last executing test programs: 15.603957331s ago: executing program 0 (id=2398): bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xf, &(0x7f00000003c0)=@raw=[@snprintf, @cb_func={0x18, 0x9, 0x4, 0x0, 0x1}], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xcf}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x800}]}}]}, 0x44}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f00000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) 15.386089465s ago: executing program 0 (id=2399): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x40, r1, 0x3e8c4ddb697c9f8f, 0x0, 0x0, {0x4}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x40}}, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0xd, 0x0, 0x2}}, 0x0, 0xfc5f, 0x0, 0x3, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) 15.065008216s ago: executing program 0 (id=2406): socket$netlink(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x20, 0x44840}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) (fail_nth: 4) 14.657316332s ago: executing program 0 (id=2408): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x88a8, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4044001, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) 14.568027127s ago: executing program 0 (id=2409): bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xf, &(0x7f00000003c0)=@raw=[@snprintf, @cb_func={0x18, 0x9, 0x4, 0x0, 0x1}], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xcf}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x800}]}}]}, 0x44}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f00000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) 14.216922678s ago: executing program 0 (id=2415): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x4000}], 0x1, &(0x7f00000000c0)={r1, r2+10000000}, &(0x7f0000000100), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x8, 0x4) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000160001fbdbdf250a0000000000000000", @ANYRES32=0x0, @ANYBLOB="140006"], 0x2c}}, 0x4004) shutdown(r0, 0x2) 12.155347328s ago: executing program 2 (id=2436): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc0000001a00000427bd7000fcdbdf25ac1414bb000000000000000000000000000000000000000000000000000000004e237fff4e2200000a00802011000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff010000000000000000000000000001000004d52b000000ac1414bb0000000000000000000000001f000000000000000000000000000000ffffffffffffffff0200000000000000ff0f0000000000000100008000000000000200000000000008000000000000000000000000000080be06000000000000e3000000000000007e020000000000000900000000000000000000002dbd7000000000000a00010904000000000000000c00", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xfc}}, 0x0) r1 = getgid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000c00)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x30, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x30}], 0x1}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c40)={0x0, 0x0, 0x0}, &(0x7f0000000c80)=0xc) r7 = socket(0x2, 0x80805, 0x0) listen(r7, 0x5) sendmmsg(r7, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)='}', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[{0x10, 0x84, 0x5}], 0x10}}], 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001280), &(0x7f00000012c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001300)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000001400)=0xe8) getgid() r8 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001600)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000001700)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001740)={0x0}, &(0x7f0000001780)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000017c0)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f00000018c0)=0xe8) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(r12, &(0x7f0000000140)=ANY=[@ANYBLOB="1d000300", @ANYRES16=r14, @ANYBLOB="02cc251e384e"], 0xd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="b0d57082c390100be69ebb988be4eb1264666eb39aeb", 0x16}, {&(0x7f0000000080)="6dc6036a4e8159ada99a7140215506c8b2be05425774baf29ccb04f67143d4565e3577dc27ace1f97e3e60d1fec714229989868aa91b4c804426", 0x3a}, {&(0x7f0000000100)="3c078de670ec59", 0x7}, {&(0x7f0000000180)="42a49f984b3df8ea475150dc0545347a434761f58ba1de0f25e900dfc58e725e17b9e4", 0x23}], 0x4, &(0x7f0000000940)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x128, 0x40010}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a80)="be927bd04f70f1a028abbaaea474094632545a824d5efe71a1c4a2e1b86f7635ec7b7d309e6bd626e2a155e55c24ee4de4307afdd7fe0334d27084689766fc385865d7206ae4c8aae46ae099a4e1ab42dd4c00c02f5e9fc6c89cc2c8e9070290ae6b48", 0x63}], 0x1, &(0x7f0000000cc0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0, r0, r0]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r0, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r1}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, r5, r6}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r7, r0, r0]}}], 0x118, 0x20008898}}, {{&(0x7f0000000e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001200)=[{0x0}, {&(0x7f0000000ec0)="20aee4e7967d4660499e752ab3c0fd8668c3ff72bd1d63f4df5d4d8723ff4a92446a709056dc03a8168c1cca736be8299ff38f88e3a4617aa3a2d4f3c9625352554d23b2e7154bf8cbdeb88ed41bb6703684ebb8bebba34ac28a18f96822b06e70a1c085db4bcf54c21ab045bab51126ff97f0aa69189cf6c7aeefd3995abc154225423d10ba4d5b8daafdc993acf373c5d1df5e3da7f89f5e1baa19b899c051221c4c93a5c2b380750ed69691b9e2169b06a6f74e2a78778f48b6759f7b2c5b30bbc91711056978fc94b483c63dd0c4cb3065ed9b35e54cf0ddc2918e155f9e6930cacf58123baae96fca85b46d9b247801c3d6ccb51aa3", 0xf8}, {&(0x7f0000000fc0)="e1a8e6e205d2e5a6f331680f91b8a912849b6eee17abdc01142216dca99c7ad4933265e2302a87308d70ea08180281edb7590f239624e8c78d525d261160b58f5d3ae2bd8d655438175f84c5fae28ffdba2c6e4a5067b84d84c35215a5a39977a5486a8926bcba2136ba13344a39", 0x6e}, {&(0x7f0000001040)="8800bf99abfed92dfb8781c504b355ea7a9c9e57972286ee9e269bb179818fbceb1e45a53221345b523cbfe9ae02a2146d687cdc34b7986cfcbbb7d6eb7207854469c46f7ec3ec5884227f4fd9a774b72237b5181e5673a39247d36f17264cb32abf5df6cefe213241c2bde092f8a3e03cf9f83013e34686750f88d1e7806c1bcf03c78bfc48a1f70a0befb75eb66920e1335dcbbb32986f38d38fe3723a7dc8be80b5f91a76e7", 0xa7}, {&(0x7f0000001100)="97ac3df42ba9f85ba63cceb3118899575f69700ef469cba3b850bc39a45c816eb39e62dc2811551ad035d70c250218200eb55324ccff3e4fbbb29e1ca71f68527b9efd893ee78a56676aff4ba0e30109b35f4319c42a6545f1f2e9bb2cde531d0713a886a6fea6d39303041b8e2f0afe2f9752207ec95562c63d4b27aa6993ffa03e544d75581f3f719bf255d31c709d358ac76691773023d9b2601f6f5627a0067a61036b6fa7f5d735103e49c7a35376416a89ec2f6c345db4b00f00dcbc2e3d9b1d06fae50ee7d5a01b103c32ec8e1d4a8b90c1368d2f6dbe02", 0xdb}], 0x5, 0x0, 0x0, 0x20000000}}, {{&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000001500)="4732a0827e2a4221808708fd6fbc189d0d2c62dc7ef03e49379ae2f2b832c42fdbc10675e520558e974410d98877e434480f0ed955796d12460060c3fadeb350d917acf69048761c791a48", 0x4b}, {&(0x7f0000001580)="000eca69b8eccca9e08d30108f4de27db8ab13f02b91833e0aee58f982ce5208a2c7698fd9543fd9966f8643d9243e0bd9e1b94a956d815629695bea4099", 0x3e}], 0x2, &(0x7f0000001900)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r14}}}], 0x40}}], 0x4, 0x8000) setsockopt$inet_buf(r0, 0x0, 0x20, 0x0, 0x0) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r15, 0x0) 11.428173033s ago: executing program 2 (id=2440): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000002080)={0x0, 0x10, &(0x7f0000002040)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000020c0)=0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev, 'wg0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000240)={0x18, 0x0, {0x0, @link_local}}, 0x1e) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x2}, 0x20) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @random="ca48ad42e8b8", @val={@val={0x88a8, 0x3, 0x1, 0x2}, {0x8100, 0x5, 0x0, 0x1}}, {@generic={0x1c, "c0fa8fba344561b40704046a807c23105e5e8d70915a5e74d43c2fe0"}}}, 0x0) 11.396170378s ago: executing program 1 (id=2441): openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfd20, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9111a040018740100067401000000000000800c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) 11.196114305s ago: executing program 1 (id=2443): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x1) 11.133041325s ago: executing program 2 (id=2444): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00'}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TESTMODE(r4, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r5, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000000)={r10}, 0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000180)={r10, 0x181}, 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400"/16], 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="6000000010000104000e00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000001050016000200000004001200", @ANYBLOB="2686033de843424ccf408e175b12def2f5889254e7e124f92e925fec140cd362604bfb7ea78782016405e79cdd827f6b36268de65bcedefa56141fb582fc1af06af97f05bb971cf7f9f8b39f503645e577dd0b5ca1315fdb5f2066392bd5f1ec2b0b43edfc911bcb43101c611092a12c91fb48edf33d0f0839fabf5379fbdd3b18aa31800ca41b4fdb7c494c3773", @ANYRES64=r3, @ANYRESDEC=r1], 0x60}}, 0x44040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000104000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028005000e0007000000"], 0x3c}}, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3f, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x9, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0xe22, 0x9, 0x0, @opaque="e9"}}}}}}, 0x0) 10.911938523s ago: executing program 1 (id=2445): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@can_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8, 0x9, r5}, @CGW_DST_IF={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x34, r0, 0x2, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5}]}]}, 0x34}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) write$binfmt_misc(r8, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r7, 0x0, r9, 0x0, 0x4ffe2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r11, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x2c, r12, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572006c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000400003803c000080080003400000000230000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001400000000000000009"], 0x100}}, 0x0) 10.698677112s ago: executing program 2 (id=2447): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x10, 0xa, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x68, 0x24, 0xf0b, 0x8, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x800, 0x0, 0x5}}}}]}, 0x68}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000280)={0x84, @empty, 0x0, 0x0, 'sed\x00'}, 0x2c) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xcb, &(0x7f00000000c0)={0x1, 0x1, 0x8, r4, 0x8}, 0xc) r7 = socket$inet_smc(0x2b, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r8, &(0x7f0000000400), 0xffc00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100003, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$inet_tcp_int(r7, 0x6, 0x17, &(0x7f0000000000), 0x4) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x9effffff, 0x485, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'dummy0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'hsr0\x00'}) socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) read(r2, &(0x7f0000000100)=""/40, 0x28) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 10.554250276s ago: executing program 4 (id=2448): socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x700, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 10.461054342s ago: executing program 3 (id=2449): unshare(0x20000400) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x350, 0xffffffff, 0xffffffff, 0x350, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0x0, 0xff000000], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x6, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xa0}}}, @common=@inet=@hashlimit3={{0x158}, {'wlan1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0x7, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x480) getsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000280), 0x4) unshare(0x26020480) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r3}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) socket(0x28, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 10.335943973s ago: executing program 4 (id=2450): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc0000001a00000427bd7000fcdbdf25ac1414bb000000000000000000000000000000000000000000000000000000004e237fff4e2200000a00802011000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff010000000000000000000000000001000004d52b000000ac1414bb0000000000000000000000001f000000000000000000000000000000ffffffffffffffff0200000000000000ff0f0000000000000100008000000000000200000000000008000000000000000000000000000080be06000000000000e3000000000000007e020000000000000900000000000000000000002dbd7000000000000a00010904000000000000000c00", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xfc}}, 0x0) r1 = getgid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000c00)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x30, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x30}], 0x1}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c40)={0x0, 0x0, 0x0}, &(0x7f0000000c80)=0xc) r7 = socket(0x2, 0x80805, 0x0) listen(r7, 0x5) sendmmsg(r7, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)='}', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[{0x10, 0x84, 0x5}], 0x10}}], 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001280), &(0x7f00000012c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001300)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in6}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000001400)=0xe8) getgid() r8 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001600)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000001700)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001740)={0x0}, &(0x7f0000001780)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000017c0)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f00000018c0)=0xe8) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(r12, &(0x7f0000000140)=ANY=[@ANYBLOB="1d000300", @ANYRES16=r14, @ANYBLOB="02cc251e384e"], 0xd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="b0d57082c390100be69ebb988be4eb1264666eb39aeb", 0x16}, {&(0x7f0000000080)="6dc6036a4e8159ada99a7140215506c8b2be05425774baf29ccb04f67143d4565e3577dc27ace1f97e3e60d1fec714229989868aa91b4c804426", 0x3a}, {&(0x7f0000000100)="3c078de670ec59", 0x7}, {&(0x7f0000000180)="42a49f984b3df8ea475150dc0545347a434761f58ba1de0f25e900dfc58e725e17b9e4", 0x23}], 0x4, &(0x7f0000000940)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x128, 0x40010}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a80)="be927bd04f70f1a028abbaaea474094632545a824d5efe71a1c4a2e1b86f7635ec7b7d309e6bd626e2a155e55c24ee4de4307afdd7fe0334d27084689766fc385865d7206ae4c8aae46ae099a4e1ab42dd4c00c02f5e9fc6c89cc2c8e9070290ae6b48", 0x63}], 0x1, &(0x7f0000000cc0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0, r0, r0]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r0, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r1}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, r5, r6}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r7, r0, r0]}}], 0x118, 0x20008898}}, {{&(0x7f0000000e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001200)=[{0x0}, {&(0x7f0000000ec0)="20aee4e7967d4660499e752ab3c0fd8668c3ff72bd1d63f4df5d4d8723ff4a92446a709056dc03a8168c1cca736be8299ff38f88e3a4617aa3a2d4f3c9625352554d23b2e7154bf8cbdeb88ed41bb6703684ebb8bebba34ac28a18f96822b06e70a1c085db4bcf54c21ab045bab51126ff97f0aa69189cf6c7aeefd3995abc154225423d10ba4d5b8daafdc993acf373c5d1df5e3da7f89f5e1baa19b899c051221c4c93a5c2b380750ed69691b9e2169b06a6f74e2a78778f48b6759f7b2c5b30bbc91711056978fc94b483c63dd0c4cb3065ed9b35e54cf0ddc2918e155f9e6930cacf58123baae96fca85b46d9b247801c3d6ccb51aa3", 0xf8}, {&(0x7f0000000fc0)="e1a8e6e205d2e5a6f331680f91b8a912849b6eee17abdc01142216dca99c7ad4933265e2302a87308d70ea08180281edb7590f239624e8c78d525d261160b58f5d3ae2bd8d655438175f84c5fae28ffdba2c6e4a5067b84d84c35215a5a39977a5486a8926bcba2136ba13344a39", 0x6e}, {&(0x7f0000001040)="8800bf99abfed92dfb8781c504b355ea7a9c9e57972286ee9e269bb179818fbceb1e45a53221345b523cbfe9ae02a2146d687cdc34b7986cfcbbb7d6eb7207854469c46f7ec3ec5884227f4fd9a774b72237b5181e5673a39247d36f17264cb32abf5df6cefe213241c2bde092f8a3e03cf9f83013e34686750f88d1e7806c1bcf03c78bfc48a1f70a0befb75eb66920e1335dcbbb32986f38d38fe3723a7dc8be80b5f91a76e7", 0xa7}, {&(0x7f0000001100)="97ac3df42ba9f85ba63cceb3118899575f69700ef469cba3b850bc39a45c816eb39e62dc2811551ad035d70c250218200eb55324ccff3e4fbbb29e1ca71f68527b9efd893ee78a56676aff4ba0e30109b35f4319c42a6545f1f2e9bb2cde531d0713a886a6fea6d39303041b8e2f0afe2f9752207ec95562c63d4b27aa6993ffa03e544d75581f3f719bf255d31c709d358ac76691773023d9b2601f6f5627a0067a61036b6fa7f5d735103e49c7a35376416a89ec2f6c345db4b00f00dcbc2e3d9b1d06fae50ee7d5a01b103c32ec8e1d4a8b90c1368d2f6dbe02", 0xdb}], 0x5, 0x0, 0x0, 0x20000000}}, {{&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000001500)="4732a0827e2a4221808708fd6fbc189d0d2c62dc7ef03e49379ae2f2b832c42fdbc10675e520558e974410d98877e434480f0ed955796d12460060c3fadeb350d917acf69048761c791a48", 0x4b}, {&(0x7f0000001580)="000eca69b8eccca9e08d30108f4de27db8ab13f02b91833e0aee58f982ce5208a2c7698fd9543fd9966f8643d9243e0bd9e1b94a956d815629695bea4099", 0x3e}], 0x2, &(0x7f0000001900)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r14}}}], 0x40}}], 0x4, 0x8000) setsockopt$inet_buf(r0, 0x0, 0x20, 0x0, 0x0) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r15, 0x0) 10.247465112s ago: executing program 3 (id=2451): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e00)={'vlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000006c0)={r1, 0x3, 0x6, @link_local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1], 0x20}}, 0x0) 10.005546134s ago: executing program 3 (id=2452): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) 9.97526729s ago: executing program 4 (id=2453): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110000010000"], 0x4c}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0xc084) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x10, 0x8, 0x1, 0xfff, {{0xb, 0x4, 0x2, 0x8, 0x2c, 0x68, 0x0, 0x7, 0x38, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x30}, {[@timestamp={0x44, 0x14, 0xb0, 0x0, 0x5, [0x6, 0x5, 0xb, 0x80]}, @ra={0x94, 0x4}]}}}}}) 9.919585278s ago: executing program 1 (id=2454): socket$netlink(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x20, 0x44840}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0xf00, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 9.786947468s ago: executing program 3 (id=2455): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, 0x0, 0x70) 9.739983626s ago: executing program 4 (id=2456): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @local}}, 0x1000500, 0x0, 0x0, 0x0, 0x55}, 0x9c) 9.720027642s ago: executing program 2 (id=2457): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9004}, 0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x3, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r3 = accept$phonet_pipe(r1, 0x0, &(0x7f0000000200)) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000240), &(0x7f00000002c0)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) 9.715677802s ago: executing program 1 (id=2458): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="94f45a4b7cdf46ca26ec2d096f29a8fb7be85392444dae61719d872f6dcf8f638b398db51be83dac27b1495682d9d27b6bebcb5337ca8411f9626ba31bf86edf9a05597160dd365d9d2ab458463abfa254267be179a52a17e13214992fe8753bc26f96472de73abbf08d6bfec82d618585c5d82d1575dd62698798faebe029bed2f8c2e4dcdc09369c02f12a7a8e0eb8c4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xffffffffffffff71, 0x11, 0x0, 0x27) accept$inet6(r2, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000004c0)=0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80080001", @ANYRES32=r7, @ANYBLOB="08001b"], 0x34}}, 0x4004010) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000010000108000000000000000000800000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB], 0x34}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000200)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) r10 = openat$cgroup_ro(r8, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x38) accept4(r0, &(0x7f0000000540)=@sco={0x1f, @none}, &(0x7f0000000340)=0x80, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket$l2tp6(0xa, 0x2, 0x73) 9.51837933s ago: executing program 3 (id=2459): r0 = socket$inet6(0xa, 0x2, 0x3a) unshare(0x24020400) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) connect$pptp(r3, &(0x7f0000000100)={0x18, 0x2, {0x0, @local}}, 0x1e) sendmmsg$inet6(r0, &(0x7f0000000800), 0x0, 0x0) 9.487275457s ago: executing program 4 (id=2460): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x40840) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4, 0xe208}}}}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0xc810}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011005504000000000000000010000000", @ANYRES32=r7], 0x20}}, 0x0) 138.930347ms ago: executing program 2 (id=2462): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e00)={'vlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000006c0)={r1, 0x3, 0x6, @link_local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1], 0x20}}, 0x0) 123.086539ms ago: executing program 3 (id=2463): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x4000000000002, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000340)=0x10) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) socket$kcm(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60100007000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) r8 = socket$inet(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\trrm'], 0xa) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000480)={'raw\x00', 0x10, "c37c1696b2f1084b1d9b25ebcbe6a1e9"}, &(0x7f00000006c0)=0x34) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="54010000", @ANYRES16=r13, @ANYBLOB="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"], 0x154}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r11, &(0x7f0000000340)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x188, r13, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x82d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x78, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x180000000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @local, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @private2}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x80}, 0x24000004) 63.819877ms ago: executing program 4 (id=2464): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00'}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TESTMODE(r4, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r5, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000000)={r10}, 0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000180)={r10, 0x181}, 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400"/16], 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="6000000010000104000e00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000001050016000200000004001200", @ANYBLOB="2686033de843424ccf408e175b12def2f5889254e7e124f92e925fec140cd362604bfb7ea78782016405e79cdd827f6b36268de65bcedefa56141fb582fc1af06af97f05bb971cf7f9f8b39f503645e577dd0b5ca1315fdb5f2066392bd5f1ec2b0b43edfc911bcb43101c611092a12c91fb48edf33d0f0839fabf5379fbdd3b18aa31800ca41b4fdb7c494c3773", @ANYRES64=r3, @ANYRESDEC=r1], 0x60}}, 0x44040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000104000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028005000e0007000000"], 0x3c}}, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3f, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x9, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0xe22, 0x9, 0x0, @opaque="e9"}}}}}}, 0x0) 0s ago: executing program 1 (id=2465): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) kernel console output (not intermixed with test programs): mode [ 425.588373][T11302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.621310][T11304] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.628766][T11304] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.636355][T11304] bridge_slave_0: entered allmulticast mode [ 425.644029][T11304] bridge_slave_0: entered promiscuous mode [ 425.653273][T11304] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.661279][T11304] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.670702][T11304] bridge_slave_1: entered allmulticast mode [ 425.678442][T11304] bridge_slave_1: entered promiscuous mode [ 425.687510][T11297] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.694667][T11297] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.701960][T11297] bridge_slave_1: entered allmulticast mode [ 425.709961][T11297] bridge_slave_1: entered promiscuous mode [ 425.729209][T11295] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.736599][T11295] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.743832][T11295] bridge_slave_1: entered allmulticast mode [ 425.746860][ T5251] Bluetooth: hci8: command tx timeout [ 425.750049][ T5236] Bluetooth: hci7: command tx timeout [ 425.755291][ T5249] Bluetooth: hci3: command tx timeout [ 425.763440][T11295] bridge_slave_1: entered promiscuous mode [ 425.825179][T11299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.833170][ T5249] Bluetooth: hci9: command tx timeout [ 425.856436][T11299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.884200][T11299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.906368][ T5249] Bluetooth: hci4: command tx timeout [ 425.963361][T11299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.976268][T11299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.002306][T11299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.040125][T11297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.055128][T11295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.070887][T11295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.087809][T11302] team0: Port device team_slave_0 added [ 426.097859][T11302] team0: Port device team_slave_1 added [ 426.124335][T11304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.140357][T11304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.152315][T11297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.213945][T11295] team0: Port device team_slave_0 added [ 426.324831][T11295] team0: Port device team_slave_1 added [ 426.350987][T11299] hsr_slave_0: entered promiscuous mode [ 426.363431][T11299] hsr_slave_1: entered promiscuous mode [ 426.370206][T11299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.379363][T11299] Cannot create hsr debugfs directory [ 426.391928][T11304] team0: Port device team_slave_0 added [ 426.405329][T11304] team0: Port device team_slave_1 added [ 426.418166][T11297] team0: Port device team_slave_0 added [ 426.464706][T11302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.473132][T11302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.501584][T11302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.514888][T11302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.524214][T11302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.550538][T11302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.570687][T11297] team0: Port device team_slave_1 added [ 426.595476][T11304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.612525][T11304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.645313][T11304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.659765][T11304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.667072][T11304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.695033][T11304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.775920][T11297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.783001][T11297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.812295][T11297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.831267][T11297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.838544][T11297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.866143][T11297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.890830][T11295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.898513][T11295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.926060][T11295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.992509][T11295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.999925][T11295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.027853][T11295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.122295][T11302] hsr_slave_0: entered promiscuous mode [ 427.129410][T11302] hsr_slave_1: entered promiscuous mode [ 427.135741][T11302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.144787][T11302] Cannot create hsr debugfs directory [ 427.171400][T11304] hsr_slave_0: entered promiscuous mode [ 427.183339][T11304] hsr_slave_1: entered promiscuous mode [ 427.189988][T11304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.198661][T11304] Cannot create hsr debugfs directory [ 427.223792][T11297] hsr_slave_0: entered promiscuous mode [ 427.230881][T11297] hsr_slave_1: entered promiscuous mode [ 427.237470][T11297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.245156][T11297] Cannot create hsr debugfs directory [ 427.337443][T11295] hsr_slave_0: entered promiscuous mode [ 427.343985][T11295] hsr_slave_1: entered promiscuous mode [ 427.350611][T11295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.359645][T11295] Cannot create hsr debugfs directory [ 427.529313][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.653123][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.787775][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.826452][ T5249] Bluetooth: hci7: command tx timeout [ 427.826780][ T5251] Bluetooth: hci3: command tx timeout [ 427.831916][ T5236] Bluetooth: hci8: command tx timeout [ 427.907899][T11299] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.921101][ T5249] Bluetooth: hci9: command tx timeout [ 427.961237][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.996657][ T5249] Bluetooth: hci4: command tx timeout [ 428.082812][T11299] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.179760][T11299] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.283183][T11299] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.368339][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.459978][T11297] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.499070][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.583033][T11297] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.625864][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.684205][T11297] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.729103][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.783312][T11297] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.863339][ T12] bond0: left allmulticast mode [ 428.871170][ T12] bond_slave_0: left allmulticast mode [ 428.876938][ T12] bond_slave_1: left allmulticast mode [ 428.882434][ T12] bond0: left promiscuous mode [ 428.887541][ T12] bond_slave_0: left promiscuous mode [ 428.893187][ T12] bond_slave_1: left promiscuous mode [ 428.899146][ T12] bridge0: port 3(bond0) entered disabled state [ 428.907755][ T12] bridge_slave_1: left allmulticast mode [ 428.913420][ T12] bridge_slave_1: left promiscuous mode [ 428.919371][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.928899][ T12] bridge_slave_0: left allmulticast mode [ 428.934556][ T12] bridge_slave_0: left promiscuous mode [ 428.941590][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.955786][ T12] bond0: left allmulticast mode [ 428.961915][ T12] bond_slave_0: left allmulticast mode [ 428.967766][ T12] bond_slave_1: left allmulticast mode [ 428.973285][ T12] bond0: left promiscuous mode [ 428.979117][ T12] bond_slave_0: left promiscuous mode [ 428.984658][ T12] bond_slave_1: left promiscuous mode [ 428.990419][ T12] bridge0: port 3(bond0) entered disabled state [ 429.001251][ T12] bridge_slave_1: left allmulticast mode [ 429.007114][ T12] bridge_slave_1: left promiscuous mode [ 429.012859][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.022468][ T12] bridge_slave_0: left allmulticast mode [ 429.028877][ T12] bridge_slave_0: left promiscuous mode [ 429.034625][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.908218][ T5236] Bluetooth: hci8: command tx timeout [ 429.908230][ T5251] Bluetooth: hci3: command tx timeout [ 429.919263][ T5249] Bluetooth: hci7: command tx timeout [ 429.988047][ T5249] Bluetooth: hci9: command tx timeout [ 430.071320][ T5249] Bluetooth: hci4: command tx timeout [ 430.081280][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.092861][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.104155][ T12] bond0 (unregistering): Released all slaves [ 430.250859][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.262367][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.281380][ T12] bond0 (unregistering): Released all slaves [ 430.421331][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.432963][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.444477][ T12] bond0 (unregistering): Released all slaves [ 430.603587][T11297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 430.714933][T11297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 430.725572][T11297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 430.769313][T11297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 431.075785][T11297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.224865][T11297] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.250838][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.258041][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.284722][ T2558] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.291973][ T2558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.445275][ T12] hsr_slave_0: left promiscuous mode [ 431.451420][ T12] hsr_slave_1: left promiscuous mode [ 431.471228][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.479026][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.487455][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.494906][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.513298][ T12] hsr_slave_0: left promiscuous mode [ 431.522392][ T12] hsr_slave_1: left promiscuous mode [ 431.533754][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.544355][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.554135][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.562185][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.573656][ T12] hsr_slave_0: left promiscuous mode [ 431.580041][ T12] hsr_slave_1: left promiscuous mode [ 431.636369][ T12] veth1_macvtap: left promiscuous mode [ 431.642009][ T12] veth0_macvtap: left promiscuous mode [ 431.648005][ T12] veth1_vlan: left promiscuous mode [ 431.653305][ T12] veth0_vlan: left promiscuous mode [ 431.659891][ T12] veth1_macvtap: left promiscuous mode [ 431.665506][ T12] veth0_macvtap: left promiscuous mode [ 431.671554][ T12] veth1_vlan: left promiscuous mode [ 431.677248][ T12] veth0_vlan: left promiscuous mode [ 431.683574][ T12] veth1_macvtap: left promiscuous mode [ 431.689561][ T12] veth0_macvtap: left promiscuous mode [ 431.695197][ T12] veth1_vlan: left promiscuous mode [ 431.701227][ T12] veth0_vlan: left promiscuous mode [ 432.527235][ T12] team0 (unregistering): Port device team_slave_1 removed [ 432.585795][ T12] team0 (unregistering): Port device team_slave_0 removed [ 433.612458][ T12] team0 (unregistering): Port device team_slave_1 removed [ 433.662786][ T12] team0 (unregistering): Port device team_slave_0 removed [ 434.738681][ T12] team0 (unregistering): Port device team_slave_1 removed [ 434.791335][ T12] team0 (unregistering): Port device team_slave_0 removed [ 435.705040][T11297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.816803][T11297] veth0_vlan: entered promiscuous mode [ 435.890876][T11297] veth1_vlan: entered promiscuous mode [ 435.934531][T11304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 435.980949][T11304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 435.992394][T11304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 436.008130][T11304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 436.131756][T11297] veth0_macvtap: entered promiscuous mode [ 436.215054][T11299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 436.246429][T11297] veth1_macvtap: entered promiscuous mode [ 436.270623][T11299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 436.305732][T11299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 436.319013][T11297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.365112][T11299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 436.422248][T11297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.432915][T11297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.444726][T11297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.507500][T11302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 436.543968][T11297] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.553159][T11297] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.562726][T11297] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.571603][T11297] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.596281][T11302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 436.612531][T11302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 436.677844][T11302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 436.742241][T11295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 436.769398][T11295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 436.815609][T11304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.833534][T11295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 436.844287][T11295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 436.951528][T11304] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.998509][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.009860][ T2558] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.017129][ T2558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.031181][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.119721][ T2558] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.126911][ T2558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.155981][ T2558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.166598][ T2558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.213254][T11299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.289019][T11299] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.321831][T11302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.410588][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.417868][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.468058][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.475328][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.502852][T11302] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.587470][ T2558] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.594757][ T2558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.630269][ T2558] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.637496][ T2558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.739253][T11295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.763129][T11347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.803398][T11347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.849712][T11304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.864333][T11295] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.935285][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.942602][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.032149][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.039490][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.186414][T11304] veth0_vlan: entered promiscuous mode [ 438.240024][T11304] veth1_vlan: entered promiscuous mode [ 438.345069][T11299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.368086][T11304] veth0_macvtap: entered promiscuous mode [ 438.391639][T11302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.440433][T11304] veth1_macvtap: entered promiscuous mode [ 438.580506][T11361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1802'. [ 438.608295][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.632758][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.648530][T11304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.689559][T11365] netlink: 'syz.1.1802': attribute type 15 has an invalid length. [ 438.699750][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.729405][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.745063][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.769985][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.788897][T11304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.824289][T11304] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.834664][T11304] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.852916][T11304] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.862023][T11304] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.892415][T11299] veth0_vlan: entered promiscuous mode [ 438.955288][T11299] veth1_vlan: entered promiscuous mode [ 438.982482][T11295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.104189][ T1068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.113662][ T1068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.205675][T11299] veth0_macvtap: entered promiscuous mode [ 439.233577][T11302] veth0_vlan: entered promiscuous mode [ 439.254496][T11295] veth0_vlan: entered promiscuous mode [ 439.265666][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.265787][T11299] veth1_macvtap: entered promiscuous mode [ 439.292283][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.294349][T11295] veth1_vlan: entered promiscuous mode [ 439.334254][T11302] veth1_vlan: entered promiscuous mode [ 439.377173][T11299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.392451][T11299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.404768][T11299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.445961][T11299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.453993][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 439.475310][T11299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.522803][T11299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.533719][T11299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.544103][T11299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.554796][T11299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.564768][T11299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.575272][T11299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.589366][T11299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.602673][T11302] veth0_macvtap: entered promiscuous mode [ 439.613831][T11377] ipt_ECN: cannot use operation on non-tcp rule [ 439.629365][T11302] veth1_macvtap: entered promiscuous mode [ 439.643699][T11299] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.653372][T11299] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.665293][T11299] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.674742][T11299] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.759385][T11295] veth0_macvtap: entered promiscuous mode [ 439.825357][T11295] veth1_macvtap: entered promiscuous mode [ 439.866862][T11302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.878577][T11302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.914308][T11302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.935472][T11302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.953922][T11302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.964777][T11302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.977723][T11302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.033320][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.044954][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.055527][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.068042][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.081914][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.093546][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.104867][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.115835][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.139250][T11295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.159113][T11302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.172127][T11302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.183116][T11302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.196040][T11302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.215140][T11302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.225725][T11302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.236592][T11302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.247207][T11302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.258989][T11302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.290907][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1805'. [ 440.308096][T11385] bridge_slave_1: left allmulticast mode [ 440.313818][T11385] bridge_slave_1: left promiscuous mode [ 440.327127][T11385] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.329104][T11386] sctp: [Deprecated]: syz.1.1805 (pid 11386) Use of int in max_burst socket option. [ 440.329104][T11386] Use struct sctp_assoc_value instead [ 440.366446][T11385] bridge_slave_0: left allmulticast mode [ 440.374181][T11385] bridge_slave_0: left promiscuous mode [ 440.388898][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.400539][T11385] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.512928][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.526012][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.536303][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.555503][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.568752][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.571190][T11392] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1807'. [ 440.579684][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.609689][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.621279][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.633458][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.644600][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.657430][T11295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.676772][T11302] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.696880][T11302] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.705757][T11302] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.723685][T11302] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.744003][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.771316][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.780616][ T1190] IPVS: starting estimator thread 0... [ 440.788602][T11392] ip6t_rpfilter: unknown options [ 440.800805][T11295] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.813289][T11295] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.823662][T11295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.838137][T11295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.906617][T11396] IPVS: using max 17 ests per chain, 40800 per kthread [ 440.950396][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.969859][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.118405][T11399] netlink: 105108 bytes leftover after parsing attributes in process `syz.3.1809'. [ 441.138027][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.155255][T11399] netlink: 'syz.3.1809': attribute type 1 has an invalid length. [ 441.172681][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.188374][T11399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1809'. [ 441.283014][T11402] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1809'. [ 441.307201][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.315096][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.377368][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.385252][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.445288][T11402] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1809'. [ 441.473025][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.483517][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.847100][T11410] netlink: 'syz.1.1813': attribute type 1 has an invalid length. [ 441.912794][T11416] bridge0: port 3(bond0) entered blocking state [ 441.943523][T11416] bridge0: port 3(bond0) entered disabled state [ 441.976459][T11416] bond0: entered allmulticast mode [ 441.981672][T11416] bond_slave_0: entered allmulticast mode [ 442.016442][T11416] bond_slave_1: entered allmulticast mode [ 442.039026][T11416] bond0: entered promiscuous mode [ 442.069136][T11416] bond_slave_0: entered promiscuous mode [ 442.089546][T11416] bond_slave_1: entered promiscuous mode [ 442.100895][T11416] bridge0: port 3(bond0) entered blocking state [ 442.107389][T11416] bridge0: port 3(bond0) entered forwarding state [ 442.131843][T11424] netlink: 'syz.3.1811': attribute type 11 has an invalid length. [ 442.165651][T11424] netlink: 211132 bytes leftover after parsing attributes in process `syz.3.1811'. [ 442.534412][T11438] netlink: 105108 bytes leftover after parsing attributes in process `syz.4.1817'. [ 442.574093][T11438] netlink: 'syz.4.1817': attribute type 1 has an invalid length. [ 442.582318][T11438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1817'. [ 443.275766][T11423] bridge0: port 3(gretap0) entered blocking state [ 443.291980][T11423] bridge0: port 3(gretap0) entered disabled state [ 443.305171][T11423] gretap0: entered allmulticast mode [ 443.312572][T11423] gretap0: entered promiscuous mode [ 443.321662][T11423] bridge0: port 3(gretap0) entered blocking state [ 443.328317][T11423] bridge0: port 3(gretap0) entered forwarding state [ 443.353311][T11429] gretap0: left allmulticast mode [ 443.359997][T11429] gretap0: left promiscuous mode [ 443.365670][T11429] bridge0: port 3(gretap0) entered disabled state [ 443.822599][T11463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.945130][T11461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.147728][T11477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.182527][T11477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.225093][T11477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.250521][T11476] netlink: 'syz.3.1831': attribute type 4 has an invalid length. [ 444.331343][T11476] __nla_validate_parse: 2 callbacks suppressed [ 444.331366][T11476] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1831'. [ 444.617785][T11498] netlink: 'syz.2.1839': attribute type 10 has an invalid length. [ 444.707094][T11498] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 445.067419][T11508] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1842'. [ 445.320230][T11520] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.525930][T11520] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.570489][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1845'. [ 445.650225][T11534] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.659702][T11534] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.699082][T11534] vxlan0: entered promiscuous mode [ 445.747470][T11542] xt_TPROXY: Can be used only with -p tcp or -p udp [ 445.876623][T11545] FAULT_INJECTION: forcing a failure. [ 445.876623][T11545] name failslab, interval 1, probability 0, space 0, times 0 [ 445.920692][T11545] CPU: 1 UID: 0 PID: 11545 Comm: syz.1.1854 Not tainted 6.11.0-rc7-syzkaller-01514-g34c44eb31de9 #0 [ 445.931533][T11545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 445.941624][T11545] Call Trace: [ 445.944923][T11545] [ 445.947878][T11545] dump_stack_lvl+0x241/0x360 [ 445.952599][T11545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.957858][T11545] ? __pfx__printk+0x10/0x10 [ 445.962498][T11545] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 445.967991][T11545] ? __pfx___might_resched+0x10/0x10 [ 445.973343][T11545] should_fail_ex+0x3b0/0x4e0 [ 445.978090][T11545] should_failslab+0xac/0x100 [ 445.982820][T11545] ? resv_map_alloc+0x51/0x2c0 [ 445.987606][T11545] __kmalloc_cache_noprof+0x6c/0x2c0 [ 445.992914][T11545] resv_map_alloc+0x51/0x2c0 [ 445.997525][T11545] hugetlb_reserve_pages+0x43c/0x1060 [ 446.002908][T11545] ? hugetlbfs_file_mmap+0x5fd/0x9d0 [ 446.008221][T11545] ? rcu_read_lock_any_held+0xb7/0x160 [ 446.013812][T11545] ? do_raw_spin_unlock+0x13c/0x8b0 [ 446.019067][T11545] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 446.024993][T11545] ? hugetlbfs_file_mmap+0x5fd/0x9d0 [ 446.030337][T11545] ? hugetlbfs_file_mmap+0x5fd/0x9d0 [ 446.035667][T11545] ? touch_atime+0x521/0x690 [ 446.040494][T11545] hugetlbfs_file_mmap+0x726/0x9d0 [ 446.045733][T11545] mmap_region+0xe8f/0x2090 [ 446.050370][T11545] ? __pfx_mmap_region+0x10/0x10 [ 446.055344][T11545] ? bpf_lsm_capable+0x9/0x10 [ 446.060035][T11545] ? security_capable+0x90/0xb0 [ 446.064921][T11545] do_mmap+0x8f9/0x1010 [ 446.069113][T11545] ? __pfx_do_mmap+0x10/0x10 [ 446.073774][T11545] ? __pfx_down_write_killable+0x10/0x10 [ 446.079428][T11545] ? __pfx_ima_file_mmap+0x10/0x10 [ 446.084555][T11545] ? security_mmap_file+0x178/0x1a0 [ 446.089946][T11545] vm_mmap_pgoff+0x1dd/0x3d0 [ 446.094571][T11545] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 446.099720][T11545] ? hugetlb_file_setup+0x3dc/0x5c0 [ 446.105070][T11545] ksys_mmap_pgoff+0x544/0x720 [ 446.109910][T11545] do_syscall_64+0xf3/0x230 [ 446.114547][T11545] ? clear_bhb_loop+0x35/0x90 [ 446.119252][T11545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.125167][T11545] RIP: 0033:0x7f19bdf7def9 [ 446.129614][T11545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.149357][T11545] RSP: 002b:00007f19beda2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 446.157793][T11545] RAX: ffffffffffffffda RBX: 00007f19be135f80 RCX: 00007f19bdf7def9 [ 446.165787][T11545] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020800000 [ 446.173868][T11545] RBP: 00007f19beda2090 R08: ffffffffffffffff R09: 0000000000000000 [ 446.181950][T11545] R10: 0000000000042032 R11: 0000000000000246 R12: 0000000000000002 [ 446.190051][T11545] R13: 0000000000000000 R14: 00007f19be135f80 R15: 00007ffc3d9078c8 [ 446.198242][T11545] [ 446.329739][T11520] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.350808][T11520] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.581359][T11557] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1856'. [ 449.051349][T11550] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 449.139452][T11520] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.165254][T11520] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.352546][T11520] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.365311][T11520] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.407707][T11520] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.430739][T11520] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.469983][T11520] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.504291][T11520] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.539876][T11520] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.558600][T11520] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.855531][T11596] netlink: 'syz.0.1871': attribute type 21 has an invalid length. [ 449.883988][T11596] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1871'. [ 449.910311][T11596] netlink: 'syz.0.1871': attribute type 4 has an invalid length. [ 449.950922][T11596] netlink: 'syz.0.1871': attribute type 3 has an invalid length. [ 449.966229][T11596] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1871'. [ 449.982090][T11598] bridge0: port 3(bond0) entered blocking state [ 450.002612][T11598] bridge0: port 3(bond0) entered disabled state [ 450.033463][T11598] bond0: entered allmulticast mode [ 450.053973][T11598] bond_slave_0: entered allmulticast mode [ 450.083507][T11598] bond_slave_1: entered allmulticast mode [ 450.109737][T11598] bond0: entered promiscuous mode [ 450.136354][T11598] bond_slave_0: entered promiscuous mode [ 450.141666][T11607] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1873'. [ 450.146727][T11598] bond_slave_1: entered promiscuous mode [ 450.179115][T11598] bridge0: port 3(bond0) entered blocking state [ 450.185592][T11598] bridge0: port 3(bond0) entered forwarding state [ 450.257664][T11613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1876'. [ 450.297012][T11613] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 450.325085][T11613] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 450.692981][T11633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1880'. [ 450.896363][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 451.248196][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1888'. [ 451.589223][T11654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1893'. [ 451.618091][T11654] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 451.657519][T11654] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 452.175790][T11675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1900'. [ 452.286629][T11681] netlink: 'syz.0.1900': attribute type 15 has an invalid length. [ 452.715227][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1906'. [ 453.444581][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 453.756139][T11742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1925'. [ 453.864255][T11745] netlink: 'syz.4.1925': attribute type 15 has an invalid length. [ 454.146004][T11756] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.405736][T11756] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.603702][T11756] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.781685][T11756] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.997830][T11786] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1941'. [ 455.071733][ T29] audit: type=1107 audit(1726302108.477:4): pid=11787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 455.183952][T11794] ip6t_rpfilter: unknown options [ 455.286754][T11796] FAULT_INJECTION: forcing a failure. [ 455.286754][T11796] name failslab, interval 1, probability 0, space 0, times 0 [ 455.300059][T11796] CPU: 0 UID: 0 PID: 11796 Comm: syz.4.1944 Not tainted 6.11.0-rc7-syzkaller-01514-g34c44eb31de9 #0 [ 455.310873][T11796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 455.320957][T11796] Call Trace: [ 455.324250][T11796] [ 455.327228][T11796] dump_stack_lvl+0x241/0x360 [ 455.331936][T11796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.337258][T11796] ? __pfx__printk+0x10/0x10 [ 455.341956][T11796] ? tipc_conn_lookup+0x28a/0x380 [ 455.347143][T11796] ? tipc_conn_lookup+0x7f/0x380 [ 455.352108][T11796] should_fail_ex+0x3b0/0x4e0 [ 455.356822][T11796] should_failslab+0xac/0x100 [ 455.361529][T11796] ? tipc_topsrv_queue_evt+0xf1/0x300 [ 455.367005][T11796] __kmalloc_cache_noprof+0x6c/0x2c0 [ 455.372500][T11796] ? tipc_net+0x45/0x270 [ 455.376852][T11796] tipc_topsrv_queue_evt+0xf1/0x300 [ 455.382158][T11796] tipc_sub_report_overlap+0x4c9/0x840 [ 455.387642][T11796] tipc_nametbl_remove_publ+0xc89/0x1a70 [ 455.393398][T11796] tipc_nametbl_withdraw+0x8b/0x290 [ 455.398711][T11796] tipc_sk_bind+0x4ff/0x800 [ 455.403231][T11796] ? vfs_write+0x7c4/0xc90 [ 455.407766][T11796] ? __pfx_tipc_sk_bind+0x10/0x10 [ 455.412813][T11796] ? bpf_lsm_socket_bind+0x9/0x10 [ 455.417852][T11796] ? tipc_bind+0x6c/0x250 [ 455.422206][T11796] __sys_bind+0x23d/0x2f0 [ 455.426583][T11796] ? __pfx___sys_bind+0x10/0x10 [ 455.431466][T11796] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 455.437815][T11796] ? do_syscall_64+0x100/0x230 [ 455.442610][T11796] __x64_sys_bind+0x7a/0x90 [ 455.447134][T11796] do_syscall_64+0xf3/0x230 [ 455.451660][T11796] ? clear_bhb_loop+0x35/0x90 [ 455.456358][T11796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.462358][T11796] RIP: 0033:0x7fe8ee97def9 [ 455.466801][T11796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.486547][T11796] RSP: 002b:00007fe8ee3ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 455.495072][T11796] RAX: ffffffffffffffda RBX: 00007fe8eeb35f80 RCX: 00007fe8ee97def9 [ 455.503238][T11796] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 455.511307][T11796] RBP: 00007fe8ee3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 455.519373][T11796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.527354][T11796] R13: 0000000000000000 R14: 00007fe8eeb35f80 R15: 00007ffff1a4e078 [ 455.536057][T11796] [ 455.741854][T11802] netlink: 'syz.0.1946': attribute type 15 has an invalid length. [ 457.949583][T11798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1946'. [ 458.022409][T11756] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.043257][T11756] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.118577][T11756] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.172377][T11756] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.600625][T11834] ip6t_srh: unknown srh invflags 4000 [ 458.623389][T11837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1962'. [ 458.659200][T11837] bridge_slave_1: left allmulticast mode [ 458.670343][T11837] bridge_slave_1: left promiscuous mode [ 458.683518][T11837] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.722661][T11844] sctp: [Deprecated]: syz.3.1962 (pid 11844) Use of int in max_burst socket option. [ 458.722661][T11844] Use struct sctp_assoc_value instead [ 458.777545][T11837] bridge_slave_0: left allmulticast mode [ 458.783365][T11837] bridge_slave_0: left promiscuous mode [ 458.796574][T11837] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.833321][ T5285] IPVS: starting estimator thread 0... [ 458.947086][T11845] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1961'. [ 458.956929][T11852] IPVS: using max 16 ests per chain, 38400 per kthread [ 459.098144][T11847] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.374465][T11847] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.523151][T11873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1965'. [ 459.574627][T11873] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.583852][T11873] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.604763][T11873] vxlan0: entered promiscuous mode [ 459.656500][T11847] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.677091][T11847] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.476527][T11884] bridge0: port 4(syz_tun) entered blocking state [ 462.483411][T11884] bridge0: port 4(syz_tun) entered disabled state [ 462.490395][T11884] syz_tun: entered allmulticast mode [ 462.498721][T11884] syz_tun: entered promiscuous mode [ 462.508456][T11884] bridge0: port 4(syz_tun) entered blocking state [ 462.515002][T11884] bridge0: port 4(syz_tun) entered forwarding state [ 462.569525][T11847] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.590919][T11847] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.655733][T11899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1979'. [ 462.703162][T11899] sctp: [Deprecated]: syz.1.1979 (pid 11899) Use of int in max_burst socket option. [ 462.703162][T11899] Use struct sctp_assoc_value instead [ 462.816928][T11904] x_tables: duplicate underflow at hook 1 [ 462.910752][T11847] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.949341][T11847] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.991821][T11847] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.026313][T11847] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.075264][T11847] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.101029][T11847] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.119329][T11913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1985'. [ 463.149466][T11913] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 463.187304][T11913] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 463.202040][T11847] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.215039][T11847] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.400810][T11925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.429320][T11925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.535144][T11932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1994'. [ 463.563665][T11932] bridge_slave_1: left allmulticast mode [ 463.578885][T11932] bridge_slave_1: left promiscuous mode [ 463.599431][T11932] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.635108][T11936] sctp: [Deprecated]: syz.2.1994 (pid 11936) Use of int in max_burst socket option. [ 463.635108][T11936] Use struct sctp_assoc_value instead [ 463.653775][T11932] bridge_slave_0: left allmulticast mode [ 463.662135][T11932] bridge_slave_0: left promiscuous mode [ 463.674945][T11932] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.004951][T11941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.045718][T11941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.185466][T11955] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.405916][T11968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.414157][T11969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2002'. [ 464.441166][T11969] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.448527][T11968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.460731][T11969] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.470262][T11969] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.497505][T11969] vxlan0: entered promiscuous mode [ 464.527470][T11955] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.537949][T11955] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.616857][T11955] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.638169][T11955] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.703292][T11955] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.736792][T11955] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.862091][T11955] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.896398][T11955] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.997571][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2006'. [ 465.105170][T11955] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.124573][T11955] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.383210][T11985] sctp: [Deprecated]: syz.0.2009 (pid 11985) Use of int in max_burst socket option. [ 465.383210][T11985] Use struct sctp_assoc_value instead [ 466.069800][T11992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2012'. [ 468.194267][T11975] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 468.201571][T11955] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.205023][T11975] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 468.220234][T11955] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.230858][T11984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2009'. [ 468.242560][T11984] bond0: left allmulticast mode [ 468.250430][T11984] bond_slave_0: left allmulticast mode [ 468.255973][T11984] bond_slave_1: left allmulticast mode [ 468.265538][T11984] bond0: left promiscuous mode [ 468.270913][T11984] bond_slave_0: left promiscuous mode [ 468.277000][T11984] bond_slave_1: left promiscuous mode [ 468.282901][T11984] bridge0: port 3(bond0) entered disabled state [ 468.292512][T11984] bridge_slave_1: left allmulticast mode [ 468.299249][T11984] bridge_slave_1: left promiscuous mode [ 468.305286][T11984] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.320633][T11984] bridge_slave_0: left allmulticast mode [ 468.331794][T11984] bridge_slave_0: left promiscuous mode [ 468.342159][T11984] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.416647][T11955] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.432001][T11955] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.567576][T12004] ieee802154 phy0 wpan0: encryption failed: -22 [ 468.661733][T12013] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2017'. [ 468.833957][T12019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2023'. [ 469.120216][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2028'. [ 469.158466][T12037] sctp: [Deprecated]: syz.0.2028 (pid 12037) Use of int in max_burst socket option. [ 469.158466][T12037] Use struct sctp_assoc_value instead [ 469.360637][T12040] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.564969][T12055] FAULT_INJECTION: forcing a failure. [ 469.564969][T12055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.614846][T12055] CPU: 1 UID: 0 PID: 12055 Comm: syz.0.2036 Not tainted 6.11.0-rc7-syzkaller-01514-g34c44eb31de9 #0 [ 469.625888][T12055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 469.636012][T12055] Call Trace: [ 469.639367][T12055] [ 469.642333][T12055] dump_stack_lvl+0x241/0x360 [ 469.647644][T12055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.652885][T12055] ? __pfx__printk+0x10/0x10 [ 469.657532][T12055] ? __pfx_lock_release+0x10/0x10 [ 469.662608][T12055] ? vfs_write+0x7c4/0xc90 [ 469.667161][T12055] should_fail_ex+0x3b0/0x4e0 [ 469.672087][T12055] _copy_from_user+0x2f/0xe0 [ 469.676806][T12055] __sys_bpf+0x1a4/0x810 [ 469.681167][T12055] ? __pfx___sys_bpf+0x10/0x10 [ 469.685959][T12055] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 469.692053][T12055] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 469.698587][T12055] ? do_syscall_64+0x100/0x230 [ 469.703470][T12055] __x64_sys_bpf+0x7c/0x90 [ 469.708113][T12055] do_syscall_64+0xf3/0x230 [ 469.712974][T12055] ? clear_bhb_loop+0x35/0x90 [ 469.717761][T12055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.723933][T12055] RIP: 0033:0x7fc6dd17def9 [ 469.728815][T12055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.749661][T12055] RSP: 002b:00007fc6dcbff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 469.758189][T12055] RAX: ffffffffffffffda RBX: 00007fc6dd335f80 RCX: 00007fc6dd17def9 [ 469.766820][T12055] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 469.774814][T12055] RBP: 00007fc6dcbff090 R08: 0000000000000000 R09: 0000000000000000 [ 469.783006][T12055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.791257][T12055] R13: 0000000000000000 R14: 00007fc6dd335f80 R15: 00007ffe637315f8 [ 469.799367][T12055] [ 469.878485][T12040] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.934186][T12049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2030'. [ 469.977408][T12049] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.986698][T12049] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.004885][T12049] vxlan0: entered promiscuous mode [ 470.078068][T12067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2037'. [ 470.138886][T12071] FAULT_INJECTION: forcing a failure. [ 470.138886][T12071] name failslab, interval 1, probability 0, space 0, times 0 [ 470.170024][T12071] CPU: 0 UID: 0 PID: 12071 Comm: syz.1.2039 Not tainted 6.11.0-rc7-syzkaller-01514-g34c44eb31de9 #0 [ 470.180885][T12071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 470.191170][T12071] Call Trace: [ 470.194493][T12071] [ 470.197465][T12071] dump_stack_lvl+0x241/0x360 [ 470.202203][T12071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.207463][T12071] ? __pfx__printk+0x10/0x10 [ 470.212120][T12071] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 470.218121][T12071] ? __pfx___might_resched+0x10/0x10 [ 470.223456][T12071] should_fail_ex+0x3b0/0x4e0 [ 470.228162][T12071] should_failslab+0xac/0x100 [ 470.232864][T12071] ? __alloc_skb+0x1c3/0x440 [ 470.237518][T12071] kmem_cache_alloc_node_noprof+0x71/0x320 [ 470.243438][T12071] __alloc_skb+0x1c3/0x440 [ 470.247884][T12071] ? __pfx___alloc_skb+0x10/0x10 [ 470.252968][T12071] ? netlink_ack_tlv_len+0x6e/0x200 [ 470.258193][T12071] netlink_ack+0x13f/0xa30 [ 470.262649][T12071] ? __pfx_lock_acquire+0x10/0x10 [ 470.267931][T12071] ? __pfx_ieee802154_set_macparams+0x10/0x10 [ 470.274168][T12071] netlink_rcv_skb+0x262/0x430 [ 470.279086][T12071] ? __pfx_genl_rcv_msg+0x10/0x10 [ 470.284176][T12071] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 470.289612][T12071] genl_rcv+0x28/0x40 [ 470.293700][T12071] netlink_unicast+0x7f6/0x990 [ 470.298585][T12071] ? __pfx_netlink_unicast+0x10/0x10 [ 470.303929][T12071] ? __virt_addr_valid+0x183/0x530 [ 470.309185][T12071] netlink_sendmsg+0x8e4/0xcb0 [ 470.314087][T12071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.319483][T12071] ? __import_iovec+0x536/0x820 [ 470.324436][T12071] ? aa_sock_msg_perm+0x91/0x160 [ 470.329411][T12071] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 470.334745][T12071] ? security_socket_sendmsg+0x87/0xb0 [ 470.340331][T12071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.345846][T12071] __sock_sendmsg+0x221/0x270 [ 470.350578][T12071] ____sys_sendmsg+0x525/0x7d0 [ 470.355377][T12071] ? __pfx_____sys_sendmsg+0x10/0x10 [ 470.360795][T12071] __sys_sendmsg+0x2b0/0x3a0 [ 470.365407][T12071] ? __pfx___sys_sendmsg+0x10/0x10 [ 470.370532][T12071] ? vfs_write+0x7c4/0xc90 [ 470.375085][T12071] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 470.381785][T12071] ? do_syscall_64+0x100/0x230 [ 470.386663][T12071] ? do_syscall_64+0xb6/0x230 [ 470.391632][T12071] do_syscall_64+0xf3/0x230 [ 470.396164][T12071] ? clear_bhb_loop+0x35/0x90 [ 470.401313][T12071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.407319][T12071] RIP: 0033:0x7f19bdf7def9 [ 470.411763][T12071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.431832][T12071] RSP: 002b:00007f19beda2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 470.440267][T12071] RAX: ffffffffffffffda RBX: 00007f19be135f80 RCX: 00007f19bdf7def9 [ 470.448359][T12071] RDX: 0000000000040000 RSI: 0000000020000280 RDI: 0000000000000004 [ 470.456544][T12071] RBP: 00007f19beda2090 R08: 0000000000000000 R09: 0000000000000000 [ 470.464631][T12071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.472731][T12071] R13: 0000000000000000 R14: 00007f19be135f80 R15: 00007ffc3d9078c8 [ 470.480937][T12071] [ 470.564278][T12059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2034'. [ 470.637714][T12040] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.659714][T12040] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.663161][T12040] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.718349][T12040] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.764284][T12077] netlink: 'syz.0.2041': attribute type 4 has an invalid length. [ 473.809539][T12089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2046'. [ 473.851638][T12094] sctp: [Deprecated]: syz.2.2046 (pid 12094) Use of int in max_burst socket option. [ 473.851638][T12094] Use struct sctp_assoc_value instead [ 473.871189][T12093] ipt_ECN: cannot use operation on non-tcp rule [ 474.014285][T12040] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.056376][T12040] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.098301][T12101] FAULT_INJECTION: forcing a failure. [ 474.098301][T12101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.126786][T12101] CPU: 0 UID: 0 PID: 12101 Comm: syz.3.2048 Not tainted 6.11.0-rc7-syzkaller-01514-g34c44eb31de9 #0 [ 474.138157][T12101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 474.148783][T12101] Call Trace: [ 474.152117][T12101] [ 474.155103][T12101] dump_stack_lvl+0x241/0x360 [ 474.159944][T12101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.165302][T12101] ? __pfx__printk+0x10/0x10 [ 474.169975][T12101] should_fail_ex+0x3b0/0x4e0 [ 474.174946][T12101] _copy_from_user+0x2f/0xe0 [ 474.179603][T12101] sctp_setsockopt+0xcc/0x11c0 [ 474.184439][T12101] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 474.190510][T12101] do_sock_setsockopt+0x3af/0x720 [ 474.195591][T12101] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 474.201298][T12101] ? __fget_files+0x29/0x470 [ 474.206038][T12101] ? __fget_files+0x3f6/0x470 [ 474.210794][T12101] __sys_setsockopt+0x1ae/0x250 [ 474.215707][T12101] __x64_sys_setsockopt+0xb5/0xd0 [ 474.220788][T12101] do_syscall_64+0xf3/0x230 [ 474.225367][T12101] ? clear_bhb_loop+0x35/0x90 [ 474.230213][T12101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.236257][T12101] RIP: 0033:0x7f51dfd7def9 [ 474.240742][T12101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.260790][T12101] RSP: 002b:00007f51e0a9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 474.269444][T12101] RAX: ffffffffffffffda RBX: 00007f51dff36058 RCX: 00007f51dfd7def9 [ 474.277465][T12101] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 474.285826][T12101] RBP: 00007f51e0a9c090 R08: 000000000000009c R09: 0000000000000000 [ 474.294022][T12101] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 474.302130][T12101] R13: 0000000000000001 R14: 00007f51dff36058 R15: 00007ffe45ed5d38 [ 474.310686][T12101] [ 474.335175][T12040] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.353261][T12040] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.373261][T12040] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.406357][T12040] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.488431][T12040] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.523766][T12040] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.698069][ T5285] IPVS: starting estimator thread 0... [ 474.779978][T12117] vlan1: entered promiscuous mode [ 474.796462][T12117] netlink: 'syz.3.2056': attribute type 1 has an invalid length. [ 474.806319][T12114] IPVS: using max 18 ests per chain, 43200 per kthread [ 474.929523][T12117] vlan1 (unregistering): left promiscuous mode [ 475.325340][T12137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2060'. [ 475.361774][T12137] sctp: [Deprecated]: syz.1.2060 (pid 12137) Use of int in max_burst socket option. [ 475.361774][T12137] Use struct sctp_assoc_value instead [ 475.583646][T12146] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.615552][T12146] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.044168][T12146] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.064108][T12146] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.203616][T12146] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.217514][T12146] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.237379][T12175] ip6t_srh: unknown srh invflags 4000 [ 476.273483][T12173] Bluetooth: MGMT ver 1.23 [ 476.344738][T12146] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.374127][T12146] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.432674][T12184] sctp: [Deprecated]: syz.2.2075 (pid 12184) Use of int in max_burst socket option. [ 476.432674][T12184] Use struct sctp_assoc_value instead [ 476.471037][T12181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2075'. [ 476.487448][T12185] smc: net device ip6_vti0 erased user defined pnetid SYZ0 [ 479.147553][T12188] netlink: 'syz.3.2078': attribute type 5 has an invalid length. [ 479.161272][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2078'. [ 479.298896][T12146] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.325385][T12146] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.355746][T12146] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.375742][T12146] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.438699][T12146] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.452790][T12146] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.488939][T12146] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.505952][T12214] netlink: 'syz.4.2084': attribute type 1 has an invalid length. [ 479.514309][T12146] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.540411][T12214] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2084'. [ 479.674291][T12220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'. [ 479.741184][T12222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2089'. [ 479.811416][T12222] netlink: 'syz.3.2089': attribute type 2 has an invalid length. [ 479.841881][T12222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2089'. [ 479.883927][T12222] ipvlan0: entered allmulticast mode [ 479.910861][T12222] veth0_vlan: entered allmulticast mode [ 480.107506][T12241] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2091'. [ 480.349645][T12249] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2093'. [ 480.380293][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2092'. [ 480.661767][T12259] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.673831][T12259] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.949676][T12259] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.968479][T12259] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.003478][T12264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2097'. [ 481.126922][T12259] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.156364][T12259] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.204967][T12271] vlan1: entered promiscuous mode [ 481.243148][T12271] vlan1 (unregistering): left promiscuous mode [ 481.284568][T12268] netlink: 'syz.4.2100': attribute type 5 has an invalid length. [ 481.308610][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2100'. [ 481.372257][T12259] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.385576][T12259] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.702817][T12287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.742229][T12287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.770407][T12287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.526552][T12302] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2110'. [ 484.675139][T12259] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.691241][T12259] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.710295][T12259] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.729575][T12259] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.769234][T12259] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.787345][T12259] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.814849][T12259] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.834407][T12259] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.317571][T12327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.386382][T12327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.812324][T12345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2126'. [ 486.028980][T12353] netlink: 'syz.4.2130': attribute type 7 has an invalid length. [ 486.050735][T12353] netlink: 'syz.4.2130': attribute type 39 has an invalid length. [ 486.174816][T12357] bridge1: port 1(gretap1) entered blocking state [ 486.202295][T12357] bridge1: port 1(gretap1) entered disabled state [ 486.218113][T12357] gretap1: entered allmulticast mode [ 486.243191][T12357] gretap1: entered promiscuous mode [ 486.271332][T12353] netlink: 'syz.4.2130': attribute type 7 has an invalid length. [ 486.285790][T12353] netlink: 'syz.4.2130': attribute type 39 has an invalid length. [ 486.299817][T12359] netlink: 'syz.0.2132': attribute type 5 has an invalid length. [ 486.310035][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2132'. [ 486.346717][T12367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2133'. [ 486.388733][T12366] netlink: 'syz.3.2128': attribute type 21 has an invalid length. [ 486.427097][T12367] sctp: [Deprecated]: syz.2.2133 (pid 12367) Use of int in max_burst socket option. [ 486.427097][T12367] Use struct sctp_assoc_value instead [ 486.442637][T12366] netlink: 'syz.3.2128': attribute type 6 has an invalid length. [ 486.474606][T12366] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2128'. [ 486.518608][T12374] x_tables: duplicate underflow at hook 1 [ 486.723451][T12383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2139'. [ 486.734753][T12380] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2137'. [ 486.887315][T12386] netlink: 'syz.0.2140': attribute type 29 has an invalid length. [ 486.906966][T12386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2140'. [ 486.925086][T12387] netlink: 16090 bytes leftover after parsing attributes in process `syz.4.2141'. [ 486.945584][T12387] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2141'. [ 487.030971][T12391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.060116][T12391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.385315][T12407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.424227][T12407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.610119][T12426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.648421][T12426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.669473][T12427] netlink: 'syz.2.2153': attribute type 6 has an invalid length. [ 487.692060][T12420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.704989][T12427] netlink: 'syz.2.2153': attribute type 5 has an invalid length. [ 488.719530][T12465] sctp: [Deprecated]: syz.4.2163 (pid 12465) Use of int in maxseg socket option. [ 488.719530][T12465] Use struct sctp_assoc_value instead [ 488.858412][T12469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.888381][T12469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.038959][T12479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.083334][T12476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.100704][T12476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.938767][T12513] FAULT_INJECTION: forcing a failure. [ 489.938767][T12513] name failslab, interval 1, probability 0, space 0, times 0 [ 489.951583][T12513] CPU: 0 UID: 0 PID: 12513 Comm: syz.1.2176 Not tainted 6.11.0-rc7-syzkaller-01514-g34c44eb31de9 #0 [ 489.962558][T12513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 489.973090][T12513] Call Trace: [ 489.976436][T12513] [ 489.979397][T12513] dump_stack_lvl+0x241/0x360 [ 489.984225][T12513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.989610][T12513] ? __pfx__printk+0x10/0x10 [ 489.994327][T12513] ? tipc_conn_lookup+0x28a/0x380 [ 489.999415][T12513] ? tipc_conn_lookup+0x7f/0x380 [ 490.004430][T12513] should_fail_ex+0x3b0/0x4e0 [ 490.009145][T12513] should_failslab+0xac/0x100 [ 490.014042][T12513] ? tipc_topsrv_queue_evt+0xf1/0x300 [ 490.019452][T12513] __kmalloc_cache_noprof+0x6c/0x2c0 [ 490.024865][T12513] ? tipc_net+0x45/0x270 [ 490.029135][T12513] tipc_topsrv_queue_evt+0xf1/0x300 [ 490.034446][T12513] tipc_sub_report_overlap+0x4c9/0x840 [ 490.040021][T12513] tipc_nametbl_remove_publ+0xc89/0x1a70 [ 490.045785][T12513] tipc_nametbl_withdraw+0x8b/0x290 [ 490.051270][T12513] tipc_sk_bind+0x4ff/0x800 [ 490.055807][T12513] ? vfs_write+0x7c4/0xc90 [ 490.060392][T12513] ? __pfx_tipc_sk_bind+0x10/0x10 [ 490.066155][T12513] ? bpf_lsm_socket_bind+0x9/0x10 [ 490.071492][T12513] ? tipc_bind+0x6c/0x250 [ 490.075866][T12513] __sys_bind+0x23d/0x2f0 [ 490.080258][T12513] ? __pfx___sys_bind+0x10/0x10 [ 490.085234][T12513] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 490.091675][T12513] ? do_syscall_64+0x100/0x230 [ 490.096471][T12513] __x64_sys_bind+0x7a/0x90 [ 490.100997][T12513] do_syscall_64+0xf3/0x230 [ 490.105549][T12513] ? clear_bhb_loop+0x35/0x90 [ 490.110282][T12513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.116192][T12513] RIP: 0033:0x7f19bdf7def9 [ 490.120699][T12513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.140581][T12513] RSP: 002b:00007f19beda2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 490.149035][T12513] RAX: ffffffffffffffda RBX: 00007f19be135f80 RCX: 00007f19bdf7def9 [ 490.157113][T12513] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 490.165097][T12513] RBP: 00007f19beda2090 R08: 0000000000000000 R09: 0000000000000000 [ 490.173078][T12513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.181089][T12513] R13: 0000000000000000 R14: 00007f19be135f80 R15: 00007ffc3d9078c8 [ 490.189223][T12513] [ 490.417664][T12521] __nla_validate_parse: 8 callbacks suppressed [ 490.417739][T12521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2178'. [ 491.221771][T12559] sctp: [Deprecated]: syz.2.2187 (pid 12559) Use of int in max_burst socket option. [ 491.221771][T12559] Use struct sctp_assoc_value instead [ 491.300171][T12561] validate_nla: 2 callbacks suppressed [ 491.300195][T12561] netlink: 'syz.0.2188': attribute type 15 has an invalid length. [ 493.587997][T12556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2187'. [ 493.598402][T12558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2188'. [ 493.874517][T12577] netlink: 'syz.3.2194': attribute type 21 has an invalid length. [ 493.904194][T12577] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2194'. [ 493.951176][T12581] netlink: 'syz.3.2194': attribute type 3 has an invalid length. [ 493.964009][T12581] netlink: 'syz.3.2194': attribute type 1 has an invalid length. [ 493.975584][T12581] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2194'. [ 494.107039][T12584] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 494.142397][T12584] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 494.229357][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2200'. [ 494.275421][T12596] sctp: [Deprecated]: syz.2.2200 (pid 12596) Use of int in max_burst socket option. [ 494.275421][T12596] Use struct sctp_assoc_value instead [ 494.313251][T12600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2202'. [ 494.417712][T12602] netlink: 'syz.4.2202': attribute type 15 has an invalid length. [ 494.584283][T12611] FAULT_INJECTION: forcing a failure. [ 494.584283][T12611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.599009][T12611] CPU: 1 UID: 0 PID: 12611 Comm: syz.2.2205 Not tainted 6.11.0-rc7-syzkaller-01514-g34c44eb31de9 #0 [ 494.609825][T12611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 494.620011][T12611] Call Trace: [ 494.623326][T12611] [ 494.626340][T12611] dump_stack_lvl+0x241/0x360 [ 494.631172][T12611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.636446][T12611] ? __pfx__printk+0x10/0x10 [ 494.641105][T12611] ? __pfx_lock_release+0x10/0x10 [ 494.646198][T12611] should_fail_ex+0x3b0/0x4e0 [ 494.650934][T12611] _copy_from_user+0x2f/0xe0 [ 494.655548][T12611] copy_msghdr_from_user+0xae/0x680 [ 494.660880][T12611] ? __pfx___might_resched+0x10/0x10 [ 494.666316][T12611] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 494.672217][T12611] ? __might_fault+0xaa/0x120 [ 494.676978][T12611] do_recvmmsg+0x40f/0xae0 [ 494.681485][T12611] ? __pfx_lock_release+0x10/0x10 [ 494.686582][T12611] ? __pfx_do_recvmmsg+0x10/0x10 [ 494.691591][T12611] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 494.697554][T12611] ? ksys_write+0x23e/0x2c0 [ 494.702129][T12611] ? __pfx_lock_release+0x10/0x10 [ 494.707398][T12611] ? vfs_write+0x7c4/0xc90 [ 494.712046][T12611] ? __mutex_unlock_slowpath+0x21d/0x750 [ 494.717788][T12611] ? __fget_files+0x3f6/0x470 [ 494.722516][T12611] __x64_sys_recvmmsg+0x199/0x250 [ 494.727578][T12611] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 494.733162][T12611] ? do_syscall_64+0x100/0x230 [ 494.737951][T12611] ? do_syscall_64+0xb6/0x230 [ 494.742651][T12611] do_syscall_64+0xf3/0x230 [ 494.747176][T12611] ? clear_bhb_loop+0x35/0x90 [ 494.751869][T12611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.757780][T12611] RIP: 0033:0x7f5ffdb7def9 [ 494.762207][T12611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.781830][T12611] RSP: 002b:00007f5ffe99f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 494.790259][T12611] RAX: ffffffffffffffda RBX: 00007f5ffdd35f80 RCX: 00007f5ffdb7def9 [ 494.798271][T12611] RDX: 04000000000002fe RSI: 0000000020006100 RDI: 0000000000000004 [ 494.806310][T12611] RBP: 00007f5ffe99f090 R08: 0000000000000000 R09: 0000000000000000 [ 494.814351][T12611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 494.822469][T12611] R13: 0000000000000000 R14: 00007f5ffdd35f80 R15: 00007ffde3358098 [ 494.830477][T12611] [ 494.982785][T12614] syz.0.2206: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 495.013217][T12614] CPU: 1 UID: 0 PID: 12614 Comm: syz.0.2206 Not tainted 6.11.0-rc7-syzkaller-01514-g34c44eb31de9 #0 [ 495.024245][T12614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 495.034474][T12614] Call Trace: [ 495.037887][T12614] [ 495.040847][T12614] dump_stack_lvl+0x241/0x360 [ 495.045664][T12614] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.050916][T12614] ? __pfx__printk+0x10/0x10 [ 495.055577][T12614] ? __rcu_read_unlock+0xa1/0x110 [ 495.060673][T12614] warn_alloc+0x278/0x410 [ 495.065086][T12614] ? __pfx_warn_alloc+0x10/0x10 [ 495.070257][T12614] ? translate_table+0x174/0x2330 [ 495.075358][T12614] ? __get_vm_area_node+0x23d/0x270 [ 495.080628][T12614] __vmalloc_node_range_noprof+0x6a2/0x1400 [ 495.086757][T12614] ? arch_stack_walk+0x16d/0x1b0 [ 495.091763][T12614] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 495.098136][T12614] ? rcu_is_watching+0x15/0xb0 [ 495.102951][T12614] ? trace_kmalloc+0x1f/0xd0 [ 495.107584][T12614] ? __kmalloc_node_noprof+0x247/0x440 [ 495.113086][T12614] ? __kvmalloc_node_noprof+0x72/0x190 [ 495.118602][T12614] __kvmalloc_node_noprof+0x142/0x190 [ 495.124034][T12614] ? translate_table+0x174/0x2330 [ 495.129118][T12614] translate_table+0x174/0x2330 [ 495.134066][T12614] ? __pfx_translate_table+0x10/0x10 [ 495.139408][T12614] ? __might_fault+0xaa/0x120 [ 495.144208][T12614] ? __pfx_lock_release+0x10/0x10 [ 495.149300][T12614] ? __might_fault+0xaa/0x120 [ 495.154151][T12614] ? __might_fault+0xc6/0x120 [ 495.158977][T12614] ? _copy_from_user+0xa6/0xe0 [ 495.163803][T12614] ? copy_from_sockptr_offset+0x6b/0xb0 [ 495.169580][T12614] do_ip6t_set_ctl+0xe4c/0x1270 [ 495.174510][T12614] ? __pfx___might_resched+0x10/0x10 [ 495.179860][T12614] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 495.185348][T12614] ? __pfx_lock_release+0x10/0x10 [ 495.190455][T12614] ? __mutex_unlock_slowpath+0x21d/0x750 [ 495.196170][T12614] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 495.202231][T12614] ? __pfx_aa_sk_perm+0x10/0x10 [ 495.207176][T12614] nf_setsockopt+0x295/0x2c0 [ 495.211836][T12614] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 495.218222][T12614] do_sock_setsockopt+0x3af/0x720 [ 495.223323][T12614] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 495.228934][T12614] ? __fget_files+0x29/0x470 [ 495.233628][T12614] ? __fget_files+0x3f6/0x470 [ 495.238365][T12614] __sys_setsockopt+0x1ae/0x250 [ 495.243275][T12614] __x64_sys_setsockopt+0xb5/0xd0 [ 495.248364][T12614] do_syscall_64+0xf3/0x230 [ 495.252932][T12614] ? clear_bhb_loop+0x35/0x90 [ 495.253992][T12629] xt_l2tp: missing protocol rule (udp|l2tpip) [ 495.257649][T12614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.257686][T12614] RIP: 0033:0x7fc6dd17def9 [ 495.257708][T12614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.257729][T12614] RSP: 002b:00007fc6dcbff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 495.257755][T12614] RAX: ffffffffffffffda RBX: 00007fc6dd335f80 RCX: 00007fc6dd17def9 [ 495.257773][T12614] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 495.257788][T12614] RBP: 00007fc6dd1f0b76 R08: 0000000000000060 R09: 0000000000000000 [ 495.257804][T12614] R10: 0000000020010140 R11: 0000000000000246 R12: 0000000000000000 [ 495.257819][T12614] R13: 0000000000000000 R14: 00007fc6dd335f80 R15: 00007ffe637315f8 [ 495.257854][T12614] [ 495.302927][T12614] Mem-Info: [ 495.364639][T12614] active_anon:3828 inactive_anon:0 isolated_anon:0 [ 495.364639][T12614] active_file:2269 inactive_file:38395 isolated_file:0 [ 495.364639][T12614] unevictable:768 dirty:361 writeback:0 [ 495.364639][T12614] slab_reclaimable:9731 slab_unreclaimable:107548 [ 495.364639][T12614] mapped:28822 shmem:1223 pagetables:810 [ 495.364639][T12614] sec_pagetables:0 bounce:0 [ 495.364639][T12614] kernel_misc_reclaimable:0 [ 495.364639][T12614] free:1329351 free_pcp:580 free_cma:0 [ 495.472137][T12614] Node 0 active_anon:15012kB inactive_anon:0kB active_file:9076kB inactive_file:153516kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115288kB dirty:1444kB writeback:0kB shmem:3356kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10372kB pagetables:3140kB sec_pagetables:0kB all_unreclaimable? no [ 495.546159][T12614] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:64kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 495.617525][T12614] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 495.671903][T12614] lowmem_reserve[]: 0 2467 2468 0 0 [ 495.682021][T12614] Node 0 DMA32 free:1350444kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:14876kB inactive_anon:0kB active_file:9076kB inactive_file:152696kB unevictable:1536kB writepending:1444kB present:3129332kB managed:2554992kB mlocked:0kB bounce:0kB free_pcp:1216kB local_pcp:620kB free_cma:0kB [ 495.728766][ T29] audit: type=1107 audit(1726302149.137:5): pid=12640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Þ"' [ 495.769615][T12614] lowmem_reserve[]: 0 0 0 0 0 [ 495.774435][T12614] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 495.783399][T12648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.826557][T12614] lowmem_reserve[]: 0 0 0 0 0 [ 495.831391][T12614] Node 1 Normal free:3953720kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:64kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 495.879102][T12648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.900157][T12614] lowmem_reserve[]: 0 0 0 0 0 [ 495.905871][T12614] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 495.927450][T12614] Node 0 DMA32: 53*4kB (ME) 681*8kB (UME) 1063*16kB (UME) 262*32kB (UME) 266*64kB (UME) 72*128kB (UME) 17*256kB (UME) 20*512kB (UME) 2*1024kB (UM) 7*2048kB (UME) 308*4096kB (UM) = 1349836kB [ 495.967881][T12614] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 496.006184][T12614] Node 1 Normal: 8*4kB (UM) 3*8kB (UM) 8*16kB (UM) 8*32kB (UM) 8*64kB (U) 7*128kB (U) 5*256kB (UM) 4*512kB (UM) 2*1024kB (U) 1*2048kB (U) 963*4096kB (M) = 3953720kB [ 496.044572][T12614] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 496.060938][T12614] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 496.081687][T12614] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 496.096351][T12614] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 496.119269][T12658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2223'. [ 496.131903][T12614] 41887 total pagecache pages [ 496.142581][T12614] 0 pages in swap cache [ 496.164993][T12614] Free swap = 124996kB [ 496.169701][T12614] Total swap = 124996kB [ 496.173974][T12614] 2097051 pages RAM [ 496.190744][T12614] 0 pages HighMem/MovableOnly [ 496.195531][T12614] 426965 pages reserved [ 496.210441][T12614] 0 pages cma reserved [ 496.255031][T12660] netlink: 'syz.3.2223': attribute type 15 has an invalid length. [ 496.653889][T12675] ipt_ECN: cannot use operation on non-tcp rule [ 496.674404][T12680] netlink: 'syz.2.2230': attribute type 7 has an invalid length. [ 496.752703][T12683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2230'. [ 496.763013][T12683] netlink: 'syz.2.2230': attribute type 15 has an invalid length. [ 496.780211][T12683] netlink: 'syz.2.2230': attribute type 18 has an invalid length. [ 496.829195][T12683] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.838339][T12683] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.847465][T12683] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.856472][T12683] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.869336][T12683] vxlan0: entered promiscuous mode [ 497.283643][T12702] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2236'. [ 497.457746][T12708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.547134][T12708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.679665][T12715] netlink: 'syz.3.2241': attribute type 5 has an invalid length. [ 497.699451][T12715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2241'. [ 497.905599][T12722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.302198][T12734] FAULT_INJECTION: forcing a failure. [ 498.302198][T12734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.335764][T12735] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2249'. [ 498.355694][T12734] CPU: 0 UID: 0 PID: 12734 Comm: syz.1.2248 Not tainted 6.11.0-rc7-syzkaller-01514-g34c44eb31de9 #0 [ 498.358398][T12735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2249'. [ 498.366862][T12734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 498.366886][T12734] Call Trace: [ 498.366897][T12734] [ 498.366909][T12734] dump_stack_lvl+0x241/0x360 [ 498.366953][T12734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.366988][T12734] ? __pfx__printk+0x10/0x10 [ 498.367034][T12734] should_fail_ex+0x3b0/0x4e0 [ 498.367077][T12734] _copy_from_user+0x2f/0xe0 [ 498.367110][T12734] move_addr_to_kernel+0x82/0x150 [ 498.367144][T12734] copy_msghdr_from_user+0x43e/0x680 [ 498.367177][T12734] ? _parse_integer_limit+0x1b5/0x200 [ 498.367215][T12734] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 498.367271][T12734] __sys_sendmmsg+0x374/0x740 [ 498.367309][T12734] ? __pfx___sys_sendmmsg+0x10/0x10 [ 498.367377][T12734] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 498.367413][T12734] ? ksys_write+0x23e/0x2c0 [ 498.367439][T12734] ? __pfx_lock_release+0x10/0x10 [ 498.367478][T12734] ? vfs_write+0x7c4/0xc90 [ 498.367509][T12734] ? __mutex_unlock_slowpath+0x21d/0x750 [ 498.367545][T12734] ? __pfx_vfs_write+0x10/0x10 [ 498.367599][T12734] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 498.367636][T12734] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 498.367672][T12734] ? do_syscall_64+0x100/0x230 [ 498.367712][T12734] __x64_sys_sendmmsg+0xa0/0xb0 [ 498.367741][T12734] do_syscall_64+0xf3/0x230 [ 498.367776][T12734] ? clear_bhb_loop+0x35/0x90 [ 498.367809][T12734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.367836][T12734] RIP: 0033:0x7f19bdf7def9 [ 498.367859][T12734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.367881][T12734] RSP: 002b:00007f19beda2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 498.367908][T12734] RAX: ffffffffffffffda RBX: 00007f19be135f80 RCX: 00007f19bdf7def9 [ 498.367927][T12734] RDX: 04924924924924d0 RSI: 0000000020000080 RDI: 0000000000000004 [ 498.367945][T12734] RBP: 00007f19beda2090 R08: 0000000000000000 R09: 0000000000000000 [ 498.367961][T12734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.367977][T12734] R13: 0000000000000000 R14: 00007f19be135f80 R15: 00007ffc3d9078c8 [ 498.368013][T12734] [ 498.499740][T12740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2249'. [ 498.624321][T12740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.667459][T12745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2251'. [ 498.678881][T12745] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2251'. [ 498.685696][T12740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.722659][T12740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.741386][T12740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.074465][T12763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.093997][T12763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.594645][T12778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2265'. [ 499.951912][T12793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.011622][T12793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.348542][T12809] netlink: 'syz.1.2280': attribute type 39 has an invalid length. [ 501.459692][T12865] FAULT_INJECTION: forcing a failure. [ 501.459692][T12865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.473213][T12865] CPU: 0 UID: 0 PID: 12865 Comm: syz.3.2296 Not tainted 6.11.0-rc7-syzkaller-01514-g34c44eb31de9 #0 [ 501.484033][T12865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 501.494494][T12865] Call Trace: [ 501.497904][T12865] [ 501.500880][T12865] dump_stack_lvl+0x241/0x360 [ 501.505619][T12865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.510880][T12865] ? __pfx__printk+0x10/0x10 [ 501.515561][T12865] ? snprintf+0xda/0x120 [ 501.519862][T12865] should_fail_ex+0x3b0/0x4e0 [ 501.524607][T12865] _copy_to_user+0x2f/0xb0 [ 501.529086][T12865] simple_read_from_buffer+0xca/0x150 [ 501.534511][T12865] proc_fail_nth_read+0x1ec/0x260 [ 501.539587][T12865] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 501.545188][T12865] ? rw_verify_area+0x520/0x6b0 [ 501.550098][T12865] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 501.555698][T12865] vfs_read+0x204/0xbc0 [ 501.560261][T12865] ? __pfx_lock_release+0x10/0x10 [ 501.565433][T12865] ? __pfx_vfs_read+0x10/0x10 [ 501.570236][T12865] ? __fget_files+0x29/0x470 [ 501.575024][T12865] ? __fget_files+0x3f6/0x470 [ 501.579753][T12865] ksys_read+0x1a0/0x2c0 [ 501.584033][T12865] ? __pfx_ksys_read+0x10/0x10 [ 501.588872][T12865] ? do_syscall_64+0x100/0x230 [ 501.593686][T12865] ? do_syscall_64+0xb6/0x230 [ 501.598410][T12865] do_syscall_64+0xf3/0x230 [ 501.602950][T12865] ? clear_bhb_loop+0x35/0x90 [ 501.607654][T12865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.613657][T12865] RIP: 0033:0x7f51dfd7c93c [ 501.618175][T12865] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 501.637795][T12865] RSP: 002b:00007f51e0abd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 501.646244][T12865] RAX: ffffffffffffffda RBX: 00007f51dff35f80 RCX: 00007f51dfd7c93c [ 501.654595][T12865] RDX: 000000000000000f RSI: 00007f51e0abd0a0 RDI: 0000000000000004 [ 501.662781][T12865] RBP: 00007f51e0abd090 R08: 0000000000000000 R09: 0000000000000000 [ 501.670927][T12865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.679001][T12865] R13: 0000000000000000 R14: 00007f51dff35f80 R15: 00007ffe45ed5d38 [ 501.687040][T12865] [ 501.754726][T12873] __nla_validate_parse: 1 callbacks suppressed [ 501.754751][T12873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2298'. [ 501.796650][T12874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2299'. [ 501.827495][T12874] syz_tun: left allmulticast mode [ 501.833372][T12874] syz_tun: left promiscuous mode [ 501.839537][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.860393][T12879] sctp: [Deprecated]: syz.4.2299 (pid 12879) Use of int in max_burst socket option. [ 501.860393][T12879] Use struct sctp_assoc_value instead [ 501.882831][T12874] bridge0: port 4(syz_tun) entered disabled state [ 501.900163][T12874] bond0: left allmulticast mode [ 501.905112][T12874] bond_slave_0: left allmulticast mode [ 501.923067][T12874] bond_slave_1: left allmulticast mode [ 501.929699][T12874] bond0: left promiscuous mode [ 501.940903][T12874] bond_slave_0: left promiscuous mode [ 501.952333][T12874] bond_slave_1: left promiscuous mode [ 501.959833][T12874] bridge0: port 3(bond0) entered disabled state [ 501.972256][T12874] bridge_slave_1: left allmulticast mode [ 501.981250][T12874] bridge_slave_1: left promiscuous mode [ 502.033584][T12874] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.057565][T12880] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2301'. [ 502.057697][T12874] bridge_slave_0: left allmulticast mode [ 502.080997][T12874] bridge_slave_0: left promiscuous mode [ 502.087249][T12874] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.219023][T12892] tipc: Withdrawal distribution failure [ 502.228652][T12876] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2300'. [ 502.502346][T12903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2308'. [ 502.519368][T12905] No such timeout policy "syz0" [ 503.039095][T12933] FAULT_INJECTION: forcing a failure. [ 503.039095][T12933] name failslab, interval 1, probability 0, space 0, times 0 [ 503.052933][T12933] CPU: 0 UID: 0 PID: 12933 Comm: syz.2.2317 Not tainted 6.11.0-rc7-syzkaller-01514-g34c44eb31de9 #0 [ 503.064217][T12933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 503.074501][T12933] Call Trace: [ 503.077820][T12933] [ 503.080864][T12933] dump_stack_lvl+0x241/0x360 [ 503.085613][T12933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.090844][T12933] ? __pfx__printk+0x10/0x10 [ 503.095503][T12933] should_fail_ex+0x3b0/0x4e0 [ 503.100316][T12933] ? radix_tree_node_alloc+0x8b/0x3c0 [ 503.105771][T12933] should_failslab+0xac/0x100 [ 503.110492][T12933] ? radix_tree_node_alloc+0x8b/0x3c0 [ 503.116064][T12933] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 503.121485][T12933] radix_tree_node_alloc+0x8b/0x3c0 [ 503.126741][T12933] idr_get_free+0x296/0xab0 [ 503.131274][T12933] idr_alloc_u32+0x195/0x330 [ 503.135899][T12933] ? __pfx_idr_alloc_u32+0x10/0x10 [ 503.141037][T12933] ? l2tp_tunnel_register+0x13e/0x1b20 [ 503.146644][T12933] l2tp_tunnel_register+0x160/0x1b20 [ 503.151964][T12933] ? lockdep_hardirqs_on+0x99/0x150 [ 503.157207][T12933] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 503.163299][T12933] ? __pfx_l2tp_tunnel_register+0x10/0x10 [ 503.169137][T12933] ? __asan_memset+0x23/0x50 [ 503.173746][T12933] ? lockdep_init_map_type+0xa1/0x910 [ 503.179146][T12933] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 503.184979][T12933] ? __kasan_kmalloc+0x98/0xb0 [ 503.189776][T12933] ? l2tp_tunnel_create+0x258/0x400 [ 503.194995][T12933] ? l2tp_tunnel_create+0x2d4/0x400 [ 503.200219][T12933] l2tp_nl_cmd_tunnel_create+0x76f/0xb60 [ 503.205884][T12933] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 503.212487][T12933] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 503.218752][T12933] ? __nla_parse+0x40/0x60 [ 503.223342][T12933] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 503.230308][T12933] genl_rcv_msg+0xb14/0xec0 [ 503.234849][T12933] ? mark_lock+0x9a/0x350 [ 503.239211][T12933] ? __pfx_genl_rcv_msg+0x10/0x10 [ 503.244279][T12933] ? __pfx_lock_acquire+0x10/0x10 [ 503.249522][T12933] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 503.255697][T12933] ? __pfx___might_resched+0x10/0x10 [ 503.261014][T12933] netlink_rcv_skb+0x1e3/0x430 [ 503.265804][T12933] ? __pfx_genl_rcv_msg+0x10/0x10 [ 503.270943][T12933] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 503.276352][T12933] ? __netlink_deliver_tap+0x77e/0x7c0 [ 503.281935][T12933] genl_rcv+0x28/0x40 [ 503.286021][T12933] netlink_unicast+0x7f6/0x990 [ 503.290824][T12933] ? __pfx_netlink_unicast+0x10/0x10 [ 503.296223][T12933] ? __virt_addr_valid+0x183/0x530 [ 503.301381][T12933] ? __check_object_size+0x49c/0x900 [ 503.306786][T12933] ? bpf_lsm_netlink_send+0x9/0x10 [ 503.312007][T12933] netlink_sendmsg+0x8e4/0xcb0 [ 503.316902][T12933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.322393][T12933] ? __import_iovec+0x536/0x820 [ 503.327364][T12933] ? aa_sock_msg_perm+0x91/0x160 [ 503.332453][T12933] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 503.337772][T12933] ? security_socket_sendmsg+0x87/0xb0 [ 503.343259][T12933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.348661][T12933] __sock_sendmsg+0x221/0x270 [ 503.353567][T12933] ____sys_sendmsg+0x525/0x7d0 [ 503.358474][T12933] ? __pfx_____sys_sendmsg+0x10/0x10 [ 503.363900][T12933] __sys_sendmsg+0x2b0/0x3a0 [ 503.368631][T12933] ? __pfx___sys_sendmsg+0x10/0x10 [ 503.373782][T12933] ? vfs_write+0x7c4/0xc90 [ 503.378301][T12933] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 503.384696][T12933] ? do_syscall_64+0x100/0x230 [ 503.389540][T12933] ? do_syscall_64+0xb6/0x230 [ 503.394271][T12933] do_syscall_64+0xf3/0x230 [ 503.398835][T12933] ? clear_bhb_loop+0x35/0x90 [ 503.403573][T12933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.409579][T12933] RIP: 0033:0x7f5ffdb7def9 [ 503.414012][T12933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.433779][T12933] RSP: 002b:00007f5ffe99f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.442253][T12933] RAX: ffffffffffffffda RBX: 00007f5ffdd35f80 RCX: 00007f5ffdb7def9 [ 503.450247][T12933] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 503.458231][T12933] RBP: 00007f5ffe99f090 R08: 0000000000000000 R09: 0000000000000000 [ 503.466214][T12933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 503.474197][T12933] R13: 0000000000000000 R14: 00007f5ffdd35f80 R15: 00007ffde3358098 [ 503.482206][T12933] [ 503.518235][T12938] Cannot find del_set index 4 as target [ 503.763056][T12951] netlink: 105108 bytes leftover after parsing attributes in process `syz.4.2322'. [ 503.967562][T12956] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2322'. [ 503.999012][T12960] FAULT_INJECTION: forcing a failure. [ 503.999012][T12960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.040930][T12956] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2322'. [ 504.051823][T12960] CPU: 1 UID: 0 PID: 12960 Comm: syz.2.2326 Not tainted 6.11.0-rc7-syzkaller-01514-g34c44eb31de9 #0 [ 504.058086][T12965] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2327'. [ 504.062643][T12960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 504.062673][T12960] Call Trace: [ 504.062687][T12960] [ 504.062700][T12960] dump_stack_lvl+0x241/0x360 [ 504.062750][T12960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.098723][T12960] ? __pfx__printk+0x10/0x10 [ 504.103492][T12960] ? iovec_from_user+0x61/0x240 [ 504.108583][T12960] ? __pfx_lock_release+0x10/0x10 [ 504.113769][T12960] should_fail_ex+0x3b0/0x4e0 [ 504.118519][T12960] _copy_from_user+0x2f/0xe0 [ 504.123178][T12960] ____sys_sendmsg+0x2e4/0x7d0 [ 504.128125][T12960] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.133490][T12960] __sys_sendmmsg+0x3b2/0x740 [ 504.138247][T12960] ? __pfx___sys_sendmmsg+0x10/0x10 [ 504.143734][T12960] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 504.145070][T12967] FAULT_INJECTION: forcing a failure. [ 504.145070][T12967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.149782][T12960] ? ksys_write+0x23e/0x2c0 [ 504.149819][T12960] ? __pfx_lock_release+0x10/0x10 [ 504.149859][T12960] ? vfs_write+0x7c4/0xc90 [ 504.149891][T12960] ? __mutex_unlock_slowpath+0x21d/0x750 [ 504.149927][T12960] ? __pfx_vfs_write+0x10/0x10 [ 504.149979][T12960] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 504.150016][T12960] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 504.150051][T12960] ? do_syscall_64+0x100/0x230 [ 504.150093][T12960] __x64_sys_sendmmsg+0xa0/0xb0 [ 504.150122][T12960] do_syscall_64+0xf3/0x230 [ 504.150156][T12960] ? clear_bhb_loop+0x35/0x90 [ 504.150189][T12960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.150213][T12960] RIP: 0033:0x7f5ffdb7def9 [ 504.150236][T12960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.150256][T12960] RSP: 002b:00007f5ffe99f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 504.258137][T12960] RAX: ffffffffffffffda RBX: 00007f5ffdd35f80 RCX: 00007f5ffdb7def9 [ 504.266229][T12960] RDX: 04924924924924d0 RSI: 0000000020000080 RDI: 0000000000000004 [ 504.274846][T12960] RBP: 00007f5ffe99f090 R08: 0000000000000000 R09: 0000000000000000 [ 504.283283][T12960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.291451][T12960] R13: 0000000000000000 R14: 00007f5ffdd35f80 R15: 00007ffde3358098 [ 504.299924][T12960] [ 504.304155][T12967] CPU: 0 UID: 0 PID: 12967 Comm: syz.1.2328 Not tainted 6.11.0-rc7-syzkaller-01514-g34c44eb31de9 #0 [ 504.315068][T12967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 504.325178][T12967] Call Trace: [ 504.328489][T12967] [ 504.331449][T12967] dump_stack_lvl+0x241/0x360 [ 504.336191][T12967] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.341526][T12967] ? __pfx__printk+0x10/0x10 [ 504.346165][T12967] ? __pfx_lock_release+0x10/0x10 [ 504.351332][T12967] should_fail_ex+0x3b0/0x4e0 [ 504.356114][T12967] _copy_from_user+0x2f/0xe0 [ 504.360835][T12967] copy_msghdr_from_user+0xae/0x680 [ 504.366102][T12967] ? _parse_integer_limit+0x1b5/0x200 [ 504.371552][T12967] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 504.377871][T12967] __sys_sendmmsg+0x374/0x740 [ 504.382737][T12967] ? __pfx___sys_sendmmsg+0x10/0x10 [ 504.388055][T12967] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 504.394201][T12967] ? ksys_write+0x23e/0x2c0 [ 504.398842][T12967] ? __pfx_lock_release+0x10/0x10 [ 504.403972][T12967] ? vfs_write+0x7c4/0xc90 [ 504.408441][T12967] ? __mutex_unlock_slowpath+0x21d/0x750 [ 504.414134][T12967] ? __pfx_vfs_write+0x10/0x10 [ 504.418978][T12967] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 504.425010][T12967] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 504.431464][T12967] ? do_syscall_64+0x100/0x230 [ 504.436347][T12967] __x64_sys_sendmmsg+0xa0/0xb0 [ 504.441216][T12967] do_syscall_64+0xf3/0x230 [ 504.445874][T12967] ? clear_bhb_loop+0x35/0x90 [ 504.450701][T12967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.456858][T12967] RIP: 0033:0x7f19bdf7def9 [ 504.461558][T12967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.481473][T12967] RSP: 002b:00007f19beda2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 504.490054][T12967] RAX: ffffffffffffffda RBX: 00007f19be135f80 RCX: 00007f19bdf7def9 [ 504.498139][T12967] RDX: 04924924924924d0 RSI: 0000000020000080 RDI: 0000000000000003 [ 504.506431][T12967] RBP: 00007f19beda2090 R08: 0000000000000000 R09: 0000000000000000 [ 504.514652][T12967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.522727][T12967] R13: 0000000000000000 R14: 00007f19be135f80 R15: 00007ffc3d9078c8 [ 504.530907][T12967] [ 504.829025][T12983] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2334'. [ 505.407872][T13009] netlink: 'syz.3.2347': attribute type 1 has an invalid length. [ 505.651745][T13015] netlink: 'syz.2.2349': attribute type 1 has an invalid length. [ 505.804168][T13020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.835413][T13020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.374546][T13041] netlink: 'syz.3.2358': attribute type 15 has an invalid length. [ 506.987769][T13065] netlink: 'syz.1.2369': attribute type 2 has an invalid length. [ 507.713155][T13094] ipt_ECN: cannot use operation on non-tcp rule [ 507.843790][T13105] sctp: [Deprecated]: syz.4.2381 (pid 13105) Use of int in max_burst socket option. [ 507.843790][T13105] Use struct sctp_assoc_value instead [ 507.987037][T13112] __nla_validate_parse: 18 callbacks suppressed [ 507.987060][T13112] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2383'. [ 508.882120][T13100] netlink: 'syz.2.2380': attribute type 4 has an invalid length. [ 509.164857][T13148] netlink: 'syz.3.2395': attribute type 5 has an invalid length. [ 509.195773][T13148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2395'. [ 509.230706][T13151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2393'. [ 509.357466][T13153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2393'. [ 509.916843][T13172] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2401'. [ 509.987770][T13170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.176454][T13183] FAULT_INJECTION: forcing a failure. [ 510.176454][T13183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.210731][T13183] CPU: 0 UID: 0 PID: 13183 Comm: syz.0.2406 Not tainted 6.11.0-rc7-syzkaller-01514-g34c44eb31de9 #0 [ 510.221578][T13183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 510.231686][T13183] Call Trace: [ 510.234998][T13183] [ 510.237965][T13183] dump_stack_lvl+0x241/0x360 [ 510.242691][T13183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 510.247919][T13183] ? __pfx__printk+0x10/0x10 [ 510.252536][T13183] ? __pfx_lock_release+0x10/0x10 [ 510.257591][T13183] should_fail_ex+0x3b0/0x4e0 [ 510.262306][T13183] _copy_from_user+0x2f/0xe0 [ 510.266918][T13183] copy_msghdr_from_user+0xae/0x680 [ 510.272155][T13183] ? __pfx___might_resched+0x10/0x10 [ 510.277505][T13183] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 510.283337][T13183] ? __might_fault+0xaa/0x120 [ 510.288040][T13183] __sys_sendmmsg+0x374/0x740 [ 510.292759][T13183] ? __pfx___sys_sendmmsg+0x10/0x10 [ 510.298002][T13183] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 510.303916][T13183] ? ksys_write+0x23e/0x2c0 [ 510.308519][T13183] ? __pfx_lock_release+0x10/0x10 [ 510.313569][T13183] ? vfs_write+0x7c4/0xc90 [ 510.318005][T13183] ? __mutex_unlock_slowpath+0x21d/0x750 [ 510.323662][T13183] ? __pfx_vfs_write+0x10/0x10 [ 510.328465][T13183] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 510.334657][T13183] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 510.341002][T13183] ? do_syscall_64+0x100/0x230 [ 510.345806][T13183] __x64_sys_sendmmsg+0xa0/0xb0 [ 510.350688][T13183] do_syscall_64+0xf3/0x230 [ 510.355298][T13183] ? clear_bhb_loop+0x35/0x90 [ 510.360026][T13183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.366036][T13183] RIP: 0033:0x7fc6dd17def9 [ 510.370571][T13183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.390477][T13183] RSP: 002b:00007fc6dcbff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 510.399086][T13183] RAX: ffffffffffffffda RBX: 00007fc6dd335f80 RCX: 00007fc6dd17def9 [ 510.407082][T13183] RDX: 04924924924924d0 RSI: 0000000020000080 RDI: 0000000000000004 [ 510.415076][T13183] RBP: 00007fc6dcbff090 R08: 0000000000000000 R09: 0000000000000000 [ 510.423159][T13183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.431234][T13183] R13: 0000000000000000 R14: 00007fc6dd335f80 R15: 00007ffe637315f8 [ 510.439235][T13183] [ 510.525520][T13187] FAULT_INJECTION: forcing a failure. [ 510.525520][T13187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.556188][T13187] CPU: 0 UID: 0 PID: 13187 Comm: syz.1.2407 Not tainted 6.11.0-rc7-syzkaller-01514-g34c44eb31de9 #0 [ 510.567124][T13187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 510.577227][T13187] Call Trace: [ 510.580544][T13187] [ 510.583570][T13187] dump_stack_lvl+0x241/0x360 [ 510.588309][T13187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 510.593571][T13187] ? __pfx__printk+0x10/0x10 [ 510.598240][T13187] should_fail_ex+0x3b0/0x4e0 [ 510.602971][T13187] _copy_from_user+0x2f/0xe0 [ 510.607612][T13187] move_addr_to_kernel+0x82/0x150 [ 510.612683][T13187] copy_msghdr_from_user+0x43e/0x680 [ 510.618018][T13187] ? _parse_integer_limit+0x1b5/0x200 [ 510.623484][T13187] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 510.629356][T13187] __sys_sendmmsg+0x374/0x740 [ 510.634247][T13187] ? __pfx___sys_sendmmsg+0x10/0x10 [ 510.639616][T13187] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 510.645709][T13187] ? ksys_write+0x23e/0x2c0 [ 510.650233][T13187] ? __pfx_lock_release+0x10/0x10 [ 510.655346][T13187] ? vfs_write+0x7c4/0xc90 [ 510.659786][T13187] ? __mutex_unlock_slowpath+0x21d/0x750 [ 510.665444][T13187] ? __pfx_vfs_write+0x10/0x10 [ 510.670242][T13187] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 510.676254][T13187] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 510.682605][T13187] ? do_syscall_64+0x100/0x230 [ 510.687400][T13187] __x64_sys_sendmmsg+0xa0/0xb0 [ 510.692275][T13187] do_syscall_64+0xf3/0x230 [ 510.696825][T13187] ? clear_bhb_loop+0x35/0x90 [ 510.701542][T13187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.707470][T13187] RIP: 0033:0x7f19bdf7def9 [ 510.711945][T13187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.731679][T13187] RSP: 002b:00007f19beda2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 510.740143][T13187] RAX: ffffffffffffffda RBX: 00007f19be135f80 RCX: 00007f19bdf7def9 [ 510.748139][T13187] RDX: 04924924924924d0 RSI: 0000000020000080 RDI: 0000000000000003 [ 510.756156][T13187] RBP: 00007f19beda2090 R08: 0000000000000000 R09: 0000000000000000 [ 510.764203][T13187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.772410][T13187] R13: 0000000000000000 R14: 00007f19be135f80 R15: 00007ffc3d9078c8 [ 510.780450][T13187] [ 510.973933][T13198] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.185964][T13211] netlink: 'syz.1.2419': attribute type 5 has an invalid length. [ 511.403507][T13220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2423'. [ 511.429778][T13222] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2420'. [ 511.494797][T13222] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2420'. [ 512.119610][T13242] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2427'. [ 512.258535][T13244] syz.2.2428[13244] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 512.258716][T13244] syz.2.2428[13244] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 513.079870][T13266] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (60) [ 513.761345][T13286] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2439'. [ 513.837303][T13290] netlink: 105108 bytes leftover after parsing attributes in process `syz.1.2441'. [ 513.898603][T13289] sctp: [Deprecated]: syz.2.2440 (pid 13289) Use of int in maxseg socket option. [ 513.898603][T13289] Use struct sctp_assoc_value instead [ 514.258417][T13298] netlink: 'syz.2.2444': attribute type 5 has an invalid length. [ 514.286420][T13298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2444'. [ 514.367235][T13303] netlink: 'syz.1.2445': attribute type 1 has an invalid length. [ 514.395573][T13303] netlink: 'syz.1.2445': attribute type 4 has an invalid length. [ 514.427526][T13303] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.2445'. [ 514.530290][T13303] netlink: 'syz.1.2445': attribute type 1 has an invalid length. [ 514.558011][T13303] netlink: 'syz.1.2445': attribute type 4 has an invalid length. [ 514.573261][T13303] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.2445'. [ 515.246962][T13328] netlink: 'syz.3.2452': attribute type 4 has an invalid length. [ 515.274696][T13328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2452'. [ 515.297946][T13330] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2453'. [ 515.587813][T13341] netlink: 'syz.2.2457': attribute type 3 has an invalid length. [ 515.616388][T13341] netlink: 'syz.2.2457': attribute type 3 has an invalid length. [ 516.511420][T13345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2458'. [ 520.449449][T13348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2458'. [ 525.165605][T13356] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2463'. [ 525.268769][T13359] netlink: 'syz.1.2465': attribute type 4 has an invalid length. [ 525.288474][T13355] netlink: 'syz.4.2464': attribute type 5 has an invalid length. [ 525.316867][T13359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2465'. [ 525.326277][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2464'. [ 525.398157][T13357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2463'. [ 525.428706][T13357] tipc: Started in network mode [ 525.433754][T13357] tipc: Node identity 10000000000000006e, cluster identity 8 [ 526.376881][ T1104] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.388262][ T1104] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.446443][ T1104] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.456550][ T1104] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.541364][ T1104] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.551597][ T1104] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.601664][ T1104] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.611821][ T1104] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.750391][ T1104] gretap1: left allmulticast mode [ 526.755487][ T1104] gretap1: left promiscuous mode [ 526.761625][ T1104] bridge1: port 1(gretap1) entered disabled state [ 527.253473][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.266823][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.278333][ T1104] bond0 (unregistering): Released all slaves [ 527.529223][ T1104] hsr_slave_0: left promiscuous mode [ 527.535517][ T1104] hsr_slave_1: left promiscuous mode [ 527.560684][ T1104] veth1_macvtap: left promiscuous mode [ 527.566504][ T1104] veth0_macvtap: left promiscuous mode [ 527.572179][ T1104] veth1_vlan: left promiscuous mode [ 527.577777][ T1104] veth0_vlan: left promiscuous mode [ 528.199589][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 528.257655][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 529.048220][ T1104] IPVS: stop unused estimator thread 0... [ 529.136220][ T1104] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.146705][ T1104] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.237279][ T1104] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.247586][ T1104] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.296780][ T1104] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.306774][ T1104] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.343134][ T1104] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.355210][ T1104] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.453533][ T1104] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.464030][ T1104] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.535069][ T1104] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.546308][ T1104] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.594092][ T1104] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.605410][ T1104] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.665855][ T1104] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.675970][ T1104] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.804981][ T1104] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.816100][ T1104] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.897736][ T1104] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.909717][ T1104] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.986749][ T1104] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.997359][ T1104] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.060140][ T1104] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.070913][ T1104] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.177378][ T1104] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.188070][ T1104] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.246168][ T1104] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.256000][ T1104] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.334810][ T1104] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.344785][ T1104] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.418125][ T1104] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.428280][ T1104] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.750617][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.762917][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.773829][ T1104] bond0 (unregistering): Released all slaves [ 531.787825][ T1104] bond1 (unregistering): Released all slaves [ 531.942821][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.954938][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.965836][ T1104] bond0 (unregistering): Released all slaves [ 532.113330][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.125286][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.140428][ T1104] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 532.150392][ T1104] bond0 (unregistering): Released all slaves [ 532.295767][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.312162][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.323081][ T1104] bond0 (unregistering): Released all slaves [ 532.443254][ T1104] tipc: Left network mode [ 532.571095][ T1104] ------------[ cut here ]------------ [ 532.577161][ T1104] WARNING: CPU: 1 PID: 1104 at net/l2tp/l2tp_core.c:1881 l2tp_exit_net+0x165/0x170 [ 532.586779][ T1104] Modules linked in: [ 532.590827][ T1104] CPU: 1 UID: 0 PID: 1104 Comm: kworker/u8:6 Not tainted 6.11.0-rc7-syzkaller-01514-g34c44eb31de9 #0 [ 532.601926][ T1104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 532.612541][ T1104] Workqueue: netns cleanup_net [ 532.617473][ T1104] RIP: 0010:l2tp_exit_net+0x165/0x170 [ 532.622910][ T1104] Code: 0f 0b 90 e9 3b ff ff ff e8 c8 35 b1 f6 eb 05 e8 c1 35 b1 f6 90 0f 0b 90 e9 7a ff ff ff e8 b3 35 b1 f6 eb 05 e8 ac 35 b1 f6 90 <0f> 0b 90 eb b5 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 [ 532.643122][ T1104] RSP: 0018:ffffc90004117a98 EFLAGS: 00010293 [ 532.649328][ T1104] RAX: ffffffff8ae256fd RBX: ffff888028c4b088 RCX: ffff88802813bc00 [ 532.657619][ T1104] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 532.665629][ T1104] RBP: ffffc90004117bb0 R08: ffffffff8bb26e16 R09: 1ffffffff2030615 [ 532.674160][ T1104] R10: dffffc0000000000 R11: fffffbfff2030616 R12: dffffc0000000000 [ 532.682371][ T1104] R13: 1ffffffff1fd1cfc R14: ffff888028c4b130 R15: ffff888028c4b040 [ 532.690501][ T1104] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 532.699501][ T1104] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 532.706147][ T1104] CR2: 0000001b2df05ff8 CR3: 000000000e734000 CR4: 00000000003506f0 [ 532.714159][ T1104] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 532.722260][ T1104] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 532.730445][ T1104] Call Trace: [ 532.733762][ T1104] [ 532.737034][ T1104] ? __warn+0x163/0x4e0 [ 532.741320][ T1104] ? l2tp_exit_net+0x165/0x170 [ 532.746205][ T1104] ? report_bug+0x2b3/0x500 [ 532.750745][ T1104] ? l2tp_exit_net+0x165/0x170 [ 532.755547][ T1104] ? handle_bug+0x3e/0x70 [ 532.759953][ T1104] ? exc_invalid_op+0x1a/0x50 [ 532.764641][ T1104] ? asm_exc_invalid_op+0x1a/0x20 [ 532.770519][ T1104] ? idr_destroy+0x56/0x290 [ 532.775287][ T1104] ? l2tp_exit_net+0x15d/0x170 [ 532.780169][ T1104] ? l2tp_exit_net+0x165/0x170 [ 532.784972][ T1104] ? l2tp_exit_net+0x15d/0x170 [ 532.789978][ T1104] cleanup_net+0x802/0xcc0 [ 532.794449][ T1104] ? __pfx_cleanup_net+0x10/0x10 [ 532.799486][ T1104] ? process_scheduled_works+0x945/0x1830 [ 532.805221][ T1104] process_scheduled_works+0xa2c/0x1830 [ 532.810832][ T1104] ? __pfx_process_scheduled_works+0x10/0x10 [ 532.816965][ T1104] ? assign_work+0x364/0x3d0 [ 532.821613][ T1104] worker_thread+0x86d/0xd10 [ 532.826297][ T1104] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 532.832274][ T1104] ? __kthread_parkme+0x169/0x1d0 [ 532.837439][ T1104] ? __pfx_worker_thread+0x10/0x10 [ 532.842609][ T1104] kthread+0x2f0/0x390 [ 532.846785][ T1104] ? __pfx_worker_thread+0x10/0x10 [ 532.851978][ T1104] ? __pfx_kthread+0x10/0x10 [ 532.856686][ T1104] ret_from_fork+0x4b/0x80 [ 532.861151][ T1104] ? __pfx_kthread+0x10/0x10 [ 532.865761][ T1104] ret_from_fork_asm+0x1a/0x30 [ 532.870875][ T1104] [ 532.874635][ T1104] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 532.882753][ T1104] CPU: 1 UID: 0 PID: 1104 Comm: kworker/u8:6 Not tainted 6.11.0-rc7-syzkaller-01514-g34c44eb31de9 #0 [ 532.893616][ T1104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 532.903781][ T1104] Workqueue: netns cleanup_net [ 532.908663][ T1104] Call Trace: [ 532.911966][ T1104] [ 532.914906][ T1104] dump_stack_lvl+0x241/0x360 [ 532.919612][ T1104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.924847][ T1104] ? __pfx__printk+0x10/0x10 [ 532.929463][ T1104] ? _printk+0xd5/0x120 [ 532.933642][ T1104] ? vscnprintf+0x5d/0x90 [ 532.937988][ T1104] panic+0x349/0x860 [ 532.941904][ T1104] ? __warn+0x172/0x4e0 [ 532.946093][ T1104] ? __pfx_panic+0x10/0x10 [ 532.950594][ T1104] ? show_trace_log_lvl+0x4e6/0x520 [ 532.955955][ T1104] ? ret_from_fork_asm+0x1a/0x30 [ 532.960926][ T1104] __warn+0x346/0x4e0 [ 532.964925][ T1104] ? l2tp_exit_net+0x165/0x170 [ 532.969813][ T1104] report_bug+0x2b3/0x500 [ 532.974164][ T1104] ? l2tp_exit_net+0x165/0x170 [ 532.978963][ T1104] handle_bug+0x3e/0x70 [ 532.983135][ T1104] exc_invalid_op+0x1a/0x50 [ 532.987652][ T1104] asm_exc_invalid_op+0x1a/0x20 [ 532.992518][ T1104] RIP: 0010:l2tp_exit_net+0x165/0x170 [ 532.997990][ T1104] Code: 0f 0b 90 e9 3b ff ff ff e8 c8 35 b1 f6 eb 05 e8 c1 35 b1 f6 90 0f 0b 90 e9 7a ff ff ff e8 b3 35 b1 f6 eb 05 e8 ac 35 b1 f6 90 <0f> 0b 90 eb b5 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 [ 533.017799][ T1104] RSP: 0018:ffffc90004117a98 EFLAGS: 00010293 [ 533.023913][ T1104] RAX: ffffffff8ae256fd RBX: ffff888028c4b088 RCX: ffff88802813bc00 [ 533.031899][ T1104] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 533.039892][ T1104] RBP: ffffc90004117bb0 R08: ffffffff8bb26e16 R09: 1ffffffff2030615 [ 533.047876][ T1104] R10: dffffc0000000000 R11: fffffbfff2030616 R12: dffffc0000000000 [ 533.055944][ T1104] R13: 1ffffffff1fd1cfc R14: ffff888028c4b130 R15: ffff888028c4b040 [ 533.064037][ T1104] ? idr_destroy+0x56/0x290 [ 533.068563][ T1104] ? l2tp_exit_net+0x15d/0x170 [ 533.073359][ T1104] ? l2tp_exit_net+0x15d/0x170 [ 533.078148][ T1104] cleanup_net+0x802/0xcc0 [ 533.082678][ T1104] ? __pfx_cleanup_net+0x10/0x10 [ 533.087648][ T1104] ? process_scheduled_works+0x945/0x1830 [ 533.093381][ T1104] process_scheduled_works+0xa2c/0x1830 [ 533.098970][ T1104] ? __pfx_process_scheduled_works+0x10/0x10 [ 533.105063][ T1104] ? assign_work+0x364/0x3d0 [ 533.109677][ T1104] worker_thread+0x86d/0xd10 [ 533.114296][ T1104] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 533.120299][ T1104] ? __kthread_parkme+0x169/0x1d0 [ 533.125348][ T1104] ? __pfx_worker_thread+0x10/0x10 [ 533.130567][ T1104] kthread+0x2f0/0x390 [ 533.134664][ T1104] ? __pfx_worker_thread+0x10/0x10 [ 533.139817][ T1104] ? __pfx_kthread+0x10/0x10 [ 533.144467][ T1104] ret_from_fork+0x4b/0x80 [ 533.148920][ T1104] ? __pfx_kthread+0x10/0x10 [ 533.153556][ T1104] ret_from_fork_asm+0x1a/0x30 [ 533.158362][ T1104] [ 533.161724][ T1104] Kernel Offset: disabled [ 533.166141][ T1104] Rebooting in 86400 seconds..