] ? __pfx___sys_sendmsg+0x10/0x10 [ 244.719640][T12450] ? vfs_write+0x7c4/0xc90 [ 244.724105][T12450] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 244.730447][T12450] ? do_syscall_64+0x100/0x230 [ 244.735237][T12450] ? do_syscall_64+0xb6/0x230 [ 244.739939][T12450] do_syscall_64+0xf3/0x230 [ 244.744454][T12450] ? clear_bhb_loop+0x35/0x90 [ 244.749147][T12450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.755054][T12450] RIP: 0033:0x7fbbc9775bd9 [ 244.759478][T12450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.779108][T12450] RSP: 002b:00007fbbca51d048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.787626][T12450] RAX: ffffffffffffffda RBX: 00007fbbc9903f60 RCX: 00007fbbc9775bd9 [ 244.795624][T12450] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 244.803603][T12450] RBP: 00007fbbca51d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 244.811580][T12450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.819574][T12450] R13: 000000000000004d R14: 00007fbbc9903f60 R15: 00007ffd2861dbd8 [ 244.827586][T12450] [ 244.991126][T12341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.103067][T12341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.158068][T12470] __nla_validate_parse: 1 callbacks suppressed [ 245.158089][T12470] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2255'. [ 245.447405][T12470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2255'. [ 245.471841][T12341] team0: Port device team_slave_0 added [ 245.476355][T12487] netlink: 'syz.3.2259': attribute type 4 has an invalid length. [ 245.508445][T12341] team0: Port device team_slave_1 added [ 245.599282][T12492] netlink: 'syz.0.2261': attribute type 2 has an invalid length. [ 245.645186][T12492] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2261'. [ 245.781308][T12495] FAULT_INJECTION: forcing a failure. [ 245.781308][T12495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.797516][T12501] netlink: 'syz.3.2265': attribute type 10 has an invalid length. [ 245.823481][T12501] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 245.853912][T12495] CPU: 1 PID: 12495 Comm: syz.1.2263 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 245.864141][T12495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 245.874240][T12495] Call Trace: [ 245.877556][T12495] [ 245.880519][T12495] dump_stack_lvl+0x241/0x360 [ 245.885240][T12495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.890473][T12495] ? __pfx__printk+0x10/0x10 [ 245.895123][T12495] ? snprintf+0xda/0x120 [ 245.899418][T12495] should_fail_ex+0x3b0/0x4e0 [ 245.904147][T12495] _copy_to_user+0x2f/0xb0 [ 245.908606][T12495] simple_read_from_buffer+0xca/0x150 [ 245.914028][T12495] proc_fail_nth_read+0x1e9/0x250 [ 245.919102][T12495] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 245.924702][T12495] ? rw_verify_area+0x520/0x6b0 [ 245.929596][T12495] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 245.935172][T12495] vfs_read+0x204/0xbc0 [ 245.939355][T12495] ? __pfx_lock_release+0x10/0x10 [ 245.944395][T12495] ? __pfx_vfs_read+0x10/0x10 [ 245.949087][T12495] ? __fget_files+0x29/0x470 [ 245.953693][T12495] ? __fget_files+0x3f6/0x470 [ 245.958396][T12495] ksys_read+0x1a0/0x2c0 [ 245.962658][T12495] ? __pfx_ksys_read+0x10/0x10 [ 245.967437][T12495] ? do_syscall_64+0x100/0x230 [ 245.972231][T12495] ? do_syscall_64+0xb6/0x230 [ 245.976922][T12495] do_syscall_64+0xf3/0x230 [ 245.981435][T12495] ? clear_bhb_loop+0x35/0x90 [ 245.986125][T12495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.992024][T12495] RIP: 0033:0x7fbbc97746bc [ 245.996445][T12495] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 246.016062][T12495] RSP: 002b:00007fbbca51d040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 246.024485][T12495] RAX: ffffffffffffffda RBX: 00007fbbc9903f60 RCX: 00007fbbc97746bc [ 246.032465][T12495] RDX: 000000000000000f RSI: 00007fbbca51d0b0 RDI: 0000000000000005 [ 246.040442][T12495] RBP: 00007fbbca51d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 246.048418][T12495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.056393][T12495] R13: 000000000000004d R14: 00007fbbc9903f60 R15: 00007ffd2861dbd8 [ 246.064388][T12495] [ 246.122210][ T5107] Bluetooth: hci5: command tx timeout [ 246.122393][T12341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.210558][T12341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.283991][T12341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.301210][T12341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.321500][T12341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.350367][T12341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.377775][ T8535] hsr_slave_0: left promiscuous mode [ 246.384465][ T8535] hsr_slave_1: left promiscuous mode [ 246.391476][ T8535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.399260][ T8535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.408256][ T8535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.417597][ T8535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.461667][ T8535] veth0_macvtap: left promiscuous mode [ 246.469229][ T8535] veth1_vlan: left promiscuous mode [ 246.476474][ T8535] veth0_vlan: left promiscuous mode [ 246.609953][T12532] ip6t_srh: unknown srh match flags 4001 [ 246.694377][T12536] netlink: 'syz.2.2274': attribute type 4 has an invalid length. [ 247.355524][ T8535] team0 (unregistering): Port device team_slave_1 removed [ 247.426342][ T8535] team0 (unregistering): Port device team_slave_0 removed [ 248.000787][T12535] netlink: 'syz.1.2273': attribute type 11 has an invalid length. [ 248.079942][T12341] hsr_slave_0: entered promiscuous mode [ 248.134460][T12341] hsr_slave_1: entered promiscuous mode [ 248.151349][T12341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.168632][ T5107] Bluetooth: hci5: command tx timeout [ 248.184874][T12341] Cannot create hsr debugfs directory [ 248.346522][T12565] netlink: 'syz.2.2284': attribute type 4 has an invalid length. [ 248.445357][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2283'. [ 248.855987][T12591] netlink: 'syz.3.2290': attribute type 4 has an invalid length. [ 249.023477][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2293'. [ 249.043547][T12597] netlink: 'syz.3.2293': attribute type 2 has an invalid length. [ 249.137957][T12597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2293'. [ 249.156729][T12601] netlink: 'syz.1.2295': attribute type 4 has an invalid length. [ 249.165456][T12597] ipvlan0: entered allmulticast mode [ 249.494344][T12616] macvlan3: entered promiscuous mode [ 249.522006][T12616] macvlan3: entered allmulticast mode [ 249.594919][T12341] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 249.613093][T12341] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 249.647509][T12341] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 249.674227][T12341] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 249.736643][T12624] netlink: 'syz.0.2303': attribute type 4 has an invalid length. [ 249.876397][T12627] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2304'. [ 249.926607][T12627] netlink: 'syz.3.2304': attribute type 4 has an invalid length. [ 250.034552][T12341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.101938][T12341] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.142561][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.149823][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.176705][T12642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2311'. [ 250.208737][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.215970][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.233432][T12644] Bluetooth: hci3: invalid length 0, exp 2 for type 12 [ 250.245402][ T5107] Bluetooth: hci5: command tx timeout [ 250.298933][T12648] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2313'. [ 250.323144][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2310'. [ 250.365359][T12650] macvlan3: entered allmulticast mode [ 250.428956][T12341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.763907][T12674] validate_nla: 3 callbacks suppressed [ 250.763932][T12674] netlink: 'syz.2.2322': attribute type 1 has an invalid length. [ 250.792767][T12674] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.2322'. [ 250.804219][T12674] netlink: 'syz.2.2322': attribute type 1 has an invalid length. [ 250.832058][T12671] netlink: 'syz.3.2321': attribute type 4 has an invalid length. [ 250.874134][T12676] netlink: 'syz.0.2323': attribute type 4 has an invalid length. [ 250.899073][T12341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.197777][T12695] netlink: 'syz.0.2326': attribute type 1 has an invalid length. [ 251.422746][T12708] netlink: 'syz.2.2332': attribute type 21 has an invalid length. [ 251.511231][T12341] veth0_vlan: entered promiscuous mode [ 251.541292][T12341] veth1_vlan: entered promiscuous mode [ 251.597790][T12341] veth0_macvtap: entered promiscuous mode [ 251.631482][T12341] veth1_macvtap: entered promiscuous mode [ 251.672203][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.701571][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.722775][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.739940][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.775186][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.794839][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.807989][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.821712][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.831664][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.842416][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.858365][T12341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.897260][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.903487][T12723] netlink: 'syz.2.2335': attribute type 4 has an invalid length. [ 251.927999][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.950594][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.971413][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.004879][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.024996][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.037044][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.077526][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.107353][T12341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.135349][T12341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.157509][T12341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.170580][T12341] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.208013][T12341] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.225595][T12341] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.235205][T12341] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.328205][T12738] netlink: 'syz.2.2342': attribute type 4 has an invalid length. [ 252.455377][ T8540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.492300][ T8540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.590246][ T8531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.606011][ T8531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.692269][T12760] netlink: 'syz.3.2348': attribute type 4 has an invalid length. [ 253.058498][T12778] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2351'. [ 253.277990][T12787] netlink: 'syz.0.2355': attribute type 4 has an invalid length. [ 253.623738][T12818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2362'. [ 253.960442][T12831] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2365'. [ 253.982963][T12831] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.258019][T12843] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2369'. [ 254.297199][T12843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2369'. [ 254.561833][T12860] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2375'. [ 255.138478][T12903] vlan0: entered promiscuous mode [ 255.192444][T12900] vlan0: left promiscuous mode [ 255.846884][T12948] __nla_validate_parse: 1 callbacks suppressed [ 255.846907][T12948] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2399'. [ 256.116946][T12956] lo speed is unknown, defaulting to 1000 [ 256.168804][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.181406][T12952] xt_CT: You must specify a L4 protocol and not use inversions on it [ 256.288841][T12968] xt_bpf: check failed: parse error [ 256.551248][T12979] validate_nla: 7 callbacks suppressed [ 256.551274][T12979] netlink: 'syz.2.2405': attribute type 4 has an invalid length. [ 257.534748][T13024] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2414'. [ 257.914529][T13039] netlink: 'syz.2.2418': attribute type 4 has an invalid length. [ 258.142301][T13046] netlink: 'syz.4.2419': attribute type 4 has an invalid length. [ 258.545181][T13066] dvmrp0: entered allmulticast mode [ 258.559715][T13066] netlink: 'syz.2.2425': attribute type 1 has an invalid length. [ 258.720299][T13068] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 258.781039][T13074] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2425'. [ 258.785654][T13068] bond3: (slave batadv2): Enslaving as a backup interface with an up link [ 258.811773][T13074] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2425'. [ 258.894948][T13066] dvmrp0: left allmulticast mode [ 259.376620][T13097] netlink: 'syz.4.2433': attribute type 4 has an invalid length. [ 259.469483][T13102] vlan2: entered allmulticast mode [ 259.505402][T13102] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 259.525448][T13102] mac80211_hwsim hwsim18 wlan1: left allmulticast mode [ 259.761917][T13115] veth0_vlan: entered allmulticast mode [ 260.163031][T13131] netlink: 'syz.1.2441': attribute type 4 has an invalid length. [ 260.452898][T13146] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2445'. [ 260.511321][T13149] netlink: 'syz.1.2447': attribute type 4 has an invalid length. [ 260.746699][T13159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.996235][T13172] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2453'. [ 261.066158][T13173] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2453'. [ 261.367428][T13184] xt_CT: No such helper "netbios-ns" [ 261.502838][T13192] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2459'. [ 261.710041][T13202] netlink: 'syz.4.2463': attribute type 4 has an invalid length. [ 261.983836][T13213] can: request_module (can-proto-0) failed. [ 262.005311][T13217] netlink: 'syz.3.2468': attribute type 4 has an invalid length. [ 262.155129][T13222] netlink: 'syz.3.2469': attribute type 4 has an invalid length. [ 262.283744][T13228] netlink: 'syz.3.2472': attribute type 1 has an invalid length. [ 262.316099][T13228] netlink: 'syz.3.2472': attribute type 3 has an invalid length. [ 262.324038][T13228] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2472'. [ 262.489616][T13230] pimreg: entered allmulticast mode [ 262.541690][T13231] pimreg: left allmulticast mode [ 262.566137][T13240] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2475'. [ 262.686274][T13246] netlink: 'syz.2.2476': attribute type 4 has an invalid length. [ 262.884092][T13256] netlink: 'syz.2.2479': attribute type 4 has an invalid length. [ 262.916981][T13257] netlink: 'syz.4.2480': attribute type 4 has an invalid length. [ 262.976565][T13259] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2481'. [ 263.483943][T13276] netlink: 'syz.0.2486': attribute type 4 has an invalid length. [ 264.032304][T13291] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2490'. [ 265.251555][T13251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2478'. [ 265.265051][T13288] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2490'. [ 265.301400][T13291] batadv_slave_1: entered promiscuous mode [ 265.316461][T13292] batadv_slave_1: left promiscuous mode [ 265.461586][T13297] netlink: 'syz.3.2493': attribute type 4 has an invalid length. [ 265.669396][T13307] ip6tnl1: entered promiscuous mode [ 265.706186][T13307] ip6tnl1: entered allmulticast mode [ 265.839959][T13313] lo speed is unknown, defaulting to 1000 [ 265.849601][T13305] xt_CT: You must specify a L4 protocol and not use inversions on it [ 265.867937][T13325] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2503'. [ 266.954245][T13354] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.875858][T13381] validate_nla: 3 callbacks suppressed [ 267.875884][T13381] netlink: 'syz.4.2522': attribute type 4 has an invalid length. [ 267.926934][T13385] netlink: 'syz.1.2525': attribute type 4 has an invalid length. [ 268.056793][T13391] __nla_validate_parse: 2 callbacks suppressed [ 268.056817][T13391] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2528'. [ 268.413864][T13408] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 268.454066][T13408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.485995][ T5114] Bluetooth: hci2: command 0x0406 tx timeout [ 268.610451][T13414] netlink: 'syz.1.2535': attribute type 4 has an invalid length. [ 268.813024][T13422] pim6reg1: entered promiscuous mode [ 268.828841][T13422] pim6reg1: entered allmulticast mode [ 268.877777][T13424] netlink: 'syz.1.2539': attribute type 4 has an invalid length. [ 269.003743][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.377551][T13442] netlink: 'syz.3.2545': attribute type 4 has an invalid length. [ 269.579992][T13452] netlink: 'syz.3.2548': attribute type 4 has an invalid length. [ 270.147636][T13483] netlink: 'syz.3.2559': attribute type 5 has an invalid length. [ 270.437045][T13500] netlink: 'syz.3.2561': attribute type 4 has an invalid length. [ 270.570737][T13502] netlink: 'syz.3.2562': attribute type 10 has an invalid length. [ 270.644754][T13502] team0: left allmulticast mode [ 270.659681][T13502] team_slave_1: left allmulticast mode [ 270.667014][T13502] team0: left promiscuous mode [ 270.672105][T13502] team_slave_1: left promiscuous mode [ 270.679719][T13502] macvlan2: left promiscuous mode [ 270.720333][T13503] netlink: 'syz.3.2562': attribute type 10 has an invalid length. [ 270.739615][T13503] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2562'. [ 270.749871][T13503] team0: entered promiscuous mode [ 270.755308][T13503] team_slave_1: entered promiscuous mode [ 270.761549][T13503] macvlan2: entered promiscuous mode [ 270.782409][T13503] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.798644][T13503] team0: entered allmulticast mode [ 270.813198][T13503] team_slave_1: entered allmulticast mode [ 271.500728][T13543] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2572'. [ 271.779251][T13539] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2572'. [ 272.787622][T13610] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003 [ 273.123778][T13623] lo speed is unknown, defaulting to 1000 [ 273.157015][T13630] validate_nla: 8 callbacks suppressed [ 273.157037][T13630] netlink: 'syz.1.2598': attribute type 4 has an invalid length. [ 273.667997][T13646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2606'. [ 273.725849][T13646] ebt_limit: overflow, try lower: 570423552/2483027968 [ 273.897212][T13657] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2611'. [ 273.917317][T13657] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2611'. [ 273.961190][T13657] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2611'. [ 274.167836][T13668] netlink: 'syz.1.2617': attribute type 2 has an invalid length. [ 274.196200][T13668] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2617'. [ 274.505423][T13691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2622'. [ 274.553800][T13691] vlan3: entered promiscuous mode [ 274.579566][T13614] Cannot find add_set index 0 as target [ 274.867505][T13704] netlink: 'syz.2.2627': attribute type 1 has an invalid length. [ 275.173436][T13709] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 275.201250][T13709] bond4: (slave batadv3): Enslaving as a backup interface with an up link [ 275.381519][T13710] IPVS: Error connecting to the multicast addr [ 275.619160][T13727] netlink: 'syz.2.2633': attribute type 4 has an invalid length. [ 275.671700][T13732] netlink: 'syz.1.2634': attribute type 4 has an invalid length. [ 275.821265][T13736] netlink: 'syz.3.2636': attribute type 10 has an invalid length. [ 275.885507][T13736] team0: left allmulticast mode [ 275.890438][T13736] team_slave_1: left allmulticast mode [ 275.927266][T13736] team0: left promiscuous mode [ 275.932153][T13736] team_slave_1: left promiscuous mode [ 275.955278][T13736] macvlan2: left promiscuous mode [ 276.007657][T13741] netlink: 'syz.3.2636': attribute type 10 has an invalid length. [ 276.044984][T13741] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2636'. [ 276.115262][T13741] team0: entered promiscuous mode [ 276.122698][T13741] team_slave_1: entered promiscuous mode [ 276.155393][T13741] macvlan2: entered promiscuous mode [ 276.188490][T13741] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.231114][T13741] team0: entered allmulticast mode [ 276.268025][T13741] team_slave_1: entered allmulticast mode [ 276.782469][T13770] netlink: 'syz.1.2646': attribute type 4 has an invalid length. [ 276.927076][T13776] netlink: 'syz.2.2649': attribute type 4 has an invalid length. [ 277.016724][T13782] netlink: 'syz.0.2652': attribute type 4 has an invalid length. [ 277.492408][T13796] syzkaller0: entered promiscuous mode [ 277.501226][T13796] syzkaller0: entered allmulticast mode [ 280.641769][T13827] netlink: 'syz.3.2662': attribute type 4 has an invalid length. [ 280.796056][T13835] netlink: 'syz.0.2665': attribute type 4 has an invalid length. [ 281.050739][T13845] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.510452][T13877] netlink: 'syz.4.2679': attribute type 4 has an invalid length. [ 281.595374][T13868] netlink: 'syz.1.2678': attribute type 1 has an invalid length. [ 281.609998][T13868] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2678'. [ 281.789621][T13891] netlink: 'syz.3.2681': attribute type 4 has an invalid length. [ 282.098932][T13905] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 282.130227][T13907] netlink: 'syz.3.2690': attribute type 4 has an invalid length. [ 282.219982][T13913] netlink: 'syz.4.2691': attribute type 4 has an invalid length. [ 282.255009][T13915] nbd: must specify at least one socket [ 282.325731][T13921] netlink: 'syz.3.2694': attribute type 4 has an invalid length. [ 282.350852][T13922] netlink: 'syz.1.2695': attribute type 4 has an invalid length. [ 282.881446][T13964] netlink: 'syz.0.2705': attribute type 4 has an invalid length. [ 283.341382][T13993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2715'. [ 283.475984][T14003] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2717'. [ 284.331859][T14056] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2738'. [ 284.646263][T14077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2743'. [ 285.095724][T14099] team0: No ports can be present during mode change [ 285.229866][T14104] tipc: Failed to remove unknown binding: 66,1,1/0:1727450834/1727450836 [ 285.252309][T14104] tipc: Failed to remove unknown binding: 66,1,1/0:1727450834/1727450836 [ 285.253758][T14106] FAULT_INJECTION: forcing a failure. [ 285.253758][T14106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.301712][T14106] CPU: 1 PID: 14106 Comm: syz.0.2756 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 285.311959][T14106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 285.322150][T14106] Call Trace: [ 285.325475][T14106] [ 285.328426][T14106] dump_stack_lvl+0x241/0x360 [ 285.333143][T14106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.338396][T14106] ? __pfx__printk+0x10/0x10 [ 285.343047][T14106] ? snprintf+0xda/0x120 [ 285.347359][T14106] should_fail_ex+0x3b0/0x4e0 [ 285.352096][T14106] _copy_to_user+0x2f/0xb0 [ 285.356838][T14106] simple_read_from_buffer+0xca/0x150 [ 285.362263][T14106] proc_fail_nth_read+0x1e9/0x250 [ 285.367339][T14106] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 285.372929][T14106] ? rw_verify_area+0x520/0x6b0 [ 285.377824][T14106] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 285.383417][T14106] vfs_read+0x204/0xbc0 [ 285.387616][T14106] ? __pfx_lock_release+0x10/0x10 [ 285.392694][T14106] ? __pfx_vfs_read+0x10/0x10 [ 285.397409][T14106] ? __fget_files+0x29/0x470 [ 285.402023][T14106] ? __fget_files+0x3f6/0x470 [ 285.406756][T14106] ksys_read+0x1a0/0x2c0 [ 285.411022][T14106] ? __pfx_ksys_read+0x10/0x10 [ 285.415799][T14106] ? do_syscall_64+0x100/0x230 [ 285.420577][T14106] ? do_syscall_64+0xb6/0x230 [ 285.425267][T14106] do_syscall_64+0xf3/0x230 [ 285.429782][T14106] ? clear_bhb_loop+0x35/0x90 [ 285.434581][T14106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.440492][T14106] RIP: 0033:0x7f7162b746bc [ 285.444944][T14106] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 285.464565][T14106] RSP: 002b:00007f7163900040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 285.473090][T14106] RAX: ffffffffffffffda RBX: 00007f7162d03f60 RCX: 00007f7162b746bc [ 285.481099][T14106] RDX: 000000000000000f RSI: 00007f71639000b0 RDI: 0000000000000004 [ 285.489186][T14106] RBP: 00007f71639000a0 R08: 0000000000000000 R09: 0000000000000000 [ 285.497162][T14106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.505144][T14106] R13: 000000000000000b R14: 00007f7162d03f60 R15: 00007ffe9a23a5b8 [ 285.513166][T14106] [ 285.632423][T14108] vcan0: tx drop: invalid da for name 0x000000000000c700 [ 285.710644][T14114] validate_nla: 10 callbacks suppressed [ 285.710668][T14114] netlink: 'syz.2.2760': attribute type 4 has an invalid length. [ 285.809342][T14120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2761'. [ 285.842910][T14120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2761'. [ 286.663875][ T786] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.015469][T14183] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2778'. [ 287.081129][T14191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2780'. [ 287.102992][T14191] block nbd0: not configured, cannot reconfigure [ 287.245115][T14197] netlink: 'syz.0.2783': attribute type 4 has an invalid length. [ 287.458434][T14215] netlink: 'syz.4.2789': attribute type 12 has an invalid length. [ 287.482414][T14215] netlink: 'syz.4.2789': attribute type 10 has an invalid length. [ 287.554521][T14223] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2789'. [ 287.585606][T14223] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2789'. [ 287.613691][T14223] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2789'. [ 288.025260][T14253] netlink: 'syz.1.2798': attribute type 4 has an invalid length. [ 288.194965][T14264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2802'. [ 288.222337][T14264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2802'. [ 288.522785][T14282] netlink: 'syz.2.2810': attribute type 4 has an invalid length. [ 288.561852][T14283] netlink: 'syz.0.2811': attribute type 4 has an invalid length. [ 288.927602][T14312] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 289.100203][T14326] netlink: 'syz.1.2826': attribute type 4 has an invalid length. [ 289.379739][T14347] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2835'. [ 289.482167][T14342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.514963][T14342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.564823][T14342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.600471][T14342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.636343][T14342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.660741][T14342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.677066][T14342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.688811][T14342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.720261][T14342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.731087][T14342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.741031][T14342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.757683][T14342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.966406][T14376] netlink: 'syz.0.2843': attribute type 4 has an invalid length. [ 289.971737][T14374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2841'. [ 290.013388][T14379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.054168][T14377] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2844'. [ 290.120489][T14379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.361750][T14400] xt_hashlimit: max too large, truncated to 1048576 [ 290.375397][T14399] xt_hashlimit: max too large, truncated to 1048576 [ 290.436865][T14404] netlink: 'syz.2.2853': attribute type 4 has an invalid length. [ 290.793073][T14425] syz.0.2861: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 290.827727][T14425] CPU: 0 PID: 14425 Comm: syz.0.2861 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 290.837974][T14425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 290.848199][T14425] Call Trace: [ 290.851517][T14425] [ 290.854501][T14425] dump_stack_lvl+0x241/0x360 [ 290.859335][T14425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.864571][T14425] ? __pfx__printk+0x10/0x10 [ 290.869208][T14425] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 290.875677][T14425] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 290.882217][T14425] warn_alloc+0x278/0x410 [ 290.886676][T14425] ? __pfx_warn_alloc+0x10/0x10 [ 290.891585][T14425] ? xskq_create+0xb6/0x170 [ 290.896159][T14425] ? __get_vm_area_node+0x23d/0x270 [ 290.901414][T14425] __vmalloc_node_range_noprof+0x69f/0x1460 [ 290.907394][T14425] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 290.913782][T14425] ? __kasan_kmalloc+0x98/0xb0 [ 290.918600][T14425] ? xskq_create+0x54/0x170 [ 290.923171][T14425] vmalloc_user_noprof+0x74/0x80 [ 290.928163][T14425] ? xskq_create+0xb6/0x170 [ 290.932724][T14425] xskq_create+0xb6/0x170 [ 290.937117][T14425] xsk_init_queue+0xa1/0x100 [ 290.941771][T14425] xsk_setsockopt+0x4ea/0x950 [ 290.946522][T14425] ? __pfx_xsk_setsockopt+0x10/0x10 [ 290.951893][T14425] ? __pfx_lock_acquire+0x10/0x10 [ 290.956983][T14425] ? aa_sock_opt_perm+0x79/0x120 [ 290.961972][T14425] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 290.967560][T14425] ? security_socket_setsockopt+0x87/0xb0 [ 290.973336][T14425] ? __pfx_xsk_setsockopt+0x10/0x10 [ 290.978588][T14425] do_sock_setsockopt+0x3af/0x720 [ 290.983679][T14425] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 290.989279][T14425] ? __fget_files+0x29/0x470 [ 290.993941][T14425] ? __fget_files+0x3f6/0x470 [ 290.998682][T14425] __sys_setsockopt+0x1ae/0x250 [ 291.003610][T14425] __x64_sys_setsockopt+0xb5/0xd0 [ 291.008697][T14425] do_syscall_64+0xf3/0x230 [ 291.013298][T14425] ? clear_bhb_loop+0x35/0x90 [ 291.018127][T14425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.024069][T14425] RIP: 0033:0x7f7162b75bd9 [ 291.028530][T14425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.048183][T14425] RSP: 002b:00007f71638be048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 291.056651][T14425] RAX: ffffffffffffffda RBX: 00007f7162d04110 RCX: 00007f7162b75bd9 [ 291.064671][T14425] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 291.072688][T14425] RBP: 00007f7162be4aa1 R08: 0000000000000004 R09: 0000000000000000 [ 291.080724][T14425] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 291.088736][T14425] R13: 000000000000000b R14: 00007f7162d04110 R15: 00007ffe9a23a5b8 [ 291.096769][T14425] [ 291.145038][T14425] Mem-Info: [ 291.148231][T14425] active_anon:2769 inactive_anon:0 isolated_anon:0 [ 291.148231][T14425] active_file:1502 inactive_file:38233 isolated_file:0 [ 291.148231][T14425] unevictable:768 dirty:109 writeback:0 [ 291.148231][T14425] slab_reclaimable:9733 slab_unreclaimable:110147 [ 291.148231][T14425] mapped:15171 shmem:1267 pagetables:625 [ 291.148231][T14425] sec_pagetables:0 bounce:0 [ 291.148231][T14425] kernel_misc_reclaimable:0 [ 291.148231][T14425] free:1382717 free_pcp:611 free_cma:0 [ 291.219636][T14425] Node 0 active_anon:10976kB inactive_anon:0kB active_file:6008kB inactive_file:152864kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60684kB dirty:436kB writeback:0kB shmem:3532kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11404kB pagetables:2400kB sec_pagetables:0kB all_unreclaimable? no [ 291.285104][T14425] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 291.328713][T14425] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 291.403789][T14425] lowmem_reserve[]: 0 2571 2571 0 0 [ 291.424067][T14425] Node 0 DMA32 free:1566116kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:11024kB inactive_anon:0kB active_file:6008kB inactive_file:152544kB unevictable:1536kB writepending:504kB present:3129332kB managed:2659868kB mlocked:0kB bounce:0kB free_pcp:2172kB local_pcp:1224kB free_cma:0kB [ 291.479662][T14425] lowmem_reserve[]: 0 0 0 0 0 [ 291.484735][T14425] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 291.503014][T14449] validate_nla: 1 callbacks suppressed [ 291.503039][T14449] netlink: 'syz.3.2870': attribute type 4 has an invalid length. [ 291.527898][T14425] lowmem_reserve[]: 0 0 0 0 0 [ 291.533260][T14425] Node 1 Normal free:3949880kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 291.564708][T14425] lowmem_reserve[]: 0 0 0 0 0 [ 291.605543][T14425] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 291.634946][T14425] Node 0 DMA32: 1*4kB (E) 218*8kB (UME) 214*16kB (UME) 155*32kB (UME) 182*64kB (UME) 48*128kB (UM) 21*256kB (UME) 9*512kB (UM) 4*1024kB (M) 4*2048kB (UM) 370*4096kB (UM) = 1565716kB [ 291.677582][T14425] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 291.714850][T14425] Node 1 Normal: 2*4kB (U) 4*8kB (UM) 11*16kB (UM) 7*32kB (UM) 6*64kB (U) 4*128kB (U) 6*256kB (UM) 5*512kB (UM) 4*1024kB (U) 2*2048kB (U) 961*4096kB (M) = 3949880kB [ 291.761154][T14425] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 291.787514][T14425] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 291.816001][T14425] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 291.846060][T14425] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 291.865724][T14425] 41002 total pagecache pages [ 291.888718][T14425] 0 pages in swap cache [ 291.898018][T14425] Free swap = 124996kB [ 291.902236][T14425] Total swap = 124996kB [ 291.916869][T14425] 2097051 pages RAM [ 291.927557][T14425] 0 pages HighMem/MovableOnly [ 291.937099][T14425] 400874 pages reserved [ 291.948988][T14425] 0 pages cma reserved [ 292.185715][T14486] netlink: 'syz.1.2883': attribute type 4 has an invalid length. [ 292.235239][T14487] IPv6: sit1: Disabled Multicast RS [ 292.341104][T14493] netlink: 'syz.1.2886': attribute type 1 has an invalid length. [ 292.370003][T14493] __nla_validate_parse: 1 callbacks suppressed [ 292.370029][T14493] netlink: 9328 bytes leftover after parsing attributes in process `syz.1.2886'. [ 292.411861][T14493] netlink: 'syz.1.2886': attribute type 1 has an invalid length. [ 292.440185][T14501] No such timeout policy "syz0" [ 292.499034][T14500] netlink: 'syz.4.2889': attribute type 3 has an invalid length. [ 292.542081][T14500] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2889'. [ 292.755968][T14513] netlink: 'syz.1.2892': attribute type 3 has an invalid length. [ 292.993750][T14527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2895'. [ 293.052441][T14527] netlink: 'syz.1.2895': attribute type 1 has an invalid length. [ 293.059843][T14529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2897'. [ 293.089366][T14527] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2895'. [ 293.126140][T14527] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2895'. [ 293.419879][T14549] netlink: 'syz.2.2902': attribute type 4 has an invalid length. [ 293.536078][T14557] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2905'. [ 293.566715][T14557] xt_TPROXY: Can be used only with -p tcp or -p udp [ 293.700953][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2907'. [ 293.757457][T14573] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2909'. [ 293.786034][T14573] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2909'. [ 294.030406][T14590] netlink: 'syz.4.2915': attribute type 4 has an invalid length. [ 294.258191][ T5107] Bluetooth: hci5: link tx timeout [ 294.265026][ T5107] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 294.277391][ T5107] Bluetooth: hci5: link tx timeout [ 294.282735][ T5107] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 294.478517][T14605] xt_nfacct: accounting object `syz1' does not exists [ 295.061394][T14649] xt_CONNSECMARK: invalid mode: 0 [ 295.379495][T14666] netlink: 'syz.2.2936': attribute type 4 has an invalid length. [ 295.554420][T14671] smc: net device lo applied user defined pnetid SYZ2 [ 295.567685][T14671] smc: net device lo erased user defined pnetid SYZ2 [ 295.632241][T14677] bridge_slave_1: left allmulticast mode [ 295.638216][T14677] bridge_slave_1: left promiscuous mode [ 295.644441][T14677] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.675072][T14677] bridge_slave_0: left allmulticast mode [ 295.688673][T14677] bridge_slave_0: left promiscuous mode [ 295.699135][T14677] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.876593][T14685] xt_socket: unknown flags 0x8 [ 296.299270][T14714] bridge2: entered promiscuous mode [ 296.304755][T14714] bridge2: entered allmulticast mode [ 296.338460][ T5107] Bluetooth: hci5: command 0x0406 tx timeout [ 296.625684][T14733] validate_nla: 2 callbacks suppressed [ 296.625706][T14733] netlink: 'syz.1.2960': attribute type 4 has an invalid length. [ 296.742740][T14741] lo speed is unknown, defaulting to 1000 [ 296.948101][T14747] netlink: 'syz.2.2963': attribute type 4 has an invalid length. [ 297.394593][T14759] netlink: 'syz.0.2969': attribute type 4 has an invalid length. [ 297.446140][T14764] lo speed is unknown, defaulting to 1000 [ 297.464667][T14767] __nla_validate_parse: 11 callbacks suppressed [ 297.464694][T14767] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2971'. [ 297.559484][T14775] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2973'. [ 297.678411][T14781] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2974'. [ 297.967646][T14797] netlink: 'syz.4.2978': attribute type 4 has an invalid length. [ 298.290814][T14806] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2981'. [ 299.215021][ T5107] Bluetooth: hci0: command 0x0405 tx timeout [ 300.489876][T14917] netlink: 'syz.1.3018': attribute type 4 has an invalid length. [ 301.036565][T14951] netlink: 'syz.4.3028': attribute type 3 has an invalid length. [ 301.311777][T14963] netlink: 'syz.4.3033': attribute type 4 has an invalid length. [ 301.346105][T14962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3032'. [ 301.483534][T14968] netlink: 'syz.0.3034': attribute type 4 has an invalid length. [ 301.510475][T14968] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3034'. [ 301.567141][T14973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3037'. [ 302.045617][T15003] netlink: 'syz.2.3046': attribute type 4 has an invalid length. [ 302.177952][T15017] No such timeout policy "syz0" [ 302.191791][T15014] xt_hashlimit: invalid rate [ 302.204513][T15017] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20000 [ 302.228834][T15022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3048'. [ 302.274454][T15022] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 302.503701][T15035] lo speed is unknown, defaulting to 1000 [ 303.238167][T15060] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3061'. [ 303.309577][T15062] netlink: 'syz.3.3063': attribute type 3 has an invalid length. [ 303.355115][T15062] netlink: 'syz.3.3063': attribute type 3 has an invalid length. [ 303.444265][T15071] team0: entered promiscuous mode [ 303.462772][T15071] team_slave_0: entered promiscuous mode [ 303.477107][T15071] team_slave_1: entered promiscuous mode [ 303.518942][T15073] netlink: 'syz.2.3066': attribute type 4 has an invalid length. [ 303.738625][T15070] team0: left promiscuous mode [ 303.743457][T15070] team_slave_0: left promiscuous mode [ 303.759968][T15070] team_slave_1: left promiscuous mode [ 304.030392][T15106] syz.2.3074[15106] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.030823][T15106] syz.2.3074[15106] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.535323][T15127] netlink: 'syz.1.3079': attribute type 4 has an invalid length. [ 305.235159][T15160] netlink: 'syz.1.3092': attribute type 4 has an invalid length. [ 305.660459][T15180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3099'. [ 305.774335][T15188] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 305.950413][T15197] netlink: 'syz.2.3103': attribute type 10 has an invalid length. [ 305.981356][T15197] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3103'. [ 306.015148][T15198] tc_dump_action: action bad kind [ 306.036956][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies. [ 306.039682][T15200] netlink: 'syz.0.3105': attribute type 4 has an invalid length. [ 306.284619][T15212] x_tables: duplicate underflow at hook 3 [ 306.567226][T15228] netlink: 'syz.3.3114': attribute type 4 has an invalid length. [ 306.606134][T15234] netlink: 'syz.4.3118': attribute type 4 has an invalid length. [ 307.073795][T15260] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3124'. [ 307.311147][T15282] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3131'. [ 307.345011][T15283] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3129'. [ 307.408017][T15286] validate_nla: 1 callbacks suppressed [ 307.408039][T15286] netlink: 'syz.1.3132': attribute type 44 has an invalid length. [ 307.849354][T15307] netlink: 'syz.2.3137': attribute type 15 has an invalid length. [ 307.859248][T15302] netlink: 'syz.1.3136': attribute type 4 has an invalid length. [ 308.218731][T15322] netlink: 'syz.3.3141': attribute type 6 has an invalid length. [ 308.602159][T15345] netlink: 'syz.4.3149': attribute type 4 has an invalid length. [ 308.612722][T15346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3148'. [ 309.036510][T15359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3154'. [ 309.162919][T15359] team0: Port device team_slave_0 removed [ 309.666691][T15390] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3167'. [ 309.962526][T15399] netlink: 'syz.0.3171': attribute type 4 has an invalid length. [ 310.567750][T15417] netlink: 'syz.2.3177': attribute type 4 has an invalid length. [ 310.747464][T15421] openvswitch: netlink: nsh attr 2048 is out of range max 3 [ 310.771049][T15421] netlink: 'syz.1.3178': attribute type 11 has an invalid length. [ 311.062855][T15428] netlink: 'syz.3.3181': attribute type 4 has an invalid length. [ 311.308677][T15441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3183'. [ 311.341727][T15441] netlink: 'syz.0.3183': attribute type 1 has an invalid length. [ 311.364716][T15437] lo speed is unknown, defaulting to 1000 [ 311.375326][T15441] netlink: 9344 bytes leftover after parsing attributes in process `syz.0.3183'. [ 311.389445][T15441] netlink: 'syz.0.3183': attribute type 1 has an invalid length. [ 311.857218][T15466] pimreg: entered allmulticast mode [ 311.877516][T15466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3196'. [ 312.034070][T15471] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3198'. [ 312.405978][T15491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3202'. [ 312.449438][T15491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3202'. [ 313.160646][T15519] x_tables: duplicate underflow at hook 1 [ 313.475026][T15540] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3218'. [ 313.886849][T15555] lo speed is unknown, defaulting to 1000 [ 314.420553][T15578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3233'. [ 314.570741][T15579] team1: Mode "" not found [ 314.583858][T15578] team1: Mode "" not found [ 314.601849][T15583] validate_nla: 1 callbacks suppressed [ 314.601872][T15583] netlink: 'syz.4.3232': attribute type 4 has an invalid length. [ 314.685990][T15586] netlink: 'syz.3.3235': attribute type 4 has an invalid length. [ 314.845070][T15592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3234'. [ 315.110116][T15611] netlink: 'syz.4.3242': attribute type 4 has an invalid length. [ 315.480289][T15627] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3247'. [ 315.507648][T15559] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 315.606297][T15633] netlink: 'syz.3.3249': attribute type 4 has an invalid length. [ 315.724567][T15639] sctp: [Deprecated]: syz.3.3251 (pid 15639) Use of int in maxseg socket option. [ 315.724567][T15639] Use struct sctp_assoc_value instead [ 315.990995][T15644] netlink: 'syz.0.3253': attribute type 9 has an invalid length. [ 316.086577][T15650] netlink: 'syz.4.3255': attribute type 4 has an invalid length. [ 316.285778][T15655] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3257'. [ 316.325842][T15655] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3257'. [ 316.651727][T15671] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3262'. [ 316.733325][T15670] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3262'. [ 317.025755][T15691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3270'. [ 317.172840][T15693] netlink: 'syz.0.3271': attribute type 4 has an invalid length. [ 317.291603][T15699] xt_TCPMSS: Only works on TCP SYN packets [ 317.489895][T15721] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3278'. [ 317.601772][T15725] netlink: 'syz.4.3281': attribute type 4 has an invalid length. [ 317.856739][T15743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3283'. [ 318.323844][T15768] netlink: 'syz.0.3295': attribute type 1 has an invalid length. [ 318.858705][T15791] netlink: 'syz.4.3301': attribute type 4 has an invalid length. [ 319.098447][T15807] pim6reg0: renamed from ip6gretap0 (while UP) [ 319.257339][T15814] can: request_module (can-proto-0) failed. [ 319.448664][T15822] team0: Device macvtap1 is already an upper device of the team interface [ 319.676381][T15842] ebt_among: dst integrity fail: 10d [ 319.824862][T15850] __nla_validate_parse: 10 callbacks suppressed [ 319.824885][T15850] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3329'. [ 320.106513][T15873] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3336'. [ 320.150594][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3337'. [ 320.470953][T15896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3342'. [ 320.493084][T15896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3342'. [ 320.629168][T15908] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3346'. [ 320.656331][T15908] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3346'. [ 320.820324][T15919] validate_nla: 3 callbacks suppressed [ 320.820349][T15919] netlink: 'syz.1.3350': attribute type 4 has an invalid length. [ 320.956423][T15927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3351'. [ 320.977452][T15927] bridge_slave_1: left allmulticast mode [ 320.991213][T15927] bridge_slave_1: left promiscuous mode [ 321.005265][T15927] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.029223][T15927] bridge_slave_0: left allmulticast mode [ 321.040267][T15927] bridge_slave_0: left promiscuous mode [ 321.047204][T15927] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.158605][T15933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3354'. [ 321.267830][T15939] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3355'. [ 321.585588][T15956] netlink: 'syz.2.3361': attribute type 4 has an invalid length. [ 322.255298][T15971] IPVS: length: 96 != 8 [ 322.381804][T15982] netlink: 'syz.4.3367': attribute type 2 has an invalid length. [ 322.390044][T15982] netlink: 'syz.4.3367': attribute type 1 has an invalid length. [ 322.749975][T16004] netlink: 'syz.0.3376': attribute type 4 has an invalid length. [ 322.786418][T16001] lo speed is unknown, defaulting to 1000 [ 322.924602][T16011] netlink: 'syz.0.3379': attribute type 11 has an invalid length. [ 322.941443][T16012] xt_CT: You must specify a L4 protocol and not use inversions on it [ 322.962634][T16011] netlink: 'syz.0.3379': attribute type 9 has an invalid length. [ 323.075429][T16012] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 323.134491][T16018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.176702][T16018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.199953][T16018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.255386][T16018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.285582][T16018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.317003][T16018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.345641][T16018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.374861][T16018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.395015][T16018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.414937][T16018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.531334][T16031] netlink: 'syz.0.3386': attribute type 4 has an invalid length. [ 323.642820][T16036] netlink: 'syz.0.3389': attribute type 4 has an invalid length. [ 323.706337][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888029cf7000: rx timeout, send abort [ 323.715403][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888020039000: rx timeout, send abort [ 323.733301][T16041] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 323.752026][T16038] netlink: 'syz.4.3387': attribute type 2 has an invalid length. [ 323.790028][T16001] Unsupported ieee802154 address type: 0 [ 323.805797][T16001] openvswitch: netlink: Key 3 has unexpected len 0 expected 4 [ 324.214663][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888029cf7000: abort rx timeout. Force session deactivation [ 324.226912][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888020039000: abort rx timeout. Force session deactivation [ 324.911590][T16098] __nla_validate_parse: 12 callbacks suppressed [ 324.911614][T16098] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3408'. [ 325.211707][ T5107] Bluetooth: hci5: command 0x0406 tx timeout [ 325.273004][T16127] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3418'. [ 325.283980][T16127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 325.469742][T16136] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3421'. [ 325.984162][T16171] vlan5: entered promiscuous mode [ 326.000860][T16171] vlan5: entered allmulticast mode [ 326.046201][T16176] validate_nla: 5 callbacks suppressed [ 326.046226][T16176] netlink: 'syz.1.3434': attribute type 4 has an invalid length. [ 326.087693][T16180] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3435'. [ 326.554563][T16214] dvmrp0: entered allmulticast mode [ 326.580432][T16214] dvmrp0: left allmulticast mode [ 326.693460][T16221] netlink: 'syz.3.3447': attribute type 4 has an invalid length. [ 326.978301][T16234] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3453'. [ 326.987651][T16234] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3453'. [ 327.028625][T16236] netlink: 'syz.3.3452': attribute type 4 has an invalid length. [ 327.033379][T16241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3454'. [ 327.081077][T16243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3455'. [ 327.255127][T16255] netlink: 'syz.4.3459': attribute type 4 has an invalid length. [ 327.258460][T16256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3457'. [ 327.371977][T16265] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3460'. [ 328.081878][T16301] netlink: 'syz.4.3472': attribute type 4 has an invalid length. [ 328.302043][T16308] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 329.418591][ T5107] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 329.430296][ T5107] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 329.440603][ T5107] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 329.458903][ T5107] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 329.469056][ T5107] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 329.476819][ T5107] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 329.565793][T16348] lo speed is unknown, defaulting to 1000 [ 329.615734][T16355] netlink: 'syz.1.3491': attribute type 21 has an invalid length. [ 330.300217][T16387] netlink: 'syz.1.3500': attribute type 1 has an invalid length. [ 330.481294][T16348] chnl_net:caif_netlink_parms(): no params data found [ 330.812313][T16413] netlink: 'syz.1.3506': attribute type 4 has an invalid length. [ 330.889338][T16348] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.908008][T16348] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.929601][T16418] netlink: 'syz.4.3510': attribute type 4 has an invalid length. [ 330.935375][T16348] bridge_slave_0: entered allmulticast mode [ 330.976023][T16348] bridge_slave_0: entered promiscuous mode [ 331.070066][T16427] __nla_validate_parse: 7 callbacks suppressed [ 331.070087][T16427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3509'. [ 331.086058][T16348] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.108697][T16348] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.118411][T16348] bridge_slave_1: entered allmulticast mode [ 331.142269][T16348] bridge_slave_1: entered promiscuous mode [ 331.262427][T16348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.282807][T16431] netlink: 'syz.1.3513': attribute type 21 has an invalid length. [ 331.292689][T16431] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3513'. [ 331.309263][T16431] netlink: 'syz.1.3513': attribute type 5 has an invalid length. [ 331.319049][T16431] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3513'. [ 331.332293][T16348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.428981][T16434] pim6reg: entered allmulticast mode [ 331.474101][T16348] team0: Port device team_slave_0 added [ 331.526166][ T5114] Bluetooth: hci3: command tx timeout [ 331.533327][T16348] team0: Port device team_slave_1 added [ 331.657088][T16348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.664114][T16348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.693322][T16447] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3519'. [ 331.740658][T16348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.757016][T16447] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3519'. [ 331.789268][T16348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.792114][T16449] netlink: 'syz.4.3521': attribute type 4 has an invalid length. [ 331.835641][T16348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.918312][T16348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.118125][T16348] hsr_slave_0: entered promiscuous mode [ 332.142792][T16348] hsr_slave_1: entered promiscuous mode [ 332.170733][T16348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.179967][T16348] Cannot create hsr debugfs directory [ 332.343113][T16476] netlink: 'syz.2.3532': attribute type 4 has an invalid length. [ 332.381515][T16473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3531'. [ 332.747854][T16503] netlink: 'syz.2.3536': attribute type 23 has an invalid length. [ 332.894677][T16490] netlink: 'syz.4.3534': attribute type 13 has an invalid length. [ 333.097511][T16510] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3537'. [ 333.364632][T16348] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.407637][T16348] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.606955][ T5114] Bluetooth: hci3: command tx timeout [ 333.608353][T16348] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.661766][T16348] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.843498][T16348] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.869755][T16348] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.988991][T16545] netlink: 'syz.4.3549': attribute type 3 has an invalid length. [ 334.015107][T16544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3547'. [ 334.035020][T16545] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3549'. [ 334.053936][T16348] netdevsim netdevsim3  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.077074][T16348] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.127264][T16542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.233535][T16557] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3552'. [ 334.441063][T16348] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 334.476829][T16348] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 334.498822][T16348] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 334.551414][T16348] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 334.883735][T16588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.919906][T16348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.962742][T16591] netlink: 'syz.0.3564': attribute type 10 has an invalid length. [ 334.987857][T16591] ------------[ cut here ]------------ [ 334.993848][T16591] WARNING: CPU: 0 PID: 16591 at net/mac80211/iface.c:515 ieee80211_do_stop+0x18ee/0x1ee0 [ 335.004324][T16591] Modules linked in: [ 335.008629][T16591] CPU: 0 PID: 16591 Comm: syz.0.3564 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 335.018898][T16591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 335.029189][T16591] RIP: 0010:ieee80211_do_stop+0x18ee/0x1ee0 [ 335.035381][T16591] Code: ff e8 a6 32 9c f6 4c 89 ef 31 f6 e8 1c 4c 0c 00 48 8b 5c 24 60 e9 9d fd ff ff e8 8d 32 9c f6 e9 93 fd ff ff e8 83 32 9c f6 90 <0f> 0b 90 e9 cd ea ff ff e8 75 32 9c f6 90 43 0f b6 04 27 84 c0 0f [ 335.046209][T16598] sctp: [Deprecated]: syz.4.3563 (pid 16598) Use of int in max_burst socket option. [ 335.046209][T16598] Use struct sctp_assoc_value instead [ 335.055067][T16591] RSP: 0018:ffffc9000cc96800 EFLAGS: 00010287 [ 335.055158][T16591] RAX: ffffffff8af9f4dd RBX: 0000000000000002 RCX: 0000000000040000 [ 335.055177][T16591] RDX: ffffc900099b9000 RSI: 000000000000fb1c RDI: 000000000000fb1d [ 335.055197][T16591] RBP: ffffc9000cc96968 R08: ffffffff8af9dfa0 R09: 1ffffffff1f5b9ad [ 335.055217][T16591] R10: dffffc0000000000 R11: fffffbfff1f5b9ae R12: dffffc0000000000 [ 335.108318][T16591] R13: ffff88807df88e20 R14: 0000000000000001 R15: ffff88805e9c2800 [ 335.116380][T16591] FS: 00007f71639006c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 335.126024][T16591] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 335.132671][T16591] CR2: 00007f5cead57fa8 CR3: 000000006f374000 CR4: 00000000003506f0 [ 335.140947][T16591] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 335.149075][T16591] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 335.157150][T16591] Call Trace: [ 335.160480][T16591] [ 335.163459][T16591] ? __warn+0x163/0x4e0 [ 335.167719][T16591] ? ieee80211_do_stop+0x18ee/0x1ee0 [ 335.173069][T16591] ? report_bug+0x2b3/0x500 [ 335.177808][T16591] ? ieee80211_do_stop+0x18ee/0x1ee0 [ 335.183158][T16591] ? handle_bug+0x3e/0x70 [ 335.187621][T16591] ? exc_invalid_op+0x1a/0x50 [ 335.192358][T16591] ? asm_exc_invalid_op+0x1a/0x20 [ 335.197495][T16591] ? ieee80211_do_stop+0x3b0/0x1ee0 [ 335.202737][T16591] ? ieee80211_do_stop+0x18ed/0x1ee0 [ 335.208630][T16591] ? ieee80211_do_stop+0x18ee/0x1ee0 [ 335.213977][T16591] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 335.221382][T16591] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 335.226994][T16591] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 335.233375][T16591] ? wiphy_work_cancel+0x1f0/0x3e0 [ 335.238579][T16591] ieee80211_stop+0x436/0x4a0 [ 335.243493][T16591] ? __pfx_ieee80211_stop+0x10/0x10 [ 335.248813][T16591] __dev_close_many+0x219/0x300 [ 335.253714][T16591] ? __pfx___dev_close_many+0x10/0x10 [ 335.259181][T16591] ? dev_set_rx_mode+0x233/0x2e0 [ 335.264174][T16591] __dev_change_flags+0x30e/0x6f0 [ 335.269308][T16591] ? __pfx___dev_change_flags+0x10/0x10 [ 335.275019][T16591] ? vprintk_emit+0x631/0x770 [ 335.279794][T16591] dev_change_flags+0x8b/0x1a0 [ 335.284628][T16591] do_setlink+0xccd/0x41f0 [ 335.289150][T16591] ? _printk+0xd5/0x120 [ 335.293373][T16591] ? __nla_validate_parse+0x4f4/0x3090 [ 335.298953][T16591] ? __pfx__printk+0x10/0x10 [ 335.303619][T16591] ? __pfx_do_setlink+0x10/0x10 [ 335.308633][T16591] ? __nla_validate_parse+0x26ce/0x3090 [ 335.314235][T16591] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 335.319803][T16591] ? rtnl_newlink+0xf2/0x20a0 [ 335.324570][T16591] ? __pfx___nla_validate_parse+0x10/0x10 [ 335.330451][T16591] ? validate_linkmsg+0x71e/0x900 [ 335.335606][T16591] rtnl_newlink+0x180d/0x20a0 [ 335.340452][T16591] ? rtnl_newlink+0x4f1/0x20a0 [ 335.345560][T16591] ? __pfx_rtnl_newlink+0x10/0x10 [ 335.350656][T16591] ? __pfx___mutex_trylock_common+0x10/0x10 [ 335.356686][T16591] ? rcu_is_watching+0x15/0xb0 [ 335.361524][T16591] ? trace_contention_end+0x3c/0x120 [ 335.367050][T16591] ? __mutex_lock+0x2ef/0xd70 [ 335.371794][T16591] ? __pfx_lock_release+0x10/0x10 [ 335.377161][T16591] ? __pfx_rtnl_newlink+0x10/0x10 [ 335.382343][T16591] rtnetlink_rcv_msg+0x89b/0x1180 [ 335.387521][T16591] ? rtnetlink_rcv_msg+0x208/0x1180 [ 335.392785][T16591] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 335.398396][T16591] ? __local_bh_enable_ip+0x168/0x200 [ 335.403824][T16591] ? lockdep_hardirqs_on+0x99/0x150 [ 335.409160][T16591] ? __local_bh_enable_ip+0x168/0x200 [ 335.414592][T16591] ? dev_hard_start_xmit+0x773/0x7e0 [ 335.420085][T16591] ? __dev_queue_xmit+0x2da/0x3e90 [ 335.425361][T16591] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 335.431156][T16591] ? __dev_queue_xmit+0x2da/0x3e90 [ 335.436531][T16591] ? __dev_queue_xmit+0x1763/0x3e90 [ 335.441797][T16591] ? kasan_save_track+0x51/0x80 [ 335.447057][T16591] ? do_syscall_64+0xf3/0x230 [ 335.451771][T16591] ? __dev_queue_xmit+0x2da/0x3e90 [ 335.456996][T16591] ? __pfx___dev_queue_xmit+0x10/0x10 [ 335.462463][T16591] ? ref_tracker_free+0x643/0x7e0 [ 335.467701][T16591] netlink_rcv_skb+0x1e3/0x430 [ 335.472526][T16591] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 335.478071][T16591] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 335.483421][T16591] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.488730][T16591] netlink_unicast+0x7f0/0x990 [ 335.493555][T16591] ? __pfx_netlink_unicast+0x10/0x10 [ 335.498925][T16591] ? __virt_addr_valid+0x183/0x520 [ 335.504099][T16591] ? __check_object_size+0x49c/0x900 [ 335.509540][T16591] ? bpf_lsm_netlink_send+0x9/0x10 [ 335.514714][T16591] netlink_sendmsg+0x8e4/0xcb0 [ 335.519600][T16591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.525444][T16591] ? __import_iovec+0x536/0x820 [ 335.530354][T16591] ? aa_sock_msg_perm+0x91/0x160 [ 335.535877][T16591] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 335.541243][T16591] ? security_socket_sendmsg+0x87/0xb0 [ 335.547064][T16591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.552408][T16591] __sock_sendmsg+0x221/0x270 [ 335.557223][T16591] ____sys_sendmsg+0x525/0x7d0 [ 335.562054][T16591] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.567479][T16591] __sys_sendmsg+0x2b0/0x3a0 [ 335.572174][T16591] ? __pfx___sys_sendmsg+0x10/0x10 [ 335.577409][T16591] ? __schedule+0x17f0/0x4a20 [ 335.582371][T16591] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 335.588812][T16591] ? do_syscall_64+0x100/0x230 [ 335.593614][T16591] ? do_syscall_64+0xb6/0x230 [ 335.598386][T16591] do_syscall_64+0xf3/0x230 [ 335.602938][T16591] ? clear_bhb_loop+0x35/0x90 [ 335.607869][T16591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.613823][T16591] RIP: 0033:0x7f7162b75bd9 [ 335.618325][T16591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.638042][T16591] RSP: 002b:00007f7163900048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.646571][T16591] RAX: ffffffffffffffda RBX: 00007f7162d03f60 RCX: 00007f7162b75bd9 [ 335.654877][T16591] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000005 [ 335.662932][T16591] RBP: 00007f7162be4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 335.671015][T16591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.679077][T16591] R13: 000000000000004d R14: 00007f7162d03f60 R15: 00007ffe9a23a5b8 [ 335.687447][T16591] [ 335.687445][ T5114] Bluetooth: hci3: command tx timeout [ 335.690486][T16591] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 335.690502][T16591] CPU: 0 PID: 16591 Comm: syz.0.3564 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 335.690530][T16591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 335.690543][T16591] Call Trace: [ 335.690553][T16591] [ 335.690563][T16591] dump_stack_lvl+0x241/0x360 [ 335.690602][T16591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.690630][T16591] ? __pfx__printk+0x10/0x10 [ 335.690679][T16591] ? vscnprintf+0x5d/0x90 [ 335.690713][T16591] panic+0x349/0x860 [ 335.690761][T16591] ? __warn+0x172/0x4e0 [ 335.690797][T16591] ? __pfx_panic+0x10/0x10 [ 335.690858][T16591] __warn+0x346/0x4e0 [ 335.690891][T16591] ? ieee80211_do_stop+0x18ee/0x1ee0 [ 335.690922][T16591] report_bug+0x2b3/0x500 [ 335.690959][T16591] ? ieee80211_do_stop+0x18ee/0x1ee0 [ 335.690992][T16591] handle_bug+0x3e/0x70 [ 335.691018][T16591] exc_invalid_op+0x1a/0x50 [ 335.691047][T16591] asm_exc_invalid_op+0x1a/0x20 [ 335.691076][T16591] RIP: 0010:ieee80211_do_stop+0x18ee/0x1ee0 [ 335.691103][T16591] Code: ff e8 a6 32 9c f6 4c 89 ef 31 f6 e8 1c 4c 0c 00 48 8b 5c 24 60 e9 9d fd ff ff e8 8d 32 9c f6 e9 93 fd ff ff e8 83 32 9c f6 90 <0f> 0b 90 e9 cd ea ff ff e8 75 32 9c f6 90 43 0f b6 04 27 84 c0 0f [ 335.691125][T16591] RSP: 0018:ffffc9000cc96800 EFLAGS: 00010287 [ 335.691150][T16591] RAX: ffffffff8af9f4dd RBX: 0000000000000002 RCX: 0000000000040000 [ 335.691168][T16591] RDX: ffffc900099b9000 RSI: 000000000000fb1c RDI: 000000000000fb1d [ 335.691187][T16591] RBP: ffffc9000cc96968 R08: ffffffff8af9dfa0 R09: 1ffffffff1f5b9ad [ 335.691207][T16591] R10: dffffc0000000000 R11: fffffbfff1f5b9ae R12: dffffc0000000000 [ 335.691226][T16591] R13: ffff88807df88e20 R14: 0000000000000001 R15: ffff88805e9c2800 [ 335.691254][T16591] ? ieee80211_do_stop+0x3b0/0x1ee0 [ 335.691277][T16591] ? ieee80211_do_stop+0x18ed/0x1ee0 [ 335.691320][T16591] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 335.691358][T16591] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 335.691389][T16591] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 335.691425][T16591] ? wiphy_work_cancel+0x1f0/0x3e0 [ 335.691468][T16591] ieee80211_stop+0x436/0x4a0 [ 335.691498][T16591] ? __pfx_ieee80211_stop+0x10/0x10 [ 335.691528][T16591] __dev_close_many+0x219/0x300 [ 335.691559][T16591] ? __pfx___dev_close_many+0x10/0x10 [ 335.691590][T16591] ? dev_set_rx_mode+0x233/0x2e0 [ 335.691626][T16591] __dev_change_flags+0x30e/0x6f0 [ 335.691664][T16591] ? __pfx___dev_change_flags+0x10/0x10 [ 335.691700][T16591] ? vprintk_emit+0x631/0x770 [ 335.691746][T16591] dev_change_flags+0x8b/0x1a0 [ 335.691783][T16591] do_setlink+0xccd/0x41f0 [ 335.691820][T16591] ? _printk+0xd5/0x120 [ 335.691860][T16591] ? __nla_validate_parse+0x4f4/0x3090 [ 335.691889][T16591] ? __pfx__printk+0x10/0x10 [ 335.691931][T16591] ? __pfx_do_setlink+0x10/0x10 [ 335.691967][T16591] ? __nla_validate_parse+0x26ce/0x3090 [ 335.691992][T16591] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 335.692032][T16591] ? rtnl_newlink+0xf2/0x20a0 [ 335.692089][T16591] ? __pfx___nla_validate_parse+0x10/0x10 [ 335.692158][T16591] ? validate_linkmsg+0x71e/0x900 [ 335.692199][T16591] rtnl_newlink+0x180d/0x20a0 [ 335.692250][T16591] ? rtnl_newlink+0x4f1/0x20a0 [ 335.692302][T16591] ? __pfx_rtnl_newlink+0x10/0x10 [ 335.692339][T16591] ? __pfx___mutex_trylock_common+0x10/0x10 [ 335.692380][T16591] ? rcu_is_watching+0x15/0xb0 [ 335.692409][T16591] ? trace_contention_end+0x3c/0x120 [ 335.692444][T16591] ? __mutex_lock+0x2ef/0xd70 [ 335.692490][T16591] ? __pfx_lock_release+0x10/0x10 [ 335.692539][T16591] ? __pfx_rtnl_newlink+0x10/0x10 [ 335.692575][T16591] rtnetlink_rcv_msg+0x89b/0x1180 [ 335.692608][T16591] ? rtnetlink_rcv_msg+0x208/0x1180 [ 335.692641][T16591] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 335.692676][T16591] ? __local_bh_enable_ip+0x168/0x200 [ 335.692700][T16591] ? lockdep_hardirqs_on+0x99/0x150 [ 335.692751][T16591] ? __local_bh_enable_ip+0x168/0x200 [ 335.692776][T16591] ? dev_hard_start_xmit+0x773/0x7e0 [ 335.692809][T16591] ? __dev_queue_xmit+0x2da/0x3e90 [ 335.692846][T16591] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 335.692880][T16591] ? __dev_queue_xmit+0x2da/0x3e90 [ 335.692919][T16591] ? __dev_queue_xmit+0x1763/0x3e90 [ 335.692952][T16591] ? kasan_save_track+0x51/0x80 [ 335.692990][T16591] ? do_syscall_64+0xf3/0x230 [ 335.693021][T16591] ? __dev_queue_xmit+0x2da/0x3e90 [ 335.693063][T16591] ? __pfx___dev_queue_xmit+0x10/0x10 [ 335.693119][T16591] ? ref_tracker_free+0x643/0x7e0 [ 335.693165][T16591] netlink_rcv_skb+0x1e3/0x430 [ 335.693196][T16591] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 335.693226][T16591] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 335.693284][T16591] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.693317][T16591] netlink_unicast+0x7f0/0x990 [ 335.693354][T16591] ? __pfx_netlink_unicast+0x10/0x10 [ 335.693377][T16591] ? __virt_addr_valid+0x183/0x520 [ 335.693418][T16591] ? __check_object_size+0x49c/0x900 [ 335.693456][T16591] ? bpf_lsm_netlink_send+0x9/0x10 [ 335.693498][T16591] netlink_sendmsg+0x8e4/0xcb0 [ 335.693543][T16591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.693576][T16591] ? __import_iovec+0x536/0x820 [ 335.693601][T16591] ? aa_sock_msg_perm+0x91/0x160 [ 335.693641][T16591] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 335.693665][T16591] ? security_socket_sendmsg+0x87/0xb0 [ 335.693700][T16591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.693732][T16591] __sock_sendmsg+0x221/0x270 [ 335.693767][T16591] ____sys_sendmsg+0x525/0x7d0 [ 335.693814][T16591] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.693870][T16591] __sys_sendmsg+0x2b0/0x3a0 [ 335.693908][T16591] ? __pfx___sys_sendmsg+0x10/0x10 [ 335.693942][T16591] ? __schedule+0x17f0/0x4a20 [ 335.694026][T16591] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 335.694056][T16591] ? do_syscall_64+0x100/0x230 [ 335.694086][T16591] ? do_syscall_64+0xb6/0x230 [ 335.694115][T16591] do_syscall_64+0xf3/0x230 [ 335.694142][T16591] ? clear_bhb_loop+0x35/0x90 [ 335.694174][T16591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.694202][T16591] RIP: 0033:0x7f7162b75bd9 [ 335.694224][T16591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.694245][T16591] RSP: 002b:00007f7163900048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.694270][T16591] RAX: ffffffffffffffda RBX: 00007f7162d03f60 RCX: 00007f7162b75bd9 [ 335.694290][T16591] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000005 [ 335.694308][T16591] RBP: 00007f7162be4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 335.694324][T16591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.694340][T16591] R13: 000000000000004d R14: 00007f7162d03f60 R15: 00007ffe9a23a5b8 [ 335.694379][T16591] [ 335.696163][T16591] Kernel Offset: disabled