last executing test programs: 1m20.756680456s ago: executing program 1: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x30, 0x31, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, 0x0, &(0x7f0000000240)) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x2c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f40000ffffff890000000000000000000000ffffff8d00000100"/40, 0x28}], 0x1}, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, 0x0, 0x0) (async) listen(r4, 0x0) (async) close(r4) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@ifindex, 0xffffffffffffffff, 0x1a, 0x0, 0x0, @prog_fd}, 0x20) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x2, 0x0, 0x0) (async) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) (async) recvmmsg(r5, &(0x7f0000008a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=""/40, 0x28}}], 0x1, 0x0, 0x0) (async) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="e000000010000905000000000000ecff6eed8864d22a3f2fe735a3184f121899a96e0ee8ce02840343f63d6da2f1acedc0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d715f5f"], 0xe0}], 0x1}, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x81, 0x0, 0xff, 0x1b, 0x7ff, 0x2}, 0x20) 1m6.607221482s ago: executing program 1: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x30, 0x31, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, 0x0, &(0x7f0000000240)) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x2c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f40000ffffff890000000000000000000000ffffff8d00000100"/40, 0x28}], 0x1}, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, 0x0, 0x0) (async) listen(r4, 0x0) (async) close(r4) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@ifindex, 0xffffffffffffffff, 0x1a, 0x0, 0x0, @prog_fd}, 0x20) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x2, 0x0, 0x0) (async) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) (async) recvmmsg(r5, &(0x7f0000008a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=""/40, 0x28}}], 0x1, 0x0, 0x0) (async) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="e000000010000905000000000000ecff6eed8864d22a3f2fe735a3184f121899a96e0ee8ce02840343f63d6da2f1acedc0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d715f5f"], 0xe0}], 0x1}, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x81, 0x0, 0xff, 0x1b, 0x7ff, 0x2}, 0x20) 53.297795181s ago: executing program 1: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x30, 0x31, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, 0x0, &(0x7f0000000240)) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x2c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f40000ffffff890000000000000000000000ffffff8d00000100"/40, 0x28}], 0x1}, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, 0x0, 0x0) (async) listen(r4, 0x0) (async) close(r4) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@ifindex, 0xffffffffffffffff, 0x1a, 0x0, 0x0, @prog_fd}, 0x20) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x2, 0x0, 0x0) (async) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) (async) recvmmsg(r5, &(0x7f0000008a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=""/40, 0x28}}], 0x1, 0x0, 0x0) (async) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="e000000010000905000000000000ecff6eed8864d22a3f2fe735a3184f121899a96e0ee8ce02840343f63d6da2f1acedc0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d715f5f"], 0xe0}], 0x1}, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x81, 0x0, 0xff, 0x1b, 0x7ff, 0x2}, 0x20) 40.242832488s ago: executing program 1: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x30, 0x31, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, 0x0, &(0x7f0000000240)) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x2c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f40000ffffff890000000000000000000000ffffff8d00000100"/40, 0x28}], 0x1}, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, 0x0, 0x0) (async) listen(r4, 0x0) (async) close(r4) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@ifindex, 0xffffffffffffffff, 0x1a, 0x0, 0x0, @prog_fd}, 0x20) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x2, 0x0, 0x0) (async) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) (async) recvmmsg(r5, &(0x7f0000008a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=""/40, 0x28}}], 0x1, 0x0, 0x0) (async) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="e000000010000905000000000000ecff6eed8864d22a3f2fe735a3184f121899a96e0ee8ce02840343f63d6da2f1acedc0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d715f5f"], 0xe0}], 0x1}, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x81, 0x0, 0xff, 0x1b, 0x7ff, 0x2}, 0x20) 27.793903735s ago: executing program 1: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x30, 0x31, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, 0x0, &(0x7f0000000240)) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x2c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f40000ffffff890000000000000000000000ffffff8d00000100"/40, 0x28}], 0x1}, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, 0x0, 0x0) (async) listen(r4, 0x0) (async) close(r4) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@ifindex, 0xffffffffffffffff, 0x1a, 0x0, 0x0, @prog_fd}, 0x20) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x2, 0x0, 0x0) (async) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) (async) recvmmsg(r5, &(0x7f0000008a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=""/40, 0x28}}], 0x1, 0x0, 0x0) (async) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="e000000010000905000000000000ecff6eed8864d22a3f2fe735a3184f121899a96e0ee8ce02840343f63d6da2f1acedc0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d715f5f"], 0xe0}], 0x1}, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x81, 0x0, 0xff, 0x1b, 0x7ff, 0x2}, 0x20) 14.276951894s ago: executing program 1: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x30, 0x31, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, 0x0, &(0x7f0000000240)) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x2c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f40000ffffff890000000000000000000000ffffff8d00000100"/40, 0x28}], 0x1}, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, 0x0, 0x0) (async) listen(r4, 0x0) (async) close(r4) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@ifindex, 0xffffffffffffffff, 0x1a, 0x0, 0x0, @prog_fd}, 0x20) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x2, 0x0, 0x0) (async) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) (async) recvmmsg(r5, &(0x7f0000008a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=""/40, 0x28}}], 0x1, 0x0, 0x0) (async) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="e000000010000905000000000000ecff6eed8864d22a3f2fe735a3184f121899a96e0ee8ce02840343f63d6da2f1acedc0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d715f5f"], 0xe0}], 0x1}, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x81, 0x0, 0xff, 0x1b, 0x7ff, 0x2}, 0x20) 4.483848408s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff0000000700a100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001811000088f096fbb30932f438e743af738a0897", @ANYRES32=r1, @ANYRES16=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map, 0x3, 0x1, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) 4.217217766s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x130}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2100000065d8293eddba4dc90b00000000000000000700000000c1fe008e80130003004f34"], 0x2c}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000780), 0xe9) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000400)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306, @broadcast}, 0x14, {0x2, 0x4e24, @loopback}, 'dvmrp1\x00'}) mmap(&(0x7f0000865000/0x2000)=nil, 0x2000, 0x3000007, 0x2110, r3, 0x24000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_EVENT={0x8, 0x2c, 0x8}]}, 0x28}}, 0x0) getsockopt(0xffffffffffffffff, 0xdc, 0x2, &(0x7f00000007c0)=""/4096, &(0x7f0000000480)=0x1000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)={'#! ', './file0', [{0x20, '\x18\xe0\x13y\xe7\xf6\xe8\xbe0m\xbb?F0\xf6Ly\x8bQ\xe1\xe71\x1cyf\x8b\xd0\xd8\x16\'\x93\xa2\x96jV\nP\xc7\x8d_\x84\xcc\\\xfd\xa7$\x9a\"\xa2\xc6\x81$\xf6\xf1`-T)\x96\xbar=a.\x1a\\\xd1\xc8\xa1\xa3\x7f\xb8~\xdd\x1f}A\xc6'}], 0xa, "db239384f3f04d896831d53c958ca43b3e7dffb942dc9ed11c138fe6dbc42ab2a452b6b50800000033a3"}, 0x84) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10, r3, 0xec788000) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r6, 0x10e, 0x0, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_type(r7, &(0x7f00000001c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r1) r9 = socket$kcm(0x10, 0x2, 0x10) close(r9) r10 = socket$kcm(0x10, 0x1, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) preadv(r8, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4094, 0xffe}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) 3.102725153s ago: executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@deltaction={0x68, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x68}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0x65c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.639779592s ago: executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x0, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, 0x0, [@null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 2.509480574s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x130}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2100000065d8293eddba4dc90b00000000000000000700000000c1fe008e80130003004f34"], 0x2c}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000780), 0xe9) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000400)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306, @broadcast}, 0x14, {0x2, 0x4e24, @loopback}, 'dvmrp1\x00'}) mmap(&(0x7f0000865000/0x2000)=nil, 0x2000, 0x3000007, 0x2110, r3, 0x24000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_EVENT={0x8, 0x2c, 0x8}]}, 0x28}}, 0x0) getsockopt(0xffffffffffffffff, 0xdc, 0x2, &(0x7f00000007c0)=""/4096, &(0x7f0000000480)=0x1000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)={'#! ', './file0', [{0x20, '\x18\xe0\x13y\xe7\xf6\xe8\xbe0m\xbb?F0\xf6Ly\x8bQ\xe1\xe71\x1cyf\x8b\xd0\xd8\x16\'\x93\xa2\x96jV\nP\xc7\x8d_\x84\xcc\\\xfd\xa7$\x9a\"\xa2\xc6\x81$\xf6\xf1`-T)\x96\xbar=a.\x1a\\\xd1\xc8\xa1\xa3\x7f\xb8~\xdd\x1f}A\xc6'}], 0xa, "db239384f3f04d896831d53c958ca43b3e7dffb942dc9ed11c138fe6dbc42ab2a452b6b50800000033a3"}, 0x84) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10, r3, 0xec788000) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r6, 0x10e, 0x0, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_type(r7, &(0x7f00000001c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r1) r9 = socket$kcm(0x10, 0x2, 0x10) close(r9) r10 = socket$kcm(0x10, 0x1, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) preadv(r8, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4094, 0xffe}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) 2.018490267s ago: executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@deltaction={0x68, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x68}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0x65c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.839820687s ago: executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x0, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, 0x0, [@null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 1.715245074s ago: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = socket$netlink(0x10, 0x3, 0x15) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, 0x0, 0x4000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r9, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a00"], 0x58}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000003b58126510004b0400000022000048f0643eae890c15834691a68ef2475631ad74d21a5e51330304b15e588b638a782c18355649cc98e4316f", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002500000000000800050000000000"], 0x44}}, 0x4000081) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffc7ffb70300000805000000420086cc9a4100850000000100000095b9b5a838ed3227e3851f7c8a7e4981c7363bc114bdf238bdd9b532835dd22677afa43b3fbab8e523fec44c47d1718e180ebdbb2ff92829b76eeeca31867c4e0977f891a4db55d248087306d3fce6244742ab28d89c03683743160d57e451d6a9777a0abc22bcadb1dd3b2b31bf658f9deaf0e8b0dd40322785c8087a45b80000000004c34cb35a46213a152a55550ade89bf0954a4a344628170a58a1feb34b495d25fb37bfb81e5996b000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x10, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.210028581s ago: executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth0_to_bridge\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'bridge_slave_1\x00'}}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)={@cgroup, 0xffffffffffffffff, 0x1f, 0x0, 0xffffffffffffffff, @prog_fd}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x24, 0x0, 0x3906b532b8f6969c, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040804}, 0x8081) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0xfffffffe, 0x8, 0x8}, 0x48) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ppoll(&(0x7f0000000340)=[{0xffffffffffffffff, 0x10}, {r5, 0x1008}, {r4, 0x1482}, {r0, 0x9}, {r6}, {r4, 0x8000}], 0x6, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)={[0x299]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r8, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x4, 0x2, 0x0, '`'}]}}}}}}}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.158812467s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43908564f856834eabb3f4c759691b4a1ef1567090718dc1"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x14}, 0x820) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000200), 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='veno\x00', 0x5) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x9, [@typedef={0x10}, @enum={0x9, 0x3, 0x0, 0x6, 0x4, [{0x6, 0x6}, {0x7, 0x3}, {0xd, 0x20}]}, @func={0x4, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x2e, 0x3e, 0x0, 0x2e, 0x30, 0x2e, 0x5f]}}, &(0x7f0000000300)=""/70, 0x5d, 0x46, 0x1, 0x958}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=@deltaction={0x90, 0x31, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4f3367f2}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffe}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3f}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4004801}, 0x800) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000540)={r4, 0x1, 0x1270, 0x86}) write$ppp(r6, &(0x7f0000000580)="c2c477d15b87bcfc9e87af1329648a522741396af3c2ab8a2fe4b677b64a0f7f1bad5dd5a39a1132487df68ea509c6ac38e8e426007d6fc410a699e0b6bc5bad9d28cca9289bf167ef8a9e1ed351f69888cfb7dd609daf9ce1f3394fddf7a74899ff23ad57ae2eaaee701ef639f1df1b2e5c77709ed984f0", 0x78) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000880)={'tunl0\x00', &(0x7f00000007c0)={'gre0\x00', 0x0, 0x8000, 0x20, 0x3, 0xdae7, {{0x19, 0x4, 0x0, 0x36, 0x64, 0x64, 0xfff8, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @multicast2, {[@timestamp_addr={0x44, 0xc, 0xf9, 0x1, 0x4, [{@multicast2, 0xfffffd92}]}, @ssrr={0x89, 0xb, 0xbc, [@private=0xa010101, @loopback]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x4e, 0x0, 0x7, [0x80000001, 0x6]}, @timestamp={0x44, 0x1c, 0xf3, 0x0, 0xb, [0x9, 0xbe, 0x5, 0xa07, 0x0, 0x3]}, @lsrr={0x83, 0x7, 0x96, [@multicast1]}, @noop, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r6, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xd, 0x12, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75f}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x3, 0xb2, &(0x7f0000000700)=""/178, 0x41100, 0x30, '\x00', r7, 0x22, r4, 0x8, &(0x7f00000008c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0xe, 0x9, 0xf16a}, 0x10, 0x0, r6, 0x0, &(0x7f0000000a40)=[r6, r6, r6, r6, r8, r9], 0x0, 0x10, 0x7}, 0x90) r10 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000b40)={0x0, 0x37, "635117451979e48aa0fc7a63dc546991f4b9964c509057cad9453787c8382214f5ff20e7ebcfe521d392c24c8201243536f7ab70b7c858"}, &(0x7f0000000b80)=0x3f) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000bc0)={r11, 0x1}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c80)={r8, 0x58, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@bloom_filter={0x1e, 0x5, 0x7, 0x40, 0x80, r9, 0x9, '\x00', r12, r4, 0x3, 0x1, 0x4, 0xe}, 0x48) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x40, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xb55}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x7f}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040045) setsockopt$MRT_DEL_MFC(r6, 0x0, 0xcd, &(0x7f0000000e40)={@loopback, @remote, 0x0, "1c73462b95a977da13660387524c35b955cae93489244acd74cb039a1d06a3d4", 0xfff, 0x3, 0x6c, 0x4}, 0x3c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e80)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x1, '\x00', r12, r4, 0x4, 0x4, 0x5}, 0x48) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000f00)={0x4, 0x8, {0x100400000000000, @usage=0x4, 0x0, 0xfff, 0x0, 0x4, 0x0, 0x1, 0x4, @struct={0x0, 0x3ff}, 0xfffffffd, 0x7f, [0x7fff, 0x5, 0x8, 0x3, 0x5]}, {0x8, @usage=0x800, 0x0, 0x5277, 0x5, 0x4, 0x4, 0x80000000, 0x440, @struct={0xcafd, 0x8}, 0x7, 0x2, [0x2, 0x9, 0x2, 0x3, 0xa2, 0x5]}, {0x7, @struct={0x1ff, 0x80000001}, 0x0, 0x4, 0xe7, 0x7, 0x6b, 0x10000, 0xa, @struct={0x7, 0x2}, 0x813e, 0x81, [0x8, 0x53, 0x26379eda, 0x0, 0x2]}, {0xc9b4, 0x9, 0x7b2}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r10, 0xc400941d, &(0x7f0000001300)={r13, 0x5, 0x5}) r14 = accept4(r0, 0x0, &(0x7f0000001700), 0x81800) write$binfmt_misc(r14, 0xffffffffffffffff, 0x0) r15 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001780), r6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r14, &(0x7f0000001880)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x6c, r15, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7fff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200c0080}, 0x4000000) 1.029426206s ago: executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@deltaction={0x68, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x68}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0x65c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 967.892775ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000820850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x24020400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{r3}, &(0x7f0000000900), &(0x7f0000000940)='%pi6 \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r5, 0x101, 0x0, &(0x7f0000000080), 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) 903.566383ms ago: executing program 3: socket$inet6(0xa, 0x6, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x1c0) (async) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000000000000000ff0000000000000000d17d000000000000000000000000000000000000000000ffffffff0000000000000000000000000000001200000000000000000000000000080000000000000800000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000006e72300000000000000000000000000079616d3000000001000000000000b40079616d30000000000000000000000000766574b7708ad56f5f7465616d0000000180c2000000000000000000aaaaaaaaaa000000000000000000b0000000b0000000e000000071756f746100000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000a00000000000000000000004155444954000000"]}, 0x1c0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) (async) listen(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f0000000200)=0x9, 0x4) listen(r5, 0x0) socket$netlink(0x10, 0x3, 0x4) (async) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.stat\x00', 0x275a, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0xfea7) (async) write$binfmt_script(r2, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) 818.461326ms ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=r0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x4000000) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000010c0), 0x4) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x310) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0x29a, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000600)={'erspan0\x00', 0x0, 0x40, 0x10, 0x5578, 0x8, {{0x42, 0x4, 0x2, 0x5, 0x108, 0x66, 0x0, 0x12, 0x4, 0x0, @private=0xa010102, @broadcast, {[@generic={0x89, 0x12, "008e1658f98b000000014735d55a68f9"}, @noop, @cipso={0x86, 0x29, 0x3, [{0x0, 0x7, "e189cc1ce1"}, {0x5, 0x8, "e2d37c1102c0"}, {0x5f4e74dd492d3dfc, 0x5, "6338a5"}, {0x2, 0x7, "a0f15cbe62"}, {0x6, 0x8, "658814c0e534"}]}, @rr={0x7, 0x13, 0x12, [@multicast1, @private=0xa010100, @rand_addr=0x64010100, @loopback]}, @cipso={0x86, 0x2a, 0x2, [{0x5, 0x12, "060000000a80143c21a0efd9478e7d49"}, {0x2, 0x4, "b410"}, {0x2, 0x4, '\f\v'}, {0x6, 0xa, "56e4576b97745ea7"}]}, @timestamp_addr={0x44, 0x3c, 0x93, 0x1, 0x3, [{@rand_addr=0x64010101, 0xd9}, {@multicast2}, {@multicast2, 0x401}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@rand_addr=0x64010101, 0x9ae4}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9058}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x3b, 0x2, [{0x7, 0xf, "b54b80cc53300cb20b75c1903c"}, {0x2, 0x10, "076029052e02085ea3a63536848d"}, {0x1, 0x2}, {0x7, 0x5, "bbe73c"}, {0x5, 0xa, "aeb7831ebcbb9211"}, {0x7, 0x5, "9b3bd3"}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@RTM_GETMDB={0x18, 0x56, 0x100, 0x70bd2a, 0x25dfdbfc, {0x7, r5}, ["", ""]}, 0x18}, 0x1, 0xffffa888}, 0x20044044) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x8, 0x6, 0x620, 0x0, 0x240, 0x338, 0xd0, 0xd0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'nicvf0\x00'}, 0x0, 0x148, 0x170, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'erspan0\x00', {}, 'netpci0\x00', {}, 0x14, 0x15}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1) r8 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x40086602, &(0x7f0000015740)) r9 = socket$inet6(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000006000400020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000060004000105761aad38f5c3ac63690011000200303030303a30303a31302e3000000000080003000200000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300020000000600040003000000"], 0xd0}, 0x1, 0x0, 0x0, 0x40010}, 0x20044895) sendto$inet6(r9, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 622.270583ms ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x2000000, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010473ca7501003fc400925e4a44", @ANYRES32, @ANYBLOB="0d01140016000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700f205000000e72adf000002", @ANYRES32=r3], 0x48}}, 0x0) 482.251922ms ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="5008000010000305000000000000000000002500", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470001c00028008000100", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB='\b\x00!\x00', @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x50}}, 0x0) 415.811717ms ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0xfeffffff, &(0x7f0000000380)="e02742e8680d85ff9782762f88a8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 365.863868ms ago: executing program 4: r0 = socket(0x10, 0x803, 0x0) (async) socket(0x200000100000011, 0x3, 0x0) (async) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fd"], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 64) bind$llc(r2, &(0x7f0000000180), 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0), 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0x1}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000012c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001440)={{0x1}, &(0x7f00000013c0), &(0x7f0000001400)='%pB \x00'}, 0x20) (async) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) (async) r6 = socket$inet6(0xa, 0x2, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r8 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001800)={'wlan1\x00'}) (async) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x70, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x4048b}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @sit={{0x8}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x96}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x9f7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x800000ef}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x8}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x3}, @IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x1e}]}}}]}, 0x70}}, 0x0) (async, rerun: 32) sendmmsg$inet(r6, &(0x7f00000007c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x3d}, @remote}}}], 0x20}}], 0x1, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0), 0x5c}, 0x1, 0x0, 0x0, 0x40c84}, 0x4) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x6, '\x00', r9, 0x25, r10, 0x8, &(0x7f0000000280)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x10, 0xb0, 0x40}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000300)=[r5, r5, r5, r5], &(0x7f0000000340)=[{0x1, 0x5, 0x8, 0x3}, {0x3, 0x4, 0x6, 0xa}, {0x5, 0x1, 0x3}, {0x4, 0x5, 0xa, 0x7}, {0x4, 0x1, 0x3, 0x8}], 0x10, 0x492}, 0x90) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000001480)={0xffffffffffffffff, 0x1, 0x1d5, 0x3}) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000014c0), 0x4) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001580)={0x0, 0x5, 0x8}, 0xc) 231.890771ms ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470001c00028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="20e8bb2d40000000"], 0x48}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b704001c00000095000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7000000}, 0x50) r4 = socket$kcm(0x21, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f00000001c0)) sendto$inet(r5, 0x0, 0x0, 0x44010, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$inet6(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x31, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000280)={'veth1_macvtap\x00'}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000080)=[@in={0x2, 0x0, @private}], 0x10) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@ip_retopts={{0x34, 0x110, 0xd, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@multicast2}]}, @timestamp={0x44, 0x18, 0x3e, 0x0, 0x9, [0x42, 0x4, 0xdc06, 0xb9, 0x100]}]}}}], 0x38}, 0x0) socket$inet(0x2, 0x3, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0xfea7) 212.641553ms ago: executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4, 0x0, 0x4, 0x1}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000ece65fbcee5586dd6001010000161100fe8000000000000000000000000000bbfe800000000805f126000000000000aa00000e2200169078820000000000000030b00afe4e70"], 0x0) 142.37908ms ago: executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@deltaction={0x68, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x68}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040), 0xc, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0x65c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 93.66586ms ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xd, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$l2tp(0x2, 0x2, 0x73) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], 0x0}, 0x90) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], 0x0}, 0x90) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000440), 0x2, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$inet_udplite(0x2, 0x2, 0x88) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000003780)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x0, 0x0, @rand_addr, @dev}}}}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x2a}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x2a}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000026c0)={&(0x7f0000002640)='track_foreign_dirty\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000026c0)={&(0x7f0000002640)='track_foreign_dirty\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000340)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x8e}, @jmp={0x5, 0x1, 0x9, 0x1, 0x2, 0x1, 0xffffffffffffffff}, @map_val={0x18, 0x1, 0x2, 0x0, r3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) getsockopt$inet_dccp_int(r7, 0x21, 0x3, &(0x7f0000000180), &(0x7f0000000240)=0x4) (async) getsockopt$inet_dccp_int(r7, 0x21, 0x3, &(0x7f0000000180), &(0x7f0000000240)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r8) (async) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r8, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000500"}) write$cgroup_int(r7, &(0x7f0000000040), 0x12) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x4010, r2, 0x0) bpf$MAP_CREATE(0x6, &(0x7f00000002c0)=@bloom_filter, 0x48) 42.492863ms ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x44f7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="4c030000a19cd2b68b80bad5f29964e1c4490b1db79293079b2b15b293c3ecacace2", @ANYRESOCT=r2, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r2, @ANYRES32=r1], 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10}, 0x90) r5 = socket$kcm(0x10, 0x7, 0x4) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) sendmsg$kcm(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)="fe49d740ffcba8a54521a9367a13268894b2d8be59d9862d8f54472eca90fa9d74c0dbfb27a542e46ece7399d44bc477816ca3c6e07e46591a4100bf8bb5698686", 0x41}, {&(0x7f00000004c0)="28db52a2418619a9e69b5a373c86df9a5e683656c08a575a2eebe22e73ed6579e11ce4e6b75c347823b919c0c7f9c58a042f323798dbc024035b2076ccdfaa6dcfdcecff5c7e18390d3b92b8aedef5fcb0fe714ff59889d079eb", 0x5a}, {&(0x7f0000000540)="bd4d92cda33fa0ddbef11cdbd25822464b4e025d5371a8980ab74fba273aa87e4585749dda59a0d0c6f559fd83e41cf7e9fca8f824658451359b1bd7817ef5cdd95d08d12147ef48621852", 0x4b}, {&(0x7f0000000900)="5d5f738844b4818eac150b038940e01fdb2647bb83b1b7c8604eb8ca566c72665d8e4ad2f393aef86599068b9638d7efb6b7d370b6b82a6534a32e221ae57ada6e5deb76862a65a6c247aef310e0943148d7f3f461e661ff9d09724897a30fca6b563b0fce9548a2b50742d2e2ff6dbfcb9c475968ac2198cdfbf1a9d4d21c8b37cb1bce619c017fff673594ec7b2a42390c41e126c6f1e8fd395b7704ccecd8d851308fa3ffa24f2cbc240ec5b139e73d3e492e24a314abb0b1993b4e17df6485ea19bb16a5d6", 0xc7}], 0x4}, 0x2e76460fadfbfab0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x81, 0x10001, 0x5a, 0x1000, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r4, 0x26}, 0x10) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, 0x0, 0xf0ff1f00000000) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x62, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a0100002c2b0000000000000000000000000000000000fe8000000000000000000000000000aa3a"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x84, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000000)="b9ff06", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007200000095000000000000001fd78800a257a5ee0b4b88b761826fb40338658c30dfe2fef4f4b469"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="7f96be1030f2a6a5e2c9b768ae8349417d7b72e2dfe0002c43ae001897d43052cae96064b55c8a04c6ad7f72cc5e3f5aba5b2320b7ca4d64981b5c0179365bb26dcb6f5dd409cefe4e35df84798463947e69102fbf7581c0eef9ffea68c80ae911c5cef286544566cff7e452e3f0c45fedeb36c6646f5c44aa585d", 0x7b}, {&(0x7f0000000640)="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", 0x165}], 0x2}, 0x8010) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(r2, &(0x7f0000000180)='\v', 0x1, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESDEC=r4, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5"], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000014000100"/38], 0xb8}}, 0x0) unshare(0x6020400) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r7}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000100)={@remote, r7}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): sg+0x87/0xb0 [ 177.947728][ T8915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.953047][ T8915] __sock_sendmsg+0x221/0x270 [ 177.957763][ T8915] ____sys_sendmsg+0x525/0x7d0 [ 177.962584][ T8915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.967918][ T8915] __sys_sendmsg+0x2b0/0x3a0 [ 177.972537][ T8915] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.977680][ T8915] ? vfs_write+0x7c4/0xc90 [ 177.982166][ T8915] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 177.988535][ T8915] ? do_syscall_64+0x100/0x230 [ 177.993337][ T8915] ? do_syscall_64+0xb6/0x230 [ 177.998051][ T8915] do_syscall_64+0xf3/0x230 [ 178.002591][ T8915] ? clear_bhb_loop+0x35/0x90 [ 178.007310][ T8915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.013254][ T8915] RIP: 0033:0x7f4109e7d0a9 [ 178.017691][ T8915] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 178.037332][ T8915] RSP: 002b:00007f410ac530c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.045792][ T8915] RAX: ffffffffffffffda RBX: 00007f4109fb3f80 RCX: 00007f4109e7d0a9 [ 178.053800][ T8915] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 178.061789][ T8915] RBP: 00007f410ac53120 R08: 0000000000000000 R09: 0000000000000000 [ 178.069780][ T8915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.077777][ T8915] R13: 000000000000000b R14: 00007f4109fb3f80 R15: 00007ffea3083848 [ 178.085801][ T8915] [ 178.825459][ T2481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.844448][ T2481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.876722][ T2481] bond0 (unregistering): Released all slaves [ 178.898966][ T8951] __nla_validate_parse: 4 callbacks suppressed [ 178.898988][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 178.914868][ T8933] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 178.964154][ T8933] infiniband syz0: set down [ 178.983069][ T8935] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 179.127143][ T5241] lo speed is unknown, defaulting to 1000 [ 179.151630][ T8964] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 179.202502][ T5241] lo speed is unknown, defaulting to 1000 [ 179.422549][ T5131] Bluetooth: hci1: command tx timeout [ 179.933782][ T2481] hsr_slave_0: left promiscuous mode [ 179.951150][ T2481] hsr_slave_1: left promiscuous mode [ 179.996442][ T2481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.017055][ T2481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.034837][ T2481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.061962][ T2481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.115249][ T2481] veth1_macvtap: left promiscuous mode [ 180.117003][ T9008] FAULT_INJECTION: forcing a failure. [ 180.117003][ T9008] name failslab, interval 1, probability 0, space 0, times 0 [ 180.120816][ T2481] veth0_macvtap: left promiscuous mode [ 180.121023][ T2481] veth1_vlan: left promiscuous mode [ 180.121139][ T2481] veth0_vlan: left promiscuous mode [ 180.157714][ T9008] CPU: 0 PID: 9008 Comm: syz-executor.0 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 180.168159][ T9008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 180.178315][ T9008] Call Trace: [ 180.181712][ T9008] [ 180.184696][ T9008] dump_stack_lvl+0x241/0x360 [ 180.189457][ T9008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.194706][ T9008] ? __pfx__printk+0x10/0x10 [ 180.199356][ T9008] should_fail_ex+0x3b0/0x4e0 [ 180.204102][ T9008] ? sctp_add_bind_addr+0x89/0x3a0 [ 180.209251][ T9008] should_failslab+0x9/0x20 [ 180.213789][ T9008] kmalloc_trace_noprof+0x6c/0x2c0 [ 180.218920][ T9008] sctp_add_bind_addr+0x89/0x3a0 [ 180.223871][ T9008] sctp_copy_local_addr_list+0x311/0x500 [ 180.229515][ T9008] ? sctp_copy_local_addr_list+0xab/0x500 [ 180.235241][ T9008] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 180.241419][ T9008] ? sctp_v6_is_any+0x60/0x70 [ 180.246117][ T9008] sctp_bind_addr_copy+0x176/0x3b0 [ 180.251243][ T9008] sctp_connect_new_asoc+0x2f3/0x6c0 [ 180.256558][ T9008] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 180.262377][ T9008] ? sctp_sendmsg+0xbb9/0x3520 [ 180.267154][ T9008] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 180.272705][ T9008] ? security_sctp_bind_connect+0x90/0xb0 [ 180.278456][ T9008] sctp_sendmsg+0x219a/0x3520 [ 180.283160][ T9008] ? __pfx_sctp_sendmsg+0x10/0x10 [ 180.288194][ T9008] ? __pfx_aa_sk_perm+0x10/0x10 [ 180.293070][ T9008] ? inet_sendmsg+0x330/0x390 [ 180.297752][ T9008] __sock_sendmsg+0x1a6/0x270 [ 180.302434][ T9008] __sys_sendto+0x3a4/0x4f0 [ 180.306950][ T9008] ? __pfx___sys_sendto+0x10/0x10 [ 180.311998][ T9008] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 180.317979][ T9008] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 180.324329][ T9008] __x64_sys_sendto+0xde/0x100 [ 180.329099][ T9008] do_syscall_64+0xf3/0x230 [ 180.333611][ T9008] ? clear_bhb_loop+0x35/0x90 [ 180.338304][ T9008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.344204][ T9008] RIP: 0033:0x7fbb9be7d0a9 [ 180.348636][ T9008] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 180.368250][ T9008] RSP: 002b:00007fbb9ccce0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 180.376680][ T9008] RAX: ffffffffffffffda RBX: 00007fbb9bfb3f80 RCX: 00007fbb9be7d0a9 [ 180.384664][ T9008] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000004 [ 180.392675][ T9008] RBP: 00007fbb9ccce120 R08: 0000000020000040 R09: 000000000000001c [ 180.400647][ T9008] R10: 00000000240088c4 R11: 0000000000000246 R12: 0000000000000002 [ 180.408622][ T9008] R13: 000000000000000b R14: 00007fbb9bfb3f80 R15: 00007ffc3c7ff068 [ 180.416618][ T9008] [ 180.604198][ T9015] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 180.987656][ T2481] team0 (unregistering): Port device team_slave_1 removed [ 181.038289][ T2481] team0 (unregistering): Port device team_slave_0 removed [ 181.455826][ T8997] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.502169][ T5125] Bluetooth: hci1: command tx timeout [ 181.542461][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 181.678862][ T8894] chnl_net:caif_netlink_parms(): no params data found [ 181.848587][ T9036] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 182.018494][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 182.075947][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 182.096154][ T9049] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 182.133791][ T8894] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.140988][ T8894] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.178042][ T8894] bridge_slave_0: entered allmulticast mode [ 182.206773][ T8894] bridge_slave_0: entered promiscuous mode [ 182.237816][ T8894] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.272360][ T8894] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.290263][ T8894] bridge_slave_1: entered allmulticast mode [ 182.326393][ T8894] bridge_slave_1: entered promiscuous mode [ 182.375552][ T9059] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 182.429237][ T8894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.465528][ T8894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.595306][ T8894] team0: Port device team_slave_0 added [ 182.616762][ T8894] team0: Port device team_slave_1 added [ 182.721629][ T9070] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 182.743156][ T9072] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 182.792162][ T9073] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 182.840016][ T8894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.860928][ T8894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.940048][ T8894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.967361][ T8894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.003938][ T8894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.039520][ T8894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.074370][ T9092] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 183.130445][ T9095] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 183.214004][ T9092] team0: Port device bridge1 added [ 183.225765][ T8894] hsr_slave_0: entered promiscuous mode [ 183.232607][ T8894] hsr_slave_1: entered promiscuous mode [ 183.238886][ T8894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.247779][ T8894] Cannot create hsr debugfs directory [ 183.265792][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 183.281269][ T9099] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. [ 183.582835][ T5125] Bluetooth: hci1: command 0x040f tx timeout [ 184.365800][ T9146] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 184.581971][ T9156] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 184.590111][ T9156] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 184.608338][ T8894] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 184.624217][ T8894] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 184.639462][ T9156] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.2'. [ 184.657450][ T9156] tipc: Started in network mode [ 184.664611][ T9156] tipc: Node identity 16a7d0c67a29, cluster identity 4711 [ 184.672140][ T9156] tipc: Enabled bearer , priority 16 [ 184.679968][ T8894] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 184.697933][ T9165] ebt_among: wrong size: 2080 against expected 2280, rounded to 2280 [ 184.709329][ T8894] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 184.886672][ T9172] FAULT_INJECTION: forcing a failure. [ 184.886672][ T9172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.928847][ T9172] CPU: 1 PID: 9172 Comm: syz-executor.2 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 184.939328][ T9172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 184.949406][ T9172] Call Trace: [ 184.952703][ T9172] [ 184.955663][ T9172] dump_stack_lvl+0x241/0x360 [ 184.960393][ T9172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.965635][ T9172] ? __pfx__printk+0x10/0x10 [ 184.970264][ T9172] ? __pfx_lock_release+0x10/0x10 [ 184.975331][ T9172] ? vfs_write+0x7c4/0xc90 [ 184.979783][ T9172] should_fail_ex+0x3b0/0x4e0 [ 184.984507][ T9172] _copy_from_user+0x2f/0xe0 [ 184.989138][ T9172] __sys_bpf+0x1a4/0x810 [ 184.993430][ T9172] ? __pfx___sys_bpf+0x10/0x10 [ 184.998250][ T9172] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 185.004272][ T9172] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 185.010675][ T9172] ? do_syscall_64+0x100/0x230 [ 185.015483][ T9172] __x64_sys_bpf+0x7c/0x90 [ 185.019947][ T9172] do_syscall_64+0xf3/0x230 [ 185.024465][ T9172] ? clear_bhb_loop+0x35/0x90 [ 185.029160][ T9172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.035070][ T9172] RIP: 0033:0x7f7b5007d0a9 [ 185.039498][ T9172] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 185.059104][ T9172] RSP: 002b:00007f7b50e460c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 185.067532][ T9172] RAX: ffffffffffffffda RBX: 00007f7b501b3f80 RCX: 00007f7b5007d0a9 [ 185.075519][ T9172] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 185.083523][ T9172] RBP: 00007f7b50e46120 R08: 0000000000000000 R09: 0000000000000000 [ 185.091500][ T9172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.099469][ T9172] R13: 000000000000000b R14: 00007f7b501b3f80 R15: 00007ffd35b36b28 [ 185.107461][ T9172] [ 185.219697][ T8894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.270782][ T8894] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.290632][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.297866][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.327169][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.334386][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.378939][ T9187] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.419520][ T9186] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.440877][ T9187] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.448039][ T9187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.474841][ T9187] bridge0: entered promiscuous mode [ 185.480704][ T9187] bridge0: entered allmulticast mode [ 185.493806][ T9192] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 185.538520][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 185.570813][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.624225][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.663422][ T5131] Bluetooth: hci1: command 0x040f tx timeout [ 185.675048][ T5166] tipc: Node number set to 1821298886 [ 185.860594][ T9206] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.967161][ T8894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.084060][ T8894] veth0_vlan: entered promiscuous mode [ 186.123680][ T8894] veth1_vlan: entered promiscuous mode [ 186.218819][ T8894] veth0_macvtap: entered promiscuous mode [ 186.246401][ T8894] veth1_macvtap: entered promiscuous mode [ 186.305123][ T8894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.318098][ T8894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.328400][ T8894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.339563][ T8894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.373820][ T8894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.397740][ T9219] siw: device registration error -23 [ 186.419526][ T8894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.463531][ T8894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.491902][ T8894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.512157][ T8894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.536184][ T8894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.563810][ T9223] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 186.596720][ T8894] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.609941][ T8894] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.634222][ T8894] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.647928][ T8894] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.652297][ T9226] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 186.850475][ T8894] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 186.866180][ T8894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.917036][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.934489][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.082615][ T2481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.117762][ T2481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.164410][ T9244] hsr_slave_0: left promiscuous mode [ 187.212930][ T9244] hsr_slave_1: left promiscuous mode [ 187.911565][ T9283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.936044][ T9283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.970519][ T29] audit: type=1804 audit(1719127477.100:10): pid=9286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4197515059/syzkaller.eyjdFg/220/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 188.148591][ T9296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.157875][ T9296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.172819][ T9296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.185459][ T9296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.606202][ T9312] syzkaller1: entered promiscuous mode [ 188.613186][ T9312] syzkaller1: entered allmulticast mode [ 189.130407][ T9335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.145399][ T9335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.513888][ T9353] __nla_validate_parse: 7 callbacks suppressed [ 189.513906][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 189.636626][ T9358] FAULT_INJECTION: forcing a failure. [ 189.636626][ T9358] name failslab, interval 1, probability 0, space 0, times 0 [ 189.651425][ T9358] CPU: 1 PID: 9358 Comm: syz-executor.0 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 189.661901][ T9358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 189.671993][ T9358] Call Trace: [ 189.675295][ T9358] [ 189.678247][ T9358] dump_stack_lvl+0x241/0x360 [ 189.682956][ T9358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.688184][ T9358] ? __pfx__printk+0x10/0x10 [ 189.692800][ T9358] ? netlink_insert+0x10b7/0x14b0 [ 189.697871][ T9358] should_fail_ex+0x3b0/0x4e0 [ 189.702590][ T9358] ? __alloc_skb+0x1c3/0x440 [ 189.707232][ T9358] should_failslab+0x9/0x20 [ 189.711756][ T9358] kmem_cache_alloc_node_noprof+0x71/0x320 [ 189.717605][ T9358] __alloc_skb+0x1c3/0x440 [ 189.722056][ T9358] ? __pfx___alloc_skb+0x10/0x10 [ 189.727009][ T9358] ? netlink_autobind+0xd6/0x2f0 [ 189.731975][ T9358] ? netlink_autobind+0x2b0/0x2f0 [ 189.737015][ T9358] netlink_sendmsg+0x638/0xcb0 [ 189.741803][ T9358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.747102][ T9358] ? __import_iovec+0x536/0x820 [ 189.751980][ T9358] ? aa_sock_msg_perm+0x91/0x160 [ 189.756958][ T9358] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 189.762262][ T9358] ? security_socket_sendmsg+0x87/0xb0 [ 189.767731][ T9358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.773016][ T9358] __sock_sendmsg+0x221/0x270 [ 189.777700][ T9358] ____sys_sendmsg+0x525/0x7d0 [ 189.782482][ T9358] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.787785][ T9358] __sys_sendmsg+0x2b0/0x3a0 [ 189.792472][ T9358] ? __pfx___sys_sendmsg+0x10/0x10 [ 189.797602][ T9358] ? vfs_write+0x7c4/0xc90 [ 189.802062][ T9358] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 189.808396][ T9358] ? do_syscall_64+0x100/0x230 [ 189.813170][ T9358] ? do_syscall_64+0xb6/0x230 [ 189.817853][ T9358] do_syscall_64+0xf3/0x230 [ 189.822374][ T9358] ? clear_bhb_loop+0x35/0x90 [ 189.827078][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.832979][ T9358] RIP: 0033:0x7fbb9be7d0a9 [ 189.837426][ T9358] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 189.857036][ T9358] RSP: 002b:00007fbb9ccce0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.865449][ T9358] RAX: ffffffffffffffda RBX: 00007fbb9bfb3f80 RCX: 00007fbb9be7d0a9 [ 189.873424][ T9358] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 189.881410][ T9358] RBP: 00007fbb9ccce120 R08: 0000000000000000 R09: 0000000000000000 [ 189.889378][ T9358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.897439][ T9358] R13: 000000000000000b R14: 00007fbb9bfb3f80 R15: 00007ffc3c7ff068 [ 189.905870][ T9358] [ 190.446019][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.500434][ T9380] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 190.526294][ T9375] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 190.529160][ T9385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.552060][ T9380] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 190.606554][ T9385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.939602][ T9400] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 191.096342][ T9407] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 191.196384][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 191.222288][ T9409] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 191.320565][ T5125] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 191.330847][ T5125] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 191.342688][ T5125] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 191.351100][ T5125] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 191.373840][ T5125] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 191.381437][ T5125] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 191.434661][ T9417] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 191.456118][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 191.479073][ T9417] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 191.491147][ T9418] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 191.511443][ T9413] lo speed is unknown, defaulting to 1000 [ 191.532866][ T9418] xt_CT: You must specify a L4 protocol and not use inversions on it [ 191.543498][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 191.830634][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.856656][ T9443] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 191.978597][ T9451] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 192.073952][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.224536][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.346793][ T9455] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 192.688869][ T11] bridge_slave_1: left allmulticast mode [ 192.701997][ T11] bridge_slave_1: left promiscuous mode [ 192.707914][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.738244][ T9482] xt_ecn: cannot match TCP bits for non-tcp packets [ 192.764853][ T11] bridge_slave_0: left allmulticast mode [ 192.770568][ T11] bridge_slave_0: left promiscuous mode [ 192.812298][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.282965][ T9498] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 193.426756][ T5131] Bluetooth: hci1: command tx timeout [ 193.577440][ T29] audit: type=1804 audit(1719127482.710:11): pid=9501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4197515059/syzkaller.eyjdFg/242/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 193.762604][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.792954][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.815758][ T11] bond0 (unregistering): Released all slaves [ 193.857104][ T9413] chnl_net:caif_netlink_parms(): no params data found [ 194.428966][ T9413] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.457800][ T9413] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.482296][ T9413] bridge_slave_0: entered allmulticast mode [ 194.505807][ T9413] bridge_slave_0: entered promiscuous mode [ 194.561938][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.568523][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.694906][ T9413] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.725229][ T9413] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.736919][ T9413] bridge_slave_1: entered allmulticast mode [ 194.754472][ T9413] bridge_slave_1: entered promiscuous mode [ 194.966026][ T9413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.013219][ T9542] netem: change failed [ 195.040466][ T9539] __nla_validate_parse: 3 callbacks suppressed [ 195.040568][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 195.141505][ T9413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.361062][ T11] hsr_slave_0: left promiscuous mode [ 195.377589][ T11] hsr_slave_1: left promiscuous mode [ 195.398066][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.416245][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.433352][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.448475][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.460291][ T9554] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 195.488378][ T11] veth1_macvtap: left promiscuous mode [ 195.494216][ T11] veth0_macvtap: left promiscuous mode [ 195.499909][ T11] veth1_vlan: left promiscuous mode [ 195.505279][ T5123] Bluetooth: hci1: command tx timeout [ 195.511319][ T11] veth0_vlan: left promiscuous mode [ 196.085596][ T11] team0 (unregistering): Port device team_slave_1 removed [ 196.127425][ T11] team0 (unregistering): Port device team_slave_0 removed [ 196.529798][ T9549] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 196.544592][ T9413] team0: Port device team_slave_0 added [ 196.565289][ T9413] team0: Port device team_slave_1 added [ 196.626304][ T5123] Bluetooth: hci0: command 0x0406 tx timeout [ 196.628000][ T5127] Bluetooth: hci3: command 0x0406 tx timeout [ 196.668268][ T9558] FAULT_INJECTION: forcing a failure. [ 196.668268][ T9558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.729225][ T9558] CPU: 1 PID: 9558 Comm: syz-executor.4 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 196.739719][ T9558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 196.749806][ T9558] Call Trace: [ 196.753115][ T9558] [ 196.756076][ T9558] dump_stack_lvl+0x241/0x360 [ 196.760810][ T9558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.766056][ T9558] ? __pfx__printk+0x10/0x10 [ 196.770693][ T9558] ? snprintf+0xda/0x120 [ 196.774988][ T9558] should_fail_ex+0x3b0/0x4e0 [ 196.779717][ T9558] _copy_to_user+0x2f/0xb0 [ 196.784176][ T9558] simple_read_from_buffer+0xca/0x150 [ 196.789614][ T9558] proc_fail_nth_read+0x1e9/0x250 [ 196.794677][ T9558] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.800255][ T9558] ? rw_verify_area+0x514/0x6b0 [ 196.805138][ T9558] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.810993][ T9558] vfs_read+0x204/0xbd0 [ 196.815193][ T9558] ? __pfx_lock_release+0x10/0x10 [ 196.820251][ T9558] ? __pfx_vfs_read+0x10/0x10 [ 196.824966][ T9558] ? __fget_files+0x29/0x470 [ 196.829596][ T9558] ? __fget_files+0x3f6/0x470 [ 196.834322][ T9558] ksys_read+0x1a0/0x2c0 [ 196.838607][ T9558] ? __pfx_ksys_read+0x10/0x10 [ 196.843401][ T9558] ? do_syscall_64+0x100/0x230 [ 196.848221][ T9558] ? do_syscall_64+0xb6/0x230 [ 196.852939][ T9558] do_syscall_64+0xf3/0x230 [ 196.857482][ T9558] ? clear_bhb_loop+0x35/0x90 [ 196.862214][ T9558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.868139][ T9558] RIP: 0033:0x7f46ab87bd4c [ 196.872575][ T9558] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 196.892205][ T9558] RSP: 002b:00007f46ac6b90c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 196.900651][ T9558] RAX: ffffffffffffffda RBX: 00007f46ab9b3f80 RCX: 00007f46ab87bd4c [ 196.908653][ T9558] RDX: 000000000000000f RSI: 00007f46ac6b9130 RDI: 0000000000000006 [ 196.916651][ T9558] RBP: 00007f46ac6b9120 R08: 0000000000000000 R09: 0000000000000000 [ 196.924663][ T9558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.932685][ T9558] R13: 000000000000000b R14: 00007f46ab9b3f80 R15: 00007ffd1ebf83c8 [ 196.940692][ T9558] [ 196.971474][ T9413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.994900][ T9413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.100712][ T9413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.147505][ T9413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.169009][ T9413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.319934][ T9413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.559550][ T9413] hsr_slave_0: entered promiscuous mode [ 197.582461][ T5131] Bluetooth: hci1: command tx timeout [ 197.590574][ T9413] hsr_slave_1: entered promiscuous mode [ 197.630408][ T9413] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.647763][ T9413] Cannot create hsr debugfs directory [ 197.896798][ T9587] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 198.036067][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 198.105242][ T9593] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 198.402325][ T9606] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.0'. [ 198.448630][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 198.786653][ T9413] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 198.809253][ T9413] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 198.838320][ T9413] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 198.870322][ T9413] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 198.908409][ T9631] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 199.088494][ T9634] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 199.150276][ T9413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.220222][ T9413] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.250624][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 199.276565][ T9640] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 199.292761][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.299967][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.316949][ T9638] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 199.342463][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.349613][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.617723][ T9660] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 199.668191][ T5131] Bluetooth: hci1: command tx timeout [ 199.760480][ T9666] : entered promiscuous mode [ 200.125708][ T9684] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 200.137891][ T9413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.236331][ T9689] __nla_validate_parse: 1 callbacks suppressed [ 200.236353][ T9689] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 200.267738][ T9413] veth0_vlan: entered promiscuous mode [ 200.285140][ T9413] veth1_vlan: entered promiscuous mode [ 200.387876][ T9413] veth0_macvtap: entered promiscuous mode [ 200.416202][ T9413] veth1_macvtap: entered promiscuous mode [ 200.487187][ T9413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.552176][ T9413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.571705][ T9413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.604548][ T9413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.624708][ T9413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.656363][ T9413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.708508][ T9413] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.719520][ T9413] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.728838][ T9413] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.740427][ T9413] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.806455][ T9708] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 200.844340][ T9708] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 200.909135][ T9708] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.2'. [ 200.955554][ T9708] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 200.996624][ T9413] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 201.007170][ T9413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.010052][ T9708] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 201.040910][ T430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.049006][ T430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.059371][ T9708] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.2'. [ 201.149213][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.167074][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.233110][ T9723] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 201.382728][ T9728] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 201.642858][ T9735] FAULT_INJECTION: forcing a failure. [ 201.642858][ T9735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.659933][ T9735] CPU: 1 PID: 9735 Comm: syz-executor.2 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 201.670408][ T9735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 201.680510][ T9735] Call Trace: [ 201.683824][ T9735] [ 201.686778][ T9735] dump_stack_lvl+0x241/0x360 [ 201.691506][ T9735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.696750][ T9735] ? __pfx__printk+0x10/0x10 [ 201.701384][ T9735] ? __pfx_lock_release+0x10/0x10 [ 201.706461][ T9735] ? vfs_write+0x7c4/0xc90 [ 201.710927][ T9735] should_fail_ex+0x3b0/0x4e0 [ 201.715654][ T9735] _copy_from_user+0x2f/0xe0 [ 201.720280][ T9735] __sys_bpf+0x1a4/0x810 [ 201.724574][ T9735] ? __pfx___sys_bpf+0x10/0x10 [ 201.729406][ T9735] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 201.735442][ T9735] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 201.741812][ T9735] ? do_syscall_64+0x100/0x230 [ 201.746626][ T9735] __x64_sys_bpf+0x7c/0x90 [ 201.751088][ T9735] do_syscall_64+0xf3/0x230 [ 201.755636][ T9735] ? clear_bhb_loop+0x35/0x90 [ 201.760355][ T9735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.766293][ T9735] RIP: 0033:0x7f7b5007d0a9 [ 201.770740][ T9735] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 201.790384][ T9735] RSP: 002b:00007f7b50e460c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 201.798844][ T9735] RAX: ffffffffffffffda RBX: 00007f7b501b3f80 RCX: 00007f7b5007d0a9 [ 201.806854][ T9735] RDX: 0000000000000080 RSI: 0000000020000600 RDI: 0000000000000005 [ 201.814859][ T9735] RBP: 00007f7b50e46120 R08: 0000000000000000 R09: 0000000000000000 [ 201.822866][ T9735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.830870][ T9735] R13: 000000000000000b R14: 00007f7b501b3f80 R15: 00007ffd35b36b28 [ 201.838900][ T9735] [ 202.210031][ T9757] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 202.232538][ T9757] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 202.468189][ T9767] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 203.055875][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 203.405277][ T9817] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 203.422713][ T9817] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 203.836740][ T1099] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.224587][ T9853] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 204.583842][ T9871] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 204.787987][ T5131] Bluetooth: hci4: command 0x0405 tx timeout [ 204.821628][ T5125] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 204.833167][ T5125] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 204.851471][ T5125] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 204.860682][ T5125] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 204.892312][ T5125] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 204.900808][ T5125] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 204.964200][ T1099] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.023309][ T9864] Cannot find del_set index 0 as target [ 205.056743][ T9880] FAULT_INJECTION: forcing a failure. [ 205.056743][ T9880] name failslab, interval 1, probability 0, space 0, times 0 [ 205.093534][ T9880] CPU: 1 PID: 9880 Comm: syz-executor.3 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 205.100266][ T9888] syz_tun: entered promiscuous mode [ 205.103998][ T9880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 205.104049][ T9880] Call Trace: [ 205.104061][ T9880] [ 205.104072][ T9880] dump_stack_lvl+0x241/0x360 [ 205.104113][ T9880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.104144][ T9880] ? __pfx__printk+0x10/0x10 [ 205.104179][ T9880] ? ref_tracker_alloc+0x332/0x490 [ 205.104219][ T9880] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 205.104258][ T9880] should_fail_ex+0x3b0/0x4e0 [ 205.104295][ T9880] ? skb_clone+0x20c/0x390 [ 205.104327][ T9880] should_failslab+0x9/0x20 [ 205.104362][ T9880] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 205.104405][ T9880] skb_clone+0x20c/0x390 [ 205.104443][ T9880] __netlink_deliver_tap+0x3cc/0x7c0 [ 205.104483][ T9880] ? netlink_deliver_tap+0x2e/0x1b0 [ 205.104508][ T9880] netlink_deliver_tap+0x19d/0x1b0 [ 205.104535][ T9880] netlink_sendskb+0x68/0x140 [ 205.104574][ T9880] netlink_unicast+0x39d/0x990 [ 205.104606][ T9880] ? __asan_memcpy+0x40/0x70 [ 205.104643][ T9880] ? __pfx_netlink_unicast+0x10/0x10 [ 205.104691][ T9880] netlink_rcv_skb+0x262/0x430 [ 205.150608][ T9881] lo speed is unknown, defaulting to 1000 [ 205.151411][ T9880] ? __pfx_genl_rcv_msg+0x10/0x10 [ 205.225238][ T9880] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 205.230580][ T9880] ? __netlink_deliver_tap+0x77e/0x7c0 [ 205.236096][ T9880] genl_rcv+0x28/0x40 [ 205.240119][ T9880] netlink_unicast+0x7f0/0x990 [ 205.244936][ T9880] ? __pfx_netlink_unicast+0x10/0x10 [ 205.250345][ T9880] ? __virt_addr_valid+0x183/0x520 [ 205.255498][ T9880] ? __check_object_size+0x49c/0x900 [ 205.260853][ T9880] ? bpf_lsm_netlink_send+0x9/0x10 [ 205.266016][ T9880] netlink_sendmsg+0x8e4/0xcb0 [ 205.270837][ T9880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.276171][ T9880] ? __import_iovec+0x536/0x820 [ 205.281058][ T9880] ? aa_sock_msg_perm+0x91/0x160 [ 205.286061][ T9880] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 205.291385][ T9880] ? security_socket_sendmsg+0x87/0xb0 [ 205.296881][ T9880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.302191][ T9880] __sock_sendmsg+0x221/0x270 [ 205.306896][ T9880] ____sys_sendmsg+0x525/0x7d0 [ 205.311712][ T9880] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.317055][ T9880] __sys_sendmsg+0x2b0/0x3a0 [ 205.321773][ T9880] ? __pfx___sys_sendmsg+0x10/0x10 [ 205.326914][ T9880] ? vfs_write+0x7c4/0xc90 [ 205.331424][ T9880] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 205.337784][ T9880] ? do_syscall_64+0x100/0x230 [ 205.342588][ T9880] ? do_syscall_64+0xb6/0x230 [ 205.347311][ T9880] do_syscall_64+0xf3/0x230 [ 205.351854][ T9880] ? clear_bhb_loop+0x35/0x90 [ 205.356573][ T9880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.362505][ T9880] RIP: 0033:0x7f4109e7d0a9 [ 205.366954][ T9880] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 205.386594][ T9880] RSP: 002b:00007f410ac530c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.395049][ T9880] RAX: ffffffffffffffda RBX: 00007f4109fb3f80 RCX: 00007f4109e7d0a9 [ 205.403057][ T9880] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 205.411058][ T9880] RBP: 00007f410ac53120 R08: 0000000000000000 R09: 0000000000000000 [ 205.419062][ T9880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.427243][ T9880] R13: 000000000000000b R14: 00007f4109fb3f80 R15: 00007ffea3083848 [ 205.435268][ T9880] [ 205.494025][ T9887] syz_tun: left promiscuous mode [ 205.586758][ T9892] __nla_validate_parse: 1 callbacks suppressed [ 205.586776][ T9892] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 205.670409][ T1099] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.878040][ T1099] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.010738][ T9915] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 206.070542][ T9910] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 206.167060][ T9912] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 206.187765][ T9921] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 206.216593][ T9910] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 206.427684][ T9934] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 206.510202][ T1099] bridge_slave_1: left allmulticast mode [ 206.517658][ T1099] bridge_slave_1: left promiscuous mode [ 206.529413][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.548285][ T1099] bridge_slave_0: left allmulticast mode [ 206.555446][ T1099] bridge_slave_0: left promiscuous mode [ 206.561262][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.945862][ T5131] Bluetooth: hci1: command tx timeout [ 207.042507][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.060257][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.072848][ T1099] bond0 (unregistering): Released all slaves [ 207.145393][ T9881] chnl_net:caif_netlink_parms(): no params data found [ 207.495423][ T9955] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 207.509791][ T9977] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 207.539361][ T29] audit: type=1804 audit(1719127496.670:12): pid=9982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4197515059/syzkaller.eyjdFg/277/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 207.678770][ T9881] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.687763][ T9881] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.695150][ T9881] bridge_slave_0: entered allmulticast mode [ 207.704578][ T9881] bridge_slave_0: entered promiscuous mode [ 207.717849][ T9881] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.725344][ T9881] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.733007][ T9881] bridge_slave_1: entered allmulticast mode [ 207.740060][ T9881] bridge_slave_1: entered promiscuous mode [ 208.072545][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 208.097803][ T9881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.129845][ T1099] hsr_slave_0: left promiscuous mode [ 208.137324][ T1099] hsr_slave_1: left promiscuous mode [ 208.156363][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.170992][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.191303][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.232163][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.298307][ T1099] veth1_macvtap: left promiscuous mode [ 208.318840][ T1099] veth0_macvtap: left promiscuous mode [ 208.324689][ T1099] veth1_vlan: left promiscuous mode [ 208.330180][ T1099] veth0_vlan: left promiscuous mode [ 208.747726][T10026] xt_bpf: check failed: parse error [ 208.799447][T10026] xt_bpf: check failed: parse error [ 208.836652][T10026] xt_bpf: check failed: parse error [ 208.864472][T10026] xt_bpf: check failed: parse error [ 208.897131][T10026] xt_bpf: check failed: parse error [ 208.932114][T10026] xt_bpf: check failed: parse error [ 208.984808][T10026] xt_bpf: check failed: parse error [ 209.003429][T10026] xt_bpf: check failed: parse error [ 209.022857][ T5131] Bluetooth: hci1: command tx timeout [ 209.027033][T10026] xt_bpf: check failed: parse error [ 209.055602][T10026] xt_bpf: check failed: parse error [ 209.365958][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 209.417882][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 209.641258][T10035] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 209.881582][T10003] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.925906][ T9881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.103766][T10003] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.128890][ T9881] team0: Port device team_slave_0 added [ 210.136674][T10040] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 210.178216][ T9881] team0: Port device team_slave_1 added [ 210.201027][T10040] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 210.255875][T10003] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.286143][T10042] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 210.297709][ T9881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.305167][ T9881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.333262][ T9881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.395212][T10003] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.412671][ T9881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.437229][ T9881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.485379][ T9881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.526713][T10045] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 210.536229][T10045] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 210.586281][ T9881] hsr_slave_0: entered promiscuous mode [ 210.594277][ T9881] hsr_slave_1: entered promiscuous mode [ 210.600862][ T9881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.601245][T10050] sctp: [Deprecated]: syz-executor.4 (pid 10050) Use of int in maxseg socket option. [ 210.601245][T10050] Use struct sctp_assoc_value instead [ 210.609145][ T9881] Cannot create hsr debugfs directory [ 210.657411][T10049] tipc: Enabling of bearer rejected, already enabled [ 210.775356][T10003] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.809608][T10003] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.850863][T10003] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.870735][T10003] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.945596][T10054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.036462][T10061] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 211.048354][T10061] tipc: Resetting bearer [ 211.090970][T10061] tipc: Disabling bearer [ 211.102011][ T5131] Bluetooth: hci1: command tx timeout [ 211.152326][T10069] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.239424][T10072] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 211.307753][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 211.324253][T10079] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 211.370438][T10079] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 211.389672][T10072] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 211.403089][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 211.553401][ T9881] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 211.575981][ T9881] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 211.596732][T10094] xt_addrtype: ipv6 does not support BROADCAST matching [ 211.605722][ T9881] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 211.618026][ T29] audit: type=1800 audit(1719127500.750:13): pid=10095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 211.640953][ T29] audit: type=1804 audit(1719127500.750:14): pid=10095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir4197515059/syzkaller.eyjdFg/282/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 211.677935][ T9881] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 211.708291][T10098] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 211.841726][ T9881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.891528][ T9881] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.930788][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.938011][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.970292][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.977545][ T5171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.252795][T10120] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 212.253196][T10118] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 212.400218][T10126] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 212.568496][ T29] audit: type=1800 audit(1719127501.690:15): pid=10137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1948 res=0 errno=0 [ 212.576491][ T9881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.609878][ T29] audit: type=1804 audit(1719127501.700:16): pid=10137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir4197515059/syzkaller.eyjdFg/286/memory.events" dev="sda1" ino=1948 res=1 errno=0 [ 212.757596][ T9881] veth0_vlan: entered promiscuous mode [ 212.789297][ T9881] veth1_vlan: entered promiscuous mode [ 212.832696][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 212.864949][ T9881] veth0_macvtap: entered promiscuous mode [ 212.890621][ T9881] veth1_macvtap: entered promiscuous mode [ 212.904386][T10152] veth0_vlan: entered allmulticast mode [ 212.986523][T10155] veth0_vlan: left promiscuous mode [ 213.004121][T10155] veth0_vlan: entered promiscuous mode [ 213.136984][ T9881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.166074][ T9881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.183754][ T9881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.184192][ T5131] Bluetooth: hci1: command tx timeout [ 213.213579][ T9881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.224275][ T9881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.253764][ T9881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.287350][ T9881] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.305596][ T9881] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.315068][ T9881] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.324095][ T9881] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.453096][ T9881] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 213.463135][ T9881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.524386][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.556601][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.632571][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.640632][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.109397][T10206] veth0_vlan: left allmulticast mode [ 214.123175][T10206] vlan0: left promiscuous mode [ 214.128016][T10206] vlan0: left allmulticast mode [ 214.170962][T10204] wireguard0: entered promiscuous mode [ 214.179496][T10204] wireguard0: entered allmulticast mode [ 214.229264][T10209] team_slave_0: entered promiscuous mode [ 214.235452][T10209] team_slave_1: entered promiscuous mode [ 214.242933][T10209] macvtap1: entered promiscuous mode [ 214.248393][T10209] team0: entered promiscuous mode [ 214.254636][T10209] macvtap1: entered allmulticast mode [ 214.260152][T10209] team0: entered allmulticast mode [ 214.265458][T10209] team_slave_0: entered allmulticast mode [ 214.271338][T10209] team_slave_1: entered allmulticast mode [ 214.278539][T10209] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 214.287907][T10211] team0: left allmulticast mode [ 214.296326][T10211] team_slave_0: left allmulticast mode [ 214.304684][T10211] team_slave_1: left allmulticast mode [ 214.310188][T10211] team0: left promiscuous mode [ 214.316494][T10211] team_slave_0: left promiscuous mode [ 214.321997][T10211] team_slave_1: left promiscuous mode [ 214.331155][T10211] macvtap1: left promiscuous mode [ 214.337221][T10211] macvtap1: left allmulticast mode [ 214.498527][T10215] unknown channel width for channel at 909000KHz? [ 214.517686][T10215] unknown channel width for channel at 909000KHz? [ 214.808121][ T29] audit: type=1804 audit(1719127503.940:17): pid=10228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4126492075/syzkaller.EBmBhH/320/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 214.957663][T10237] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 215.309342][T10260] FAULT_INJECTION: forcing a failure. [ 215.309342][T10260] name failslab, interval 1, probability 0, space 0, times 0 [ 215.328744][T10260] CPU: 0 PID: 10260 Comm: syz-executor.0 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 215.339302][T10260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 215.349446][T10260] Call Trace: [ 215.352758][T10260] [ 215.355714][T10260] dump_stack_lvl+0x241/0x360 [ 215.360452][T10260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.365693][T10260] ? __pfx__printk+0x10/0x10 [ 215.370326][T10260] ? __lock_acquire+0x1346/0x1fd0 [ 215.375388][T10260] should_fail_ex+0x3b0/0x4e0 [ 215.380101][T10260] ? __alloc_skb+0x1c3/0x440 [ 215.384732][T10260] should_failslab+0x9/0x20 [ 215.389283][T10260] kmem_cache_alloc_node_noprof+0x71/0x320 [ 215.395142][T10260] __alloc_skb+0x1c3/0x440 [ 215.399612][T10260] ? validate_chain+0x11e/0x5900 [ 215.404595][T10260] ? __pfx___alloc_skb+0x10/0x10 [ 215.409576][T10260] alloc_skb_with_frags+0xc3/0x770 [ 215.414744][T10260] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 215.420175][T10260] sock_alloc_send_pskb+0x91a/0xa60 [ 215.425439][T10260] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 215.431213][T10260] ? aa_sk_perm+0x967/0xab0 [ 215.435770][T10260] hci_sock_sendmsg+0x22b/0x11c0 [ 215.440760][T10260] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 215.446190][T10260] ? aa_sock_msg_perm+0x91/0x160 [ 215.451176][T10260] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 215.456498][T10260] ? security_socket_sendmsg+0x87/0xb0 [ 215.461996][T10260] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 215.467401][T10260] __sock_sendmsg+0x221/0x270 [ 215.472120][T10260] sock_write_iter+0x2dd/0x400 [ 215.476911][T10260] ? __pfx_sock_write_iter+0x10/0x10 [ 215.481968][ T29] audit: type=1804 audit(1719127504.570:18): pid=10262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2005295135/syzkaller.yIlDi9/364/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 215.482246][T10260] ? bpf_lsm_file_permission+0x9/0x10 [ 215.513926][T10260] ? security_file_permission+0x7f/0xa0 [ 215.519501][T10260] vfs_write+0xa72/0xc90 [ 215.523789][T10260] ? __pfx_sock_write_iter+0x10/0x10 [ 215.529121][T10260] ? __pfx_vfs_write+0x10/0x10 [ 215.533956][T10260] ksys_write+0x1a0/0x2c0 [ 215.538336][T10260] ? __pfx_ksys_write+0x10/0x10 [ 215.543312][T10260] ? do_syscall_64+0x100/0x230 [ 215.548124][T10260] ? do_syscall_64+0xb6/0x230 [ 215.552857][T10260] do_syscall_64+0xf3/0x230 [ 215.557393][T10260] ? clear_bhb_loop+0x35/0x90 [ 215.562113][T10260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.568069][T10260] RIP: 0033:0x7fbb9be7d0a9 [ 215.572513][T10260] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 215.592155][T10260] RSP: 002b:00007fbb9ccce0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 215.600597][T10260] RAX: ffffffffffffffda RBX: 00007fbb9bfb3f80 RCX: 00007fbb9be7d0a9 [ 215.608574][T10260] RDX: 000000000000000d RSI: 0000000020000200 RDI: 0000000000000004 [ 215.616555][T10260] RBP: 00007fbb9ccce120 R08: 0000000000000000 R09: 0000000000000000 [ 215.624546][T10260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.632563][T10260] R13: 000000000000004d R14: 00007fbb9bfb3f80 R15: 00007ffc3c7ff068 [ 215.640570][T10260] [ 215.694323][T10264] team0: Port device macvlan1 added [ 215.773137][T10275] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! [ 215.885046][T10282] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 216.043346][T10293] syzkaller1: entered promiscuous mode [ 216.048990][T10293] syzkaller1: entered allmulticast mode [ 216.060558][T10296] __nla_validate_parse: 9 callbacks suppressed [ 216.060577][T10296] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 216.258041][ T29] audit: type=1804 audit(1719127505.390:19): pid=10303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2005295135/syzkaller.yIlDi9/368/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 216.624266][T10315] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 216.776876][ T1099] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.841621][T10319] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 216.889853][ T5241] IPVS: starting estimator thread 0... [ 216.921650][T10328] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 216.994589][T10326] IPVS: using max 16 ests per chain, 38400 per kthread [ 216.995397][T10315] bond0: entered promiscuous mode [ 217.057575][T10314] bond0: left promiscuous mode [ 217.103251][ T5125] Bluetooth: hci2: command 0x080f tx timeout [ 217.236129][ T29] audit: type=1804 audit(1719127506.370:20): pid=10338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4197515059/syzkaller.eyjdFg/302/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 217.366813][T10344] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 217.606374][T10358] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 217.691170][ T5125] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.703348][ T5125] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.711226][ T5125] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.722315][ T5125] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.739073][ T5125] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 217.749247][ T5125] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.793169][T10359] lo speed is unknown, defaulting to 1000 [ 217.875827][T10363] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 218.037003][T10371] syz-executor.0[10371] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.037973][T10371] syz-executor.0[10371] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.186213][ T29] audit: type=1804 audit(1719127507.320:21): pid=10376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4197515059/syzkaller.eyjdFg/306/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 218.370432][T10375] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 218.407531][T10390] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 218.417632][ T1099] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.586147][ T1099] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.628516][T10359] chnl_net:caif_netlink_parms(): no params data found [ 218.728923][ T1099] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.809629][T10400] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 219.164250][ T29] audit: type=1804 audit(1719127508.300:22): pid=10429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2878392921/syzkaller.6tFlkL/286/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 219.222704][T10359] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.263838][T10359] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.265652][T10435] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 219.271234][T10359] bridge_slave_0: entered allmulticast mode [ 219.328573][T10359] bridge_slave_0: entered promiscuous mode [ 219.348024][T10359] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.363709][T10359] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.381638][T10359] bridge_slave_1: entered allmulticast mode [ 219.397537][T10359] bridge_slave_1: entered promiscuous mode [ 219.577164][T10445] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 219.579481][T10359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.663872][T10359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.695461][ T1099] bridge_slave_1: left allmulticast mode [ 219.701172][ T1099] bridge_slave_1: left promiscuous mode [ 219.739254][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.786460][ T1099] bridge_slave_0: left allmulticast mode [ 219.794324][ T1099] bridge_slave_0: left promiscuous mode [ 219.800165][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.822310][ T5131] Bluetooth: hci1: command tx timeout [ 219.927126][T10458] xt_CT: You must specify a L4 protocol and not use inversions on it [ 220.357197][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.369930][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.383542][ T1099] bond0 (unregistering): Released all slaves [ 220.508498][T10462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:1a) already exists on: team0 [ 220.518654][T10462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.530989][T10462] vlan3: entered allmulticast mode [ 220.536761][T10462] team0: entered allmulticast mode [ 220.542337][T10462] team_slave_0: entered allmulticast mode [ 220.548251][T10462] team_slave_1: entered allmulticast mode [ 220.554613][T10462] macvlan1: entered allmulticast mode [ 220.560207][T10462] veth1_vlan: entered allmulticast mode [ 220.575622][T10462] team0: left allmulticast mode [ 220.580756][T10462] team_slave_0: left allmulticast mode [ 220.586797][T10462] team_slave_1: left allmulticast mode [ 220.593121][T10462] macvlan1: left allmulticast mode [ 220.598378][T10462] veth1_vlan: left allmulticast mode [ 220.635303][T10464] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 220.643735][T10464] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 220.676016][T10359] team0: Port device team_slave_0 added [ 220.712923][T10359] team0: Port device team_slave_1 added [ 220.788036][T10469] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 220.832813][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 220.864974][T10459] lo speed is unknown, defaulting to 1000 [ 221.029171][T10359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.054416][T10359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.133285][T10359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.160992][T10359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.169985][T10359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.197026][T10359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.548035][T10359] hsr_slave_0: entered promiscuous mode [ 221.572358][T10359] hsr_slave_1: entered promiscuous mode [ 221.621599][T10359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.634712][T10359] Cannot create hsr debugfs directory [ 221.732192][ T1099] hsr_slave_0: left promiscuous mode [ 221.752369][ T1099] hsr_slave_1: left promiscuous mode [ 221.769251][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.794039][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.807456][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.818026][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.848130][ T1099] veth1_macvtap: left promiscuous mode [ 221.854271][ T1099] veth0_macvtap: left promiscuous mode [ 221.860350][ T1099] veth1_vlan: left promiscuous mode [ 221.865941][ T1099] veth0_vlan: left promiscuous mode [ 221.902179][ T5131] Bluetooth: hci1: command tx timeout [ 222.410808][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 222.459600][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 222.868297][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 223.010967][T10519] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 223.078583][T10522] team0: entered promiscuous mode [ 223.084475][T10522] team_slave_0: entered promiscuous mode [ 223.111245][T10522] team_slave_1: entered promiscuous mode [ 223.124378][T10522] team0: entered allmulticast mode [ 223.130443][T10522] team_slave_0: entered allmulticast mode [ 223.136452][T10522] team_slave_1: entered allmulticast mode [ 223.144343][T10522] team0: Cannot enslave team device to itself [ 223.151380][T10522] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 223.234342][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.292048][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.498547][T10540] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 223.521911][T10540] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 223.548309][T10540] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 223.912190][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.982302][ T5131] Bluetooth: hci1: command tx timeout [ 224.037215][T10556] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 224.125055][T10558] dccp_invalid_packet: P.Data Offset(4) too small [ 224.180935][T10359] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 224.184555][ T29] audit: type=1800 audit(1719127513.310:23): pid=10558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1954 res=0 errno=0 [ 224.217180][T10359] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 224.228760][ T29] audit: type=1800 audit(1719127513.360:24): pid=10558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1954 res=0 errno=0 [ 224.262238][T10359] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 224.300998][T10359] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 224.596353][T10359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.613219][T10569] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 224.660351][T10359] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.673533][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 224.700094][T10572] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.722739][T10576] FAULT_INJECTION: forcing a failure. [ 224.722739][T10576] name failslab, interval 1, probability 0, space 0, times 0 [ 224.737745][T10576] CPU: 1 PID: 10576 Comm: syz-executor.4 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 224.748320][T10576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 224.758393][T10576] Call Trace: [ 224.761682][T10576] [ 224.764622][T10576] dump_stack_lvl+0x241/0x360 [ 224.769324][T10576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.774542][T10576] ? __pfx__printk+0x10/0x10 [ 224.779156][T10576] should_fail_ex+0x3b0/0x4e0 [ 224.783870][T10576] ? nfnetlink_rcv+0x11b8/0x2a90 [ 224.788826][T10576] should_failslab+0x9/0x20 [ 224.793359][T10576] kmalloc_trace_noprof+0x6c/0x2c0 [ 224.798487][T10576] nfnetlink_rcv+0x11b8/0x2a90 [ 224.803264][T10576] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 224.809634][T10576] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 224.814780][T10576] ? __dev_queue_xmit+0x2d2/0x3d30 [ 224.819940][T10576] ? netlink_deliver_tap+0x2e/0x1b0 [ 224.825149][T10576] ? skb_clone+0x240/0x390 [ 224.829583][T10576] ? __pfx_lock_release+0x10/0x10 [ 224.834634][T10576] ? netlink_deliver_tap+0x2e/0x1b0 [ 224.839849][T10576] netlink_unicast+0x7f0/0x990 [ 224.844649][T10576] ? __pfx_netlink_unicast+0x10/0x10 [ 224.849951][T10576] ? __virt_addr_valid+0x183/0x520 [ 224.855083][T10576] ? __check_object_size+0x49c/0x900 [ 224.860386][T10576] ? bpf_lsm_netlink_send+0x9/0x10 [ 224.865526][T10576] netlink_sendmsg+0x8e4/0xcb0 [ 224.870315][T10576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.875620][T10576] ? __import_iovec+0x536/0x820 [ 224.880484][T10576] ? aa_sock_msg_perm+0x91/0x160 [ 224.885447][T10576] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 224.890746][T10576] ? security_socket_sendmsg+0x87/0xb0 [ 224.896221][T10576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.901532][T10576] __sock_sendmsg+0x221/0x270 [ 224.906224][T10576] ____sys_sendmsg+0x525/0x7d0 [ 224.911012][T10576] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.916328][T10576] __sys_sendmsg+0x2b0/0x3a0 [ 224.920938][T10576] ? __pfx___sys_sendmsg+0x10/0x10 [ 224.926065][T10576] ? vfs_write+0x7c4/0xc90 [ 224.930537][T10576] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 224.936879][T10576] ? do_syscall_64+0x100/0x230 [ 224.941660][T10576] ? do_syscall_64+0xb6/0x230 [ 224.946359][T10576] do_syscall_64+0xf3/0x230 [ 224.950878][T10576] ? clear_bhb_loop+0x35/0x90 [ 224.955597][T10576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.961525][T10576] RIP: 0033:0x7f46ab87d0a9 [ 224.965986][T10576] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 224.985623][T10576] RSP: 002b:00007f46ac6b90c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.994057][T10576] RAX: ffffffffffffffda RBX: 00007f46ab9b3f80 RCX: 00007f46ab87d0a9 [ 225.002042][T10576] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000004 [ 225.010020][T10576] RBP: 00007f46ac6b9120 R08: 0000000000000000 R09: 0000000000000000 [ 225.017998][T10576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.025981][T10576] R13: 000000000000000b R14: 00007f46ab9b3f80 R15: 00007ffd1ebf83c8 [ 225.033978][T10576] [ 225.081001][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.088256][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.114573][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.121936][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.152245][T10572] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.260427][T10572] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.308882][T10584] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 225.344651][T10572] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.566874][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 225.716590][T10609] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 225.866501][T10359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.899147][T10619] dummy0: entered promiscuous mode [ 225.928360][T10619] dummy0: left promiscuous mode [ 226.018848][T10625] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 226.034739][T10625] macvtap1: entered allmulticast mode [ 226.040404][T10625] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 226.057494][T10625] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 226.066450][ T5131] Bluetooth: hci1: command tx timeout [ 226.078820][T10625] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 226.197562][T10631] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 226.228385][T10359] veth0_vlan: entered promiscuous mode [ 226.250678][T10359] veth1_vlan: entered promiscuous mode [ 226.334620][T10359] veth0_macvtap: entered promiscuous mode [ 226.355339][T10359] veth1_macvtap: entered promiscuous mode [ 226.397936][T10359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.427929][T10359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.465898][T10359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.505303][T10359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.524128][T10359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.539765][T10359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.566181][T10359] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.576453][T10359] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.586294][T10359] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.595162][T10359] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.686585][T10359] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 226.709928][T10359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.742870][T10652] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 226.778365][T10652] gretap0: entered promiscuous mode [ 226.798853][T10652] gretap0: entered allmulticast mode [ 226.856016][ T2449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.890092][ T2449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.954268][T10662] xt_NFQUEUE: number of total queues is 0 [ 226.970796][ T430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.987860][ T430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.083673][T10666] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 227.137951][T10667] netlink: zone id is out of range [ 227.149199][T10667] netlink: zone id is out of range [ 227.160872][T10667] netlink: zone id is out of range [ 227.394233][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 227.430396][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 227.437473][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 227.444068][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 227.450714][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 227.457289][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 227.463955][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 227.470505][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 227.477174][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.485149][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.493221][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.501160][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.509235][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.517211][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.525453][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.533495][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.541526][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.549502][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.557574][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.565552][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.573659][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.581590][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.589668][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.597646][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.605718][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.613659][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.621668][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.629632][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.637751][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.645798][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.653823][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.661727][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.669752][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.677707][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.685756][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.693712][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.701785][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.709715][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.717771][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.725734][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.733809][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.741748][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.749815][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.757777][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.765823][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.773772][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.781746][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.789701][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.797700][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.805659][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.813677][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.821590][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.829659][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.837633][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.845799][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.853757][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.861817][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.869830][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.877881][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.885955][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.893968][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.901910][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.909944][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.917911][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.925983][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.933955][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.942023][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.949964][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.958032][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.966016][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.968901][T10687] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 227.977327][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 227.990390][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 227.994004][T10687] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 227.998515][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.016058][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.024145][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.032116][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.040182][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.048158][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.056233][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.064202][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.072278][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.080201][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.088233][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.096295][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.104446][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.112406][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.120439][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.128396][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.136430][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.144383][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.152438][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.160369][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.168537][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.176503][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.184562][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.192528][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.200506][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.208456][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.216460][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.224394][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.232458][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.240395][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.248438][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.256419][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.264878][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.272852][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.280882][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.288846][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.296896][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.304854][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.312902][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.320839][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.328901][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.336866][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.344907][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.352861][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.360887][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.368871][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.376944][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.384915][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.392973][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.400913][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.408994][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.416963][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.425055][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.433019][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.441012][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.448931][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.456986][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.464945][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.473005][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.480928][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.488919][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.496830][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.504848][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.512802][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.520765][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.528719][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.536713][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.544671][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.552702][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.560622][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.568610][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.576563][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.584640][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.592590][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.600626][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.608574][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.616651][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.624616][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.632640][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.640556][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.648562][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.656490][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.664517][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.672514][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.680517][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.688450][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.696459][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.704414][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.712517][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.720435][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.728470][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.736411][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.744531][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.752505][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.760564][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.768575][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.776734][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.784691][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.792754][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.800686][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.808700][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.816674][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.824702][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.832652][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.840637][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.848553][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.856639][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.864685][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.872742][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.880664][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.888719][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.896668][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.904740][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.912706][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.920691][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.928609][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.936601][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.944583][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.952744][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.960646][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.968621][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.976712][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 228.984793][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 228.992714][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 229.000694][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 229.008637][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 229.286167][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 229.307682][ T430] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.426557][T10698] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 229.447903][T10703] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 229.466957][T10711] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 229.475929][T10711] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.2'. [ 229.546336][ T430] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.633606][T10715] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 229.767778][T10729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.822934][T10725] tun0: tun_chr_ioctl cmd 1074025675 [ 229.842417][T10725] tun0: persist enabled [ 229.981308][ T430] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.068761][ T5125] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 230.078653][ T5125] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 230.087418][ T5125] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 230.097048][ T5125] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 230.111997][ T5125] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 230.119481][ T5125] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 230.172756][ T430] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.239348][T10740] lo speed is unknown, defaulting to 1000 [ 230.575088][ T430] bridge_slave_1: left allmulticast mode [ 230.580799][ T430] bridge_slave_1: left promiscuous mode [ 230.591612][ T430] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.631200][ T430] bridge_slave_0: left allmulticast mode [ 230.643216][ T430] bridge_slave_0: left promiscuous mode [ 230.655857][ T430] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.182309][ T1099] wlan0: Trigger new scan to find an IBSS to join [ 231.388518][ T430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.406650][ T430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.420843][ T430] bond0 (unregistering): Released all slaves [ 231.657082][T10776] team0: No ports can be present during mode change [ 231.680915][T10773] batadv_slave_1: entered promiscuous mode [ 231.774469][T10773] vlan1: entered promiscuous mode [ 231.820008][T10783] veth0_vlan: left promiscuous mode [ 231.897548][T10783] vlan1 (unregistering): left promiscuous mode [ 232.144922][ T5125] Bluetooth: hci1: command tx timeout [ 232.157429][T10772] batadv_slave_1: left promiscuous mode [ 232.561220][T10740] chnl_net:caif_netlink_parms(): no params data found [ 232.679933][T10831] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 232.701095][T10831] netlink: 210880 bytes leftover after parsing attributes in process `syz-executor.3'. [ 232.972621][T10831] bridge0: port 3(gretap0) entered blocking state [ 233.009912][T10831] bridge0: port 3(gretap0) entered disabled state [ 233.072834][ T430] hsr_slave_0: left promiscuous mode [ 233.091114][ T430] hsr_slave_1: left promiscuous mode [ 233.115163][ T430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.135337][ T430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.157473][ T430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.177898][ T430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.257466][ T430] veth1_macvtap: left promiscuous mode [ 233.272101][ T430] veth0_macvtap: left promiscuous mode [ 233.277894][ T430] veth1_vlan: left promiscuous mode [ 233.292342][ T430] veth0_vlan: left promiscuous mode [ 234.137026][ T430] team0 (unregistering): Port device team_slave_1 removed [ 234.190278][ T430] team0 (unregistering): Port device team_slave_0 removed [ 234.241142][ T5125] Bluetooth: hci1: command tx timeout [ 234.609564][T10740] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.617515][T10740] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.625036][T10740] bridge_slave_0: entered allmulticast mode [ 234.632753][T10740] bridge_slave_0: entered promiscuous mode [ 234.651942][T10854] bridge: RTM_DELNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 234.706840][T10740] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.727096][T10740] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.752358][T10740] bridge_slave_1: entered allmulticast mode [ 234.764013][T10740] bridge_slave_1: entered promiscuous mode [ 234.877069][T10882] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 234.897087][T10740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.944615][T10882] Κό: entered promiscuous mode [ 234.960424][T10740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.133234][T10890] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 235.152497][T10740] team0: Port device team_slave_0 added [ 235.164579][T10890] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 235.174685][T10740] team0: Port device team_slave_1 added [ 235.180844][T10890] netlink: 126008 bytes leftover after parsing attributes in process `syz-executor.2'. [ 235.290146][T10740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.307706][T10740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.362245][T10740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.396541][T10740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.412075][T10740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.449623][T10740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.624605][T10897] lo speed is unknown, defaulting to 1000 [ 235.638924][T10740] hsr_slave_0: entered promiscuous mode [ 235.671173][T10740] hsr_slave_1: entered promiscuous mode [ 235.728161][T10740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.748845][T10740] Cannot create hsr debugfs directory [ 236.142707][ T1088] wlan0: Trigger new scan to find an IBSS to join [ 236.303546][ T5125] Bluetooth: hci1: command tx timeout [ 237.135366][ T51] wlan0: Creating new IBSS network, BSSID b6:50:e9:e5:72:97 [ 237.136323][T10901] Cannot find add_set index 0 as target [ 237.255885][T10740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 237.274677][T10740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 237.323403][T10740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 237.508643][T10740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 237.973511][T10740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.048719][T10740] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.108395][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.115641][ T5171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.209617][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.217096][ T5171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.386951][ T5125] Bluetooth: hci1: command tx timeout [ 238.615135][T10984] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 238.988481][T10740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.146743][T10740] veth0_vlan: entered promiscuous mode [ 239.194734][T10740] veth1_vlan: entered promiscuous mode [ 239.315904][T10740] veth0_macvtap: entered promiscuous mode [ 239.362644][T10740] veth1_macvtap: entered promiscuous mode [ 239.410800][T10740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.431694][T10740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.455328][T10740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.476696][T11016] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 239.498582][T10740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.521712][T10740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.533899][T10740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.586216][T10740] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.609059][T10740] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.624782][T10740] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.636294][T10740] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.847855][T10740] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 239.857889][T10740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.899436][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.929417][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.000890][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.019994][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.033640][T11023] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 240.334327][T11034] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.499596][T11045] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.979856][T11059] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 241.150275][T11068] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 241.256955][T11075] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 241.371245][T11080] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 241.382397][T11080] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 241.396446][T11073] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 241.406608][T11080] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 241.571251][T11089] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 241.581038][T11089] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.3'. [ 241.594772][T11089] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 241.612909][T11089] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 242.821337][ T1088] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.998714][T11145] Cannot find set identified by id 0 to match [ 243.051001][T11145] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 243.242581][T11156] syzkaller1: entered promiscuous mode [ 243.261315][T11156] syzkaller1: entered allmulticast mode [ 243.524404][T11165] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 243.624787][T11170] FAULT_INJECTION: forcing a failure. [ 243.624787][T11170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.677952][T11170] CPU: 0 PID: 11170 Comm: syz-executor.3 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 243.688527][T11170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 243.698620][T11170] Call Trace: [ 243.701929][T11170] [ 243.704880][T11170] dump_stack_lvl+0x241/0x360 [ 243.709623][T11170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.714857][T11170] ? __pfx__printk+0x10/0x10 [ 243.719477][T11170] ? __pfx_lock_release+0x10/0x10 [ 243.724538][T11170] should_fail_ex+0x3b0/0x4e0 [ 243.729260][T11170] _copy_from_iter+0x1f6/0x1960 [ 243.734149][T11170] ? __virt_addr_valid+0x183/0x520 [ 243.739318][T11170] ? __pfx_lock_release+0x10/0x10 [ 243.744367][T11170] ? __alloc_skb+0x28f/0x440 [ 243.748977][T11170] ? __pfx__copy_from_iter+0x10/0x10 [ 243.754274][T11170] ? __virt_addr_valid+0x183/0x520 [ 243.759403][T11170] ? __virt_addr_valid+0x183/0x520 [ 243.764555][T11170] ? __virt_addr_valid+0x44e/0x520 [ 243.769711][T11170] ? __check_object_size+0x49c/0x900 [ 243.775033][T11170] netlink_sendmsg+0x73d/0xcb0 [ 243.779831][T11170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.785128][T11170] ? __import_iovec+0x536/0x820 [ 243.790004][T11170] ? aa_sock_msg_perm+0x91/0x160 [ 243.794966][T11170] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 243.800268][T11170] ? security_socket_sendmsg+0x87/0xb0 [ 243.805760][T11170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.811061][T11170] __sock_sendmsg+0x221/0x270 [ 243.815748][T11170] ____sys_sendmsg+0x525/0x7d0 [ 243.820547][T11170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.825864][T11170] __sys_sendmsg+0x2b0/0x3a0 [ 243.830473][T11170] ? __pfx___sys_sendmsg+0x10/0x10 [ 243.835613][T11170] ? vfs_write+0x7c4/0xc90 [ 243.840078][T11170] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 243.846417][T11170] ? do_syscall_64+0x100/0x230 [ 243.851197][T11170] ? do_syscall_64+0xb6/0x230 [ 243.855884][T11170] do_syscall_64+0xf3/0x230 [ 243.860402][T11170] ? clear_bhb_loop+0x35/0x90 [ 243.865097][T11170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.871002][T11170] RIP: 0033:0x7f4109e7d0a9 [ 243.875422][T11170] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 243.895033][T11170] RSP: 002b:00007f410ac320c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.903454][T11170] RAX: ffffffffffffffda RBX: 00007f4109fb4050 RCX: 00007f4109e7d0a9 [ 243.911431][T11170] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000008 [ 243.919416][T11170] RBP: 00007f410ac32120 R08: 0000000000000000 R09: 0000000000000000 [ 243.927389][T11170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.935360][T11170] R13: 000000000000006e R14: 00007f4109fb4050 R15: 00007ffea3083848 [ 243.943363][T11170] [ 244.056786][ T5131] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 244.077176][ T5131] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 244.085794][ T5131] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 244.103280][ T5131] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 244.111140][ T5131] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 244.122387][ T5131] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 244.195422][T11179] lo speed is unknown, defaulting to 1000 [ 244.364700][ T1088] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.516199][ T1088] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.888778][ T1088] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.918045][T11224] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 245.209516][ T1088] bridge_slave_1: left allmulticast mode [ 245.226577][ T1088] bridge_slave_1: left promiscuous mode [ 245.236033][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.069318][ T1088] bridge_slave_0: left allmulticast mode [ 246.099550][ T1088] bridge_slave_0: left promiscuous mode [ 246.106954][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.222157][ T5131] Bluetooth: hci1: command tx timeout [ 246.613784][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.629184][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.640712][ T1088] bond0 (unregistering): Released all slaves [ 246.667135][T11259] __nla_validate_parse: 4 callbacks suppressed [ 246.667152][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 246.746779][T11271] team0: Port device team_slave_0 removed [ 246.768739][T11179] chnl_net:caif_netlink_parms(): no params data found [ 247.257184][T11293] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 247.447093][T11179] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.463069][T11179] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.480761][T11179] bridge_slave_0: entered allmulticast mode [ 247.549873][T11179] bridge_slave_0: entered promiscuous mode [ 247.584375][T11179] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.612101][T11179] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.644630][T11179] bridge_slave_1: entered allmulticast mode [ 247.673967][T11179] bridge_slave_1: entered promiscuous mode [ 247.744047][ T1088] hsr_slave_0: left promiscuous mode [ 247.773406][ T1088] hsr_slave_1: left promiscuous mode [ 247.779763][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.788892][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.799107][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.827716][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.911651][ T1088] veth1_macvtap: left promiscuous mode [ 247.938422][ T1088] veth0_macvtap: left promiscuous mode [ 247.949258][ T1088] veth1_vlan: left promiscuous mode [ 247.968394][ T1088] veth0_vlan: left promiscuous mode [ 247.997593][T11323] sctp: [Deprecated]: syz-executor.0 (pid 11323) Use of int in maxseg socket option. [ 247.997593][T11323] Use struct sctp_assoc_value instead [ 248.312223][ T5131] Bluetooth: hci1: command tx timeout [ 248.683522][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 248.755555][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 249.364705][T11355] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 249.387166][T11179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.403939][T11339] vlan3: entered promiscuous mode [ 249.409011][T11339] macvtap0: entered promiscuous mode [ 249.415749][T11339] vlan3: entered allmulticast mode [ 249.421141][T11339] macvtap0: entered allmulticast mode [ 249.427239][T11339] veth0_macvtap: entered allmulticast mode [ 249.439205][T11339] team0: Device vlan3 is up. Set it down before adding it as a team port [ 249.449842][T11339] macvtap0: left allmulticast mode [ 249.455610][T11339] veth0_macvtap: left allmulticast mode [ 249.461321][T11339] macvtap0: left promiscuous mode [ 249.500576][T11315] lo speed is unknown, defaulting to 1000 [ 249.506517][T11355] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 249.523908][T11179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.602816][ T29] audit: type=1800 audit(1719127538.740:25): pid=11359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1953 res=0 errno=0 [ 249.633609][T11356] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 249.658043][ T29] audit: type=1804 audit(1719127538.790:26): pid=11359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir4197515059/syzkaller.eyjdFg/363/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 249.782700][T11179] team0: Port device team_slave_0 added [ 249.795779][T11179] team0: Port device team_slave_1 added [ 249.897475][T11367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.962115][T11179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.969127][T11179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.017274][T11179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.084383][T11179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.091610][T11179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.098154][T11370] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 250.154064][T11179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.175197][T11370] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 250.202828][T11376] netlink: 208 bytes leftover after parsing attributes in process `syz-executor.2'. [ 250.382062][ T5131] Bluetooth: hci1: command tx timeout [ 250.464308][T11179] hsr_slave_0: entered promiscuous mode [ 250.471609][T11179] hsr_slave_1: entered promiscuous mode [ 250.481502][T11179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.493492][T11179] Cannot create hsr debugfs directory [ 250.636706][T11387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.662293][T11387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.670789][T11387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.709586][T11387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.741313][T11387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.767676][T11387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.787092][T11387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.812252][T11387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.838177][T11387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.286487][T11407] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 251.325414][T11407] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 251.583520][T11179] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 251.611224][T11179] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 251.631654][T11179] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 251.659361][T11179] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 251.858508][T11179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.890245][T11179] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.908849][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.916091][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.961840][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.969056][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.157060][T11442] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 252.413311][T11451] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 252.472017][ T5131] Bluetooth: hci1: command tx timeout [ 252.494170][T11179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.606229][T11179] veth0_vlan: entered promiscuous mode [ 252.658337][T11179] veth1_vlan: entered promiscuous mode [ 252.773569][T11179] veth0_macvtap: entered promiscuous mode [ 252.807193][T11179] veth1_macvtap: entered promiscuous mode [ 252.878472][T11179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.906603][T11179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.944883][T11179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.988502][T11179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.029493][T11179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.065479][T11179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.177168][T11179] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.218261][T11179] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.239122][T11179] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.259913][T11179] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.299031][T11483] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'. [ 253.488398][T11179] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 253.523047][T11179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.589687][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.624442][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.786356][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.807083][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.891646][T11534] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 254.070757][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 254.325570][T11550] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 254.488528][T11560] syz-executor.2[11560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.488683][T11560] syz-executor.2[11560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.777280][T11572] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 254.890775][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 255.158781][T11592] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 255.361005][T11605] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 255.377697][T11606] FAULT_INJECTION: forcing a failure. [ 255.377697][T11606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.414527][T11606] CPU: 1 PID: 11606 Comm: syz-executor.4 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 255.425101][T11606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 255.435196][T11606] Call Trace: [ 255.438498][T11606] [ 255.441445][T11606] dump_stack_lvl+0x241/0x360 [ 255.446161][T11606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.451373][T11606] ? __pfx__printk+0x10/0x10 [ 255.455974][T11606] ? __pfx_lock_release+0x10/0x10 [ 255.461011][T11606] ? vfs_write+0x7c4/0xc90 [ 255.465443][T11606] should_fail_ex+0x3b0/0x4e0 [ 255.470133][T11606] _copy_from_user+0x2f/0xe0 [ 255.474723][T11606] __sys_bpf+0x1a4/0x810 [ 255.478971][T11606] ? __pfx___sys_bpf+0x10/0x10 [ 255.483750][T11606] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 255.489738][T11606] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 255.496113][T11606] ? do_syscall_64+0x100/0x230 [ 255.500895][T11606] __x64_sys_bpf+0x7c/0x90 [ 255.505332][T11606] do_syscall_64+0xf3/0x230 [ 255.509851][T11606] ? clear_bhb_loop+0x35/0x90 [ 255.514541][T11606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.520448][T11606] RIP: 0033:0x7f46ab87d0a9 [ 255.524868][T11606] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 255.544474][T11606] RSP: 002b:00007f46ac6980c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 255.552886][T11606] RAX: ffffffffffffffda RBX: 00007f46ab9b4050 RCX: 00007f46ab87d0a9 [ 255.560855][T11606] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 255.568828][T11606] RBP: 00007f46ac698120 R08: 0000000000000000 R09: 0000000000000000 [ 255.576815][T11606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.584790][T11606] R13: 000000000000006e R14: 00007f46ab9b4050 R15: 00007ffd1ebf83c8 [ 255.592802][T11606] [ 255.988043][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.994495][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.274063][T11648] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 256.295411][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 256.311297][T11650] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 256.404993][T11648] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 256.699763][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 256.922168][T11676] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 256.934991][T11676] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 256.943411][T11676] CPU: 1 PID: 11676 Comm: syz-executor.4 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 256.953910][T11676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 256.963985][T11676] RIP: 0010:dev_map_enqueue+0x31/0x3e0 [ 256.969486][T11676] Code: 41 56 41 55 41 54 53 48 83 ec 18 49 89 d4 49 89 f5 48 89 fd 49 be 00 00 00 00 00 fc ff df e8 b6 9b d7 ff 48 89 e8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 ef e8 f0 58 3d 00 4c 8b 7d 00 48 83 c5 [ 256.989129][T11676] RSP: 0018:ffffc90004327678 EFLAGS: 00010246 [ 256.995225][T11676] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 257.003223][T11676] RDX: ffffc90009899000 RSI: 00000000000008e4 RDI: 00000000000008e5 [ 257.011283][T11676] RBP: 0000000000000000 R08: ffffffff8961e3b6 R09: ffffffff8961e373 [ 257.019258][T11676] R10: 0000000000000004 R11: ffff88801f3d1e00 R12: ffff888064396000 [ 257.027273][T11676] R13: ffff88805f5ff070 R14: dffffc0000000000 R15: 0000000000000000 [ 257.035251][T11676] FS: 00007f46ac6b96c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 257.044185][T11676] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.050779][T11676] CR2: 00007f410ac51f78 CR3: 0000000011f10000 CR4: 00000000003506f0 [ 257.058762][T11676] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 257.066739][T11676] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 257.074710][T11676] Call Trace: [ 257.077985][T11676] [ 257.080914][T11676] ? __die_body+0x88/0xe0 [ 257.085291][T11676] ? die_addr+0x108/0x140 [ 257.089630][T11676] ? exc_general_protection+0x3dd/0x5d0 [ 257.095191][T11676] ? asm_exc_general_protection+0x26/0x30 [ 257.100915][T11676] ? xdp_do_redirect_frame+0x243/0x660 [ 257.106381][T11676] ? xdp_do_redirect_frame+0x286/0x660 [ 257.111853][T11676] ? dev_map_enqueue+0x31/0x3e0 [ 257.116707][T11676] ? dev_map_enqueue+0x2a/0x3e0 [ 257.121566][T11676] xdp_do_redirect_frame+0x2a6/0x660 [ 257.126868][T11676] bpf_test_run_xdp_live+0xe60/0x1e60 [ 257.132271][T11676] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 257.137827][T11676] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 257.143663][T11676] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 257.149557][T11676] ? __might_fault+0xaa/0x120 [ 257.154231][T11676] ? __might_fault+0xc6/0x120 [ 257.158904][T11676] ? _copy_from_user+0xa6/0xe0 [ 257.163675][T11676] ? bpf_test_init+0x15a/0x180 [ 257.168443][T11676] ? xdp_convert_md_to_buff+0x5b/0x330 [ 257.173900][T11676] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 257.179293][T11676] ? __pfx_lock_release+0x10/0x10 [ 257.184344][T11676] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 257.190144][T11676] ? __fget_files+0x29/0x470 [ 257.194744][T11676] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 257.200563][T11676] bpf_prog_test_run+0x33a/0x3b0 [ 257.205519][T11676] __sys_bpf+0x48d/0x810 [ 257.209790][T11676] ? __pfx___sys_bpf+0x10/0x10 [ 257.214565][T11676] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 257.220644][T11676] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 257.226636][T11676] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 257.232972][T11676] ? do_syscall_64+0x100/0x230 [ 257.237741][T11676] __x64_sys_bpf+0x7c/0x90 [ 257.242165][T11676] do_syscall_64+0xf3/0x230 [ 257.246678][T11676] ? clear_bhb_loop+0x35/0x90 [ 257.251363][T11676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.257261][T11676] RIP: 0033:0x7f46ab87d0a9 [ 257.261686][T11676] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 257.281290][T11676] RSP: 002b:00007f46ac6b90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 257.289708][T11676] RAX: ffffffffffffffda RBX: 00007f46ab9b3f80 RCX: 00007f46ab87d0a9 [ 257.297676][T11676] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a [ 257.305644][T11676] RBP: 00007f46ab8ec074 R08: 0000000000000000 R09: 0000000000000000 [ 257.313614][T11676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.321579][T11676] R13: 000000000000000b R14: 00007f46ab9b3f80 R15: 00007ffd1ebf83c8 [ 257.329570][T11676] [ 257.332584][T11676] Modules linked in: [ 257.336613][T11676] ---[ end trace 0000000000000000 ]--- [ 257.342108][T11676] RIP: 0010:dev_map_enqueue+0x31/0x3e0 [ 257.347597][T11676] Code: 41 56 41 55 41 54 53 48 83 ec 18 49 89 d4 49 89 f5 48 89 fd 49 be 00 00 00 00 00 fc ff df e8 b6 9b d7 ff 48 89 e8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 ef e8 f0 58 3d 00 4c 8b 7d 00 48 83 c5 [ 257.367263][T11676] RSP: 0018:ffffc90004327678 EFLAGS: 00010246 [ 257.373376][T11676] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 257.381362][T11676] RDX: ffffc90009899000 RSI: 00000000000008e4 RDI: 00000000000008e5 [ 257.389378][T11676] RBP: 0000000000000000 R08: ffffffff8961e3b6 R09: ffffffff8961e373 [ 257.397394][T11676] R10: 0000000000000004 R11: ffff88801f3d1e00 R12: ffff888064396000 [ 257.405418][T11676] R13: ffff88805f5ff070 R14: dffffc0000000000 R15: 0000000000000000 [ 257.413452][T11676] FS: 00007f46ac6b96c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 257.422423][T11676] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.429021][T11676] CR2: 00007f410ac51f78 CR3: 0000000011f10000 CR4: 00000000003506f0 [ 257.437129][T11676] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 257.445143][T11676] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 257.453167][T11676] Kernel panic - not syncing: Fatal exception in interrupt [ 257.460732][T11676] Kernel Offset: disabled [ 257.465057][T11676] Rebooting in 86400 seconds..