last executing test programs: 2.547958464s ago: executing program 2 (id=1771): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010"], 0xec}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="18010000100001000000000000000000ac1e0001000000000000000000000000ac1414000000aafd2164172300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000002000000003c000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000028001a00fc010000000000000000000000000001ac14140e00000000000000000000000002000900"], 0x118}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x33, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000000)={0x1, 'bond_slave_1\x00', {}, 0xffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000af62000000006600000008000300", @ANYRES32=r11, @ANYBLOB="080026008f0900000800b70000000000"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r4, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xffffff01, 0x5}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x4040) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r13, 0x0) r14 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r14, 0x10d, 0x84, 0x0, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb180318000000000000965ecb5a"], &(0x7f0000001f80)=""/226, 0x1a, 0xe2, 0xf}, 0x20) 2.263655346s ago: executing program 2 (id=1776): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r2, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f0000000080)=@ethtool_dump={0x3f}}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x20, 0x7800, 0x1, 0x29a, {{0xf, 0x4, 0x3, 0x0, 0x3c, 0x66, 0x0, 0x5, 0x7f, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0x56, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f}, {@multicast2, 0x10001}, {@remote, 0x7ff}]}, @timestamp_addr={0x44, 0xc, 0x26, 0x1, 0x5, [{@multicast2, 0xf96}]}]}}}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000050403eeffffffffffff02000000", @ANYBLOB="a2ecedb96bdfb333cdf029d2f6edebe526ca5e3d58640a5adf1226cb471068cca56664", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newqdisc={0x128, 0x24, 0x200, 0x0, 0x25dddbfb, {0x0, 0x0, 0x0, r5, {}, {0x3, 0xe}, {0x10, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @qdisc_kind_options=@q_cbq={{0x48}, {0xf4, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0xffffffb8, 0xf, 0x81, 0x110f49bc}}, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x9, 0x4, 0x6, 0xab}}, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x6, 0x9, 0x9, 0xfffffffc}}, @TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0x80006, 0x4, 0x2, 0x8}}, @TCA_CBS_PARMS={0x18, 0x1, {0x95, '\x00', 0x2, 0x7f, 0x166, 0x7}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x1, 0x0, 0xb, 0x200}}, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0x1, 0x8, 0x4, 0x1}}, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0xa017, 0x4d, 0x8, 0x20000d}}, @TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x401, 0x9, 0x1000}}, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x95, 0x0, 0xffffffff}}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x44}, 0xc000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800000010000104000000000000000000fcee00", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x28}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r12, @ANYBLOB="0100000000000000000003000000e80001802c0004001400010002000000ac14140000000000000000001400020002000a00ac1414bb00000040000000002c0002800800030000000000080001000000000008000300b200000008000100000000000800148b50310000100001006574683a62726964676530007c000280080001"], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 1.969256721s ago: executing program 1 (id=1779): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000020109"], 0x38}, 0x1, 0x0, 0xfff5}, 0x0) 1.90408856s ago: executing program 1 (id=1781): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="c003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="a19f429495bba36c3d5a88539db0e566bc93ac859626415370e976fe9c3de2dc763302b8ba29c2d2395f1748a8c505d8a367e75481e0712ec26316db7e1a289274c78ada291b733f7f75fd4b2879e69f8bb0f8abf8db579c63d2667237b7886923dc0047d4e24fe230a043ac32abbfead7e283f07dc268a226964bd4103c5a692fdd71bbd4ea008068e919a8f7f834efdd8c70f6df741c516c268fe3"], 0x44}, 0x1, 0x0, 0x0, 0x95}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r4, 0x5421, &(0x7f00000001c0)=0x2f) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000100)=0x8, 0x4) close(r4) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f80)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000c94b6cba3a7089dbb21c993883afa5fa9463d3842d74eb01948377e8396b1adc1638a64cba29d1651ad6dbb4251460c762cb36484869d80ad9db120ed0190b9c18c16cf4f335008b8b02add3829cd730b9940e9c52b8cfa2fcf4023c46f4a4d50f1c912658de10004e000422da241d5d25c848140197102b519b3d275554963603600642dc8c4902bdbab88a8dd150ff641f96b715cd65c20bae5b3b84fa5f12", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000000000000141000000140017000000000000000069623a6c6f000000"], 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), r8) sendmsg$FOU_CMD_GET(r8, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r10, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x15}, 0x4048844) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14}]}]}, @IFLA_IFALIASn={0x4}]}, 0x40}}, 0x0) r11 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r11, &(0x7f0000000180)={0x11, 0x0, r12}, 0x14) sendmsg$unix(r11, 0x0, 0x20000001) socket$nl_route(0x10, 0x3, 0x0) 1.848888032s ago: executing program 2 (id=1782): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.838720968s ago: executing program 4 (id=1783): mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x25, &(0x7f0000abaff9)={0x0, 0xea60}, 0x8) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000000)=0x1, 0x4) r2 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x110, 0x24, 0x20, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x7, 0x5}, {0xfff2, 0xffff}, {0xfff0, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x1c}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8a, '\x00', 0x4ceedd59, 0x100, 0x6, 0x4}}}}, @qdisc_kind_options=@q_mqprio={{0xb}, {0x80, 0x2, {{0x2, [0x5, 0x6, 0xb, 0x6, 0x6, 0xd, 0x0, 0x6, 0x10, 0x2, 0x2, 0x10, 0xc, 0x8, 0xf], 0x1, [0xba47, 0x7d, 0x7, 0x200, 0x3ff, 0xa, 0x5, 0x1, 0xef, 0x8, 0xf430, 0x9, 0xfff5, 0x2, 0x0, 0x8], [0x2, 0x4, 0xc, 0x200, 0x2, 0x10, 0x3, 0x0, 0x0, 0x200, 0x357, 0x8, 0x2, 0x3, 0x2fb6, 0x81]}, [@TCA_MQPRIO_MAX_RATE64={0x28, 0x4, 0x0, 0x1, [{0xc, 0x4, 0xfffffffffffffffb}, {0xc, 0x4, 0x1ff}, {0xc, 0x4, 0xef}]}]}}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x1, 0xfff8, 0x8f5f, 0x1, 0x2d, 0x9, 0x4}}, {0xc, 0x2, [0x401, 0xfffd, 0x8, 0x400]}}]}]}, 0x110}}, 0x0) 1.736055135s ago: executing program 4 (id=1785): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010"], 0xec}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="18010000100001000000000000000000ac1e0001000000000000000000000000ac1414000000aafd2164172300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000002000000003c000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000028001a00fc010000000000000000000000000001ac14140e00000000000000000000000002000900"], 0x118}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x33, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000000)={0x1, 'bond_slave_1\x00', {}, 0xffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000af62000000006600000008000300", @ANYRES32=r11, @ANYBLOB="080026008f0900000800b70000000000"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r4, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xffffff01, 0x5}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x4040) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r13, 0x0) r14 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r14, 0x10d, 0x84, 0x0, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb180318000000000000965ecb5a"], &(0x7f0000001f80)=""/226, 0x1a, 0xe2, 0xf}, 0x20) 1.682315745s ago: executing program 2 (id=1786): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bind$isdn_base(r0, &(0x7f0000000240)={0x22, 0x6, 0x9, 0x40, 0x7f}, 0x6) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07007706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdefeb0cff9fc56357d81b2cc1a9e37d7b75c020b070000003eb22062bafaca036d9cc7db6671573e202e0a92ee4ba12b064981cc32d1ac0b9ecc8f604dcac2563e1c1e762400"/300], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x16, 0x0, 0x0, 0x0, 0x0, "f0f9d4"}}) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r4, 0x0) accept$unix(r4, 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8948, &(0x7f0000000580)={'bond0\x00', 0x10001}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="0800040008100000"], 0x4c}, 0x9}, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES8=0x0, @ANYRES16], 0x5c}, 0x1, 0xba01}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000000)=@file={0x1}, 0x6e) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2001) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 1.536068553s ago: executing program 1 (id=1787): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='alarmtimer_suspend\x00'}, 0x10) unshare(0x20000400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801}], {0x14}}, 0x9c}}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="140100002b00b99f000000000000f00001"], 0x114}], 0x1}, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000005000071123f00000000009500200000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000580)=@abs, 0x15) 1.469714806s ago: executing program 4 (id=1788): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000140)=0xaa8, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="06", 0x1}, {&(0x7f00000001c0)="9b", 0x1}], 0x2}], 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000180)=0x94, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000400)="7e37d28bd414daeaa30003483e86ba42b79fbae13eea9bf1aeca1b4983ca05e7380511259ccfe105", 0x28}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f) socket(0x10, 0x80002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000600)={r6, 0x0, 0x10, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x58, r0, 0x4, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x3}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCRTMSG(r8, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e21, @private=0xa010101}, {0x2, 0x4e23, @multicast2}, 0x309, 0x0, 0x0, 0x0, 0x7, 0x0, 0xd3c9, 0x61, 0x1b02}) 1.417577231s ago: executing program 0 (id=1790): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100001000000003cb7d051000000000a54000000060a0b440000000000000000020000002800048024000180090001006d6574610000000014000280080002400000001f0800014000007f50f1a7e76946000d0900010073797a3000000000090002007379fa3200f2ffff13000000110001000000000000"], 0x7c}}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000080)=0xff, 0x4) listen(r4, 0x20000005) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f00000001c0), 0x0, 0x40811) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c70a236c60294e710f24fac078bd0c2b2a5096b42e82ee34e22275e9378e4285001fb27614128328f51886dada13bd8113ea18036ff9e09ad93fbba47ce7f55a93688714cbdefd780c93a6e50696a115d2501edf9af91a88d8c0c297179127530f19caa4fc8689bb228697af528b8ef1176bcf59b7e25e1f7332c7328b854d7a18047b08f4b7598ed03f23dd7ac1fb99172c9d0f564c1a750dd6f2", @ANYRES16=r3, @ANYRES16], 0x160}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendto$inet6(r0, &(0x7f0000002380)="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", 0x1014, 0x400c881, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000033c0)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000bc0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000d80)=""/231, 0xe7, 0x0, 0x0}, &(0x7f0000000c00)=0x40) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r2) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="20003126d337000000000e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e6576650000040002800a000100aaaaaaaaaa000000821358958608000000ff7da4b387ecbef53601550ba0639de767f297c229af3cead710088fef6703427a37249198cb3b59ab19b35225c6be8132ae8e6c9f03b10d5822cdd20bb9da56836d746b96491cc5d9fcfe5144a417c35e98057ddf790567d97b31ff2a51cdbb39d4eea4b5079c352d6b31ed2ec4bb9a6fd9eb603ca61f3ae79a94046a3f288f7fe4f799272e1af8481b1cb8db2772a537a18470c6a10684669c395e0751c6077e99d05628784b07a1e2a6e015e7cda0af4cc87b0565e8405017cc38a79d7fee8445d5962dd9bfa383083e84fd329fd72bcdba56ea7d0e35c155e636cc51f00d50619b6209836938a0cccf75707968b8750dc0d5fce4493ece87b4845f934b27578b"], 0x40}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000007c0), &(0x7f0000000800)=0x4) 1.271787963s ago: executing program 1 (id=1792): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000800)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x30004081) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41, 0xfdef}}}, 0x10, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/147, 0x93}], 0x1}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2000000015, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000280)=@req={0x2, 0x1, 0x9}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000440)={0xa, &(0x7f00000003c0)=[{0x5, 0xff, 0xff, 0x7}, {0x7f, 0xd, 0x5, 0x8}, {0x3, 0x0, 0x2, 0xff}, {0x9c9, 0x79, 0xf, 0x44}, {0x0, 0x0, 0x4, 0x6}, {0x0, 0xd, 0xaf, 0x6}, {0x112, 0x3, 0xcb}, {0x2, 0x1, 0x4, 0x8}, {0x7ab0, 0x27, 0x5e, 0x8}, {0x0, 0xc, 0x44, 0x5}]}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000b000000001c0000000c00018008000100", @ANYRES32=r7], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x59, 0x9, 0x0, 0xa, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x8000, 0x9, 0x7}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00020000002d993700fedbdf2512000000200001801400020070696d7265673000000000000000000008daa849d7640c055de53cf0071e7b2e73f88c3b530db72ba4cb37055e72609bd9236cd9c239292c4b7dcae77edddcce0000000000", @ANYRES32=r8, @ANYBLOB="0800080005000000080009000c00000008000700000000000800080003000000080008000700000008000700080000000800060003000000"], 0x6c}}, 0x40000) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r9 = socket$igmp(0x2, 0x3, 0x2) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) accept4(r10, 0x0, 0x0, 0x0) setsockopt$MRT_INIT(r9, 0x0, 0xc8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x68}}, 0x0) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000380)={0x41, 0x2, 0x1}, 0x10) 1.13896529s ago: executing program 0 (id=1793): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001740)={0x0, 0x3000002, &(0x7f0000001700)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) 1.122410266s ago: executing program 4 (id=1794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc601}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004073000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 1.097721699s ago: executing program 3 (id=1795): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 968.144832ms ago: executing program 3 (id=1796): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x34000000}, 0x0) 967.721622ms ago: executing program 0 (id=1797): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="c003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="a19f429495bba36c3d5a88539db0e566bc93ac859626415370e976fe9c3de2dc763302b8ba29c2d2395f1748a8c505d8a367e75481e0712ec26316db7e1a289274c78ada291b733f7f75fd4b2879e69f8bb0f8abf8db579c63d2667237b7886923dc0047d4e24fe230a043ac32abbfead7e283f07dc268a226964bd4103c5a692fdd71bbd4ea008068e919a8f7f834efdd8c70f6df741c516c268fe3"], 0x44}, 0x1, 0x0, 0x0, 0x95}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r4, 0x5421, &(0x7f00000001c0)=0x2f) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000100)=0x8, 0x4) close(r4) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f80)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000c94b6cba3a7089dbb21c993883afa5fa9463d3842d74eb01948377e8396b1adc1638a64cba29d1651ad6dbb4251460c762cb36484869d80ad9db120ed0190b9c18c16cf4f335008b8b02add3829cd730b9940e9c52b8cfa2fcf4023c46f4a4d50f1c912658de10004e000422da241d5d25c848140197102b519b3d275554963603600642dc8c4902bdbab88a8dd150ff641f96b715cd65c20bae5b3b84fa5f12", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000000000000141000000140017000000000000000069623a6c6f000000"], 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), r8) sendmsg$FOU_CMD_GET(r8, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r10, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x15}, 0x4048844) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14}]}]}, @IFLA_IFALIASn={0x4}]}, 0x40}}, 0x0) r11 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r11, &(0x7f0000000180)={0x11, 0x0, r12}, 0x14) sendmsg$unix(r11, 0x0, 0x20000001) socket$nl_route(0x10, 0x3, 0x0) 920.227005ms ago: executing program 3 (id=1798): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010"], 0xec}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="18010000100001000000000000000000ac1e0001000000000000000000000000ac1414000000aafd2164172300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000002000000003c000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000028001a00fc010000000000000000000000000001ac14140e00000000000000000000000002000900"], 0x118}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x33, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000000)={0x1, 'bond_slave_1\x00', {}, 0xffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000af62000000006600000008000300", @ANYRES32=r11, @ANYBLOB="080026008f0900000800b70000000000"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r4, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xffffff01, 0x5}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x4040) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r13, 0x0) r14 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r14, 0x10d, 0x84, 0x0, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb180318000000000000965ecb5a"], &(0x7f0000001f80)=""/226, 0x1a, 0xe2, 0xf}, 0x20) 742.774852ms ago: executing program 4 (id=1799): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000200)={0x50, r1, 0x607, 0x0, 0x0, {0x2d, 0x0, 0x2d}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xf0}}]}, 0x50}}, 0x0) 729.765103ms ago: executing program 0 (id=1800): sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="77ba"], 0x48}}, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000006700)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000bc0)="f3a6", 0x2}, {&(0x7f0000001c80)='8', 0x1}, {&(0x7f0000001d40)="c7899a66531015", 0x7}, {&(0x7f0000001e00)="9aef", 0x2}, {&(0x7f0000001e80)="6df2ae36", 0x4}], 0x5}}], 0x1, 0x0) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000000085000000a000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24000001}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x9c, r3, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43ce}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24000041}, 0x5000) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, 0x0, 0x0) (async) unshare(0x22020600) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) preadv(r6, &(0x7f0000000000), 0x1000000000000359, 0x0, 0x0) 674.987017ms ago: executing program 2 (id=1801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110200000000000000383907000008000300", @ANYRES32=r2, @ANYBLOB="1c005a8018000080140005007e26"], 0x38}}, 0x0) 673.873886ms ago: executing program 3 (id=1802): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x8902, &(0x7f0000000040)) close(r1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000000000b4a54ccb0f599d441da4ec7cb0b42a79000000000001000000000000000000000010000000000000000004000007000000"], 0x28}}], 0x1, 0x0) 592.874133ms ago: executing program 4 (id=1803): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100001000000003cb7d051000000000a54000000060a0b440000000000000000020000002800048024000180090001006d6574610000000014000280080002400000001f0800014000007f50f1a7e76946000d0900010073797a3000000000090002007379fa3200f2ffff13000000110001000000000000"], 0x7c}}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000080)=0xff, 0x4) listen(r4, 0x20000005) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f00000001c0), 0x0, 0x40811) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c70a236c60294e710f24fac078bd0c2b2a5096b42e82ee34e22275e9378e4285001fb27614128328f51886dada13bd8113ea18036ff9e09ad93fbba47ce7f55a93688714cbdefd780c93a6e50696a115d2501edf9af91a88d8c0c297179127530f19caa4fc8689bb228697af528b8ef1176bcf59b7e25e1f7332c7328b854d7a18047b08f4b7598ed03f23dd7ac1fb99172c9d0f564c1a750dd6f2", @ANYRES16=r3, @ANYRES16], 0x160}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendto$inet6(r0, &(0x7f0000002380)="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", 0x1014, 0x400c881, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000033c0)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000bc0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000d80)=""/231, 0xe7, 0x0, 0x0}, &(0x7f0000000c00)=0x40) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r2) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="20003126d337000000000e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x40}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000007c0), &(0x7f0000000800)=0x4) 502.593583ms ago: executing program 2 (id=1804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000180)={'pimreg1\x00', @broadcast}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x6c, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000f001000010000000000060000000000000a20000000000a05000000ff0700000000010000000900010073797a300000000054000000090a010400000000000000000100000000000040000000000900020073797a31000000000900010073797a300000000008000540000000021800118014000100636f6e6e6c696d697400000004000280140000001000010000000000000000000000000a7a760efbd5c6b1"], 0x9c}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={0x1, &(0x7f00000004c0)="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"}, 0x20) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000340)=ANY=[@ANYRES8=r2], 0x6) r3 = socket(0x0, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x3b) sendto$packet(0xffffffffffffffff, &(0x7f0000000380)="aa", 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001680)=ANY=[@ANYBLOB="6400000015000100080000000000000020010000000000000000000000000001ac1414aa00"/64, @ANYRES32=0x0, @ANYRESOCT=r4, @ANYBLOB="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"], 0x64}}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=ANY=[@ANYRES16=r0, @ANYRES8=r8], 0x10}}, 0x1c000008) unshare(0x142f34135e9df539) pselect6(0x40, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0xfffffffffffffffc}, &(0x7f0000000000)={0x18, 0x4000, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRESDEC=r5, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5"], 0xb8}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000240)={0xb, 0x2001, 0x95a1, 0x1ff, 0xfffffffe}, 0x14) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20040005}, 0x4) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x2c, &(0x7f00000000c0), &(0x7f0000001dc0)=0xc) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) 501.745013ms ago: executing program 3 (id=1805): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r2, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f0000000080)=@ethtool_dump={0x3f}}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x20, 0x7800, 0x1, 0x29a, {{0xf, 0x4, 0x3, 0x0, 0x3c, 0x66, 0x0, 0x5, 0x7f, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0x56, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f}, {@multicast2, 0x10001}, {@remote, 0x7ff}]}, @timestamp_addr={0x44, 0xc, 0x26, 0x1, 0x5, [{@multicast2, 0xf96}]}]}}}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000050403eeffffffffffff02000000", @ANYBLOB="a2ecedb96bdfb333cdf029d2f6edebe526ca5e3d58640a5adf1226cb471068cca56664", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newqdisc={0x128, 0x24, 0x200, 0x0, 0x25dddbfb, {0x0, 0x0, 0x0, r5, {}, {0x3, 0xe}, {0x10, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @qdisc_kind_options=@q_cbq={{0x48}, {0xf4, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0xffffffb8, 0xf, 0x81, 0x110f49bc}}, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x9, 0x4, 0x6, 0xab}}, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x6, 0x9, 0x9, 0xfffffffc}}, @TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0x80006, 0x4, 0x2, 0x8}}, @TCA_CBS_PARMS={0x18, 0x1, {0x95, '\x00', 0x2, 0x7f, 0x166, 0x7}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x1, 0x0, 0xb, 0x200}}, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0x1, 0x8, 0x4, 0x1}}, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0xa017, 0x4d, 0x8, 0x20000d}}, @TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x401, 0x9, 0x1000}}, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x95, 0x0, 0xffffffff}}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x44}, 0xc000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800000010000104000000000000000000fcee00", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'], 0x28}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r12, @ANYBLOB="0100000000000000000003000000e80001802c0004001400010002000000ac14140000000000000000001400020002000a00ac1414bb00000040000000002c0002800800030000000000080001000000000008000300b200000008000100000000000800148b50310000100001006574683a62726964676530007c000280080001"], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 322.844425ms ago: executing program 1 (id=1806): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 211.834416ms ago: executing program 0 (id=1807): socket$pppl2tp(0x18, 0x1, 0x1) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3}}, 0x26) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) unshare(0x4000400) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x500, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x430, 0x238, 0x238, 0x430, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @remote}, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@empty, @mcast1, [], [], 'macvtap0\x00', 'gre0\x00'}, 0x0, 0x300, 0x360, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r4}}, @common=@mh={{0x28}, {"24ea"}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) getsockopt$bt_BT_SECURITY(r0, 0x111, 0x2, 0x0, 0x20000000) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200001400000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007090000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000c0818ea9be9676f155a2844b21e8c5826a7412dda2fff3d55a24fb37d550167632fdc07be9d6eef4ee471b929e0737aef619946dbf20075b768e93f3e48f", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004600020076000000bf9800000000000056080200000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 133.235411ms ago: executing program 1 (id=1808): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 132.256558ms ago: executing program 3 (id=1809): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010"], 0xec}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="18010000100001000000000000000000ac1e0001000000000000000000000000ac1414000000aafd2164172300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000002000000003c000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000028001a00fc010000000000000000000000000001ac14140e00000000000000000000000002000900"], 0x118}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x33, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000000)={0x1, 'bond_slave_1\x00', {}, 0xffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000af62000000006600000008000300", @ANYRES32=r11, @ANYBLOB="080026008f0900000800b70000000000"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r4, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xffffff01, 0x5}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x4040) r12 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x11, r12, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r13, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r14, 0x0) r15 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r15, 0x10d, 0x84, 0x0, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb180318000000000000965ecb5a"], &(0x7f0000001f80)=""/226, 0x1a, 0xe2, 0xf}, 0x20) 0s ago: executing program 0 (id=1810): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="c003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="a19f429495bba36c3d5a88539db0e566bc93ac859626415370e976fe9c3de2dc763302b8ba29c2d2395f1748a8c505d8a367e75481e0712ec26316db7e1a289274c78ada291b733f7f75fd4b2879e69f8bb0f8abf8db579c63d2667237b7886923dc0047d4e24fe230a043ac32abbfead7e283f07dc268a226964bd4103c5a692fdd71bbd4ea008068e919a8f7f834efdd8c70f6df741c516c268fe3"], 0x44}, 0x1, 0x0, 0x0, 0x95}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r4, 0x5421, &(0x7f00000001c0)=0x2f) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000100)=0x8, 0x4) close(r4) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f80)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000c94b6cba3a7089dbb21c993883afa5fa9463d3842d74eb01948377e8396b1adc1638a64cba29d1651ad6dbb4251460c762cb36484869d80ad9db120ed0190b9c18c16cf4f335008b8b02add3829cd730b9940e9c52b8cfa2fcf4023c46f4a4d50f1c912658de10004e000422da241d5d25c848140197102b519b3d275554963603600642dc8c4902bdbab88a8dd150ff641f96b715cd65c20bae5b3b84fa5f12", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000000000000141000000140017000000000000000069623a6c6f000000"], 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), r8) sendmsg$FOU_CMD_GET(r8, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r10, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x15}, 0x4048844) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14}]}]}, @IFLA_IFALIASn={0x4}]}, 0x40}}, 0x0) r11 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r11, &(0x7f0000000180)={0x11, 0x0, r12}, 0x14) sendmsg$unix(r11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x44000}, 0x20000001) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.925185][ T6267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.952211][ T62] hsr_slave_0: left promiscuous mode [ 117.968559][ T62] hsr_slave_1: left promiscuous mode [ 117.994637][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.009605][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.033293][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.057074][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.082757][ T62] veth1_macvtap: left promiscuous mode [ 118.091306][ T62] veth0_macvtap: left promiscuous mode [ 118.097224][ T62] veth1_vlan: left promiscuous mode [ 118.103153][ T62] veth0_vlan: left promiscuous mode [ 118.778909][ T62] team0 (unregistering): Port device team_slave_1 removed [ 118.822787][ T62] team0 (unregistering): Port device team_slave_0 removed [ 119.286425][ T6436] netlink: 830 bytes leftover after parsing attributes in process `syz.4.409'. [ 119.382392][ T6465] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 119.409313][ T6465] pim6reg0: linktype set to 270 [ 119.499093][ T53] Bluetooth: hci2: command tx timeout [ 119.619048][ T6470] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 119.638649][ T6267] hsr_slave_0: entered promiscuous mode [ 119.655308][ T6267] hsr_slave_1: entered promiscuous mode [ 119.681543][ T6267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.699386][ T6267] Cannot create hsr debugfs directory [ 120.047302][ T6491] netlink: 'syz.4.421': attribute type 10 has an invalid length. [ 120.257671][ T6500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.425'. [ 120.609681][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.432'. [ 120.618651][ T6521] block nbd0: not configured, cannot reconfigure [ 120.672124][ T6526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.434'. [ 120.735356][ T6519] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 121.067216][ T6267] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 121.081254][ T6545] netlink: 24 bytes leftover after parsing attributes in process `syz.4.439'. [ 121.085148][ T6267] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 121.123675][ T6267] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 121.144344][ T6267] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 121.208898][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.442'. [ 121.442070][ T6267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.473386][ T6267] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.489714][ T929] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.496990][ T929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.511592][ T6560] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm [ 121.528664][ T929] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.535959][ T929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.580550][ T53] Bluetooth: hci2: command tx timeout [ 121.820804][ T6575] netlink: 'syz.3.450': attribute type 7 has an invalid length. [ 121.828780][ T6575] netlink: 244 bytes leftover after parsing attributes in process `syz.3.450'. [ 121.914467][ T6567] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 122.041494][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 122.221527][ T6267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.407171][ T6267] veth0_vlan: entered promiscuous mode [ 122.432771][ T6597] netlink: 256 bytes leftover after parsing attributes in process `syz.0.454'. [ 122.445166][ T6267] veth1_vlan: entered promiscuous mode [ 122.621739][ T6607] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm [ 122.666505][ T6267] veth0_macvtap: entered promiscuous mode [ 122.688413][ T6267] veth1_macvtap: entered promiscuous mode [ 122.763113][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.794946][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.813193][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.826852][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.844645][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.856962][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.868330][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.881492][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.906013][ T6267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.936543][ T6612] netlink: 'syz.2.462': attribute type 10 has an invalid length. [ 122.960816][ T6612] geneve0: entered promiscuous mode [ 122.966796][ T6612] geneve0: entered allmulticast mode [ 123.003528][ T6612] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 123.034183][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.064382][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.082264][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.102448][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.149236][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.179585][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.199669][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.229073][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.266358][ T6267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.277452][ T6621] netlink: 'syz.2.465': attribute type 4 has an invalid length. [ 123.306325][ T6617] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 123.319201][ T6621] netlink: 17 bytes leftover after parsing attributes in process `syz.2.465'. [ 123.365192][ T6267] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.382182][ T6267] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.399544][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'. [ 123.420091][ T6267] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.428868][ T6267] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.857319][ T5327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.919270][ T5327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.047864][ T5327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.088090][ T5327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.576935][ T6674] netlink: 'syz.3.476': attribute type 11 has an invalid length. [ 124.701993][ T6679] netlink: 256 bytes leftover after parsing attributes in process `syz.2.475'. [ 124.773065][ T6683] netlink: 24 bytes leftover after parsing attributes in process `syz.3.479'. [ 126.521825][ T6754] netlink: 256 bytes leftover after parsing attributes in process `syz.1.499'. [ 126.841129][ T6768] openvswitch: netlink: Message has 4 unknown bytes. [ 126.856856][ T6766] netlink: 'syz.0.505': attribute type 1 has an invalid length. [ 126.867900][ T6766] netlink: 9328 bytes leftover after parsing attributes in process `syz.0.505'. [ 126.887872][ T6766] netlink: 'syz.0.505': attribute type 2 has an invalid length. [ 126.896242][ T6766] netlink: 'syz.0.505': attribute type 1 has an invalid length. [ 126.941330][ T6766] netlink: 'syz.0.505': attribute type 1 has an invalid length. [ 126.953611][ T6766] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.505'. [ 126.967807][ T6766] netlink: 'syz.0.505': attribute type 1 has an invalid length. [ 126.985781][ T6766] netlink: 'syz.0.505': attribute type 1 has an invalid length. [ 127.090458][ T6773] netlink: 32 bytes leftover after parsing attributes in process `syz.0.507'. [ 127.107995][ T6773] netlink: 28 bytes leftover after parsing attributes in process `syz.0.507'. [ 127.167160][ T6773] team0: Port device team_slave_0 removed [ 127.225231][ T6773] netlink: 112 bytes leftover after parsing attributes in process `syz.0.507'. [ 127.257513][ T6773] tipc: Started in network mode [ 127.269382][ T6773] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 127.303517][ T6773] tipc: Enabled bearer , priority 16 [ 127.372037][ T6785] dummy0: entered promiscuous mode [ 127.408213][ T6785] dummy0: left promiscuous mode [ 128.063867][ T6813] pim6reg1: entered promiscuous mode [ 128.082590][ T6813] pim6reg1: entered allmulticast mode [ 128.305799][ T6798] netlink: 'syz.4.517': attribute type 5 has an invalid length. [ 128.430765][ T6296] tipc: Node number set to 10922666 [ 128.445036][ T6822] netlink: 32 bytes leftover after parsing attributes in process `syz.1.524'. [ 128.528704][ T6822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.524'. [ 128.621132][ T6822] team0: Port device team_slave_0 removed [ 128.689254][ T6822] tipc: Started in network mode [ 128.709067][ T6822] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 128.732922][ T6822] tipc: Enabled bearer , priority 16 [ 128.750796][ T6832] netlink: 'syz.3.527': attribute type 1 has an invalid length. [ 129.147513][ T6858] Bluetooth: MGMT ver 1.22 [ 129.162310][ T6858] Bluetooth: hci3: unsupported parameter 64512 [ 129.181653][ T6858] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 129.512104][ T6873] xt_CT: You must specify a L4 protocol and not use inversions on it [ 129.729180][ T6300] tipc: Node number set to 10922666 [ 129.823667][ T6893] __nla_validate_parse: 6 callbacks suppressed [ 129.823690][ T6893] netlink: 256 bytes leftover after parsing attributes in process `syz.1.548'. [ 129.848122][ T6894] netlink: 'syz.4.550': attribute type 3 has an invalid length. [ 129.869036][ T6894] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.550'. [ 129.992361][ T6899] netlink: 24 bytes leftover after parsing attributes in process `syz.4.552'. [ 130.020675][ T6901] FAULT_INJECTION: forcing a failure. [ 130.020675][ T6901] name failslab, interval 1, probability 0, space 0, times 0 [ 130.033767][ T6901] CPU: 1 PID: 6901 Comm: syz.3.553 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 130.043792][ T6901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 130.053884][ T6901] Call Trace: [ 130.057198][ T6901] [ 130.058851][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802dca7000: rx timeout, send abort [ 130.060142][ T6901] dump_stack_lvl+0x241/0x360 [ 130.060189][ T6901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.060216][ T6901] ? __pfx__printk+0x10/0x10 [ 130.069529][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a7f1c00: rx timeout, send abort [ 130.073035][ T6901] ? ref_tracker_alloc+0x332/0x490 [ 130.078801][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802dca7000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 130.082828][ T6901] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 130.082876][ T6901] should_fail_ex+0x3b0/0x4e0 [ 130.082914][ T6901] ? skb_clone+0x20c/0x390 [ 130.091259][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a7f1c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 130.096182][ T6901] should_failslab+0x9/0x20 [ 130.143810][ T6901] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 130.149243][ T6901] skb_clone+0x20c/0x390 [ 130.153542][ T6901] __netlink_deliver_tap+0x3cc/0x7c0 [ 130.158890][ T6901] ? netlink_deliver_tap+0x2e/0x1b0 [ 130.164158][ T6901] netlink_deliver_tap+0x19d/0x1b0 [ 130.169320][ T6901] netlink_sendskb+0x68/0x140 [ 130.174039][ T6901] netlink_unicast+0x39d/0x990 [ 130.178837][ T6901] ? __asan_memcpy+0x40/0x70 [ 130.183580][ T6901] ? __pfx_netlink_unicast+0x10/0x10 [ 130.188913][ T6901] netlink_rcv_skb+0x262/0x430 [ 130.193738][ T6901] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 130.199241][ T6901] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 130.204590][ T6901] ? netlink_deliver_tap+0x2e/0x1b0 [ 130.209835][ T6901] netlink_unicast+0x7f0/0x990 [ 130.214649][ T6901] ? __pfx_netlink_unicast+0x10/0x10 [ 130.219978][ T6901] ? __virt_addr_valid+0x183/0x520 [ 130.225143][ T6901] ? __check_object_size+0x49c/0x900 [ 130.230476][ T6901] ? bpf_lsm_netlink_send+0x9/0x10 [ 130.235638][ T6901] netlink_sendmsg+0x8e4/0xcb0 [ 130.240462][ T6901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.245790][ T6901] ? __import_iovec+0x536/0x820 [ 130.250676][ T6901] ? aa_sock_msg_perm+0x91/0x160 [ 130.255670][ T6901] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 130.261002][ T6901] ? security_socket_sendmsg+0x87/0xb0 [ 130.266502][ T6901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.271830][ T6901] __sock_sendmsg+0x221/0x270 [ 130.276551][ T6901] ____sys_sendmsg+0x525/0x7d0 [ 130.281377][ T6901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.286731][ T6901] ? __might_fault+0xaa/0x120 [ 130.291466][ T6901] __sys_sendmmsg+0x3b2/0x740 [ 130.296204][ T6901] ? __pfx___sys_sendmmsg+0x10/0x10 [ 130.301495][ T6901] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 130.307434][ T6901] ? ksys_write+0x23e/0x2c0 [ 130.311981][ T6901] ? __pfx_lock_release+0x10/0x10 [ 130.317056][ T6901] ? vfs_write+0x7c4/0xc90 [ 130.321523][ T6901] ? __mutex_unlock_slowpath+0x21d/0x750 [ 130.327207][ T6901] ? __pfx_vfs_write+0x10/0x10 [ 130.332041][ T6901] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 130.338064][ T6901] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 130.344434][ T6901] ? do_syscall_64+0x100/0x230 [ 130.349245][ T6901] __x64_sys_sendmmsg+0xa0/0xb0 [ 130.354153][ T6901] do_syscall_64+0xf3/0x230 [ 130.358708][ T6901] ? clear_bhb_loop+0x35/0x90 [ 130.363518][ T6901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.369491][ T6901] RIP: 0033:0x7f8ac9975bd9 [ 130.374039][ T6901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.393695][ T6901] RSP: 002b:00007f8aca6b4048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 130.402171][ T6901] RAX: ffffffffffffffda RBX: 00007f8ac9b03f60 RCX: 00007f8ac9975bd9 [ 130.410187][ T6901] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005 [ 130.418201][ T6901] RBP: 00007f8aca6b40a0 R08: 0000000000000000 R09: 0000000000000000 [ 130.426213][ T6901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 130.434226][ T6901] R13: 000000000000000b R14: 00007f8ac9b03f60 R15: 00007ffc5d1b9448 [ 130.442259][ T6901] [ 130.784346][ T6926] tipc: Resetting bearer [ 130.807924][ T6926] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.816546][ T6926] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.964431][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.559'. [ 130.998867][ T6939] netlink: 'syz.0.563': attribute type 2 has an invalid length. [ 131.342338][ T6949] netlink: 44 bytes leftover after parsing attributes in process `syz.2.566'. [ 131.423360][ T6951] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.565'. [ 131.455824][ T6951] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 131.947363][ T6974] netlink: 80 bytes leftover after parsing attributes in process `syz.0.575'. [ 132.007077][ T6983] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20001 [ 132.035555][ T6975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.578'. [ 132.336916][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.583'. [ 132.382040][ T7000] FAULT_INJECTION: forcing a failure. [ 132.382040][ T7000] name failslab, interval 1, probability 0, space 0, times 0 [ 132.422570][ T7000] CPU: 0 PID: 7000 Comm: syz.4.583 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 132.432635][ T7000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 132.442734][ T7000] Call Trace: [ 132.446044][ T7000] [ 132.449007][ T7000] dump_stack_lvl+0x241/0x360 [ 132.453738][ T7000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.458994][ T7000] ? __pfx__printk+0x10/0x10 [ 132.463638][ T7000] ? ref_tracker_alloc+0x332/0x490 [ 132.468812][ T7000] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 132.474334][ T7000] should_fail_ex+0x3b0/0x4e0 [ 132.479073][ T7000] ? skb_clone+0x20c/0x390 [ 132.483566][ T7000] should_failslab+0x9/0x20 [ 132.488135][ T7000] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 132.493568][ T7000] skb_clone+0x20c/0x390 [ 132.497874][ T7000] __netlink_deliver_tap+0x3cc/0x7c0 [ 132.503223][ T7000] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.508469][ T7000] netlink_deliver_tap+0x19d/0x1b0 [ 132.513630][ T7000] netlink_sendskb+0x68/0x140 [ 132.518348][ T7000] netlink_unicast+0x39d/0x990 [ 132.523152][ T7000] ? __asan_memcpy+0x40/0x70 [ 132.527792][ T7000] ? __pfx_netlink_unicast+0x10/0x10 [ 132.533137][ T7000] netlink_rcv_skb+0x262/0x430 [ 132.537949][ T7000] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 132.543468][ T7000] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 132.548913][ T7000] ? apparmor_capable+0x138/0x1b0 [ 132.554082][ T7000] ? bpf_lsm_capable+0x9/0x10 [ 132.558896][ T7000] ? security_capable+0x90/0xb0 [ 132.563819][ T7000] nfnetlink_rcv+0x297/0x2a90 [ 132.568553][ T7000] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 132.574410][ T7000] ? __dev_queue_xmit+0x2da/0x3e90 [ 132.579574][ T7000] ? __dev_queue_xmit+0x1763/0x3e90 [ 132.584857][ T7000] ? kasan_save_track+0x51/0x80 [ 132.589762][ T7000] ? do_syscall_64+0xf3/0x230 [ 132.594480][ T7000] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 132.599788][ T7000] ? __dev_queue_xmit+0x2da/0x3e90 [ 132.604934][ T7000] ? __pfx___dev_queue_xmit+0x10/0x10 [ 132.610345][ T7000] ? ref_tracker_free+0x643/0x7e0 [ 132.615397][ T7000] ? __asan_memcpy+0x40/0x70 [ 132.619998][ T7000] ? __pfx_ref_tracker_free+0x10/0x10 [ 132.625403][ T7000] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.630616][ T7000] ? skb_clone+0x240/0x390 [ 132.635051][ T7000] ? __pfx_lock_release+0x10/0x10 [ 132.640089][ T7000] ? __netlink_deliver_tap+0x77e/0x7c0 [ 132.645573][ T7000] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.650786][ T7000] netlink_unicast+0x7f0/0x990 [ 132.655580][ T7000] ? __pfx_netlink_unicast+0x10/0x10 [ 132.660873][ T7000] ? __virt_addr_valid+0x183/0x520 [ 132.666007][ T7000] ? __check_object_size+0x49c/0x900 [ 132.671310][ T7000] ? bpf_lsm_netlink_send+0x9/0x10 [ 132.676445][ T7000] netlink_sendmsg+0x8e4/0xcb0 [ 132.681246][ T7000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.686554][ T7000] ? __import_iovec+0x536/0x820 [ 132.691415][ T7000] ? aa_sock_msg_perm+0x91/0x160 [ 132.696371][ T7000] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 132.701663][ T7000] ? security_socket_sendmsg+0x87/0xb0 [ 132.707141][ T7000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.712439][ T7000] __sock_sendmsg+0x221/0x270 [ 132.717134][ T7000] ____sys_sendmsg+0x525/0x7d0 [ 132.721927][ T7000] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.727242][ T7000] __sys_sendmsg+0x2b0/0x3a0 [ 132.731873][ T7000] ? __pfx___sys_sendmsg+0x10/0x10 [ 132.737165][ T7000] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 132.743522][ T7000] ? rcu_is_watching+0x15/0xb0 [ 132.748331][ T7000] ? trace_sys_enter+0x1f/0xd0 [ 132.753125][ T7000] do_syscall_64+0xf3/0x230 [ 132.757646][ T7000] ? clear_bhb_loop+0x35/0x90 [ 132.762345][ T7000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.768268][ T7000] RIP: 0033:0x7fd79d175bd9 [ 132.772714][ T7000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.792343][ T7000] RSP: 002b:00007fd79dec4048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.800773][ T7000] RAX: ffffffffffffffda RBX: 00007fd79d303f60 RCX: 00007fd79d175bd9 [ 132.808761][ T7000] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000006 [ 132.816754][ T7000] RBP: 00007fd79dec40a0 R08: 0000000000000000 R09: 0000000000000000 [ 132.824743][ T7000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.832723][ T7000] R13: 000000000000000b R14: 00007fd79d303f60 R15: 00007ffd1d91dad8 [ 132.840718][ T7000] [ 132.952730][ T7009] Bluetooth: MGMT ver 1.22 [ 133.010546][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.585'. [ 133.305813][ T7030] syz_tun: entered promiscuous mode [ 133.317457][ T7030] ip6gretap0: entered promiscuous mode [ 133.343491][ T1253] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.352334][ T1253] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.861800][ T7068] netlink: 'syz.0.603': attribute type 4 has an invalid length. [ 134.148079][ T7085] Cannot find add_set index 0 as target [ 135.085725][ T7129] netlink: 'syz.1.627': attribute type 4 has an invalid length. [ 135.666083][ T7155] __nla_validate_parse: 2 callbacks suppressed [ 135.666104][ T7155] netlink: 72 bytes leftover after parsing attributes in process `syz.4.635'. [ 135.836576][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.638'. [ 135.875075][ T7174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.897710][ T7169] netlink: 'syz.1.638': attribute type 15 has an invalid length. [ 135.950109][ T7159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.636'. [ 135.969120][ T7159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.636'. [ 135.995209][ T7159] macvlan0: entered promiscuous mode [ 136.017084][ T7159] batadv_slave_0: entered promiscuous mode [ 136.026887][ T7159] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 136.034827][ T7159] Cannot create hsr debugfs directory [ 136.043740][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.641'. [ 136.052868][ T7182] netlink: 'syz.0.640': attribute type 1 has an invalid length. [ 136.070055][ T7182] netlink: 9348 bytes leftover after parsing attributes in process `syz.0.640'. [ 136.120506][ T7182] netlink: 'syz.0.640': attribute type 1 has an invalid length. [ 136.146558][ T7182] netlink: 20 bytes leftover after parsing attributes in process `syz.0.640'. [ 136.173296][ T7181] batman_adv: batadv1: Adding interface: netdevsim0 [ 136.189845][ T7181] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.249184][ T7181] batman_adv: batadv1: Interface activated: netdevsim0 [ 136.442909][ T7192] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.645'. [ 136.473770][ T7194] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 136.488753][ T7192] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 136.696820][ T7210] netlink: 'syz.1.651': attribute type 1 has an invalid length. [ 136.754414][ T7213] netlink: 256 bytes leftover after parsing attributes in process `syz.2.652'. [ 136.896381][ T7220] netlink: 32 bytes leftover after parsing attributes in process `syz.1.657'. [ 136.931143][ T7220] tipc: Enabling of bearer rejected, already enabled [ 137.195562][ T7185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.362878][ T7243] syz.0.664[7243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.363071][ T7243] syz.0.664[7243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.755572][ T7266] netlink: 'syz.4.674': attribute type 15 has an invalid length. [ 137.878754][ T7272] netlink: 'syz.1.675': attribute type 10 has an invalid length. [ 137.912198][ T7272] netlink: 'syz.1.675': attribute type 10 has an invalid length. [ 137.938006][ T7272] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 137.980537][ T7272] batman_adv: batadv1: Removing interface: netdevsim0 [ 138.006997][ T7272] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 138.156071][ T7286] FAULT_INJECTION: forcing a failure. [ 138.156071][ T7286] name failslab, interval 1, probability 0, space 0, times 0 [ 138.169398][ T7286] CPU: 1 PID: 7286 Comm: syz.1.680 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 138.179446][ T7286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 138.189547][ T7286] Call Trace: [ 138.192858][ T7286] [ 138.195816][ T7286] dump_stack_lvl+0x241/0x360 [ 138.200522][ T7286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.205755][ T7286] ? __pfx__printk+0x10/0x10 [ 138.210377][ T7286] ? __pfx_lock_acquire+0x10/0x10 [ 138.215453][ T7286] ? aa_label_strn_parse+0xf60/0x1140 [ 138.220879][ T7286] ? netlbl_audit_start_common+0x213/0x3c0 [ 138.226731][ T7286] should_fail_ex+0x3b0/0x4e0 [ 138.231472][ T7286] ? netlbl_unlhsh_add+0x3bb/0x1370 [ 138.236720][ T7286] should_failslab+0x9/0x20 [ 138.241277][ T7286] kmalloc_trace_noprof+0x6c/0x2c0 [ 138.246439][ T7286] netlbl_unlhsh_add+0x3bb/0x1370 [ 138.251496][ T7286] ? __pfx___nla_validate_parse+0x10/0x10 [ 138.257267][ T7286] ? netlbl_unlhsh_add+0x12f/0x1370 [ 138.262528][ T7286] ? __pfx_netlbl_unlhsh_add+0x10/0x10 [ 138.268028][ T7286] ? apparmor_secctx_to_secid+0x97/0x100 [ 138.273717][ T7286] ? bpf_lsm_secctx_to_secid+0x9/0x10 [ 138.279133][ T7286] netlbl_unlabel_staticadddef+0x58f/0x750 [ 138.285014][ T7286] ? __pfx_netlbl_unlabel_staticadddef+0x10/0x10 [ 138.291378][ T7286] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 138.297757][ T7286] genl_rcv_msg+0xb14/0xec0 [ 138.302286][ T7286] ? mark_lock+0x9a/0x350 [ 138.306672][ T7286] ? __pfx_genl_rcv_msg+0x10/0x10 [ 138.311756][ T7286] ? __pfx_lock_acquire+0x10/0x10 [ 138.316826][ T7286] ? __pfx_netlbl_unlabel_staticadddef+0x10/0x10 [ 138.323194][ T7286] ? __pfx___might_resched+0x10/0x10 [ 138.328525][ T7286] netlink_rcv_skb+0x1e3/0x430 [ 138.333322][ T7286] ? __pfx_genl_rcv_msg+0x10/0x10 [ 138.338401][ T7286] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 138.343778][ T7286] genl_rcv+0x28/0x40 [ 138.347801][ T7286] netlink_unicast+0x7f0/0x990 [ 138.352602][ T7286] ? __pfx_netlink_unicast+0x10/0x10 [ 138.357947][ T7286] ? __virt_addr_valid+0x183/0x520 [ 138.363090][ T7286] ? __check_object_size+0x49c/0x900 [ 138.368435][ T7286] ? bpf_lsm_netlink_send+0x9/0x10 [ 138.373570][ T7286] netlink_sendmsg+0x8e4/0xcb0 [ 138.378378][ T7286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.383714][ T7286] ? __import_iovec+0x361/0x820 [ 138.388630][ T7286] ? aa_sock_msg_perm+0x91/0x160 [ 138.393593][ T7286] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 138.398889][ T7286] ? security_socket_sendmsg+0x87/0xb0 [ 138.404375][ T7286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.409693][ T7286] __sock_sendmsg+0x221/0x270 [ 138.414409][ T7286] ____sys_sendmsg+0x525/0x7d0 [ 138.419207][ T7286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.424539][ T7286] __sys_sendmsg+0x2b0/0x3a0 [ 138.429158][ T7286] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.434311][ T7286] ? vfs_write+0x7c4/0xc90 [ 138.438823][ T7286] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 138.445273][ T7286] ? do_syscall_64+0x100/0x230 [ 138.450087][ T7286] ? do_syscall_64+0xb6/0x230 [ 138.454802][ T7286] do_syscall_64+0xf3/0x230 [ 138.459344][ T7286] ? clear_bhb_loop+0x35/0x90 [ 138.464058][ T7286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.469971][ T7286] RIP: 0033:0x7f5e0f375bd9 [ 138.474413][ T7286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.494044][ T7286] RSP: 002b:00007f5e101b2048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.502507][ T7286] RAX: ffffffffffffffda RBX: 00007f5e0f503f60 RCX: 00007f5e0f375bd9 [ 138.510519][ T7286] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 138.518514][ T7286] RBP: 00007f5e101b20a0 R08: 0000000000000000 R09: 0000000000000000 [ 138.526504][ T7286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.534499][ T7286] R13: 000000000000000b R14: 00007f5e0f503f60 R15: 00007ffe27355768 [ 138.542577][ T7286] [ 138.859395][ T7291] netdevsim netdevsim1 netdevsim0: Unsupported IPsec algorithm [ 138.983719][ T7302] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 139.880548][ T7353] netlink: 'syz.1.704': attribute type 29 has an invalid length. [ 139.890753][ T7353] netlink: 'syz.1.704': attribute type 29 has an invalid length. [ 140.071587][ T7369] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 140.077783][ T7361] Bluetooth: MGMT ver 1.22 [ 140.460411][ T7381] netlink: 'syz.0.715': attribute type 1 has an invalid length. [ 140.478514][ T7381] netlink: 'syz.0.715': attribute type 2 has an invalid length. [ 140.614737][ T7390] netlink: 'syz.0.715': attribute type 3 has an invalid length. [ 140.819247][ T7398] netlink: 'syz.3.720': attribute type 29 has an invalid length. [ 140.827823][ T7398] netlink: 'syz.3.720': attribute type 29 has an invalid length. [ 140.865753][ T7400] Dead loop on virtual device ipvlan1, fix it urgently! [ 140.921566][ T7404] tipc: Enabled bearer , priority 0 [ 140.925858][ T7400] syz.4.719 (7400) used greatest stack depth: 8440 bytes left [ 140.991602][ T7408] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 141.215619][ T7417] veth1_macvtap: left promiscuous mode [ 141.472793][ T7432] Dead loop on virtual device ipvlan1, fix it urgently! [ 141.648857][ T7440] netlink: 'syz.0.734': attribute type 29 has an invalid length. [ 141.668120][ T7440] netlink: 'syz.0.734': attribute type 29 has an invalid length. [ 141.786533][ T7432] syz.4.731 (7432) used greatest stack depth: 7064 bytes left [ 141.962549][ T7452] __nla_validate_parse: 9 callbacks suppressed [ 141.962573][ T7452] netlink: 124 bytes leftover after parsing attributes in process `syz.4.738'. [ 142.094589][ T7458] netlink: 332 bytes leftover after parsing attributes in process `syz.2.741'. [ 142.121976][ T7458] netlink: 104 bytes leftover after parsing attributes in process `syz.2.741'. [ 142.146845][ T7458] netlink: 32 bytes leftover after parsing attributes in process `syz.2.741'. [ 142.279297][ T7463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.742'. [ 142.715718][ T7491] Dead loop on virtual device ipvlan1, fix it urgently! [ 142.925817][ T7501] netlink: 'syz.2.757': attribute type 10 has an invalid length. [ 142.937426][ T7501] geneve0: left allmulticast mode [ 142.996423][ T7498] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 143.413135][ T7514] x_tables: duplicate underflow at hook 3 [ 143.429750][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.762'. [ 143.521221][ T7517] netlink: 168 bytes leftover after parsing attributes in process `syz.0.764'. [ 143.522930][ T7519] FAULT_INJECTION: forcing a failure. [ 143.522930][ T7519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.558052][ T7519] CPU: 1 PID: 7519 Comm: syz.4.765 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 143.559093][ T7517] netlink: 60 bytes leftover after parsing attributes in process `syz.0.764'. [ 143.568079][ T7519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 143.568099][ T7519] Call Trace: [ 143.568111][ T7519] [ 143.568121][ T7519] dump_stack_lvl+0x241/0x360 [ 143.568156][ T7519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.568181][ T7519] ? __pfx__printk+0x10/0x10 [ 143.568211][ T7519] ? snprintf+0xda/0x120 [ 143.568243][ T7519] should_fail_ex+0x3b0/0x4e0 [ 143.568283][ T7519] _copy_to_user+0x2f/0xb0 [ 143.568311][ T7519] simple_read_from_buffer+0xca/0x150 [ 143.568345][ T7519] proc_fail_nth_read+0x1e9/0x250 [ 143.568374][ T7519] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.568402][ T7519] ? rw_verify_area+0x520/0x6b0 [ 143.568430][ T7519] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.568458][ T7519] vfs_read+0x204/0xbc0 [ 143.568485][ T7519] ? __pfx_lock_release+0x10/0x10 [ 143.568519][ T7519] ? __pfx_vfs_read+0x10/0x10 [ 143.568549][ T7519] ? __fget_files+0x29/0x470 [ 143.568583][ T7519] ? __fget_files+0x3f6/0x470 [ 143.568629][ T7519] ksys_read+0x1a0/0x2c0 [ 143.568664][ T7519] ? __pfx_ksys_read+0x10/0x10 [ 143.568693][ T7519] ? do_syscall_64+0x100/0x230 [ 143.568722][ T7519] ? do_syscall_64+0xb6/0x230 [ 143.568750][ T7519] do_syscall_64+0xf3/0x230 [ 143.568782][ T7519] ? clear_bhb_loop+0x35/0x90 [ 143.568813][ T7519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.568839][ T7519] RIP: 0033:0x7fd79d1746bc [ 143.568861][ T7519] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 143.568881][ T7519] RSP: 002b:00007fd79dec4040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 143.568908][ T7519] RAX: ffffffffffffffda RBX: 00007fd79d303f60 RCX: 00007fd79d1746bc [ 143.568926][ T7519] RDX: 000000000000000f RSI: 00007fd79dec40b0 RDI: 0000000000000003 [ 143.568941][ T7519] RBP: 00007fd79dec40a0 R08: 0000000000000000 R09: 0000000000000000 [ 143.568955][ T7519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.568969][ T7519] R13: 000000000000000b R14: 00007fd79d303f60 R15: 00007ffd1d91dad8 [ 143.569005][ T7519] [ 143.945855][ T7526] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 144.328268][ T7543] netlink: 224 bytes leftover after parsing attributes in process `syz.2.774'. [ 144.763723][ T7561] netlink: 256 bytes leftover after parsing attributes in process `syz.2.779'. [ 144.972584][ T7572] netlink: 'syz.3.785': attribute type 11 has an invalid length. [ 145.181433][ T7583] openvswitch: netlink: Key type 89 is out of range max 32 [ 145.358494][ T7589] validate_nla: 1 callbacks suppressed [ 145.358517][ T7589] netlink: 'syz.4.789': attribute type 4 has an invalid length. [ 146.193364][ T5101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.219395][ T5101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.230726][ T5101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.249249][ T5101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.264590][ T5101] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 146.272567][ T5101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.482342][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.661104][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.857717][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.946725][ T51] bond0: (slave netdevsim0): Releasing backup interface [ 146.984216][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.032982][ T7646] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 147.050797][ T7642] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.058603][ T7642] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.327879][ T7611] chnl_net:caif_netlink_parms(): no params data found [ 147.366354][ T51] bridge_slave_1: left allmulticast mode [ 147.373872][ T51] bridge_slave_1: left promiscuous mode [ 147.382378][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.393511][ T51] bridge_slave_0: left allmulticast mode [ 147.400156][ T51] bridge_slave_0: left promiscuous mode [ 147.409875][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.433095][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 147.689762][ T7674] __nla_validate_parse: 8 callbacks suppressed [ 147.689786][ T7674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.813'. [ 147.865152][ T51] tipc: Disabling bearer [ 148.112333][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.136691][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.158369][ T51] bond0 (unregistering): Released all slaves [ 148.300117][ T53] Bluetooth: hci2: command tx timeout [ 148.314648][ T51] tipc: Left network mode [ 148.551395][ T7692] netlink: 256 bytes leftover after parsing attributes in process `syz.3.817'. [ 148.739563][ T7611] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.750336][ T7611] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.757905][ T7611] bridge_slave_0: entered allmulticast mode [ 148.780093][ T7611] bridge_slave_0: entered promiscuous mode [ 148.831197][ T7611] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.838438][ T7611] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.870185][ T7611] bridge_slave_1: entered allmulticast mode [ 148.878003][ T7611] bridge_slave_1: entered promiscuous mode [ 148.942419][ T7699] "syz.2.820" (7699) uses obsolete ecb(arc4) skcipher [ 149.048808][ T7712] netlink: 7 bytes leftover after parsing attributes in process `syz.2.825'. [ 149.067585][ T7611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.096135][ T7611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.407113][ T51] hsr_slave_0: left promiscuous mode [ 149.428771][ T51] hsr_slave_1: left promiscuous mode [ 149.447043][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.466899][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.490998][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.516136][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.561204][ T51] veth1_macvtap: left promiscuous mode [ 149.574863][ T51] veth0_macvtap: left promiscuous mode [ 149.580813][ T51] veth1_vlan: left promiscuous mode [ 149.586238][ T51] veth0_vlan: left promiscuous mode [ 150.340728][ T51] team0 (unregistering): Port device team_slave_1 removed [ 150.379424][ T53] Bluetooth: hci2: command tx timeout [ 150.914004][ T7738] dummy0: entered promiscuous mode [ 150.970450][ T7738] dummy0: left promiscuous mode [ 151.020618][ T7743] netlink: 'syz.4.834': attribute type 1 has an invalid length. [ 151.041448][ T7743] netlink: 'syz.4.834': attribute type 4 has an invalid length. [ 151.071058][ T7743] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.834'. [ 151.093521][ T7611] team0: Port device team_slave_0 added [ 151.128804][ T7611] team0: Port device team_slave_1 added [ 151.236100][ T7759] netdevsim netdevsim2 netdevsim0: Unsupported IPsec algorithm [ 151.369614][ T7749] netlink: 256 bytes leftover after parsing attributes in process `syz.3.836'. [ 151.658041][ T7757] netlink: 'syz.4.839': attribute type 2 has an invalid length. [ 151.666139][ T7757] netlink: 20 bytes leftover after parsing attributes in process `syz.4.839'. [ 151.677530][ T7767] netlink: 16 bytes leftover after parsing attributes in process `syz.0.840'. [ 151.690030][ T7611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.697549][ T7611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.727150][ T7611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.744322][ T7611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.752461][ T7611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.783943][ T7611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.015260][ T7611] hsr_slave_0: entered promiscuous mode [ 152.036639][ T7611] hsr_slave_1: entered promiscuous mode [ 152.055421][ T7611] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.079189][ T7611] Cannot create hsr debugfs directory [ 152.085008][ T7781] netlink: 'syz.0.844': attribute type 4 has an invalid length. [ 152.136914][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.844'. [ 152.239188][ T7781] netlink: 25 bytes leftover after parsing attributes in process `syz.0.844'. [ 152.350650][ T7801] netdevsim netdevsim2 netdevsim0: Unsupported IPsec algorithm [ 152.509073][ T53] Bluetooth: hci2: command tx timeout [ 152.611571][ T7798] trusted_key: syz.3.852 sent an empty control message without MSG_MORE. [ 152.835698][ T7816] netlink: 256 bytes leftover after parsing attributes in process `syz.4.856'. [ 153.113528][ T7828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.863'. [ 153.242466][ T7611] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 153.264001][ T7611] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 153.282957][ T7611] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 153.302213][ T7611] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 153.616768][ T7611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.692856][ T7611] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.730209][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.737454][ T5099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.787542][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.794834][ T5099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.901008][ T7852] netlink: 830 bytes leftover after parsing attributes in process `syz.2.869'. [ 154.197657][ T7863] netlink: 'syz.3.874': attribute type 3 has an invalid length. [ 154.225920][ T7863] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.874'. [ 154.502666][ T7875] netlink: 256 bytes leftover after parsing attributes in process `syz.2.877'. [ 154.533601][ T7871] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 154.549499][ T53] Bluetooth: hci2: command tx timeout [ 154.594420][ T7611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.666753][ T7880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.899956][ T7611] veth0_vlan: entered promiscuous mode [ 154.946057][ T7611] veth1_vlan: entered promiscuous mode [ 155.035090][ T7611] veth0_macvtap: entered promiscuous mode [ 155.048742][ T7611] veth1_macvtap: entered promiscuous mode [ 155.109205][ T7611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.127743][ T7611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.146803][ T7611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.167668][ T7611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.178008][ T7611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.201077][ T7611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.229186][ T7611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.249081][ T7611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.291290][ T7611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.325670][ T7611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.357423][ T7611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.389399][ T7611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.410510][ T7611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.422107][ T7611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.433965][ T7611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.445895][ T7611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.458107][ T7880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.468269][ T7611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.485412][ T7611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.514981][ T7611] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.525251][ T7611] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.535411][ T7611] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.545143][ T7611] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.554724][ T7899] netdevsim netdevsim2 netdevsim0: Unsupported IPsec algorithm [ 155.892904][ T7902] batadv2: entered allmulticast mode [ 156.121822][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.144445][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.256759][ T1066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.282143][ T1066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.366631][ T7923] netlink: 256 bytes leftover after parsing attributes in process `syz.2.895'. [ 156.512016][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.900'. [ 156.657566][ T7938] netlink: 'syz.4.902': attribute type 22 has an invalid length. [ 156.825556][ T7948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.906'. [ 156.910737][ T7950] netlink: 16 bytes leftover after parsing attributes in process `syz.4.907'. [ 156.959371][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'. [ 157.773017][ T7992] FAULT_INJECTION: forcing a failure. [ 157.773017][ T7992] name failslab, interval 1, probability 0, space 0, times 0 [ 157.794216][ T7992] CPU: 1 PID: 7992 Comm: syz.4.921 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 157.804279][ T7992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 157.814376][ T7992] Call Trace: [ 157.817693][ T7992] [ 157.820661][ T7992] dump_stack_lvl+0x241/0x360 [ 157.825383][ T7992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.830623][ T7992] ? __pfx__printk+0x10/0x10 [ 157.835256][ T7992] ? ref_tracker_alloc+0x332/0x490 [ 157.840423][ T7992] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 157.845941][ T7992] should_fail_ex+0x3b0/0x4e0 [ 157.850673][ T7992] ? skb_clone+0x20c/0x390 [ 157.855137][ T7992] should_failslab+0x9/0x20 [ 157.859661][ T7992] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 157.865084][ T7992] skb_clone+0x20c/0x390 [ 157.869353][ T7992] __netlink_deliver_tap+0x3cc/0x7c0 [ 157.874658][ T7992] ? netlink_deliver_tap+0x2e/0x1b0 [ 157.879881][ T7992] netlink_deliver_tap+0x19d/0x1b0 [ 157.885031][ T7992] netlink_sendskb+0x68/0x140 [ 157.889732][ T7992] netlink_unicast+0x39d/0x990 [ 157.894510][ T7992] ? __asan_memcpy+0x40/0x70 [ 157.899135][ T7992] ? __pfx_netlink_unicast+0x10/0x10 [ 157.904459][ T7992] netlink_rcv_skb+0x262/0x430 [ 157.909243][ T7992] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 157.914717][ T7992] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 157.920023][ T7992] ? apparmor_capable+0x138/0x1b0 [ 157.925068][ T7992] ? bpf_lsm_capable+0x9/0x10 [ 157.929763][ T7992] ? security_capable+0x90/0xb0 [ 157.934671][ T7992] nfnetlink_rcv+0x297/0x2a90 [ 157.939396][ T7992] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 157.945176][ T7992] ? __dev_queue_xmit+0x2da/0x3e90 [ 157.950323][ T7992] ? __dev_queue_xmit+0x1763/0x3e90 [ 157.955589][ T7992] ? kasan_save_track+0x51/0x80 [ 157.960463][ T7992] ? do_syscall_64+0xf3/0x230 [ 157.965157][ T7992] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 157.970288][ T7992] ? __dev_queue_xmit+0x2da/0x3e90 [ 157.975421][ T7992] ? __pfx___dev_queue_xmit+0x10/0x10 [ 157.980850][ T7992] ? ref_tracker_free+0x643/0x7e0 [ 157.985893][ T7992] ? __asan_memcpy+0x40/0x70 [ 157.990494][ T7992] ? __pfx_ref_tracker_free+0x10/0x10 [ 157.995897][ T7992] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.001111][ T7992] ? skb_clone+0x240/0x390 [ 158.005548][ T7992] ? __pfx_lock_release+0x10/0x10 [ 158.010601][ T7992] ? __netlink_deliver_tap+0x77e/0x7c0 [ 158.016084][ T7992] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.021304][ T7992] netlink_unicast+0x7f0/0x990 [ 158.026089][ T7992] ? __pfx_netlink_unicast+0x10/0x10 [ 158.031381][ T7992] ? __virt_addr_valid+0x183/0x520 [ 158.036534][ T7992] ? __check_object_size+0x49c/0x900 [ 158.041839][ T7992] ? bpf_lsm_netlink_send+0x9/0x10 [ 158.046974][ T7992] netlink_sendmsg+0x8e4/0xcb0 [ 158.051773][ T7992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.057074][ T7992] ? __import_iovec+0x536/0x820 [ 158.061933][ T7992] ? aa_sock_msg_perm+0x91/0x160 [ 158.066891][ T7992] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 158.072187][ T7992] ? security_socket_sendmsg+0x87/0xb0 [ 158.077661][ T7992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.082979][ T7992] __sock_sendmsg+0x221/0x270 [ 158.087680][ T7992] ____sys_sendmsg+0x525/0x7d0 [ 158.092483][ T7992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.097801][ T7992] __sys_sendmsg+0x2b0/0x3a0 [ 158.102422][ T7992] ? __pfx___sys_sendmsg+0x10/0x10 [ 158.107588][ T7992] ? vfs_write+0x7c4/0xc90 [ 158.112070][ T7992] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 158.118433][ T7992] ? do_syscall_64+0x100/0x230 [ 158.123215][ T7992] ? do_syscall_64+0xb6/0x230 [ 158.127903][ T7992] do_syscall_64+0xf3/0x230 [ 158.133474][ T7992] ? clear_bhb_loop+0x35/0x90 [ 158.138168][ T7992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.144082][ T7992] RIP: 0033:0x7fd79d175bd9 [ 158.148615][ T7992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.168343][ T7992] RSP: 002b:00007fd79dec4048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.176791][ T7992] RAX: ffffffffffffffda RBX: 00007fd79d303f60 RCX: 00007fd79d175bd9 [ 158.184963][ T7992] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000006 [ 158.192992][ T7992] RBP: 00007fd79dec40a0 R08: 0000000000000000 R09: 0000000000000000 [ 158.200979][ T7992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.208977][ T7992] R13: 000000000000000b R14: 00007fd79d303f60 R15: 00007ffd1d91dad8 [ 158.217004][ T7992] [ 158.562000][ T8003] x_tables: duplicate entry at hook 3 [ 158.650819][ T8004] x_tables: duplicate entry at hook 3 [ 158.794805][ T8020] x_tables: duplicate underflow at hook 3 [ 158.990597][ T8032] __nla_validate_parse: 3 callbacks suppressed [ 158.990619][ T8032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.936'. [ 159.052339][ T8029] netlink: 'syz.1.933': attribute type 2 has an invalid length. [ 159.333245][ T8049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.516558][ T8060] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 159.660115][ T8070] netlink: 36 bytes leftover after parsing attributes in process `syz.1.946'. [ 159.703363][ T8057] netlink: 830 bytes leftover after parsing attributes in process `syz.2.945'. [ 159.721846][ T8070] netlink: 'syz.1.946': attribute type 8 has an invalid length. [ 159.811139][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'. [ 159.978490][ T8092] netlink: 188 bytes leftover after parsing attributes in process `syz.4.952'. [ 159.988601][ T8092] netlink: 'syz.4.952': attribute type 1 has an invalid length. [ 160.169261][ T8104] netlink: 256 bytes leftover after parsing attributes in process `syz.4.954'. [ 160.306743][ T8049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.548286][ T8120] netlink: 830 bytes leftover after parsing attributes in process `syz.0.961'. [ 160.569912][ T8119] sctp: [Deprecated]: syz.3.963 (pid 8119) Use of int in maxseg socket option. [ 160.569912][ T8119] Use struct sctp_assoc_value instead [ 160.598886][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.964'. [ 160.816362][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.968'. [ 160.832821][ T8136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.970'. [ 160.868671][ T8138] netlink: 'syz.1.969': attribute type 13 has an invalid length. [ 161.132920][ T8151] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm [ 161.304093][ T8160] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 161.496498][ T8170] netlink: 'syz.4.982': attribute type 4 has an invalid length. [ 161.517708][ T8169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.711804][ T8171] syz_tun: entered promiscuous mode [ 161.773902][ T8171] syz_tun: left promiscuous mode [ 161.926995][ T8193] netlink: 'syz.1.987': attribute type 13 has an invalid length. [ 162.010413][ T8200] SET target dimension over the limit! [ 162.176063][ T8166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.257029][ T8211] macvlan2: entered promiscuous mode [ 162.265881][ T8211] macvlan2: entered allmulticast mode [ 162.274649][ T8211] bond_slave_0: entered promiscuous mode [ 162.280869][ T8211] bond_slave_1: entered promiscuous mode [ 162.287374][ T8211] bond0: entered allmulticast mode [ 162.292730][ T8211] bond_slave_0: entered allmulticast mode [ 162.307077][ T8211] bond_slave_1: entered allmulticast mode [ 162.328783][ T8211] bond0: entered promiscuous mode [ 162.362566][ T8211] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 162.373537][ T8211] team0: Port device macvlan2 added [ 162.682838][ T8224] netlink: 'syz.1.995': attribute type 15 has an invalid length. [ 162.957918][ T8240] syz.4.999 (8240) used obsolete PPPIOCDETACH ioctl [ 162.965444][ T8230] ax25_connect(): syz.4.999 uses autobind, please contact jreuter@yaina.de [ 163.088488][ T8248] macvlan3: entered promiscuous mode [ 163.110348][ T8248] macvlan3: entered allmulticast mode [ 163.124128][ T8248] bond0: entered allmulticast mode [ 163.152933][ T8248] bond_slave_0: entered allmulticast mode [ 163.180453][ T8248] bond_slave_1: entered allmulticast mode [ 163.201054][ T8248] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 163.226184][ T8248] team0: Port device macvlan3 added [ 163.882630][ T8282] Dead loop on virtual device ipvlan1, fix it urgently! [ 163.915594][ T8285] team0: Port device team_slave_0 removed [ 163.977298][ T8286] macvlan3: entered promiscuous mode [ 163.999211][ T8286] macvlan3: entered allmulticast mode [ 164.051103][ T8286] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 164.081819][ T8286] team0: Port device macvlan3 added [ 164.106998][ T8289] __nla_validate_parse: 12 callbacks suppressed [ 164.107020][ T8289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1020'. [ 164.773414][ T8317] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 164.905692][ T8332] macvlan2: entered promiscuous mode [ 164.918314][ T8332] macvlan2: entered allmulticast mode [ 164.953182][ T8332] bond_slave_0: entered promiscuous mode [ 164.960959][ T8332] bond_slave_1: entered promiscuous mode [ 165.051853][ T8332] bond0: entered allmulticast mode [ 165.056473][ T8341] netlink: 'syz.3.1038': attribute type 1 has an invalid length. [ 165.069178][ T8332] bond_slave_0: entered allmulticast mode [ 165.085359][ T8332] bond_slave_1: entered allmulticast mode [ 165.099307][ T8332] bond0: entered promiscuous mode [ 165.128767][ T8332] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 165.154062][ T8332] team0: Port device macvlan2 added [ 165.348892][ T8354] FAULT_INJECTION: forcing a failure. [ 165.348892][ T8354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.425373][ T8354] CPU: 0 PID: 8354 Comm: syz.4.1040 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 165.435522][ T8354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 165.445621][ T8354] Call Trace: [ 165.448942][ T8354] [ 165.451907][ T8354] dump_stack_lvl+0x241/0x360 [ 165.456645][ T8354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.461892][ T8354] ? __pfx__printk+0x10/0x10 [ 165.466618][ T8354] ? __pfx_lock_release+0x10/0x10 [ 165.471700][ T8354] should_fail_ex+0x3b0/0x4e0 [ 165.476437][ T8354] _copy_from_iter+0x1f6/0x1960 [ 165.481334][ T8354] ? __virt_addr_valid+0x183/0x520 [ 165.486497][ T8354] ? __pfx_lock_release+0x10/0x10 [ 165.491573][ T8354] ? __alloc_skb+0x28f/0x440 [ 165.496216][ T8354] ? __pfx__copy_from_iter+0x10/0x10 [ 165.501558][ T8354] ? __virt_addr_valid+0x183/0x520 [ 165.506710][ T8354] ? __virt_addr_valid+0x183/0x520 [ 165.511839][ T8354] ? __virt_addr_valid+0x44e/0x520 [ 165.516965][ T8354] ? __check_object_size+0x49c/0x900 [ 165.522269][ T8354] netlink_sendmsg+0x73d/0xcb0 [ 165.527054][ T8354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.532356][ T8354] ? __import_iovec+0x536/0x820 [ 165.537222][ T8354] ? aa_sock_msg_perm+0x91/0x160 [ 165.542186][ T8354] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 165.547479][ T8354] ? security_socket_sendmsg+0x87/0xb0 [ 165.553306][ T8354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.558652][ T8354] __sock_sendmsg+0x221/0x270 [ 165.563434][ T8354] ____sys_sendmsg+0x525/0x7d0 [ 165.568226][ T8354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.573540][ T8354] __sys_sendmsg+0x2b0/0x3a0 [ 165.578150][ T8354] ? __pfx___sys_sendmsg+0x10/0x10 [ 165.583286][ T8354] ? vfs_write+0x7c4/0xc90 [ 165.587755][ T8354] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 165.594120][ T8354] ? do_syscall_64+0x100/0x230 [ 165.598938][ T8354] ? do_syscall_64+0xb6/0x230 [ 165.603627][ T8354] do_syscall_64+0xf3/0x230 [ 165.608139][ T8354] ? clear_bhb_loop+0x35/0x90 [ 165.612834][ T8354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.618740][ T8354] RIP: 0033:0x7fd79d175bd9 [ 165.623162][ T8354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.642785][ T8354] RSP: 002b:00007fd79dea3048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.651212][ T8354] RAX: ffffffffffffffda RBX: 00007fd79d304038 RCX: 00007fd79d175bd9 [ 165.659204][ T8354] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 165.667188][ T8354] RBP: 00007fd79dea30a0 R08: 0000000000000000 R09: 0000000000000000 [ 165.675165][ T8354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.683151][ T8354] R13: 000000000000006e R14: 00007fd79d304038 R15: 00007ffd1d91dad8 [ 165.691154][ T8354] [ 165.804911][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1045'. [ 165.882780][ T8367] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1046'. [ 165.963994][ T8370] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1048'. [ 165.975725][ T8375] netlink: 'syz.2.1049': attribute type 1 has an invalid length. [ 166.110535][ T8379] macvlan3: entered promiscuous mode [ 166.115933][ T8379] macvlan3: entered allmulticast mode [ 166.142439][ T8379] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 166.164509][ T8388] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 166.200970][ T8379] team0: Port device macvlan3 added [ 166.209748][ T8381] netlink: 'syz.0.1053': attribute type 3 has an invalid length. [ 166.218094][ T8381] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1053'. [ 166.232610][ T8385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1051'. [ 166.272373][ T8392] batman_adv: batadv1: Adding interface: netdevsim0 [ 166.281266][ T8392] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.321252][ T8392] batman_adv: batadv1: Interface activated: netdevsim0 [ 166.332766][ T8399] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1056'. [ 166.342114][ T8393] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1052'. [ 166.370590][ T8397] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1055'. [ 166.390822][ T8401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1057'. [ 166.536825][ T8411] netlink: 'syz.1.1061': attribute type 1 has an invalid length. [ 166.610620][ T8408] netlink: 'syz.0.1059': attribute type 10 has an invalid length. [ 166.618528][ T8408] team0: Device netdevsim0 is up. Set it down before adding it as a team port [ 166.935852][ T8428] macvlan4: entered promiscuous mode [ 166.954434][ T8428] macvlan4: entered allmulticast mode [ 167.002943][ T8428] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 167.023572][ T8433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.040681][ T8428] team0: Port device macvlan4 added [ 167.579255][ T8450] netlink: 'syz.0.1074': attribute type 1 has an invalid length. [ 167.975214][ T8470] macvlan5: entered promiscuous mode [ 167.986737][ T8470] macvlan5: entered allmulticast mode [ 168.003757][ T8470] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 168.018623][ T8470] team0: Port device macvlan5 added [ 168.166520][ T8474] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm [ 168.574442][ T8486] dccp_invalid_packet: invalid packet type [ 168.704081][ T8490] netlink: 'syz.2.1089': attribute type 1 has an invalid length. [ 168.978851][ T8509] macvlan6: entered promiscuous mode [ 168.984952][ T8509] macvlan6: entered allmulticast mode [ 168.993400][ T8509] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 169.002941][ T8509] team0: Port device macvlan6 added [ 169.047396][ T8513] netlink: 'syz.3.1099': attribute type 9 has an invalid length. [ 169.550312][ T8537] __nla_validate_parse: 8 callbacks suppressed [ 169.550347][ T8537] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1107'. [ 169.803790][ T8549] netlink: 'syz.0.1112': attribute type 10 has an invalid length. [ 169.843498][ T8547] macvlan3: entered promiscuous mode [ 169.868377][ T8547] macvlan3: entered allmulticast mode [ 169.886517][ T8547] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 169.889102][ T8555] xt_TPROXY: Can be used only with -p tcp or -p udp [ 169.906366][ T8547] team0: Port device macvlan3 added [ 169.927597][ T8555] xt_TPROXY: Can be used only with -p tcp or -p udp [ 169.951683][ T8551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1113'. [ 169.961883][ T8555] xt_TPROXY: Can be used only with -p tcp or -p udp [ 169.973117][ T8551] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 169.980511][ T8551] IPv6: NLM_F_CREATE should be set when creating new route [ 169.987839][ T8551] IPv6: NLM_F_CREATE should be set when creating new route [ 169.995146][ T8551] IPv6: NLM_F_CREATE should be set when creating new route [ 170.019337][ T8555] xt_TPROXY: Can be used only with -p tcp or -p udp [ 170.278689][ T8571] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 170.527604][ T8581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.580921][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1122'. [ 170.606391][ T8586] macvlan4: entered promiscuous mode [ 170.614564][ T8586] macvlan4: entered allmulticast mode [ 170.616511][ T8584] block nbd0: not configured, cannot reconfigure [ 170.628306][ T8586] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 170.657777][ T8586] team0: Port device macvlan4 added [ 170.767705][ T8586] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 170.793808][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1126'. [ 170.906811][ T8599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.973758][ T8604] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1129'. [ 170.999241][ T8604] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1129'. [ 171.076531][ T8604] team0: Port device team_slave_0 removed [ 171.124386][ T8604] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1129'. [ 171.136426][ T8604] tipc: Started in network mode [ 171.151856][ T8604] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 171.167195][ T8604] tipc: Enabled bearer , priority 16 [ 171.215102][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1132'. [ 171.340957][ T8623] netlink: 'syz.1.1136': attribute type 7 has an invalid length. [ 171.371533][ T8623] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1136'. [ 171.383261][ T8620] netlink: 'syz.4.1134': attribute type 2 has an invalid length. [ 171.472770][ T8581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.596476][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1138'. [ 171.612810][ T8627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.625945][ T8627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.628823][ T8638] FAULT_INJECTION: forcing a failure. [ 171.628823][ T8638] name failslab, interval 1, probability 0, space 0, times 0 [ 171.664823][ T8638] CPU: 1 PID: 8638 Comm: syz.0.1140 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 171.674970][ T8638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 171.685155][ T8638] Call Trace: [ 171.688470][ T8638] [ 171.691450][ T8638] dump_stack_lvl+0x241/0x360 [ 171.696213][ T8638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.701458][ T8638] ? __pfx__printk+0x10/0x10 [ 171.706187][ T8638] ? ref_tracker_alloc+0x332/0x490 [ 171.711356][ T8638] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 171.716877][ T8638] should_fail_ex+0x3b0/0x4e0 [ 171.721613][ T8638] ? skb_clone+0x20c/0x390 [ 171.726082][ T8638] should_failslab+0x9/0x20 [ 171.730631][ T8638] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 171.736034][ T8638] skb_clone+0x20c/0x390 [ 171.740322][ T8638] __netlink_deliver_tap+0x3cc/0x7c0 [ 171.745664][ T8638] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.750878][ T8638] netlink_deliver_tap+0x19d/0x1b0 [ 171.756009][ T8638] netlink_sendskb+0x68/0x140 [ 171.760697][ T8638] netlink_unicast+0x39d/0x990 [ 171.765466][ T8638] ? __asan_memcpy+0x40/0x70 [ 171.770072][ T8638] ? __pfx_netlink_unicast+0x10/0x10 [ 171.775397][ T8638] netlink_rcv_skb+0x262/0x430 [ 171.780191][ T8638] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 171.785684][ T8638] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 171.791008][ T8638] ? apparmor_capable+0x138/0x1b0 [ 171.796052][ T8638] ? bpf_lsm_capable+0x9/0x10 [ 171.800779][ T8638] ? security_capable+0x90/0xb0 [ 171.805675][ T8638] nfnetlink_rcv+0x297/0x2a90 [ 171.810395][ T8638] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 171.816166][ T8638] ? __dev_queue_xmit+0x2da/0x3e90 [ 171.821309][ T8638] ? __dev_queue_xmit+0x1763/0x3e90 [ 171.826617][ T8638] ? kasan_save_track+0x51/0x80 [ 171.831493][ T8638] ? do_syscall_64+0xf3/0x230 [ 171.836184][ T8638] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 171.841314][ T8638] ? __dev_queue_xmit+0x2da/0x3e90 [ 171.846444][ T8638] ? __pfx___dev_queue_xmit+0x10/0x10 [ 171.851847][ T8638] ? ref_tracker_free+0x643/0x7e0 [ 171.856894][ T8638] ? __asan_memcpy+0x40/0x70 [ 171.861493][ T8638] ? __pfx_ref_tracker_free+0x10/0x10 [ 171.866895][ T8638] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.872103][ T8638] ? skb_clone+0x240/0x390 [ 171.876538][ T8638] ? __pfx_lock_release+0x10/0x10 [ 171.881572][ T8638] ? __netlink_deliver_tap+0x77e/0x7c0 [ 171.887137][ T8638] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.892352][ T8638] netlink_unicast+0x7f0/0x990 [ 171.897153][ T8638] ? __pfx_netlink_unicast+0x10/0x10 [ 171.902464][ T8638] ? __virt_addr_valid+0x183/0x520 [ 171.907627][ T8638] ? __check_object_size+0x49c/0x900 [ 171.912933][ T8638] ? bpf_lsm_netlink_send+0x9/0x10 [ 171.918069][ T8638] netlink_sendmsg+0x8e4/0xcb0 [ 171.922865][ T8638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.928166][ T8638] ? __import_iovec+0x536/0x820 [ 171.933031][ T8638] ? aa_sock_msg_perm+0x91/0x160 [ 171.937994][ T8638] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 171.943292][ T8638] ? security_socket_sendmsg+0x87/0xb0 [ 171.948768][ T8638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.954064][ T8638] __sock_sendmsg+0x221/0x270 [ 171.958756][ T8638] ____sys_sendmsg+0x525/0x7d0 [ 171.963548][ T8638] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.968865][ T8638] __sys_sendmsg+0x2b0/0x3a0 [ 171.973479][ T8638] ? __pfx___sys_sendmsg+0x10/0x10 [ 171.978601][ T8638] ? vfs_write+0x7c4/0xc90 [ 171.983067][ T8638] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 171.989406][ T8638] ? do_syscall_64+0x100/0x230 [ 171.994184][ T8638] ? do_syscall_64+0xb6/0x230 [ 171.998869][ T8638] do_syscall_64+0xf3/0x230 [ 172.003389][ T8638] ? clear_bhb_loop+0x35/0x90 [ 172.008079][ T8638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.013984][ T8638] RIP: 0033:0x7f5638575bd9 [ 172.018407][ T8638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.038023][ T8638] RSP: 002b:00007f56392a2048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.046454][ T8638] RAX: ffffffffffffffda RBX: 00007f5638704038 RCX: 00007f5638575bd9 [ 172.054441][ T8638] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 172.062422][ T8638] RBP: 00007f56392a20a0 R08: 0000000000000000 R09: 0000000000000000 [ 172.070400][ T8638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 172.078397][ T8638] R13: 000000000000006e R14: 00007f5638704038 R15: 00007ffd98d039f8 [ 172.086392][ T8638] [ 172.115394][ T8627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.139621][ T8627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.240204][ T8632] vxcan2: entered promiscuous mode [ 172.250379][ T8632] vxcan2: entered allmulticast mode [ 172.279176][ T929] tipc: Node number set to 10922666 [ 172.450512][ T8653] tipc: Enabling of bearer rejected, already enabled [ 172.834998][ T8682] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 173.617848][ T8716] dvmrp0: entered allmulticast mode [ 173.843338][ T8725] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 174.216648][ T8747] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 174.290923][ T8749] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 174.336770][ T8749] batman_adv: batadv0: Adding interface: gretap2 [ 174.348241][ T8749] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.387208][ T8749] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 174.546753][ T8758] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 174.598061][ T8758] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 174.628763][ T8758] gretap1: entered promiscuous mode [ 174.648638][ T8758] gretap1: entered allmulticast mode [ 174.673482][ T8765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.873490][ T8771] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm [ 174.938582][ T8762] batadv0: entered promiscuous mode [ 174.945669][ T8762] batadv_slave_0: entered promiscuous mode [ 174.969424][ T8762] batadv_slave_0: left promiscuous mode [ 174.975463][ T8762] batadv0: left promiscuous mode [ 175.231805][ T8780] __nla_validate_parse: 9 callbacks suppressed [ 175.231829][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1193'. [ 175.247744][ T8783] netlink: 'syz.1.1194': attribute type 4 has an invalid length. [ 175.387362][ T8791] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1198'. [ 175.435446][ T8789] netlink: 4272 bytes leftover after parsing attributes in process `syz.1.1196'. [ 175.546541][ T8794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1199'. [ 175.695977][ T8805] ɶƣ0GCTw: entered promiscuous mode [ 175.721882][ T8765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.135101][ T8822] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 176.153671][ T8824] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1210'. [ 176.220795][ T8826] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 176.243127][ T8826] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 176.259709][ T8826] gretap1: entered promiscuous mode [ 176.268499][ T8826] gretap1: entered allmulticast mode [ 176.436511][ T8836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1215'. [ 176.475494][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1218'. [ 176.505827][ T8844] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1216'. [ 176.537141][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1218'. [ 176.791446][ T8857] FAULT_INJECTION: forcing a failure. [ 176.791446][ T8857] name failslab, interval 1, probability 0, space 0, times 0 [ 176.804228][ T8857] CPU: 0 PID: 8857 Comm: syz.0.1222 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 176.814308][ T8857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 176.814326][ T8857] Call Trace: [ 176.814337][ T8857] [ 176.814348][ T8857] dump_stack_lvl+0x241/0x360 [ 176.835529][ T8857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.840779][ T8857] ? __pfx__printk+0x10/0x10 [ 176.845397][ T8857] ? pskb_expand_head+0xc89/0x1390 [ 176.850539][ T8857] should_fail_ex+0x3b0/0x4e0 [ 176.855243][ T8857] ? skb_clone+0x20c/0x390 [ 176.859767][ T8857] should_failslab+0x9/0x20 [ 176.864292][ T8857] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 176.869687][ T8857] skb_clone+0x20c/0x390 [ 176.873951][ T8857] bpf_clone_redirect+0xab/0x3d0 [ 176.878920][ T8857] bpf_prog_b36a1f39e2fdd4f4+0x5e/0x63 [ 176.884431][ T8857] ? preempt_schedule+0xe1/0xf0 [ 176.889309][ T8857] ? preempt_schedule_common+0x84/0xd0 [ 176.894803][ T8857] ? preempt_schedule+0xe1/0xf0 [ 176.899690][ T8857] ? bpf_test_run+0x370/0xa90 [ 176.904425][ T8857] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 176.910168][ T8857] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 176.916549][ T8857] ? bpf_test_run+0x370/0xa90 [ 176.921249][ T8857] ? __pfx___cant_migrate+0x10/0x10 [ 176.926458][ T8857] ? bpf_test_run+0x370/0xa90 [ 176.931146][ T8857] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 176.936881][ T8857] ? bpf_test_timer_continue+0x11a/0x350 [ 176.942548][ T8857] bpf_test_run+0x4f0/0xa90 [ 176.947080][ T8857] ? do_syscall_64+0xf3/0x230 [ 176.951763][ T8857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.957845][ T8857] ? bpf_test_run+0x370/0xa90 [ 176.962592][ T8857] ? __pfx_bpf_test_run+0x10/0x10 [ 176.967765][ T8857] ? eth_type_trans+0x3d1/0x7a0 [ 176.972650][ T8857] ? __pfx_eth_type_trans+0x10/0x10 [ 176.977873][ T8857] ? bpf_prog_test_run_skb+0x7b4/0x13b0 [ 176.983520][ T8857] ? convert___skb_to_skb+0x41/0x620 [ 176.988836][ T8857] bpf_prog_test_run_skb+0xafa/0x13b0 [ 176.994220][ T8857] ? __pfx_lock_release+0x10/0x10 [ 176.999295][ T8857] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 177.005119][ T8857] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 177.010962][ T8857] bpf_prog_test_run+0x33a/0x3b0 [ 177.015915][ T8857] __sys_bpf+0x48d/0x810 [ 177.020184][ T8857] ? __pfx___sys_bpf+0x10/0x10 [ 177.024979][ T8857] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 177.030972][ T8857] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 177.037309][ T8857] ? do_syscall_64+0x100/0x230 [ 177.042094][ T8857] __x64_sys_bpf+0x7c/0x90 [ 177.046562][ T8857] do_syscall_64+0xf3/0x230 [ 177.051076][ T8857] ? clear_bhb_loop+0x35/0x90 [ 177.055788][ T8857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.061717][ T8857] RIP: 0033:0x7f5638575bd9 [ 177.066149][ T8857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.085763][ T8857] RSP: 002b:00007f56392c3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 177.094279][ T8857] RAX: ffffffffffffffda RBX: 00007f5638703f60 RCX: 00007f5638575bd9 [ 177.102286][ T8857] RDX: 0000000000000048 RSI: 0000000020000040 RDI: 000000000000000a [ 177.110266][ T8857] RBP: 00007f56392c30a0 R08: 0000000000000000 R09: 0000000000000000 [ 177.118244][ T8857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.126220][ T8857] R13: 000000000000000b R14: 00007f5638703f60 R15: 00007ffd98d039f8 [ 177.134214][ T8857] [ 177.367550][ T8880] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1230'. [ 177.463991][ T8881] netlink: 'syz.2.1229': attribute type 1 has an invalid length. [ 178.765018][ T8964] 8021q: adding VLAN 0 to HW filter on device ipvlan6 [ 178.963727][ T8969] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.972592][ T8969] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.291034][ T8988] netlink: 'syz.0.1266': attribute type 4 has an invalid length. [ 181.093396][ T9001] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 181.156639][ T9011] team0: entered promiscuous mode [ 181.171504][ T9011] team_slave_1: entered promiscuous mode [ 181.191427][ T9011] team0: left promiscuous mode [ 181.196314][ T9011] team_slave_1: left promiscuous mode [ 181.427593][ T9028] __nla_validate_parse: 12 callbacks suppressed [ 181.427618][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1283'. [ 181.446507][ T9029] netlink: 'syz.2.1282': attribute type 1 has an invalid length. [ 181.527595][ T9031] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1286'. [ 181.556425][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1286'. [ 181.571443][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1286'. [ 181.791336][ T9042] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 184.001160][ T9089] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1304'. [ 184.109245][ T9082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1301'. [ 184.387345][ T53] Bluetooth: hci0: command 0x0401 tx timeout [ 185.894886][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1324'. [ 186.546609][ T9141] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1319'. [ 186.557403][ T9147] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1323'. [ 186.625862][ T9152] team0: Device sit2 is of different type [ 186.713860][ T9158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1327'. [ 186.846507][ T9160] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1325'. [ 186.982170][ T9167] macvlan4: entered promiscuous mode [ 186.987548][ T9167] macvlan4: entered allmulticast mode [ 187.042723][ T9167] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 187.082356][ T9167] team0: Port device macvlan4 added [ 187.102539][ T9172] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 187.188401][ T9181] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1329'. [ 187.226072][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1329'. [ 187.262377][ T9183] netlink: 'syz.4.1334': attribute type 13 has an invalid length. [ 187.297387][ T9183] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1334'. [ 187.396691][ T9190] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1335'. [ 187.446033][ T9194] netlink: 'syz.4.1338': attribute type 4 has an invalid length. [ 187.908294][ T9203] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 189.597271][ T9219] 8021q: adding VLAN 0 to HW filter on device ipvlan7 [ 189.614894][ T9220] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1342'. [ 189.653390][ T9230] macvlan7: entered promiscuous mode [ 189.658780][ T9230] macvlan7: entered allmulticast mode [ 189.676987][ T9230] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 189.696766][ T9230] team0: Port device macvlan7 added [ 189.704143][ T9231] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 189.827928][ T9241] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1349'. [ 189.852907][ T9241] netlink: 'syz.3.1349': attribute type 1 has an invalid length. [ 190.049934][ T9255] bridge_slave_0: left allmulticast mode [ 190.063933][ T9255] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.104383][ T9255] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 190.731249][ T9278] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm [ 192.667028][ T9284] __nla_validate_parse: 6 callbacks suppressed [ 192.667048][ T9284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1362'. [ 192.683540][ T9284] netlink: 'syz.1.1362': attribute type 25 has an invalid length. [ 192.702461][ T9284] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.711789][ T9284] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.722825][ T9284] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.733186][ T9284] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.795961][ T9298] bridge_slave_0: left allmulticast mode [ 192.817840][ T9298] bridge_slave_0: left promiscuous mode [ 192.834876][ T9298] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.885656][ T9298] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 193.019356][ T9309] netlink: 'syz.3.1372': attribute type 49 has an invalid length. [ 193.355705][ T9325] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1375'. [ 193.693015][ T9339] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1381'. [ 194.786574][ T1253] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.793241][ T1253] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.411011][ T9351] syz_tun: entered promiscuous mode [ 195.449883][ T9351] ip6gretap0: entered promiscuous mode [ 195.654289][ T9367] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm [ 195.734697][ T9368] vlan2: entered promiscuous mode [ 195.743955][ T9368] ip6gretap0: entered promiscuous mode [ 195.766857][ T9368] ip6gretap0: left promiscuous mode [ 195.904855][ T9370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1393'. [ 196.129598][ T9385] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1396'. [ 197.036171][ T9399] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1402'. [ 197.054790][ T9399] netlink: 'syz.3.1402': attribute type 1 has an invalid length. [ 197.072608][ T9399] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1402'. [ 197.163397][ T9405] netlink: 5312 bytes leftover after parsing attributes in process `syz.3.1405'. [ 197.612597][ T9420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1407'. [ 199.078359][ T9431] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1412'. [ 199.228766][ T9440] IPv6: NLM_F_REPLACE set, but no existing node found! [ 199.451276][ T9452] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm [ 199.865311][ T9462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1424'. [ 201.310294][ T9467] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1425'. [ 201.791008][ T9494] netdevsim netdevsim2 netdevsim0: Unsupported IPsec algorithm [ 201.981976][ T5108] Bluetooth: hci3: command 0x0406 tx timeout [ 201.983242][ T4491] Bluetooth: hci0: command 0x0401 tx timeout [ 201.991662][ T5108] Bluetooth: hci1: command 0x0406 tx timeout [ 202.000375][ T5110] Bluetooth: hci4: command 0x0406 tx timeout [ 202.033122][ T9501] syz.0.1440[9501] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.034506][ T9501] syz.0.1440[9501] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.120850][ T9500] netlink: 'syz.4.1439': attribute type 15 has an invalid length. [ 202.457371][ T9520] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1447'. [ 202.555316][ T9525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1444'. [ 203.751947][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807b17e000: rx timeout, send abort [ 204.069372][ T9531] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1449'. [ 204.260375][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807b17e000: abort rx timeout. Force session deactivation [ 204.531524][ T9552] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm [ 204.566529][ T9555] pimreg12: entered allmulticast mode [ 204.601042][ T9557] FAULT_INJECTION: forcing a failure. [ 204.601042][ T9557] name failslab, interval 1, probability 0, space 0, times 0 [ 204.641490][ T9544] pimreg12: left allmulticast mode [ 204.656901][ T9557] CPU: 0 PID: 9557 Comm: syz.3.1455 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 204.667057][ T9557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 204.677149][ T9557] Call Trace: [ 204.680447][ T9557] [ 204.683389][ T9557] dump_stack_lvl+0x241/0x360 [ 204.688088][ T9557] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.693386][ T9557] ? __pfx__printk+0x10/0x10 [ 204.697993][ T9557] ? ref_tracker_alloc+0x332/0x490 [ 204.703132][ T9557] should_fail_ex+0x3b0/0x4e0 [ 204.707829][ T9557] ? skb_clone+0x20c/0x390 [ 204.712273][ T9557] should_failslab+0x9/0x20 [ 204.716798][ T9557] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 204.722197][ T9557] skb_clone+0x20c/0x390 [ 204.726489][ T9557] __netlink_deliver_tap+0x3cc/0x7c0 [ 204.731826][ T9557] ? netlink_deliver_tap+0x2e/0x1b0 [ 204.737137][ T9557] netlink_deliver_tap+0x19d/0x1b0 [ 204.742270][ T9557] netlink_unicast+0x7be/0x990 [ 204.747055][ T9557] ? __pfx_netlink_unicast+0x10/0x10 [ 204.752347][ T9557] ? __virt_addr_valid+0x183/0x520 [ 204.757497][ T9557] ? __check_object_size+0x49c/0x900 [ 204.762801][ T9557] ? bpf_lsm_netlink_send+0x9/0x10 [ 204.767933][ T9557] netlink_sendmsg+0x8e4/0xcb0 [ 204.772724][ T9557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.778023][ T9557] ? __import_iovec+0x536/0x820 [ 204.782884][ T9557] ? aa_sock_msg_perm+0x91/0x160 [ 204.787844][ T9557] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 204.793225][ T9557] ? security_socket_sendmsg+0x87/0xb0 [ 204.798873][ T9557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.804175][ T9557] __sock_sendmsg+0x221/0x270 [ 204.808869][ T9557] ____sys_sendmsg+0x525/0x7d0 [ 204.813670][ T9557] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.818993][ T9557] __sys_sendmsg+0x2b0/0x3a0 [ 204.823606][ T9557] ? __pfx___sys_sendmsg+0x10/0x10 [ 204.828770][ T9557] ? vfs_write+0x7c4/0xc90 [ 204.833237][ T9557] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 204.839581][ T9557] ? do_syscall_64+0x100/0x230 [ 204.844452][ T9557] ? do_syscall_64+0xb6/0x230 [ 204.849141][ T9557] do_syscall_64+0xf3/0x230 [ 204.853655][ T9557] ? clear_bhb_loop+0x35/0x90 [ 204.858365][ T9557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.864282][ T9557] RIP: 0033:0x7f8ac9975bd9 [ 204.868711][ T9557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.888331][ T9557] RSP: 002b:00007f8aca693048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.896772][ T9557] RAX: ffffffffffffffda RBX: 00007f8ac9b04038 RCX: 00007f8ac9975bd9 [ 204.904753][ T9557] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 204.913149][ T9557] RBP: 00007f8aca6930a0 R08: 0000000000000000 R09: 0000000000000000 [ 204.921153][ T9557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.929145][ T9557] R13: 000000000000006e R14: 00007f8ac9b04038 R15: 00007ffc5d1b9448 [ 204.937155][ T9557] [ 205.042599][ T9565] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1461'. [ 205.076485][ T9566] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1460'. [ 205.310157][ T9572] netlink: 'syz.3.1464': attribute type 10 has an invalid length. [ 205.339740][ T9572] team0: Device netdevsim0 is up. Set it down before adding it as a team port [ 205.369467][ T9570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1463'. [ 205.674953][ T9589] netlink: 'syz.3.1470': attribute type 9 has an invalid length. [ 205.758805][ T9596] Dead loop on virtual device ipvlan1, fix it urgently! [ 205.936377][ T9606] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1473'. [ 206.354251][ T9619] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1479'. [ 206.520082][ T9626] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm [ 206.665355][ T9631] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 206.713144][ T9632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1483'. [ 207.236482][ T9660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1494'. [ 207.458347][ T9670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1498'. [ 207.775965][ T9699] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1505'. [ 208.003569][ T9711] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1513'. [ 208.024923][ T9710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.229996][ T9724] netlink: 'syz.3.1517': attribute type 10 has an invalid length. [ 208.828785][ T9754] block nbd0: not configured, cannot reconfigure [ 208.902531][ T9756] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 208.930547][ T9756] gretap3: entered promiscuous mode [ 208.949996][ T9756] gretap3: entered allmulticast mode [ 209.083545][ T9764] netlink: 'syz.3.1530': attribute type 15 has an invalid length. [ 209.162156][ T9743] syz.2.1524: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 209.188731][ T9743] CPU: 0 PID: 9743 Comm: syz.2.1524 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 209.198890][ T9743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 209.208994][ T9743] Call Trace: [ 209.212319][ T9743] [ 209.215377][ T9743] dump_stack_lvl+0x241/0x360 [ 209.220115][ T9743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.225383][ T9743] ? __pfx__printk+0x10/0x10 [ 209.230035][ T9743] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 209.236517][ T9743] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 209.243098][ T9743] warn_alloc+0x278/0x410 [ 209.247565][ T9743] ? __pfx_warn_alloc+0x10/0x10 [ 209.252471][ T9743] ? xskq_create+0xb6/0x170 [ 209.257000][ T9743] ? __get_vm_area_node+0x23d/0x270 [ 209.262263][ T9743] __vmalloc_node_range_noprof+0x69f/0x1460 [ 209.268318][ T9743] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 209.274709][ T9743] ? __kasan_kmalloc+0x98/0xb0 [ 209.279552][ T9743] ? xskq_create+0x54/0x170 [ 209.284082][ T9743] vmalloc_user_noprof+0x74/0x80 [ 209.289056][ T9743] ? xskq_create+0xb6/0x170 [ 209.293584][ T9743] xskq_create+0xb6/0x170 [ 209.297933][ T9743] xsk_init_queue+0xa1/0x100 [ 209.302552][ T9743] xsk_setsockopt+0x598/0x950 [ 209.307258][ T9743] ? __pfx_xsk_setsockopt+0x10/0x10 [ 209.312482][ T9743] ? __pfx_lock_acquire+0x10/0x10 [ 209.317551][ T9743] ? aa_sock_opt_perm+0x79/0x120 [ 209.322513][ T9743] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 209.328089][ T9743] ? security_socket_setsockopt+0x87/0xb0 [ 209.333825][ T9743] ? __pfx_xsk_setsockopt+0x10/0x10 [ 209.339490][ T9743] do_sock_setsockopt+0x3af/0x720 [ 209.344545][ T9743] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 209.350114][ T9743] ? __fget_files+0x29/0x470 [ 209.354740][ T9743] ? __fget_files+0x3f6/0x470 [ 209.359446][ T9743] __sys_setsockopt+0x1ae/0x250 [ 209.364323][ T9743] __x64_sys_setsockopt+0xb5/0xd0 [ 209.369403][ T9743] do_syscall_64+0xf3/0x230 [ 209.373921][ T9743] ? clear_bhb_loop+0x35/0x90 [ 209.378620][ T9743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.384621][ T9743] RIP: 0033:0x7f7628775bd9 [ 209.389064][ T9743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.408784][ T9743] RSP: 002b:00007f76295f3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 209.417262][ T9743] RAX: ffffffffffffffda RBX: 00007f7628904038 RCX: 00007f7628775bd9 [ 209.425339][ T9743] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005 [ 209.433327][ T9743] RBP: 00007f76287e4e60 R08: 0000000000000004 R09: 0000000000000000 [ 209.441351][ T9743] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.449370][ T9743] R13: 000000000000000b R14: 00007f7628904038 R15: 00007ffeff554298 [ 209.457371][ T9743] [ 209.512920][ T9743] Mem-Info: [ 209.517010][ T9743] active_anon:6060 inactive_anon:0 isolated_anon:0 [ 209.517010][ T9743] active_file:1486 inactive_file:38191 isolated_file:0 [ 209.517010][ T9743] unevictable:768 dirty:190 writeback:0 [ 209.517010][ T9743] slab_reclaimable:8894 slab_unreclaimable:97968 [ 209.517010][ T9743] mapped:13198 shmem:1239 pagetables:626 [ 209.517010][ T9743] sec_pagetables:0 bounce:0 [ 209.517010][ T9743] kernel_misc_reclaimable:0 [ 209.517010][ T9743] free:1397844 free_pcp:743 free_cma:0 [ 209.565961][ T9717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.589548][ T9777] netlink: 'syz.0.1534': attribute type 7 has an invalid length. [ 209.595040][ T9743] Node 0 active_anon:24340kB inactive_anon:0kB active_file:5944kB inactive_file:152688kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52792kB dirty:760kB writeback:0kB shmem:3420kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10176kB pagetables:2604kB sec_pagetables:0kB all_unreclaimable? no [ 209.721912][ T9743] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 209.777781][ T9743] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 209.883761][ T9743] lowmem_reserve[]: 0 2571 2571 0 0 [ 209.889305][ T9743] Node 0 DMA32 free:1623952kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:24292kB inactive_anon:0kB active_file:5944kB inactive_file:152376kB unevictable:1536kB writepending:760kB present:3129332kB managed:2659868kB mlocked:0kB bounce:0kB free_pcp:2740kB local_pcp:1488kB free_cma:0kB [ 209.922971][ T9743] lowmem_reserve[]: 0 0 0 0 0 [ 209.965819][ T9743] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 210.009669][ T9792] netlink: del zone limit has 8 unknown bytes [ 210.013756][ T9743] lowmem_reserve[]: 0 0 0 0 0 [ 210.036308][ T9743] Node 1 Normal free:3951992kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 210.095360][ T9743] lowmem_reserve[]: 0 0 0 0 0 [ 210.100994][ T9743] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 210.129779][ T9743] Node 0 DMA32: 4*4kB (UME) 33*8kB (UE) 41*16kB (UME) 59*32kB (UME) 20*64kB (UME) 15*128kB (UME) 12*256kB (UME) 10*512kB (UM) 3*1024kB (ME) 3*2048kB (UME) 391*4096kB (M) = 1624968kB [ 210.181187][ T9798] FAULT_INJECTION: forcing a failure. [ 210.181187][ T9798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.218431][ T9798] CPU: 0 PID: 9798 Comm: syz.0.1543 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 210.228582][ T9798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 210.238729][ T9798] Call Trace: [ 210.242055][ T9798] [ 210.245038][ T9798] dump_stack_lvl+0x241/0x360 [ 210.249770][ T9798] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.255023][ T9798] ? __pfx__printk+0x10/0x10 [ 210.259669][ T9798] ? snprintf+0xda/0x120 [ 210.263965][ T9798] should_fail_ex+0x3b0/0x4e0 [ 210.268714][ T9798] _copy_to_user+0x2f/0xb0 [ 210.269469][ T9743] Node 0 [ 210.273160][ T9798] simple_read_from_buffer+0xca/0x150 [ 210.273201][ T9798] proc_fail_nth_read+0x1e9/0x250 [ 210.276469][ T9743] Normal: [ 210.281516][ T9798] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 210.281551][ T9798] ? rw_verify_area+0x520/0x6b0 [ 210.281578][ T9798] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 210.304566][ T9743] 0*4kB [ 210.305671][ T9798] vfs_read+0x204/0xbc0 [ 210.312786][ T9798] ? __pfx_lock_release+0x10/0x10 [ 210.314358][ T9743] 0*8kB [ 210.317844][ T9798] ? __pfx_vfs_read+0x10/0x10 [ 210.325435][ T9798] ? __fget_files+0x29/0x470 [ 210.330082][ T9798] ? __fget_files+0x3f6/0x470 [ 210.334912][ T9798] ksys_read+0x1a0/0x2c0 [ 210.336654][ T9743] 0*16kB [ 210.339206][ T9798] ? __pfx_ksys_read+0x10/0x10 [ 210.339241][ T9798] ? do_syscall_64+0x100/0x230 [ 210.339272][ T9798] ? do_syscall_64+0xb6/0x230 [ 210.355771][ T9743] 0*32kB [ 210.356428][ T9798] do_syscall_64+0xf3/0x230 [ 210.364031][ T9798] ? clear_bhb_loop+0x35/0x90 [ 210.368495][ T9743] 0*64kB [ 210.368743][ T9798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.377623][ T9798] RIP: 0033:0x7f56385746bc [ 210.382085][ T9798] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 210.391690][ T9743] 0*128kB [ 210.401716][ T9798] RSP: 002b:00007f56392a2040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 210.401752][ T9798] RAX: ffffffffffffffda RBX: 00007f5638704038 RCX: 00007f56385746bc [ 210.401771][ T9798] RDX: 000000000000000f RSI: 00007f56392a20b0 RDI: 0000000000000005 [ 210.401787][ T9798] RBP: 00007f56392a20a0 R08: 0000000000000000 R09: 0000000000000000 [ 210.401802][ T9798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 210.401817][ T9798] R13: 000000000000006e R14: 00007f5638704038 R15: 00007ffd98d039f8 [ 210.401855][ T9798] [ 210.439272][ T9743] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 210.499057][ T9743] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 6*16kB (UM) 6*32kB (UM) 11*64kB (U) 1*128kB (U) 7*256kB (UM) 3*512kB (UM) 5*1024kB (U) 1*2048kB (U) 962*4096kB (M) = 3951992kB [ 210.536811][ T9743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 210.563679][ T9743] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 210.589026][ T9743] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 210.636821][ T9743] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 210.657655][ T9815] __nla_validate_parse: 7 callbacks suppressed [ 210.657679][ T9815] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1548'. [ 210.668054][ T9743] 40935 total pagecache pages [ 210.704474][ T9743] 0 pages in swap cache [ 210.708795][ T9743] Free swap = 124996kB [ 210.732160][ T9743] Total swap = 124996kB [ 210.742079][ T9743] 2097051 pages RAM [ 210.759311][ T9743] 0 pages HighMem/MovableOnly [ 210.764158][ T9743] 400874 pages reserved [ 210.785448][ T9743] 0 pages cma reserved [ 210.968635][ T9824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1552'. [ 211.045012][ T9832] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1556'. [ 211.101689][ T9835] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1555'. [ 211.446350][ T9842] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1561'. [ 211.574417][ T9843] netdevsim netdevsim1 netdevsim0: Unsupported IPsec algorithm [ 211.644848][ T9849] macvlan4: entered promiscuous mode [ 211.670363][ T9849] macvlan4: entered allmulticast mode [ 211.703703][ T9849] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 211.733580][ T9849] team0: Port device macvlan4 added [ 211.863584][ T9849] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 212.055775][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1570'. [ 212.570629][ T9889] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm [ 212.652270][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1577'. [ 212.822443][ T9893] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1579'. [ 213.080160][ T9905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1586'. [ 213.369984][ T9920] netlink: 'syz.4.1589': attribute type 1 has an invalid length. [ 213.412614][ T9920] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1589'. [ 213.471725][ T9922] FAULT_INJECTION: forcing a failure. [ 213.471725][ T9922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.492278][ T9922] CPU: 0 PID: 9922 Comm: syz.3.1591 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 213.502419][ T9922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 213.512507][ T9922] Call Trace: [ 213.515819][ T9922] [ 213.518776][ T9922] dump_stack_lvl+0x241/0x360 [ 213.523494][ T9922] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.528741][ T9922] ? __pfx__printk+0x10/0x10 [ 213.533599][ T9922] ? __pfx_lock_release+0x10/0x10 [ 213.538676][ T9922] ? __lock_acquire+0x1346/0x1fd0 [ 213.543837][ T9922] should_fail_ex+0x3b0/0x4e0 [ 213.548618][ T9922] _copy_from_user+0x2f/0xe0 [ 213.553266][ T9922] do_ipv6_setsockopt+0x2f1/0x3630 [ 213.558441][ T9922] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 213.562994][ T9923] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm [ 213.564038][ T9922] ? __pfx___might_resched+0x10/0x10 [ 213.577002][ T9922] ? __lock_acquire+0x1346/0x1fd0 [ 213.582092][ T9922] ? aa_sk_perm+0x967/0xab0 [ 213.586635][ T9922] ? __pfx_aa_sk_perm+0x10/0x10 [ 213.591784][ T9922] ? __pfx_lock_acquire+0x10/0x10 [ 213.596847][ T9922] ipv6_setsockopt+0x5c/0x1a0 [ 213.601551][ T9922] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 213.607469][ T9922] do_sock_setsockopt+0x3af/0x720 [ 213.612523][ T9922] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 213.618111][ T9922] ? __fget_files+0x29/0x470 [ 213.622743][ T9922] ? __fget_files+0x3f6/0x470 [ 213.627579][ T9922] __sys_setsockopt+0x1ae/0x250 [ 213.632478][ T9922] __x64_sys_setsockopt+0xb5/0xd0 [ 213.637552][ T9922] do_syscall_64+0xf3/0x230 [ 213.642107][ T9922] ? clear_bhb_loop+0x35/0x90 [ 213.646840][ T9922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.652787][ T9922] RIP: 0033:0x7f8ac9975bd9 [ 213.657235][ T9922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.676874][ T9922] RSP: 002b:00007f8aca6b4048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 213.685350][ T9922] RAX: ffffffffffffffda RBX: 00007f8ac9b03f60 RCX: 00007f8ac9975bd9 [ 213.693360][ T9922] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 213.701355][ T9922] RBP: 00007f8aca6b40a0 R08: 0000000000000608 R09: 0000000000000000 [ 213.709393][ T9922] R10: 0000000020003300 R11: 0000000000000246 R12: 0000000000000001 [ 213.717500][ T9922] R13: 000000000000000b R14: 00007f8ac9b03f60 R15: 00007ffc5d1b9448 [ 213.725511][ T9922] [ 213.903192][ T9930] xt_socket: unknown flags 0x8 [ 214.054876][ T9940] netlink: 'syz.2.1596': attribute type 11 has an invalid length. [ 214.151582][ T9948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.487692][ T9962] netlink: 'syz.0.1606': attribute type 21 has an invalid length. [ 214.501713][ T9967] xt_CT: You must specify a L4 protocol and not use inversions on it [ 214.939816][ T9948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.265384][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 215.758639][T10030] netlink: 'syz.2.1627': attribute type 3 has an invalid length. [ 215.762064][T10031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.475230][T10031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.150072][T10086] __nla_validate_parse: 5 callbacks suppressed [ 217.150097][T10086] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1647'. [ 217.333519][T10097] netlink: 'syz.0.1653': attribute type 11 has an invalid length. [ 217.403105][T10099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.486171][T10104] ipvlan4: entered promiscuous mode [ 217.491707][T10104] ipvlan4: entered allmulticast mode [ 217.497340][T10104] bridge0: entered allmulticast mode [ 217.725515][T10110] ipvlan4: entered promiscuous mode [ 217.744123][T10110] ipvlan4: entered allmulticast mode [ 217.758214][T10110] ip6gretap0: entered allmulticast mode [ 217.886050][T10122] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1660'. [ 217.976643][T10124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1661'. [ 218.269890][T10129] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm [ 218.332351][T10099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.979552][T10146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1668'. [ 219.013296][T10153] netlink: 816 bytes leftover after parsing attributes in process `syz.1.1670'. [ 219.292672][T10160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.669390][T10169] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm [ 219.911368][T10181] netlink: 'syz.4.1680': attribute type 7 has an invalid length. [ 219.919534][T10181] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1680'. [ 219.970246][T10182] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1678'. [ 220.004657][T10185] netlink: 'syz.2.1682': attribute type 1 has an invalid length. [ 220.005183][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1681'. [ 220.168090][T10193] macvlan3: entered promiscuous mode [ 220.180821][T10193] macvlan3: entered allmulticast mode [ 220.186920][T10193] bond_slave_0: entered promiscuous mode [ 220.193124][T10193] bond_slave_1: entered promiscuous mode [ 220.212934][T10193] bond0: entered allmulticast mode [ 220.227787][T10193] bond_slave_0: entered allmulticast mode [ 220.248042][T10193] bond_slave_1: entered allmulticast mode [ 220.266107][T10193] geneve0: entered allmulticast mode [ 220.272573][T10160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.288794][T10193] bond0: entered promiscuous mode [ 220.323180][T10193] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 220.342496][T10193] team0: Port device macvlan3 added [ 220.363951][T10198] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 220.467882][T10204] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1689'. [ 220.841718][T10218] netdevsim netdevsim1 netdevsim0: Unsupported IPsec algorithm [ 221.274970][T10238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.542848][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 221.560461][ T5095] bridge0: port 3(syz_tun) entered disabled state [ 221.562421][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 221.581544][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 221.593684][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 221.624118][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 221.631842][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.634824][ T5095] syz_tun (unregistering): left allmulticast mode [ 221.677224][ T5095] syz_tun (unregistering): left promiscuous mode [ 221.688345][ T5095] bridge0: port 3(syz_tun) entered disabled state [ 221.763542][T10245] macvlan5: entered promiscuous mode [ 221.779062][T10245] macvlan5: entered allmulticast mode [ 221.791764][T10245] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 221.811472][T10245] team0: Port device macvlan5 added [ 221.834238][T10248] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 222.468474][T10238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.625726][T10246] chnl_net:caif_netlink_parms(): no params data found [ 222.754995][T10282] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1709'. [ 222.769059][T10280] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 222.784787][T10278] dummy0: entered promiscuous mode [ 222.792819][T10278] dummy0: left promiscuous mode [ 223.080782][T10289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1709'. [ 223.203978][T10312] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1711'. [ 223.221407][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1709'. [ 223.245099][T10282] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1709'. [ 223.262204][T10282] tipc: Enabling of bearer rejected, already enabled [ 223.278310][T10246] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.300483][T10246] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.307803][T10246] bridge_slave_0: entered allmulticast mode [ 223.333265][T10246] bridge_slave_0: entered promiscuous mode [ 223.350860][T10246] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.358056][T10246] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.390674][T10246] bridge_slave_1: entered allmulticast mode [ 223.398869][T10246] bridge_slave_1: entered promiscuous mode [ 223.435914][T10314] macvlan6: entered promiscuous mode [ 223.444819][T10314] macvlan6: entered allmulticast mode [ 223.463269][T10314] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 223.481788][T10314] team0: Port device macvlan6 added [ 223.498486][T10317] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 223.640578][T10246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.645598][T10333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.686650][T10246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.740359][ T5112] Bluetooth: hci3: command tx timeout [ 223.758548][T10340] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1720'. [ 223.893603][T10246] team0: Port device team_slave_0 added [ 223.993204][T10347] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1723'. [ 224.019569][T10350] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1724'. [ 224.028869][T10350] netlink: 'syz.1.1724': attribute type 1 has an invalid length. [ 224.033881][T10246] team0: Port device team_slave_1 added [ 224.167391][T10353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1723'. [ 224.232728][T10246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.240127][T10246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.269342][T10246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.282378][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1723'. [ 224.300271][T10352] tipc: Started in network mode [ 224.305195][T10352] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 224.329218][T10352] tipc: Enabled bearer , priority 16 [ 224.348686][T10246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.358052][T10246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.388015][T10246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.465986][T10332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.466891][T10363] macvlan7: entered promiscuous mode [ 224.514393][T10363] macvlan7: entered allmulticast mode [ 224.524054][T10363] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 224.534864][T10363] team0: Port device macvlan7 added [ 224.553172][T10366] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 224.622088][T10370] netlink: 'syz.1.1730': attribute type 1 has an invalid length. [ 224.714377][T10246] hsr_slave_0: entered promiscuous mode [ 224.725819][T10246] hsr_slave_1: entered promiscuous mode [ 224.739129][T10246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.746927][T10246] Cannot create hsr debugfs directory [ 224.827174][T10383] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 225.081541][T10246] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.196393][T10385] 8021q: adding VLAN 0 to HW filter on device ipvlan6 [ 225.300755][T10246] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.449383][ T929] tipc: Node number set to 10922666 [ 225.452179][T10246] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.509572][T10396] tipc: Enabling of bearer rejected, already enabled [ 225.571425][T10401] macvlan8: entered promiscuous mode [ 225.585830][T10401] macvlan8: entered allmulticast mode [ 225.594306][T10401] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 225.631032][T10401] team0: Port device macvlan8 added [ 225.700633][T10246] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.727456][T10404] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 225.820637][ T5112] Bluetooth: hci3: command tx timeout [ 225.976919][T10418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.133600][T10246] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 226.178508][T10246] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 226.244405][T10246] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 226.291330][T10246] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 226.467059][T10432] tipc: Started in network mode [ 226.475018][T10432] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 226.489384][T10432] tipc: Enabled bearer , priority 16 [ 226.593957][T10246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.635179][T10246] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.651058][ T6295] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.658311][ T6295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.698869][ T6296] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.706112][ T6296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.966187][T10418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.125727][T10448] macvlan9: entered promiscuous mode [ 227.142768][T10448] macvlan9: entered allmulticast mode [ 227.167480][T10448] 8021q: adding VLAN 0 to HW filter on device macvlan9 [ 227.194605][T10448] team0: Port device macvlan9 added [ 227.267895][T10449] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 227.318343][T10246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.398362][T10456] 8021q: adding VLAN 0 to HW filter on device ipvlan8 [ 227.598711][T10246] veth0_vlan: entered promiscuous mode [ 227.620769][ T6296] tipc: Node number set to 10922666 [ 227.629915][T10246] veth1_vlan: entered promiscuous mode [ 227.717340][T10465] tipc: Enabling of bearer rejected, already enabled [ 227.746498][T10246] veth0_macvtap: entered promiscuous mode [ 227.812495][T10468] __nla_validate_parse: 16 callbacks suppressed [ 227.812520][T10468] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1765'. [ 227.835009][T10469] tipc: Resetting bearer [ 227.846921][T10469] wlan1: mtu greater than device maximum [ 227.866517][T10469] team0: Device wlan1 failed to change mtu [ 227.874197][T10246] veth1_macvtap: entered promiscuous mode [ 227.899200][ T5112] Bluetooth: hci3: command tx timeout [ 227.940070][T10246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.951007][T10246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.961269][T10246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.971827][T10246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.986161][T10246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.997370][T10246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.007289][T10246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.018234][T10246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.036690][T10246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.067142][T10246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.078323][T10246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.091012][T10246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.101840][T10246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.112366][T10246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.125593][T10246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.137759][T10246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.159406][T10246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.171981][T10246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.187451][T10480] macvlan5: entered promiscuous mode [ 228.193899][T10480] macvlan5: entered allmulticast mode [ 228.204634][T10480] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 228.215804][T10480] team0: Port device macvlan5 added [ 228.236323][T10473] netlink: 'syz.2.1767': attribute type 10 has an invalid length. [ 228.250300][T10473] tipc: Resetting bearer [ 228.256379][T10473] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.263650][T10473] bridge0: port 2(bridge_slave_1) entered listening state [ 228.276022][T10473] bridge0: entered promiscuous mode [ 228.282482][T10473] bridge0: entered allmulticast mode [ 228.288721][T10473] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 228.298797][T10481] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 228.335829][T10246] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.355407][T10246] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.387109][T10246] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.396664][T10246] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.417147][T10485] macvlan8: entered promiscuous mode [ 228.437744][T10485] macvlan8: entered allmulticast mode [ 228.464808][T10485] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 228.502798][T10485] team0: Port device macvlan8 added [ 228.529779][T10487] 8021q: adding VLAN 0 to HW filter on device ipvlan9 [ 228.543402][T10488] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 228.729810][T10496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1775'. [ 228.837777][T10501] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1777'. [ 228.838964][T10504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1778'. [ 228.879957][T10498] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1776'. [ 228.924970][T10290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.970124][T10290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.072348][T10293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.109404][T10293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.135342][T10513] macvlan6: entered promiscuous mode [ 229.149784][T10513] macvlan6: entered allmulticast mode [ 229.157292][T10513] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 229.212359][T10513] team0: Port device macvlan6 added [ 229.248663][T10518] macvlan9: entered promiscuous mode [ 229.270192][T10518] macvlan9: entered allmulticast mode [ 229.283778][T10518] 8021q: adding VLAN 0 to HW filter on device macvlan9 [ 229.293289][T10518] team0: Port device macvlan9 added [ 229.307997][T10513] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 229.435929][T10518] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 229.656542][T10539] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1790'. [ 229.694089][T10536] 8021q: adding VLAN 0 to HW filter on device macvlan10 [ 229.700623][T10541] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1791'. [ 229.770508][T10541] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1791'. [ 229.791640][T10541] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1791'. [ 229.801198][T10541] tipc: Started in network mode [ 229.806115][T10541] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 229.813965][T10541] tipc: Enabled bearer , priority 16 [ 229.979289][ T5112] Bluetooth: hci3: command tx timeout [ 230.024089][T10557] macvlan10: entered promiscuous mode [ 230.029997][T10557] macvlan10: entered allmulticast mode [ 230.040961][T10557] 8021q: adding VLAN 0 to HW filter on device macvlan10 [ 230.071023][T10557] team0: Port device macvlan10 added [ 230.148702][T10559] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 230.157769][T10557] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 230.446868][T10573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1803'. [ 230.679112][T10583] pim6reg: tun_chr_ioctl cmd 35108 [ 230.725298][T10577] tipc: Enabling of bearer rejected, already enabled [ 230.899332][T10591] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 230.929210][ T5151] tipc: Node number set to 10922666 [ 230.933212][ T51] ================================================================== [ 230.942579][ T51] BUG: KASAN: slab-use-after-free in l2tp_tunnel_del_work+0xe5/0x330 [ 230.950774][ T51] Read of size 8 at addr ffff8880785fc8b8 by task kworker/u8:3/51 [ 230.958618][ T51] [ 230.960972][ T51] CPU: 1 PID: 51 Comm: kworker/u8:3 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 230.971160][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 230.981253][ T51] Workqueue: l2tp l2tp_tunnel_del_work [ 230.986758][ T51] Call Trace: [ 230.990065][ T51] [ 230.993032][ T51] dump_stack_lvl+0x241/0x360 [ 230.997765][ T51] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.003100][ T51] ? __pfx__printk+0x10/0x10 [ 231.007728][ T51] ? _printk+0xd5/0x120 [ 231.011938][ T51] ? __virt_addr_valid+0x183/0x520 [ 231.017354][ T51] ? __virt_addr_valid+0x183/0x520 [ 231.022539][ T51] print_report+0x169/0x550 [ 231.027092][ T51] ? __virt_addr_valid+0x183/0x520 [ 231.032263][ T51] ? __virt_addr_valid+0x183/0x520 [ 231.037431][ T51] ? __virt_addr_valid+0x44e/0x520 [ 231.042580][ T51] ? __phys_addr+0xba/0x170 [ 231.047236][ T51] ? l2tp_tunnel_del_work+0xe5/0x330 [ 231.052652][ T51] kasan_report+0x143/0x180 [ 231.057208][ T51] ? l2tp_tunnel_del_work+0xe5/0x330 [ 231.062540][ T51] l2tp_tunnel_del_work+0xe5/0x330 [ 231.068598][ T51] ? process_scheduled_works+0x945/0x1830 [ 231.074445][ T51] process_scheduled_works+0xa2c/0x1830 [ 231.080074][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 231.086112][ T51] ? assign_work+0x364/0x3d0 [ 231.090760][ T51] worker_thread+0x86d/0xd50 [ 231.095413][ T51] ? __kthread_parkme+0x169/0x1d0 [ 231.100486][ T51] ? __pfx_worker_thread+0x10/0x10 [ 231.105646][ T51] kthread+0x2f0/0x390 [ 231.109758][ T51] ? __pfx_worker_thread+0x10/0x10 [ 231.114906][ T51] ? __pfx_kthread+0x10/0x10 [ 231.119536][ T51] ret_from_fork+0x4b/0x80 [ 231.123990][ T51] ? __pfx_kthread+0x10/0x10 [ 231.128645][ T51] ret_from_fork_asm+0x1a/0x30 [ 231.133460][ T51] [ 231.136520][ T51] [ 231.138862][ T51] Allocated by task 10589: [ 231.143296][ T51] kasan_save_track+0x3f/0x80 [ 231.148011][ T51] __kasan_kmalloc+0x98/0xb0 [ 231.152624][ T51] __kmalloc_noprof+0x1f9/0x400 [ 231.157525][ T51] l2tp_session_create+0x3b/0xc20 [ 231.162570][ T51] pppol2tp_connect+0xca3/0x17a0 [ 231.167538][ T51] __sys_connect+0x2df/0x310 [ 231.172238][ T51] __x64_sys_connect+0x7a/0x90 [ 231.177030][ T51] do_syscall_64+0xf3/0x230 [ 231.181556][ T51] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.187473][ T51] [ 231.189808][ T51] Freed by task 51: [ 231.193633][ T51] kasan_save_track+0x3f/0x80 [ 231.198341][ T51] kasan_save_free_info+0x40/0x50 [ 231.203405][ T51] poison_slab_object+0xe0/0x150 [ 231.208363][ T51] __kasan_slab_free+0x37/0x60 [ 231.213151][ T51] kfree+0x149/0x360 [ 231.217085][ T51] __sk_destruct+0x58/0x5f0 [ 231.221627][ T51] rcu_core+0xafd/0x1830 [ 231.225894][ T51] handle_softirqs+0x2c4/0x970 [ 231.230672][ T51] __irq_exit_rcu+0xf4/0x1c0 [ 231.235304][ T51] irq_exit_rcu+0x9/0x30 [ 231.239564][ T51] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 231.245230][ T51] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 231.251233][ T51] [ 231.253573][ T51] Last potentially related work creation: [ 231.259309][ T51] kasan_save_stack+0x3f/0x60 [ 231.264119][ T51] __kasan_record_aux_stack+0xac/0xc0 [ 231.269546][ T51] call_rcu+0x167/0xa70 [ 231.273732][ T51] pppol2tp_release+0x24b/0x350 [ 231.278608][ T51] sock_close+0xbc/0x240 [ 231.282858][ T51] __fput+0x24a/0x8a0 [ 231.286840][ T51] task_work_run+0x24f/0x310 [ 231.291447][ T51] do_exit+0xa27/0x27e0 [ 231.295631][ T51] do_group_exit+0x207/0x2c0 [ 231.300234][ T51] get_signal+0x16a1/0x1740 [ 231.304851][ T51] arch_do_signal_or_restart+0x96/0x860 [ 231.310421][ T51] syscall_exit_to_user_mode+0xc9/0x360 [ 231.315988][ T51] do_syscall_64+0x100/0x230 [ 231.320594][ T51] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.326522][ T51] [ 231.328873][ T51] The buggy address belongs to the object at ffff8880785fc800 [ 231.328873][ T51] which belongs to the cache kmalloc-1k of size 1024 [ 231.342998][ T51] The buggy address is located 184 bytes inside of [ 231.342998][ T51] freed 1024-byte region [ffff8880785fc800, ffff8880785fcc00) [ 231.356927][ T51] [ 231.359291][ T51] The buggy address belongs to the physical page: [ 231.365722][ T51] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x785f8 [ 231.374573][ T51] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 231.383076][ T51] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 231.390635][ T51] page_type: 0xffffefff(slab) [ 231.395345][ T51] raw: 00fff00000000040 ffff888015041dc0 ffffea0000915e00 dead000000000002 [ 231.404068][ T51] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 231.412677][ T51] head: 00fff00000000040 ffff888015041dc0 ffffea0000915e00 dead000000000002 [ 231.421381][ T51] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 231.430087][ T51] head: 00fff00000000003 ffffea0001e17e01 ffffffffffffffff 0000000000000000 [ 231.438779][ T51] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 231.447484][ T51] page dumped because: kasan: bad access detected [ 231.454012][ T51] page_owner tracks the page as allocated [ 231.459749][ T51] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6733, tgid 6731 (syz.3.495), ts 126172310950, free_ts 125464276961 [ 231.482366][ T51] post_alloc_hook+0x1f3/0x230 [ 231.487154][ T51] get_page_from_freelist+0x2e4c/0x2f10 [ 231.492757][ T51] __alloc_pages_noprof+0x256/0x6c0 [ 231.498003][ T51] alloc_slab_page+0x5f/0x120 [ 231.502713][ T51] allocate_slab+0x5a/0x2f0 [ 231.507274][ T51] ___slab_alloc+0xcd1/0x14b0 [ 231.511970][ T51] __slab_alloc+0x58/0xa0 [ 231.516321][ T51] kmalloc_node_track_caller_noprof+0x281/0x440 [ 231.522585][ T51] kmalloc_reserve+0x111/0x2a0 [ 231.527377][ T51] __alloc_skb+0x1f3/0x440 [ 231.531819][ T51] inet6_rt_notify+0xdf/0x290 [ 231.536512][ T51] fib6_add+0x1e33/0x4430 [ 231.540864][ T51] ip6_ins_rt+0x106/0x170 [ 231.545215][ T51] __ipv6_ifa_notify+0x5d2/0x1230 [ 231.550245][ T51] add_addr+0x2dd/0x490 [ 231.554451][ T51] add_v4_addrs+0x8dd/0x1160 [ 231.559047][ T51] page last free pid 5092 tgid 5092 stack trace: [ 231.565469][ T51] free_unref_page+0xd22/0xea0 [ 231.570452][ T51] __put_partials+0xeb/0x130 [ 231.575073][ T51] put_cpu_partial+0x17c/0x250 [ 231.579866][ T51] __slab_free+0x2ea/0x3d0 [ 231.584301][ T51] qlist_free_all+0x9e/0x140 [ 231.588902][ T51] kasan_quarantine_reduce+0x14f/0x170 [ 231.594390][ T51] __kasan_slab_alloc+0x23/0x80 [ 231.599295][ T51] kmem_cache_alloc_noprof+0x135/0x2a0 [ 231.604797][ T51] getname_flags+0xbd/0x4f0 [ 231.609320][ T51] __x64_sys_unlink+0x3c/0x60 [ 231.614037][ T51] do_syscall_64+0xf3/0x230 [ 231.618578][ T51] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.624478][ T51] [ 231.626809][ T51] Memory state around the buggy address: [ 231.632458][ T51] ffff8880785fc780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 231.640574][ T51] ffff8880785fc800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 231.648651][ T51] >ffff8880785fc880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 231.656971][ T51] ^ [ 231.662954][ T51] ffff8880785fc900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 231.671035][ T51] ffff8880785fc980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 231.679124][ T51] ================================================================== [ 231.687434][ T51] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 231.694746][ T51] CPU: 1 PID: 51 Comm: kworker/u8:3 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 231.704834][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 231.715006][ T51] Workqueue: l2tp l2tp_tunnel_del_work [ 231.720525][ T51] Call Trace: [ 231.723833][ T51] [ 231.726796][ T51] dump_stack_lvl+0x241/0x360 [ 231.731521][ T51] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.736753][ T51] ? __pfx__printk+0x10/0x10 [ 231.741368][ T51] ? vscnprintf+0x5d/0x90 [ 231.745727][ T51] panic+0x349/0x860 [ 231.749650][ T51] ? check_panic_on_warn+0x21/0xb0 [ 231.754797][ T51] ? __pfx_panic+0x10/0x10 [ 231.759233][ T51] ? mark_lock+0x9a/0x350 [ 231.763618][ T51] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 231.769538][ T51] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 231.775458][ T51] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 231.781798][ T51] ? print_report+0x502/0x550 [ 231.786598][ T51] check_panic_on_warn+0x86/0xb0 [ 231.791587][ T51] ? l2tp_tunnel_del_work+0xe5/0x330 [ 231.796912][ T51] end_report+0x77/0x160 [ 231.801180][ T51] kasan_report+0x154/0x180 [ 231.805714][ T51] ? l2tp_tunnel_del_work+0xe5/0x330 [ 231.811029][ T51] l2tp_tunnel_del_work+0xe5/0x330 [ 231.816183][ T51] ? process_scheduled_works+0x945/0x1830 [ 231.821943][ T51] process_scheduled_works+0xa2c/0x1830 [ 231.827538][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 231.833546][ T51] ? assign_work+0x364/0x3d0 [ 231.838173][ T51] worker_thread+0x86d/0xd50 [ 231.842808][ T51] ? __kthread_parkme+0x169/0x1d0 [ 231.847841][ T51] ? __pfx_worker_thread+0x10/0x10 [ 231.852973][ T51] kthread+0x2f0/0x390 [ 231.857070][ T51] ? __pfx_worker_thread+0x10/0x10 [ 231.862191][ T51] ? __pfx_kthread+0x10/0x10 [ 231.866794][ T51] ret_from_fork+0x4b/0x80 [ 231.871272][ T51] ? __pfx_kthread+0x10/0x10 [ 231.875902][ T51] ret_from_fork_asm+0x1a/0x30 [ 231.880699][ T51] [ 231.884121][ T51] Kernel Offset: disabled [ 231.888455][ T51] Rebooting in 86400 seconds..