last executing test programs: 5.109332057s ago: executing program 1 (id=849): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000d40)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x0, 0x1f0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xc0, 0x108, 0x0, {0x0, 0x1e03}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x74, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x58, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4e, 0x1, "0c58eb01a4144d67856318d60150e9b974e868098bf04c99d5a2f8b9fc7d9cd237cf4bb024c05bd2f5fae5734abca52e5a807bf0eb6086107b57d7b5497a8e943b4f02e38bbe0b606d20"}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000011}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000280)={0x0, 'veth0_vlan\x00', {0x1}, 0x6}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r6) socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) epoll_wait(r5, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x4) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0xbe, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60f7d8ff00883c0120010000000000000000000000000000ff0200000000000000000000000000010c0e0003000000"], 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x9533, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x58c}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r6, 0x18000000000002a0, 0xc, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f0", 0x0, 0x2100, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PPPIOCSNPMODE(r6, 0x4008744b, &(0x7f0000000000)={0xfb}) 4.939650592s ago: executing program 1 (id=853): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3) sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x701}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r4, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x4000000, 0x2000, 0xffffffffffffff36, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000700)=""/114, 0x0, 0x0, 0xb3, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'team_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x8, r8}, 0x10) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000600000008000100000000000c000d000000000b"], 0x28}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r12, 0x303, 0x0, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x0) 4.211282836s ago: executing program 1 (id=865): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0x25, 0x148, 0x368, 0x60, 0x490, 0x2a8, 0x2a8, 0x490, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x400, 0x0, "f2f7b9f28413d9d8ad470ad2b60c4509000000000000002ff8a9304d9d655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d00000000f300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@length={{0x28}}, @common=@unspec=@connmark={{0x30}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x588) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2500, 0x7315, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast1, @private}}}}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r3}) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000140)={0x1, 0x0, 0x2, r2, 0x6d41c7d6}, 0xc) vmsplice(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000580)="6a9878", 0x3}], 0x1, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$sock_int(r3, 0x1, 0x1e, &(0x7f00000000c0)=0x4, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x10, 0x10, 0x9, 0xfffffffd, {{0x5, 0x4, 0x1, 0x27, 0x14, 0x66, 0x0, 0xc, 0x29, 0x0, @empty, @multicast2}}}}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="154e0100000000002c0012800b0001006d616373656300001c00028005000c0001000000080005000300000005000d00"], 0x54}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r7) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 3.985623483s ago: executing program 1 (id=870): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @random="c5f9772bb146", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x1, @rand_addr=0x64010100}, 0x10, &(0x7f0000000200), 0x0, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd}}], 0x30}, 0x40010) 3.757866901s ago: executing program 1 (id=875): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8948, &(0x7f0000000580)={'bond0\x00', 0x9}) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)={0xb0, 0x43, 0x9, 0xffffffff, 0x25dfdbfd, {0x1}, [@nested={0x99, 0x4, 0x0, 0x1, [@typed={0x8, 0x11c, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="dbf3665745291e14729a4e78ead7156bcb6860eb8eb28dc7cf5d94357a26db4cd784e78b057fda7fb959f6f7a16da58ef53070beba62ae5af843c0e8c36fa4ecd0610cc86bfa5bca3af63e5b976a45f5afdd440c4fec76006c795b9cb85c6174be6bbc7e0385cb984760e22614a48e0ab9e9a0fa2c961d81bbad915eddf93ad345424a7718babf8bafbe051803"]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40088c0}, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x8, &(0x7f0000000040), &(0x7f00000023c0)=0x5a9295544b4f400d) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x4010) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000380)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000480)=[{&(0x7f0000001a00)='P', 0x1}], 0x100000000000028f}}], 0x1, 0x26000800) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000001c0)="b9ff03076003008cb89e08f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x80800) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x17}, 0x9}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r10, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000180)={r8, r9/1000+60000}, 0x10) 3.450604143s ago: executing program 1 (id=881): r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000300)=[{0x0, 0x3, {0x0, 0x0, 0x3}, {0x2, 0xf0, 0x2}, 0xfd, 0xfe}, {0x2, 0x2, {0x0, 0x0, 0x3}, {0x0, 0x1}, 0x1, 0xff}, {0x2, 0x2, {0x2, 0x0, 0x2}, {0x1, 0x1ef, 0x4}, 0xfd, 0xff}, {0x2, 0x1, {0x1, 0xf, 0x2}, {0x0, 0xff, 0x2}, 0xff}, {0x0, 0x3, {0x1}, {0x1, 0xff, 0x1}, 0x2, 0x2}], 0xa0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000700)={0x1e4, 0x15, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xb4, 0x8, "26700973e7c71292245381a7bef3cd3ec32a775cacfd5688699ffc7a2a2325cfdb8a737a739309a2fda5594fca53c976916ba3a3fbc75f9c1cd185b1ad21d4cacdbf1cabf7d31f43f44f18f85a2090f5fda9362274228ff1f49bea4ec5a5fd12de0da54bca392fc19144f09c9fc46dfcc3f05596ccdcfc1db6f4b4e8b603b724c8d32dbae88a5b8ad5dff1aea2fd3360753e05eec079717f02e2f434adf8bea40dbe8ea5620ec04cc6cbcb71bf04e233"}, @NFTA_OBJ_USERDATA={0xa7, 0x8, "6a817b05623c38052fe9335102e941e5882c9711c6f9cd450afad04938d8567e1eaf0304ab28712e9c58a24ddaf3f54ec8ef0447404b6266b7b26a5557b1a2b10f205f3ac2141f77e2ddb1ee1ddd355414c8d999e5c16667e5877afa57d82e41e8a2fac2495491e3c57d88077002721c32f42d96f49cea600a32b648faf3e3a9aa60569694a249301b8071047f29aa2fe108178ac97bb334fff05a9874a356f238d404"}, @NFTA_OBJ_USERDATA={0x26, 0x8, "963b61c7c2e34d94a0ba7d556f85ee4aa96cc90414b6550db40943eff15f6c0d8194"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x20044080}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x0, 0xff, 0x1}}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000000308010100000000000000000000000006000240000000002400048007000440000000000800064000000000080008400000000008000740000000000500030006"], 0x48}}, 0x0) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) sendmsg$inet(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)="531ddd23de312ade0b28e687d71bbaf4b2a4dfe88fe05c6a25b8f8ff3b767cfde6c3554228d7", 0x26}], 0x1}, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)='dat', 0x3}, 0x1, 0x0, 0x0, 0x31}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) unshare(0x24020400) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000400)=ANY=[], 0x48}}, 0x20000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x2c, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {}, {}, {0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0xf0ffffffffffff}, 0x0) 2.647953433s ago: executing program 2 (id=892): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) sendmmsg$inet(r2, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000014c0)='#', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)}}], 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r1, @ANYBLOB="14000600fe8000000000000000000000000000151400070020010000000000000004000000000000"], 0x68}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000100)="e0857f9f", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xffe) 1.674749363s ago: executing program 2 (id=903): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000540)="4f86", 0x2}], 0x1, 0x0, 0xfffffffffffffdb2}}, {{&(0x7f0000000880)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f0000001000)=[{&(0x7f0000000d40)="06", 0x1}], 0x1, &(0x7f00000018c0)=ANY=[@ANYBLOB="1400000000000000290000003e000000390d000000000000480000000000000029000000390000003a0601010000000020010000000000000000000000000000fe8000000000000000000000000000aafc0200000000000000000000000000018010"], 0x10e0}}], 0x2, 0x0) shutdown(r0, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4e) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x30}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x24008040) 1.589569973s ago: executing program 3 (id=905): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'veth1_to_bond\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180500000000000000000000000000009500000000000000e52285c09c9c54914202ff1614f2c85fd66d5343b522eb5817757029b7d52bc7ec2e8340b3b63d112fa96c26982e9875760fc0d0b8ab3105795da4e6ce2907f4920e1eddebb945d31364b02b8305b29796582f843f55a71ae8da9321225d65"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xde, &(0x7f0000003e40)=""/213, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES64=r0], 0x24}, 0x1, 0x0, 0x0, 0x45}, 0x44080) 1.552569555s ago: executing program 2 (id=906): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='workqueue_activate_work\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711228000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'macsec0\x00', &(0x7f00000000c0)=@ethtool_eee={0x45, 0x8, 0x8, 0x4, 0x4, 0x1ff, 0x0, 0x5, [0x8001, 0x3]}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x3, [@type_tag={0x10, 0x0, 0x0, 0x12, 0x5}, @fwd={0xf}, @union={0x7, 0x7, 0x0, 0x5, 0x0, 0x6dc3, [{0xb, 0x0, 0x40000}, {0x9, 0x5, 0xd}, {0xb, 0x5, 0x9}, {0xa, 0x3, 0x5}, {0x5, 0x1, 0x8}, {0x7, 0x2, 0x4}, {0x10, 0x2, 0x9}]}]}, {0x0, [0x0]}}, &(0x7f00000003c0), 0x93, 0x0, 0x0, 0x4, 0x0, @void, @value}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@bloom_filter={0x1e, 0x3, 0x2, 0x4, 0x40221, r2, 0x8, '\x00', r3, r4, 0x2, 0x3, 0x3, 0x1, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x2}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000900)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}]}, 0x3c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r9, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 1.494185337s ago: executing program 3 (id=907): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2e, 0x0, "8ddbb51a3cfd954e41e8ccb21f650fa6a867fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a"}, 0xd8) close(r0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1a103e43) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0xfffd, @none, 0x0, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000500)) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, 0x1411, 0x4, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20040004) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x4, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "fb6b9acd8f4e1c92833a2f1e90339d18"}]}}}}}}}}, 0x0) 1.391937268s ago: executing program 3 (id=909): r0 = socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-160-x86\x00'}, 0x58) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x6, 0x0) socket$kcm(0x29, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r2}, 0x8) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000100)={0x1}, 0x4) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000000c0)) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='rdma.max\x00', 0x2, 0x0) 1.386608094s ago: executing program 2 (id=911): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000200)) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5}, 0x2, r8}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0xc000) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x18) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 1.088847105s ago: executing program 3 (id=913): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) sendmmsg$inet(r2, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000014c0)='#', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)}}], 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r1, @ANYBLOB="14000600fe8000000000000000000000000000151400070020010000000000000004000000000000"], 0x68}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000100)="e0857f9f", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xffe) 1.014247395s ago: executing program 0 (id=915): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f00000003c0)="00000000000000000000001b581d7770edc985bae8efdeb223afa0edd5adc402017d", 0x0}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f00005a5000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100)=0xfffffffc, 0x4) 1.005966515s ago: executing program 2 (id=916): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000540)="4f86", 0x2}], 0x1, 0x0, 0xfffffffffffffdb2}}, {{&(0x7f0000000880)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f0000001000)=[{&(0x7f0000000d40)="06", 0x1}], 0x1, &(0x7f00000018c0)=ANY=[@ANYBLOB="1400000000000000290000003e000000390d000000000000480000000000000029000000390000003a0601010000000020010000000000000000000000000000fe8000000000000000000000000000aafc0200000000000000000000000000018010"], 0x10e0}}], 0x2, 0x0) shutdown(r0, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x30}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x24008040) 879.792807ms ago: executing program 2 (id=917): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000740)=0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r3}, 0x10) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) close(0x3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r5) r6 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto$inet(r6, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r8 = accept$unix(r4, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e) bind$unix(r8, &(0x7f0000000540)=@abs={0x1, 0x0, 0x4e24}, 0x6e) shutdown(r6, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000180)={0x0, 0xd, 0x9, 0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000f4ff000000000000000000001800000000000000000000000700000085100000fbffffff95"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x68, &(0x7f0000000340)=""/104, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000001001000001000000dc000000000000000e4c88e24c872702116e23ca11e0a0430e661dfd7c47956068efcb734b7a4feb9524e3505f598efde91057cb278620bb3fcede546d0273050000b641d2240452e239090c91b01cbb0246218c68162fb9406c90cbf6b5f5b31c99f5918259ae2c812e34d8c5e56fa8200e7134a9b4226dec0259d298d3a3ed8ffdfb42245e85a009c1ccda85ac5604908aaca9b345cdf58563340b9c84244512d8d4d626f61494c5df6d5fb5c88f181b4fb8c9e8cf00c11a3ab530e2e91a51a91c20d281c328431390bf1d8a8ad52150272e2966f1124e48addea3160c93c95e139355a6917ab19efc3315d6ff721a10d05ba71836d3e17420677cbd47898169d3b4e2aae432e943123f3cff7d094fcd4f8cce132e35669c4c4253666032e0de"], 0x18}, 0xfc00) socket$inet6_mptcp(0xa, 0x1, 0x106) 833.69886ms ago: executing program 4 (id=918): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000340)={0x0, 0x46, "d0e9474a320694f553bc65f2a5676dfa8701b1131c0889c847d9de253c246f04c222989fd154ba9b7e5188bb8a219a98d19f233cb209ea0902229a766c6b470cd0e80fe4e629"}) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ce2a4fa77baa108b"}}, 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) getpid() ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3c}, @void, @val={0xc, 0x99, {0x3, 0x10}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8091}, 0x4004) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000180)={0x2, 0x808, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "a9d350ea09a558bbc069972fd6135503414190c502f593570fa6bb0fa85d9b3128353dcadf8bb71c06e619b08986d626a032ff1c224c9e1aa390b57d5bcf9ff7"}}, 0x80}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) getsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f0000000140), &(0x7f0000000300)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000e500010000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 794.499235ms ago: executing program 0 (id=919): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000ac0)={@random="e7c86361b5c8", @empty, @void, {@llc={0x4, {@snap={0xaa, 0x0, "bf", "fe976c", 0x1}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x40}}, 0x0) 749.507587ms ago: executing program 4 (id=920): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff000000000000400085000000190000001800000004000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 660.02532ms ago: executing program 4 (id=921): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000200)) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x7000000, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0xc000) r6 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 656.422466ms ago: executing program 0 (id=922): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="94f2825d367f", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x2, 0x73, 0x0, @private=0x2, @broadcast}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x8001}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000240)) accept4(r3, &(0x7f0000000300)=@x25={0x9, @remote}, &(0x7f0000000200)=0x80, 0x80c00) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYRESOCT=r4, @ANYRES32=r4, @ANYBLOB="08000100", @ANYRESDEC=r4], 0x90}, 0x1, 0x0, 0x0, 0x4091}, 0x0) 612.373131ms ago: executing program 4 (id=923): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001440)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="9ddfc5a2c87fe3", 0xfffffdef}], 0x1}], 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x40, r1, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xd, 0x9, 0xffff, 0x3cb, 0x8, 0x9, 0x2]}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000009b40)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a385000000bf00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 597.676338ms ago: executing program 0 (id=924): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) close(r4) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) recvmmsg$unix(r6, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x173, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x8) 470.052872ms ago: executing program 0 (id=925): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfe}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r4 = socket(0x15, 0x5, 0x0) connect$netrom(r4, &(0x7f00000000c0)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) getpeername$packet(r4, 0x0, &(0x7f0000000280)) ioctl$IMHOLD_L1(r4, 0x80044948, &(0x7f0000000400)=0x902) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@loopback, @remote, 0x0}, &(0x7f0000000180)=0xc) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xde, 0xde, 0x4, [@volatile={0xe, 0x0, 0x0, 0x9, 0x3}, @enum64={0xc, 0x8, 0x0, 0x13, 0x0, 0x8, [{0x7, 0x9, 0x2}, {0xf627, 0x4}, {0x2, 0x0, 0xf19}, {0x7, 0xf, 0x4}, {0xb, 0x75, 0x100}, {0xd, 0x4, 0x4}, {0xd, 0x1ff, 0x2}, {0x8, 0x5, 0x3}]}, @enum={0xe, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x3}, {0xc, 0xb}]}, @datasec={0x7, 0x4, 0x0, 0xf, 0x2, [{0x3, 0x3, 0xb16b}, {0x2, 0x8, 0x10001}, {0x3, 0x0, 0x763}, {0x4, 0x81, 0x8}], "4d1d"}, @restrict={0xd, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f00000002c0)=""/121, 0xfc, 0x79, 0x0, 0x6, 0x10000, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x60a8, 0x7, 0x5, 0x40000, r1, 0x80000001, '\x00', r5, r6, 0x0, 0x1, 0x1, 0xb, @void, @value, @void, @value}, 0x50) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/18, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) socket$kcm(0x29, 0x2, 0x0) 467.138197ms ago: executing program 4 (id=926): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000a00000000000000", 0x58}], 0x1) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x13, 0x0, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@getchain={0x54, 0x66, 0xfcd66a900070b359, 0x0, 0x0, {}, [{0x4}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, 0x54}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r5, 0x107, 0x14, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r5, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14) (async) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)="36dc54178fe6b0084c8d", 0xa}, {&(0x7f0000000300)}], 0x2}, 0x4044080) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000000400)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@private0, @in=@broadcast, 0x4e21, 0x5, 0x4e21, 0x1, 0x2, 0x20, 0x80, 0x2c, r8, r9}, {0x24d, 0x5, 0x2bd, 0x700000000000000, 0x8, 0x1, 0x10000, 0x7}, {0x8000000000000000, 0x9, 0x0, 0x3}, 0xbc, 0x6e6bbf, 0x1, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x2b}, 0xa, @in=@rand_addr=0x64010100, 0x3506, 0x2, 0x0, 0x0, 0x3, 0x4, 0x40}}, 0xe8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x168, r11, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x9ec}]}, @NL80211_ATTR_MESH_CONFIG={0x64, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0xfffd}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x10}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x1}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0xac4}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xf9}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x6}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0xfff9}]}, @NL80211_ATTR_MESH_SETUP={0xc4, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_IE={0x9e, 0x3, "babf90bbe5e1cd4b568197f47a341eeff6c51b08f0c0a2d5432ec4c9520cdf60da7d395e7e7ad0e85bd126aec38d7934ec6f8ea21c04d12568e139d78d20c3074b5bc9f19a16863bd873e488ad4ed8d069db667d9f4413ec248729834cb8894018c85e238fcd847ddba06c1e1debb1905491351f516c9802f8024693b28f1bb86e36ee91718af119e751cbfeca687f3784c3ec45fa6a34cf9012"}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x9}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000044}, 0x8800) 83.659806ms ago: executing program 4 (id=927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'macsec0\x00', &(0x7f00000000c0)=@ethtool_eee={0x45, 0x8, 0x8, 0x4, 0x4, 0x1ff, 0x0, 0x5, [0x8001, 0x3]}}) r3 = socket$igmp(0x2, 0x3, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x3, [@type_tag={0x10, 0x0, 0x0, 0x12, 0x5}, @fwd={0xf}, @union={0x7, 0x7, 0x0, 0x5, 0x0, 0x6dc3, [{0xb, 0x0, 0x40000}, {0x9, 0x5, 0xd}, {0xb, 0x5, 0x9}, {0xa, 0x3, 0x5}, {0x5, 0x1, 0x8}, {0x7, 0x2, 0x4}, {0x10, 0x2, 0x9}]}]}, {0x0, [0x0]}}, &(0x7f00000003c0), 0x93, 0x0, 0x0, 0x4, 0x0, @void, @value}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x3, 0x2, 0x4, 0x40221, r2, 0x8, '\x00', r4, r5, 0x2, 0x3, 0x3, 0x1, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x2}, 0x38) syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000000)=ANY=[], 0xb5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$unix(0x1, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r9, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={r13}, 0x4) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r14}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'ip6gre0\x00', 0x1}, 0x18) 79.444582ms ago: executing program 3 (id=928): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000ff010000000000000000000000000001ff01000000000000000000000000000100000000000200"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001000000003300000000000000000000000000ffffac14142900000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000001000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000930000000000000004"], 0xf8}}, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xbd, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8b", 0x1}], 0x1, 0x0, 0x0, 0x900}, 0x60) 74.338564ms ago: executing program 0 (id=929): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000340)={0x0, 0x46, "d0e9474a320694f553bc65f2a5676dfa8701b1131c0889c847d9de253c246f04c222989fd154ba9b7e5188bb8a219a98d19f233cb209ea0902229a766c6b470cd0e80fe4e629"}) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ce2a4fa77baa108b"}}, 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) getpid() ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3c}, @void, @val={0xc, 0x99, {0x3, 0x10}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8091}, 0x4004) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000180)={0x2, 0x808, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "a9d350ea09a558bbc069972fd6135503414190c502f593570fa6bb0fa85d9b3128353dcadf8bb71c06e619b08986d626a032ff1c224c9e1aa390b57d5bcf9ff7"}}, 0x80}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) getsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f0000000140), &(0x7f0000000300)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000e500010000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 3 (id=930): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000340)={0x0, 0x46, "d0e9474a320694f553bc65f2a5676dfa8701b1131c0889c847d9de253c246f04c222989fd154ba9b7e5188bb8a219a98d19f233cb209ea0902229a766c6b470cd0e80fe4e629"}) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ce2a4fa77baa108b"}}, 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = getpid() ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3c}, @void, @val={0xc, 0x99, {0x3, 0x10}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8091}, 0x4004) sendmsg$can_bcm(r0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) getsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x3, &(0x7f0000000140), &(0x7f0000000300)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000e500010000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.76' (ED25519) to the list of known hosts. [ 72.613991][ T5818] cgroup: Unknown subsys name 'net' [ 72.774715][ T5818] cgroup: Unknown subsys name 'cpuset' [ 72.784468][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.371380][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.164814][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.185335][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.199637][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.210645][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.222302][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.234044][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.261878][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.266811][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.281171][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.283221][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.298776][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.299691][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.309726][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.315537][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.327614][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.335370][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.347003][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.351548][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.362924][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.363896][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.379009][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.380143][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.397447][ T5849] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.397625][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.405015][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.413408][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.428645][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.439708][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.444750][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.458893][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.853517][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 78.935341][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 79.062376][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 79.102473][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 79.126268][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.137567][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.149314][ T5830] bridge_slave_0: entered allmulticast mode [ 79.157039][ T5830] bridge_slave_0: entered promiscuous mode [ 79.165787][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 79.204959][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.213271][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.223357][ T5830] bridge_slave_1: entered allmulticast mode [ 79.233919][ T5830] bridge_slave_1: entered promiscuous mode [ 79.338013][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.360839][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.371496][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.383278][ T5829] bridge_slave_0: entered allmulticast mode [ 79.391128][ T5829] bridge_slave_0: entered promiscuous mode [ 79.402506][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.411393][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.420747][ T5829] bridge_slave_1: entered allmulticast mode [ 79.428299][ T5829] bridge_slave_1: entered promiscuous mode [ 79.453457][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.477117][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.484574][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.492856][ T5828] bridge_slave_0: entered allmulticast mode [ 79.499814][ T5828] bridge_slave_0: entered promiscuous mode [ 79.534770][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.546890][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.554792][ T5828] bridge_slave_1: entered allmulticast mode [ 79.562403][ T5828] bridge_slave_1: entered promiscuous mode [ 79.618242][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.633521][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.661477][ T5830] team0: Port device team_slave_0 added [ 79.668227][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.676476][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.684202][ T5831] bridge_slave_0: entered allmulticast mode [ 79.691658][ T5831] bridge_slave_0: entered promiscuous mode [ 79.701425][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.713688][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.723727][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.731629][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.739456][ T5843] bridge_slave_0: entered allmulticast mode [ 79.746257][ T5843] bridge_slave_0: entered promiscuous mode [ 79.756236][ T5830] team0: Port device team_slave_1 added [ 79.773498][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.783590][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.791364][ T5831] bridge_slave_1: entered allmulticast mode [ 79.798145][ T5831] bridge_slave_1: entered promiscuous mode [ 79.829092][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.839746][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.848394][ T5843] bridge_slave_1: entered allmulticast mode [ 79.858449][ T5843] bridge_slave_1: entered promiscuous mode [ 79.875703][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.882747][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.909269][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.937298][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.980970][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.988066][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.016278][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.030886][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.053506][ T5829] team0: Port device team_slave_0 added [ 80.062746][ T5828] team0: Port device team_slave_0 added [ 80.071636][ T5829] team0: Port device team_slave_1 added [ 80.079939][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.108299][ T5831] team0: Port device team_slave_0 added [ 80.116585][ T5828] team0: Port device team_slave_1 added [ 80.140121][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.153068][ T5831] team0: Port device team_slave_1 added [ 80.218958][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.227222][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.256483][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.269399][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.278241][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.306378][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.319606][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.326933][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.353342][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.369493][ T5843] team0: Port device team_slave_0 added [ 80.381124][ T5830] hsr_slave_0: entered promiscuous mode [ 80.388350][ T5830] hsr_slave_1: entered promiscuous mode [ 80.404699][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.412483][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.422543][ T55] Bluetooth: hci1: command tx timeout [ 80.440489][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.459541][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.467217][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.494422][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.510445][ T55] Bluetooth: hci2: command tx timeout [ 80.510470][ T5838] Bluetooth: hci0: command tx timeout [ 80.510908][ T5838] Bluetooth: hci4: command tx timeout [ 80.516446][ T55] Bluetooth: hci3: command tx timeout [ 80.532216][ T5843] team0: Port device team_slave_1 added [ 80.553927][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.561338][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.588498][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.660672][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.668377][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.699425][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.712972][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.721045][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.748728][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.792287][ T5831] hsr_slave_0: entered promiscuous mode [ 80.799043][ T5831] hsr_slave_1: entered promiscuous mode [ 80.805597][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.814658][ T5831] Cannot create hsr debugfs directory [ 80.824665][ T5829] hsr_slave_0: entered promiscuous mode [ 80.832469][ T5829] hsr_slave_1: entered promiscuous mode [ 80.839426][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.847466][ T5829] Cannot create hsr debugfs directory [ 80.889647][ T5828] hsr_slave_0: entered promiscuous mode [ 80.896187][ T5828] hsr_slave_1: entered promiscuous mode [ 80.904976][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.913082][ T5828] Cannot create hsr debugfs directory [ 80.982409][ T5843] hsr_slave_0: entered promiscuous mode [ 80.989183][ T5843] hsr_slave_1: entered promiscuous mode [ 80.996199][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.004276][ T5843] Cannot create hsr debugfs directory [ 81.288375][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.315122][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.331976][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.352423][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.402079][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.424402][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.444404][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.461950][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.509681][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.535739][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.569204][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.583143][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.649048][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.659156][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.668811][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.690571][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.751804][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.778617][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.795248][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.805899][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.834386][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.847939][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.871319][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.888085][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.896562][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.912316][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.936131][ T4545] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.944034][ T4545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.004396][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.012340][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.050163][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.057526][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.097394][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.208587][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.256491][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.267374][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.274944][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.296451][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.304007][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.379313][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.433567][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.498160][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.505395][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.521281][ T55] Bluetooth: hci1: command tx timeout [ 82.524299][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.548900][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.574820][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.582012][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.589568][ T55] Bluetooth: hci4: command tx timeout [ 82.595790][ T5836] Bluetooth: hci2: command tx timeout [ 82.601607][ T5836] Bluetooth: hci0: command tx timeout [ 82.607196][ T5836] Bluetooth: hci3: command tx timeout [ 82.614953][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.622220][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.642066][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.659793][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.666998][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.829092][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.875734][ T5830] veth0_vlan: entered promiscuous mode [ 82.897176][ T5831] veth0_vlan: entered promiscuous mode [ 82.928411][ T5830] veth1_vlan: entered promiscuous mode [ 82.955272][ T5831] veth1_vlan: entered promiscuous mode [ 83.040020][ T5830] veth0_macvtap: entered promiscuous mode [ 83.068483][ T5831] veth0_macvtap: entered promiscuous mode [ 83.096164][ T5830] veth1_macvtap: entered promiscuous mode [ 83.124341][ T5831] veth1_macvtap: entered promiscuous mode [ 83.176694][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.204102][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.214900][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.228209][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.239764][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.251824][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.266341][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.279431][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.290127][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.299788][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.316348][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.327128][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.339198][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.349634][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.358939][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.367818][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.376691][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.413912][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.519148][ T5828] veth0_vlan: entered promiscuous mode [ 83.577787][ T5828] veth1_vlan: entered promiscuous mode [ 83.589593][ T4545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.606196][ T4545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.612839][ T3533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.637203][ T3533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.654615][ T5843] veth0_vlan: entered promiscuous mode [ 83.670013][ T5829] veth0_vlan: entered promiscuous mode [ 83.685167][ T5829] veth1_vlan: entered promiscuous mode [ 83.705006][ T5843] veth1_vlan: entered promiscuous mode [ 83.721437][ T4545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.734250][ T4545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.756782][ T5828] veth0_macvtap: entered promiscuous mode [ 83.766424][ T5828] veth1_macvtap: entered promiscuous mode [ 83.779285][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.800887][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.829303][ T5829] veth0_macvtap: entered promiscuous mode [ 83.851319][ T5829] veth1_macvtap: entered promiscuous mode [ 83.858143][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.871910][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.882597][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.893425][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.906544][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.923982][ T5843] veth0_macvtap: entered promiscuous mode [ 83.934433][ T5843] veth1_macvtap: entered promiscuous mode [ 83.957420][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.982284][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.001150][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.016371][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.029628][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.042409][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.065307][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.088270][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.109867][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.121397][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.138281][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.159979][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.185356][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.203519][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.218906][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.235048][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.245763][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.255953][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.266934][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.277778][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.282658][ T5916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 84.300005][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.303786][ T5922] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 84.311228][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.332104][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.342833][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.352840][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.363495][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.373399][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.384079][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.398117][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.411858][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.420803][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.429568][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.438440][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.468265][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.479976][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.496113][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.507025][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.518846][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.529541][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.539472][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.540589][ T5920] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 84.550087][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.551319][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.577405][ T5914] Illegal XDP return value 641784320 on prog (id 3) dev N/A, expect packet loss! [ 84.583018][ T5836] Bluetooth: hci1: command tx timeout [ 84.661214][ T5836] Bluetooth: hci4: command tx timeout [ 84.667936][ T5836] Bluetooth: hci0: command tx timeout [ 84.676941][ T5843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.680524][ T55] Bluetooth: hci2: command tx timeout [ 84.687273][ T5836] Bluetooth: hci3: command tx timeout [ 84.719317][ T5843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.747542][ T5843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.761862][ T5843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.780995][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.804081][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.820512][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.830067][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.904402][ T5929] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6'. [ 84.929779][ T5920] team0: Device veth1_macvtap failed to register rx_handler [ 85.092496][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.110316][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.252130][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.271520][ T5938] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7'. [ 85.283412][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.299314][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.312285][ T5938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'. [ 85.330519][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.346651][ T5938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'. [ 85.357754][ T5938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'. [ 85.366409][ T5943] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.454819][ T5943] warning: `syz.3.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.478583][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8'. [ 85.510137][ T5943] ipvlan2: entered promiscuous mode [ 85.558238][ T3533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.586377][ T3533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.619553][ T5946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9'. [ 85.649684][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.681972][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.768412][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.847496][ T5952] netlink: 'syz.3.10': attribute type 1 has an invalid length. [ 85.861933][ T5952] netlink: 'syz.3.10': attribute type 4 has an invalid length. [ 85.865968][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.869533][ T5952] netlink: 15363 bytes leftover after parsing attributes in process `syz.3.10'. [ 86.361329][ T5966] netlink: 772 bytes leftover after parsing attributes in process `syz.2.3'. [ 86.375538][ T5966] netlink: 'syz.2.3': attribute type 21 has an invalid length. [ 86.518308][ T5972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.661555][ T5840] Bluetooth: hci1: command tx timeout [ 86.712460][ T5962] team0 (unregistering): Port device team_slave_0 removed [ 86.726191][ T5962] team0 (unregistering): Port device team_slave_1 removed [ 86.743973][ T5840] Bluetooth: hci3: command tx timeout [ 86.750959][ T5840] Bluetooth: hci2: command tx timeout [ 86.756443][ T5840] Bluetooth: hci0: command tx timeout [ 86.762513][ T5836] Bluetooth: hci4: command tx timeout [ 87.074255][ T5987] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.282447][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802a111800: rx timeout, send abort [ 87.293080][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802a111800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 87.368403][ T5984] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.571537][ T5995] netlink: 'syz.3.22': attribute type 4 has an invalid length. [ 88.192789][ T6012] netlink: 'syz.4.24': attribute type 10 has an invalid length. [ 88.256755][ T6012] team0: Device ipvlan1 failed to register rx_handler [ 88.910957][ T6024] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.964778][ T5995] ipt_rpfilter: unknown options [ 89.242049][ T6024] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.588995][ T6024] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.605982][ T6057] IPv4: martian source 172.20.20.170 from 172.20.20.187, on dev syz_tun [ 89.614723][ T6057] ll header: 00000000: aa aa aa aa aa aa aa aa aa aa aa aa 08 00 [ 89.857355][ T6063] syz.3.40 uses obsolete (PF_INET,SOCK_PACKET) [ 89.938685][ T6024] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.977818][ T6071] __nla_validate_parse: 5 callbacks suppressed [ 89.977836][ T6071] netlink: 188 bytes leftover after parsing attributes in process `syz.3.40'. [ 90.002421][ T6071] netlink: 'syz.3.40': attribute type 1 has an invalid length. [ 90.035277][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 90.061432][ T6060] macvlan1: entered promiscuous mode [ 90.103231][ T6060] team0: Port device macvlan1 added [ 90.109449][ T6066] netlink: 'syz.4.41': attribute type 6 has an invalid length. [ 90.297225][ T6024] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.385015][ T6024] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.440994][ T6085] Zero length message leads to an empty skb [ 90.463280][ T6087] xt_CT: You must specify a L4 protocol and not use inversions on it [ 90.466444][ T6024] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.493740][ T6082] syzkaller1: entered promiscuous mode [ 90.499389][ T6082] syzkaller1: entered allmulticast mode [ 90.528278][ T6024] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.775796][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.49'. [ 91.108606][ T6115] xt_hashlimit: size too large, truncated to 1048576 [ 91.120699][ T6114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.55'. [ 91.142218][ T6114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.55'. [ 91.189483][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'. [ 91.246602][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'. [ 91.290788][ T6129] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 91.622996][ T6146] netlink: 36 bytes leftover after parsing attributes in process `syz.3.66'. [ 91.635348][ T6146] IPv6: addrconf: prefix option has invalid lifetime [ 91.639040][ T6148] netlink: 72 bytes leftover after parsing attributes in process `syz.2.68'. [ 91.743687][ T6153] sctp: [Deprecated]: syz.3.69 (pid 6153) Use of int in maxseg socket option. [ 91.743687][ T6153] Use struct sctp_assoc_value instead [ 91.891098][ T6165] IPv4: martian source 172.20.20.170 from 172.20.20.187, on dev syz_tun [ 91.899552][ T6165] ll header: 00000000: aa aa aa aa aa aa 01 80 c2 00 00 00 08 00 [ 92.044183][ T6171] netlink: 'syz.1.72': attribute type 72 has an invalid length. [ 92.061607][ T6169] netlink: 28 bytes leftover after parsing attributes in process `syz.0.71'. [ 92.089949][ T6171] netlink: 'syz.1.72': attribute type 8 has an invalid length. [ 92.206752][ T6171] netlink: 'syz.1.72': attribute type 21 has an invalid length. [ 92.746383][ T47] cfg80211: failed to load regulatory.db [ 93.220733][ T6211] syzkaller0: entered promiscuous mode [ 93.226354][ T6211] syzkaller0: entered allmulticast mode [ 93.977165][ T6223] netlink: 'syz.4.89': attribute type 6 has an invalid length. [ 94.031093][ T6223] netlink: 'syz.4.89': attribute type 7 has an invalid length. [ 94.038919][ T6223] netlink: 'syz.4.89': attribute type 8 has an invalid length. [ 94.071996][ T6225] FAULT_INJECTION: forcing a failure. [ 94.071996][ T6225] name failslab, interval 1, probability 0, space 0, times 1 [ 94.115874][ T6225] CPU: 1 UID: 0 PID: 6225 Comm: syz.2.90 Not tainted 6.13.0-rc3-syzkaller-00768-g3fff5da4ca21 #0 [ 94.126464][ T6225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 94.136746][ T6225] Call Trace: [ 94.140046][ T6225] [ 94.143003][ T6225] dump_stack_lvl+0x241/0x360 [ 94.147732][ T6225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.153107][ T6225] ? __pfx__printk+0x10/0x10 [ 94.157736][ T6225] ? __kmalloc_noprof+0xb5/0x4c0 [ 94.162712][ T6225] ? __pfx___might_resched+0x10/0x10 [ 94.168132][ T6225] should_fail_ex+0x3b0/0x4e0 [ 94.172879][ T6225] should_failslab+0xac/0x100 [ 94.177590][ T6225] __kmalloc_noprof+0xdd/0x4c0 [ 94.182486][ T6225] ? bpf_test_init+0xe1/0x180 [ 94.187302][ T6225] bpf_test_init+0xe1/0x180 [ 94.191939][ T6225] bpf_prog_test_run_xdp+0x48e/0x11e0 [ 94.197350][ T6225] ? __pfx_lock_release+0x10/0x10 [ 94.202428][ T6225] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 94.208362][ T6225] ? __fget_files+0x2a/0x410 [ 94.213004][ T6225] ? __fget_files+0x2a/0x410 [ 94.217635][ T6225] ? fput+0x21b/0x290 [ 94.221647][ T6225] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 94.227489][ T6225] bpf_prog_test_run+0x2e4/0x360 [ 94.232458][ T6225] __sys_bpf+0x48d/0x810 [ 94.236737][ T6225] ? __pfx___sys_bpf+0x10/0x10 [ 94.241534][ T6225] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 94.247544][ T6225] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 94.253901][ T6225] ? do_syscall_64+0x100/0x230 [ 94.258723][ T6225] __x64_sys_bpf+0x7c/0x90 [ 94.263292][ T6225] do_syscall_64+0xf3/0x230 [ 94.267927][ T6225] ? clear_bhb_loop+0x35/0x90 [ 94.272649][ T6225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.278680][ T6225] RIP: 0033:0x7fb2b1185d29 [ 94.283390][ T6225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.303203][ T6225] RSP: 002b:00007fb2b204f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 94.311650][ T6225] RAX: ffffffffffffffda RBX: 00007fb2b1375fa0 RCX: 00007fb2b1185d29 [ 94.319652][ T6225] RDX: 0000000000000050 RSI: 0000000020000000 RDI: 000000000000000a [ 94.327654][ T6225] RBP: 00007fb2b204f090 R08: 0000000000000000 R09: 0000000000000000 [ 94.335658][ T6225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.343666][ T6225] R13: 0000000000000000 R14: 00007fb2b1375fa0 R15: 00007fff8192f498 [ 94.351767][ T6225] [ 94.364641][ T5840] Bluetooth: hci4: command tx timeout [ 94.637752][ T6235] netlink: 'syz.1.93': attribute type 5 has an invalid length. [ 95.747645][ T6255] __nla_validate_parse: 3 callbacks suppressed [ 95.747668][ T6255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.99'. [ 96.167149][ T6275] FAULT_INJECTION: forcing a failure. [ 96.167149][ T6275] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 96.242041][ T6275] CPU: 1 UID: 0 PID: 6275 Comm: syz.1.105 Not tainted 6.13.0-rc3-syzkaller-00768-g3fff5da4ca21 #0 [ 96.252713][ T6275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 96.262804][ T6275] Call Trace: [ 96.266114][ T6275] [ 96.269081][ T6275] dump_stack_lvl+0x241/0x360 [ 96.273898][ T6275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.279326][ T6275] ? __pfx__printk+0x10/0x10 [ 96.283989][ T6275] should_fail_ex+0x3b0/0x4e0 [ 96.288972][ T6275] _copy_from_user+0x2f/0xc0 [ 96.293611][ T6275] bpf_test_init+0x11f/0x180 [ 96.298689][ T6275] bpf_prog_test_run_xdp+0x48e/0x11e0 [ 96.304466][ T6275] ? __pfx_lock_release+0x10/0x10 [ 96.309978][ T6275] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 96.315917][ T6275] ? __fget_files+0x2a/0x410 [ 96.320556][ T6275] ? __fget_files+0x2a/0x410 [ 96.325216][ T6275] ? fput+0x21b/0x290 [ 96.329257][ T6275] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 96.335229][ T6275] bpf_prog_test_run+0x2e4/0x360 [ 96.340304][ T6275] __sys_bpf+0x48d/0x810 [ 96.344595][ T6275] ? __pfx___sys_bpf+0x10/0x10 [ 96.349417][ T6275] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 96.355431][ T6275] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 96.361861][ T6275] ? do_syscall_64+0x100/0x230 [ 96.366736][ T6275] __x64_sys_bpf+0x7c/0x90 [ 96.371217][ T6275] do_syscall_64+0xf3/0x230 [ 96.375765][ T6275] ? clear_bhb_loop+0x35/0x90 [ 96.380471][ T6275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.386387][ T6275] RIP: 0033:0x7fb60d385d29 [ 96.390829][ T6275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.410486][ T6275] RSP: 002b:00007fb60e258038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.418922][ T6275] RAX: ffffffffffffffda RBX: 00007fb60d575fa0 RCX: 00007fb60d385d29 [ 96.426950][ T6275] RDX: 0000000000000050 RSI: 0000000020000000 RDI: 000000000000000a [ 96.434939][ T6275] RBP: 00007fb60e258090 R08: 0000000000000000 R09: 0000000000000000 [ 96.443058][ T6275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.451499][ T6275] R13: 0000000000000000 R14: 00007fb60d575fa0 R15: 00007fff8bc9f158 [ 96.459680][ T6275] [ 96.666769][ T6286] netlink: 'syz.1.110': attribute type 11 has an invalid length. [ 96.693012][ T6286] netlink: 36 bytes leftover after parsing attributes in process `syz.1.110'. [ 97.062167][ T6296] netlink: 'syz.3.113': attribute type 10 has an invalid length. [ 97.111138][ T6296] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.113'. [ 97.135864][ T6296] openvswitch: netlink: Flow key attr not present in new flow. [ 97.155096][ T6318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.117'. [ 97.478862][ T6337] FAULT_INJECTION: forcing a failure. [ 97.478862][ T6337] name failslab, interval 1, probability 0, space 0, times 0 [ 97.565937][ T6337] CPU: 1 UID: 0 PID: 6337 Comm: syz.1.121 Not tainted 6.13.0-rc3-syzkaller-00768-g3fff5da4ca21 #0 [ 97.576593][ T6337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 97.586766][ T6337] Call Trace: [ 97.590190][ T6337] [ 97.593161][ T6337] dump_stack_lvl+0x241/0x360 [ 97.598303][ T6337] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.603894][ T6337] ? __pfx__printk+0x10/0x10 [ 97.608720][ T6337] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 97.614671][ T6337] ? __pfx___might_resched+0x10/0x10 [ 97.620112][ T6337] should_fail_ex+0x3b0/0x4e0 [ 97.624835][ T6337] should_failslab+0xac/0x100 [ 97.629578][ T6337] __kmalloc_node_noprof+0xe1/0x4d0 [ 97.634829][ T6337] ? __kvmalloc_node_noprof+0x72/0x190 [ 97.641152][ T6337] ? is_bpf_text_address+0x26/0x2a0 [ 97.646939][ T6337] __kvmalloc_node_noprof+0x72/0x190 [ 97.652278][ T6337] bpf_test_run_xdp_live+0x21d/0x2230 [ 97.657700][ T6337] ? arch_stack_walk+0xfd/0x150 [ 97.662796][ T6337] ? stack_trace_save+0x118/0x1d0 [ 97.668063][ T6337] ? __pfx_stack_trace_save+0x10/0x10 [ 97.673468][ T6337] ? stack_depot_save_flags+0x37/0x940 [ 97.678947][ T6337] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 97.684753][ T6337] ? mark_lock+0x9a/0x360 [ 97.689332][ T6337] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 97.695317][ T6337] ? __might_fault+0xaa/0x120 [ 97.699995][ T6337] ? __might_fault+0xc6/0x120 [ 97.704681][ T6337] ? _copy_from_user+0x99/0xc0 [ 97.709460][ T6337] ? bpf_test_init+0x15a/0x180 [ 97.714227][ T6337] ? xdp_convert_md_to_buff+0x5b/0x330 [ 97.719787][ T6337] bpf_prog_test_run_xdp+0x805/0x11e0 [ 97.725249][ T6337] ? __pfx_lock_release+0x10/0x10 [ 97.730285][ T6337] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 97.736089][ T6337] ? __fget_files+0x2a/0x410 [ 97.740949][ T6337] ? __fget_files+0x2a/0x410 [ 97.745550][ T6337] ? fput+0x21b/0x290 [ 97.749545][ T6337] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 97.755364][ T6337] bpf_prog_test_run+0x2e4/0x360 [ 97.760429][ T6337] __sys_bpf+0x48d/0x810 [ 97.764798][ T6337] ? __pfx___sys_bpf+0x10/0x10 [ 97.769574][ T6337] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 97.775730][ T6337] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 97.782086][ T6337] ? do_syscall_64+0x100/0x230 [ 97.786952][ T6337] __x64_sys_bpf+0x7c/0x90 [ 97.791375][ T6337] do_syscall_64+0xf3/0x230 [ 97.795882][ T6337] ? clear_bhb_loop+0x35/0x90 [ 97.800580][ T6337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.806739][ T6337] RIP: 0033:0x7fb60d385d29 [ 97.811191][ T6337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.830996][ T6337] RSP: 002b:00007fb60e258038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.839589][ T6337] RAX: ffffffffffffffda RBX: 00007fb60d575fa0 RCX: 00007fb60d385d29 [ 97.847847][ T6337] RDX: 0000000000000050 RSI: 0000000020000000 RDI: 000000000000000a [ 97.855901][ T6337] RBP: 00007fb60e258090 R08: 0000000000000000 R09: 0000000000000000 [ 97.863889][ T6337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.872215][ T6337] R13: 0000000000000000 R14: 00007fb60d575fa0 R15: 00007fff8bc9f158 [ 97.880669][ T6337] [ 97.905843][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 98.063950][ T6343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.373738][ T6351] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 98.400612][ T25] IPVS: starting estimator thread 0... [ 98.466192][ T6356] netlink: 16 bytes leftover after parsing attributes in process `syz.3.127'. [ 98.477590][ T6356] netlink: 16 bytes leftover after parsing attributes in process `syz.3.127'. [ 98.573202][ T6345] openvswitch: netlink: ERSPAN option length err (len 4096, max 255). [ 98.630482][ T6354] IPVS: using max 20 ests per chain, 48000 per kthread [ 99.023748][ T6370] netlink: 24 bytes leftover after parsing attributes in process `syz.0.125'. [ 99.627302][ T6388] netlink: 'syz.4.133': attribute type 21 has an invalid length. [ 100.310965][ T6408] xt_bpf: check failed: parse error [ 100.707708][ T6419] netlink: 72 bytes leftover after parsing attributes in process `syz.2.142'. [ 100.778589][ T6419] dccp_v6_rcv: dropped packet with invalid checksum [ 101.069001][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.146'. [ 101.212515][ T6446] netlink: 'syz.1.148': attribute type 1 has an invalid length. [ 101.222744][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'. [ 101.243887][ T6447] netlink: 'syz.3.144': attribute type 10 has an invalid length. [ 101.302321][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.149'. [ 101.334882][ T6452] dccp_invalid_packet: P.Data Offset(8) too large [ 101.562188][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.571433][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.643490][ T6465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.154'. [ 101.656562][ T6465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.154'. [ 101.699916][ T6436] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 101.734366][ T6448] netlink: 'syz.0.147': attribute type 21 has an invalid length. [ 101.854525][ T6473] netlink: 72 bytes leftover after parsing attributes in process `syz.1.155'. [ 102.235208][ T6491] netlink: 16 bytes leftover after parsing attributes in process `syz.4.159'. [ 102.640818][ T6503] netlink: 'syz.4.161': attribute type 10 has an invalid length. [ 102.648852][ T6503] netlink: 40 bytes leftover after parsing attributes in process `syz.4.161'. [ 102.661575][ T6503] batman_adv: batadv0: Adding interface: virt_wifi0 [ 102.670166][ T6503] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.698496][ T6503] batman_adv: batadv0: Interface activated: virt_wifi0 [ 102.776157][ T6508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.162'. [ 102.790408][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.162'. [ 102.899785][ T6508] xt_connbytes: Forcing CT accounting to be enabled [ 103.085034][ T6522] netlink: 'syz.4.166': attribute type 21 has an invalid length. [ 103.358645][ T6535] dccp_v6_rcv: dropped packet with invalid checksum [ 104.313215][ T6582] netlink: 'syz.2.181': attribute type 21 has an invalid length. [ 104.592143][ T6598] netlink: 'syz.3.182': attribute type 10 has an invalid length. [ 104.755294][ T6601] xt_CT: No such helper "snmp" [ 104.785914][ T6579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.807028][ T6579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.846872][ T6579] bond0 (unregistering): Released all slaves [ 104.890476][ T6590] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 105.223733][ T6615] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.249967][ T6616] netlink: 'syz.1.189': attribute type 5 has an invalid length. [ 105.275443][ T6614] xt_CT: No such helper "netbios-ns" [ 105.331174][ T6615] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.418280][ T6616] ip6erspan0: entered promiscuous mode [ 105.488840][ T6615] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.742322][ T6615] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.808482][ T6641] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 105.945338][ T6646] netlink: 'syz.3.197': attribute type 10 has an invalid length. [ 106.146551][ T6615] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.167127][ T6615] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.218255][ T6615] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.243056][ T6654] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 106.277243][ T6615] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.352634][ T6655] netlink: 'syz.3.201': attribute type 10 has an invalid length. [ 106.527683][ T6662] __nla_validate_parse: 7 callbacks suppressed [ 106.527703][ T6662] netlink: 72 bytes leftover after parsing attributes in process `syz.1.203'. [ 106.555833][ T6662] dccp_v6_rcv: dropped packet with invalid checksum [ 106.698079][ T6664] bridge_slave_0: left allmulticast mode [ 106.737296][ T6664] bridge_slave_0: left promiscuous mode [ 106.759448][ T6664] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.797361][ T6664] bridge_slave_1: left allmulticast mode [ 106.810579][ T6664] bridge_slave_1: left promiscuous mode [ 106.824511][ T6664] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.842919][ T6664] bond0: (slave bond_slave_0): Releasing backup interface [ 106.856514][ T6664] bond0: (slave bond_slave_1): Releasing backup interface [ 106.877066][ T6664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.886133][ T6664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.924381][ T6664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.944452][ T6664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.377466][ T6690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.209'. [ 107.402469][ T6692] netlink: 'syz.2.213': attribute type 21 has an invalid length. [ 107.699324][ T6703] netlink: 72 bytes leftover after parsing attributes in process `syz.2.216'. [ 107.769095][ T6709] IPVS: Unknown mcast interface: pim6reg0 [ 107.771914][ T6703] dccp_v6_rcv: dropped packet with invalid checksum [ 108.437649][ T6719] netlink: 40 bytes leftover after parsing attributes in process `syz.2.219'. [ 108.508986][ T6741] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 108.660591][ T6749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.226'. [ 108.681515][ T6745] netlink: 'syz.3.224': attribute type 10 has an invalid length. [ 108.760106][ T6758] No such timeout policy "syz0" [ 109.092499][ T6768] netlink: 'syz.3.231': attribute type 10 has an invalid length. [ 109.185170][ C1] IPv4: martian source 172.20.20.57 from 172.20.20.57, on dev veth0_macvtap [ 109.186882][ C0] IPv4: martian source 172.20.20.57 from 172.20.20.57, on dev macvtap0 [ 109.194030][ C1] ll header: 00000000: ff ff ff ff ff ff aa aa aa aa aa 39 08 06 [ 109.202313][ C0] ll header: 00000000: ff ff ff ff ff ff aa aa aa aa aa 39 08 06 [ 109.228001][ T6768] team0: Device veth1_macvtap failed to register rx_handler [ 109.244763][ T6770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.232'. [ 109.760673][ T6801] netlink: 1264 bytes leftover after parsing attributes in process `syz.1.240'. [ 109.800898][ T6804] netlink: 16 bytes leftover after parsing attributes in process `syz.2.241'. [ 109.928699][ T6810] IPVS: length: 96 != 24 [ 110.300537][ T6828] netlink: 'syz.0.247': attribute type 10 has an invalid length. [ 110.500803][ T6833] netlink: 'syz.4.249': attribute type 10 has an invalid length. [ 110.552958][ T6846] netlink: 'syz.4.249': attribute type 10 has an invalid length. [ 110.584984][ T6833] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.593940][ T6833] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.609903][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.251'. [ 110.709026][ T6850] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 110.765876][ T6850] netlink: 'syz.3.252': attribute type 10 has an invalid length. [ 110.834962][ T6846] team0: Port device wlan1 added [ 111.270831][ T6880] netlink: 28 bytes leftover after parsing attributes in process `syz.4.258'. [ 111.358675][ T6887] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 111.468184][ T6892] pim6reg1: entered promiscuous mode [ 111.476510][ T6892] pim6reg1: entered allmulticast mode [ 111.926122][ T6908] FAULT_INJECTION: forcing a failure. [ 111.926122][ T6908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.979029][ T6908] CPU: 1 UID: 0 PID: 6908 Comm: syz.0.262 Not tainted 6.13.0-rc3-syzkaller-00768-g3fff5da4ca21 #0 [ 111.989779][ T6908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 111.999858][ T6908] Call Trace: [ 112.003248][ T6908] [ 112.006206][ T6908] dump_stack_lvl+0x241/0x360 [ 112.010928][ T6908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.016257][ T6908] ? __pfx__printk+0x10/0x10 [ 112.021050][ T6908] ? __pfx_lock_release+0x10/0x10 [ 112.026236][ T6908] should_fail_ex+0x3b0/0x4e0 [ 112.030930][ T6908] _copy_from_user+0x2f/0xc0 [ 112.035558][ T6908] copy_msghdr_from_user+0xae/0x680 [ 112.040797][ T6908] ? __lock_acquire+0x1397/0x2100 [ 112.045865][ T6908] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 112.051707][ T6908] ? __fget_files+0x2a/0x410 [ 112.056338][ T6908] ? __fget_files+0x2a/0x410 [ 112.060948][ T6908] do_recvmmsg+0x3bd/0xab0 [ 112.065511][ T6908] ? __pfx_do_recvmmsg+0x10/0x10 [ 112.070474][ T6908] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 112.076501][ T6908] ? ksys_write+0x22a/0x2b0 [ 112.081040][ T6908] ? __pfx_lock_release+0x10/0x10 [ 112.086115][ T6908] ? vfs_write+0x730/0xd30 [ 112.090813][ T6908] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 112.096800][ T6908] ? __fget_files+0x2a/0x410 [ 112.101443][ T6908] __x64_sys_recvmmsg+0x199/0x250 [ 112.106479][ T6908] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 112.112032][ T6908] ? do_syscall_64+0x100/0x230 [ 112.116802][ T6908] ? do_syscall_64+0xb6/0x230 [ 112.121481][ T6908] do_syscall_64+0xf3/0x230 [ 112.125988][ T6908] ? clear_bhb_loop+0x35/0x90 [ 112.130676][ T6908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.136602][ T6908] RIP: 0033:0x7fef88f85d29 [ 112.141110][ T6908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.160730][ T6908] RSP: 002b:00007fef89e1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 112.169263][ T6908] RAX: ffffffffffffffda RBX: 00007fef89175fa0 RCX: 00007fef88f85d29 [ 112.177323][ T6908] RDX: 03ffffffffffff62 RSI: 00000000200005c0 RDI: 0000000000000004 [ 112.185305][ T6908] RBP: 00007fef89e1f090 R08: 0000000000000000 R09: 0000000000000000 [ 112.193286][ T6908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.201345][ T6908] R13: 0000000000000000 R14: 00007fef89175fa0 R15: 00007ffe540ae5c8 [ 112.209337][ T6908] [ 112.865752][ T6943] GUP no longer grows the stack in syz.3.271 (6943): 20006000-2000a000 (20005000) [ 112.916167][ T6943] CPU: 0 UID: 0 PID: 6943 Comm: syz.3.271 Not tainted 6.13.0-rc3-syzkaller-00768-g3fff5da4ca21 #0 [ 112.926852][ T6943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 112.937818][ T6943] Call Trace: [ 112.941132][ T6943] [ 112.944225][ T6943] dump_stack_lvl+0x241/0x360 [ 112.949498][ T6943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.954842][ T6943] ? __pfx__printk+0x10/0x10 [ 112.959573][ T6943] ? find_vma+0xf9/0x170 [ 112.963881][ T6943] ? vma_is_secretmem+0xd/0x50 [ 112.968874][ T6943] ? check_vma_flags+0x52b/0x5a0 [ 112.973986][ T6943] __get_user_pages+0x4385/0x49e0 [ 112.979067][ T6943] ? mark_lock+0x9a/0x360 [ 112.983499][ T6943] ? __pfx___get_user_pages+0x10/0x10 [ 112.988938][ T6943] __gup_longterm_locked+0x49a/0x17f0 [ 112.994440][ T6943] ? __pfx___might_resched+0x10/0x10 [ 112.999779][ T6943] ? __pfx___gup_longterm_locked+0x10/0x10 [ 113.005630][ T6943] ? down_read+0x82b/0xa40 [ 113.010184][ T6943] ? is_valid_gup_args+0x124/0x200 [ 113.015505][ T6943] pin_user_pages+0x137/0x1f0 [ 113.020486][ T6943] ? __pfx_pin_user_pages+0x10/0x10 [ 113.025899][ T6943] ? trace_kmalloc+0x1f/0xd0 [ 113.030553][ T6943] xdp_umem_create+0x978/0xf30 [ 113.035397][ T6943] xsk_setsockopt+0x732/0x950 [ 113.040126][ T6943] ? __pfx_xsk_setsockopt+0x10/0x10 [ 113.045381][ T6943] ? __pfx_lock_acquire+0x10/0x10 [ 113.050445][ T6943] ? aa_sock_opt_perm+0x79/0x120 [ 113.055599][ T6943] ? __pfx_xsk_setsockopt+0x10/0x10 [ 113.060838][ T6943] do_sock_setsockopt+0x3af/0x720 [ 113.065913][ T6943] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 113.071600][ T6943] ? __fget_files+0x395/0x410 [ 113.076351][ T6943] ? __fget_files+0x2a/0x410 [ 113.081008][ T6943] __x64_sys_setsockopt+0x1ee/0x280 [ 113.086245][ T6943] do_syscall_64+0xf3/0x230 [ 113.091127][ T6943] ? clear_bhb_loop+0x35/0x90 [ 113.095817][ T6943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.101815][ T6943] RIP: 0033:0x7f7f95b85d29 [ 113.106262][ T6943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.126076][ T6943] RSP: 002b:00007f7f939f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 113.134516][ T6943] RAX: ffffffffffffffda RBX: 00007f7f95d75fa0 RCX: 00007f7f95b85d29 [ 113.142589][ T6943] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000006 [ 113.150827][ T6943] RBP: 00007f7f95c01b08 R08: 0000000000000020 R09: 0000000000000000 [ 113.158889][ T6943] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 113.166931][ T6943] R13: 0000000000000000 R14: 00007f7f95d75fa0 R15: 00007fff80c9da48 [ 113.175030][ T6943] [ 113.258443][ T6943] netlink: 16 bytes leftover after parsing attributes in process `syz.3.271'. [ 114.957867][ T6963] FAULT_INJECTION: forcing a failure. [ 114.957867][ T6963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.008168][ T6963] CPU: 0 UID: 0 PID: 6963 Comm: syz.3.276 Not tainted 6.13.0-rc3-syzkaller-00768-g3fff5da4ca21 #0 [ 115.018923][ T6963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 115.029363][ T6963] Call Trace: [ 115.032869][ T6963] [ 115.035832][ T6963] dump_stack_lvl+0x241/0x360 [ 115.041024][ T6963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.047138][ T6963] ? __pfx__printk+0x10/0x10 [ 115.052067][ T6963] ? __pfx_lock_release+0x10/0x10 [ 115.057237][ T6963] should_fail_ex+0x3b0/0x4e0 [ 115.061968][ T6963] _copy_from_user+0x2f/0xc0 [ 115.066601][ T6963] copy_msghdr_from_user+0xae/0x680 [ 115.071850][ T6963] ? __pfx___might_resched+0x10/0x10 [ 115.077168][ T6963] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 115.082992][ T6963] ? do_recvmmsg+0x44e/0xab0 [ 115.087606][ T6963] ? __might_fault+0xaa/0x120 [ 115.092318][ T6963] do_recvmmsg+0x3bd/0xab0 [ 115.096788][ T6963] ? __pfx_do_recvmmsg+0x10/0x10 [ 115.101782][ T6963] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 115.107825][ T6963] ? ksys_write+0x22a/0x2b0 [ 115.112413][ T6963] ? __pfx_lock_release+0x10/0x10 [ 115.117507][ T6963] ? vfs_write+0x730/0xd30 [ 115.121978][ T6963] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 115.128265][ T6963] ? __fget_files+0x2a/0x410 [ 115.132967][ T6963] __x64_sys_recvmmsg+0x199/0x250 [ 115.138036][ T6963] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 115.143624][ T6963] ? do_syscall_64+0x100/0x230 [ 115.148456][ T6963] ? do_syscall_64+0xb6/0x230 [ 115.153193][ T6963] do_syscall_64+0xf3/0x230 [ 115.157802][ T6963] ? clear_bhb_loop+0x35/0x90 [ 115.162506][ T6963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.168457][ T6963] RIP: 0033:0x7f7f95b85d29 [ 115.172885][ T6963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.192596][ T6963] RSP: 002b:00007f7f939f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 115.201475][ T6963] RAX: ffffffffffffffda RBX: 00007f7f95d75fa0 RCX: 00007f7f95b85d29 [ 115.209459][ T6963] RDX: 03ffffffffffff62 RSI: 00000000200005c0 RDI: 0000000000000004 [ 115.218052][ T6963] RBP: 00007f7f939f6090 R08: 0000000000000000 R09: 0000000000000000 [ 115.226224][ T6963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.235184][ T6963] R13: 0000000000000000 R14: 00007f7f95d75fa0 R15: 00007fff80c9da48 [ 115.243809][ T6963] [ 115.447621][ T6972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.509362][ T6972] syzkaller0: entered promiscuous mode [ 115.635472][ T6972] syzkaller0: entered allmulticast mode [ 115.648826][ T6982] batadv_slave_1: entered promiscuous mode [ 115.676311][ T6972] batadv_slave_1: left promiscuous mode [ 115.711560][ T6976] xt_nfacct: accounting object `sy' does not exists [ 117.686051][ T7007] hsr_slave_0: left promiscuous mode [ 117.738826][ T7007] hsr_slave_1: left promiscuous mode [ 117.884957][ T7015] tipc: Enabling of bearer rejected, failed to enable media [ 117.901961][ T7020] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 117.966156][ T7020] netlink: 200 bytes leftover after parsing attributes in process `syz.1.295'. [ 118.087103][ T7035] netlink: 24 bytes leftover after parsing attributes in process `syz.4.298'. [ 118.153743][ T7032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.295'. [ 118.231593][ T7045] netlink: 1412 bytes leftover after parsing attributes in process `syz.1.295'. [ 118.583977][ T7051] syzkaller1: entered promiscuous mode [ 118.586793][ T7056] netlink: 16 bytes leftover after parsing attributes in process `syz.3.301'. [ 118.594550][ T7051] syzkaller1: entered allmulticast mode [ 118.644164][ T7057] netlink: 16 bytes leftover after parsing attributes in process `syz.3.301'. [ 118.758940][ T7056] IPv6: sit1: Disabled Multicast RS [ 119.343020][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.310'. [ 119.482432][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.315'. [ 119.625734][ T7099] pim6reg: entered allmulticast mode [ 119.893768][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'. [ 119.942319][ T7108] netlink: 'syz.1.319': attribute type 21 has an invalid length. [ 120.184392][ T7113] ebt_limit: overflow, try lower: 570423552/2483027968 [ 120.291380][ T7122] netlink: 48 bytes leftover after parsing attributes in process `syz.3.321'. [ 120.733406][ T7133] netlink: 'syz.2.325': attribute type 10 has an invalid length. [ 120.871886][ T7133] team0: Port device netdevsim0 added [ 121.743024][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.330'. [ 122.160077][ T7157] FAULT_INJECTION: forcing a failure. [ 122.160077][ T7157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.192661][ T7156] netlink: 'syz.3.333': attribute type 4 has an invalid length. [ 122.250633][ T7157] CPU: 0 UID: 0 PID: 7157 Comm: syz.1.334 Not tainted 6.13.0-rc3-syzkaller-00768-g3fff5da4ca21 #0 [ 122.261301][ T7157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 122.271400][ T7157] Call Trace: [ 122.274736][ T7157] [ 122.277715][ T7157] dump_stack_lvl+0x241/0x360 [ 122.282446][ T7157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.287677][ T7157] ? __pfx__printk+0x10/0x10 [ 122.292306][ T7157] ? __pfx_lock_release+0x10/0x10 [ 122.297361][ T7157] should_fail_ex+0x3b0/0x4e0 [ 122.302070][ T7157] _copy_from_user+0x2f/0xc0 [ 122.306699][ T7157] copy_msghdr_from_user+0xae/0x680 [ 122.311927][ T7157] ? __pfx___might_resched+0x10/0x10 [ 122.317237][ T7157] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 122.323075][ T7157] ? do_recvmmsg+0x44e/0xab0 [ 122.327690][ T7157] ? __might_fault+0xaa/0x120 [ 122.332448][ T7157] do_recvmmsg+0x3bd/0xab0 [ 122.336899][ T7157] ? __pfx_do_recvmmsg+0x10/0x10 [ 122.341881][ T7157] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 122.347805][ T7157] ? ksys_write+0x22a/0x2b0 [ 122.352329][ T7157] ? __pfx_lock_release+0x10/0x10 [ 122.357397][ T7157] ? vfs_write+0x730/0xd30 [ 122.361862][ T7157] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 122.367867][ T7157] ? __fget_files+0x2a/0x410 [ 122.372496][ T7157] __x64_sys_recvmmsg+0x199/0x250 [ 122.377719][ T7157] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 122.383441][ T7157] ? do_syscall_64+0x100/0x230 [ 122.388240][ T7157] ? do_syscall_64+0xb6/0x230 [ 122.393564][ T7157] do_syscall_64+0xf3/0x230 [ 122.398093][ T7157] ? clear_bhb_loop+0x35/0x90 [ 122.402886][ T7157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.409046][ T7157] RIP: 0033:0x7fb60d385d29 [ 122.413489][ T7157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.433122][ T7157] RSP: 002b:00007fb60e258038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 122.441578][ T7157] RAX: ffffffffffffffda RBX: 00007fb60d575fa0 RCX: 00007fb60d385d29 [ 122.449687][ T7157] RDX: 03ffffffffffff62 RSI: 00000000200005c0 RDI: 0000000000000004 [ 122.457680][ T7157] RBP: 00007fb60e258090 R08: 0000000000000000 R09: 0000000000000000 [ 122.465675][ T7157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.473671][ T7157] R13: 0000000000000000 R14: 00007fb60d575fa0 R15: 00007fff8bc9f158 [ 122.481694][ T7157] [ 122.515602][ T7156] netlink: 'syz.3.333': attribute type 4 has an invalid length. [ 123.106652][ T7175] netlink: 16 bytes leftover after parsing attributes in process `syz.1.340'. [ 123.393666][ T7186] netlink: 240 bytes leftover after parsing attributes in process `syz.1.344'. [ 123.574975][ T7193] netlink: 28 bytes leftover after parsing attributes in process `syz.2.345'. [ 124.576653][ T7224] netlink: 40 bytes leftover after parsing attributes in process `syz.2.350'. [ 124.962196][ T7228] syzkaller0: entered promiscuous mode [ 124.967935][ T7228] syzkaller0: entered allmulticast mode [ 125.334449][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.356'. [ 126.730627][ T7243] pim6reg1: entered promiscuous mode [ 126.736117][ T7243] pim6reg1: entered allmulticast mode [ 126.743564][ T7261] netlink: 'syz.4.356': attribute type 21 has an invalid length. [ 127.076620][ T7272] netlink: 24 bytes leftover after parsing attributes in process `syz.1.359'. [ 127.134496][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.362'. [ 127.345202][ T7285] netlink: 60 bytes leftover after parsing attributes in process `syz.4.364'. [ 127.524360][ T7291] bridge_slave_1: left allmulticast mode [ 127.539649][ T7291] bridge_slave_1: left promiscuous mode [ 127.546288][ T7291] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.595970][ T7291] netlink: 'syz.4.365': attribute type 39 has an invalid length. [ 127.993633][ T7298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.367'. [ 128.043847][ T7298] netlink: 'syz.2.367': attribute type 21 has an invalid length. [ 128.317612][ T7303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.369'. [ 128.409612][ T7312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.370'. [ 128.902858][ T7319] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 128.917274][ T7319] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 129.392401][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.377'. [ 129.877931][ T7345] netlink: 60 bytes leftover after parsing attributes in process `syz.3.382'. [ 129.975713][ T7353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.386'. [ 130.002271][ T7345] xt_hashlimit: max too large, truncated to 1048576 [ 130.028706][ T7345] No such timeout policy "syz1" [ 131.070513][ T7372] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 131.192939][ T7373] netlink: 16 bytes leftover after parsing attributes in process `syz.3.391'. [ 131.406726][ T7381] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.847650][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 132.043837][ T7402] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 132.049502][ T7402] dvmrp1: linktype set to 780 [ 132.387136][ T7410] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 132.398688][ T7412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.404'. [ 132.444263][ T7412] netlink: 'syz.2.404': attribute type 21 has an invalid length. [ 132.890743][ T7428] netlink: 'syz.2.409': attribute type 10 has an invalid length. [ 132.926410][ T7430] netlink: 'syz.3.410': attribute type 10 has an invalid length. [ 132.934695][ T7428] netlink: 40 bytes leftover after parsing attributes in process `syz.2.409'. [ 132.998137][ T7428] batman_adv: batadv0: Adding interface: virt_wifi0 [ 133.032947][ T7428] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.149661][ T7428] batman_adv: batadv0: Interface activated: virt_wifi0 [ 133.177084][ T7430] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.184694][ T7430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.203349][ T7437] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 133.245765][ C1] IPv4: martian source 172.20.20.12 from 172.20.20.12, on dev veth1_to_bridge [ 133.254816][ C1] ll header: 00000000: ff ff ff ff ff ff aa aa aa aa aa 17 08 06 [ 133.271390][ T7437] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.395893][ T7430] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.720872][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.287426][ T7487] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ÿÿÿÿ [ 135.602186][ T7502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.651960][ T25] IPVS: starting estimator thread 0... [ 135.699496][ T7508] x_tables: duplicate underflow at hook 1 [ 135.760498][ T7506] IPVS: using max 26 ests per chain, 62400 per kthread [ 136.019832][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.434'. [ 136.030537][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.434'. [ 136.161345][ T7518] netlink: zone id is out of range [ 136.166541][ T7518] netlink: zone id is out of range [ 136.191271][ T7518] netlink: zone id is out of range [ 136.196449][ T7518] netlink: zone id is out of range [ 136.240297][ T7518] netlink: zone id is out of range [ 136.245643][ T7518] netlink: zone id is out of range [ 136.262443][ T7518] netlink: zone id is out of range [ 136.267641][ T7518] netlink: zone id is out of range [ 136.273700][ T7518] netlink: zone id is out of range [ 136.278854][ T7518] netlink: zone id is out of range [ 136.732937][ T7531] netlink: 28 bytes leftover after parsing attributes in process `syz.2.438'. [ 137.417640][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'. [ 137.711909][ T7565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.450'. [ 138.042884][ T7576] Bluetooth: MGMT ver 1.23 [ 138.275384][ T7582] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.456'. [ 138.626154][ T7581] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.456'. [ 138.970303][ T7598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.462'. [ 139.016697][ T7598] netlink: 'syz.4.462': attribute type 21 has an invalid length. [ 140.171735][ T7632] netlink: 'syz.1.472': attribute type 10 has an invalid length. [ 140.280817][ T7632] syz_tun: entered promiscuous mode [ 140.305572][ T7632] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 140.398608][ T7638] netlink: 'syz.4.474': attribute type 4 has an invalid length. [ 140.472653][ T7610] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 140.476268][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.475'. [ 140.550480][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.475'. [ 141.131108][ T7676] __nla_validate_parse: 1 callbacks suppressed [ 141.131128][ T7676] netlink: 28 bytes leftover after parsing attributes in process `syz.1.487'. [ 141.168511][ T7675] netlink: 24 bytes leftover after parsing attributes in process `syz.3.485'. [ 141.173711][ T7676] netlink: 'syz.1.487': attribute type 21 has an invalid length. [ 141.185733][ T7676] netlink: 128 bytes leftover after parsing attributes in process `syz.1.487'. [ 141.194902][ T7676] netlink: 'syz.1.487': attribute type 4 has an invalid length. [ 141.202707][ T7676] netlink: 'syz.1.487': attribute type 5 has an invalid length. [ 141.210490][ T7676] netlink: 3 bytes leftover after parsing attributes in process `syz.1.487'. [ 141.299400][ T7663] trusted_key: syz.2.482 sent an empty control message without MSG_MORE. [ 141.536965][ T7691] netlink: 52 bytes leftover after parsing attributes in process `syz.1.492'. [ 141.578481][ T7696] net_ratelimit: 308 callbacks suppressed [ 141.578499][ T7696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.700543][ T5840] Bluetooth: hci3: command 0x0401 tx timeout [ 141.773788][ T7706] netlink: 'syz.0.496': attribute type 24 has an invalid length. [ 141.821798][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'. [ 142.006850][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.499'. [ 142.065196][ T7720] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 142.399207][ T7736] netlink: 68 bytes leftover after parsing attributes in process `syz.0.507'. [ 142.508777][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.508'. [ 143.053391][ T7759] netlink: 'syz.4.513': attribute type 10 has an invalid length. [ 143.773887][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.519'. [ 143.926338][ T7787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.937253][ T7787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.949968][ T7787] bond0 (unregistering): Released all slaves [ 144.301878][ T7810] netlink: 'syz.4.526': attribute type 3 has an invalid length. [ 144.345068][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033eb4000: rx timeout, send abort [ 144.353635][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031bf2400: rx timeout, send abort [ 144.362716][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888033eb4000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 144.377189][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888031bf2400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 144.570803][ T7819] netlink: 'syz.4.532': attribute type 3 has an invalid length. [ 144.588978][ T7819] netlink: 'syz.4.532': attribute type 3 has an invalid length. [ 144.606497][ T7819] netlink: 'syz.4.532': attribute type 3 has an invalid length. [ 145.347682][ T7856] sctp: [Deprecated]: syz.1.540 (pid 7856) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.347682][ T7856] Use struct sctp_sack_info instead [ 145.435328][ T7864] netlink: 'syz.1.540': attribute type 1 has an invalid length. [ 145.529687][ T7856] sctp: [Deprecated]: syz.1.540 (pid 7856) Use of int in maxseg socket option. [ 145.529687][ T7856] Use struct sctp_assoc_value instead [ 145.967093][ T7882] openvswitch: netlink: Missing valid actions attribute. [ 145.976430][ T7882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.202199][ T7923] __nla_validate_parse: 8 callbacks suppressed [ 147.202220][ T7923] netlink: 32 bytes leftover after parsing attributes in process `syz.2.560'. [ 147.225420][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.561'. [ 147.415347][ T7925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.511548][ T7936] netlink: 28 bytes leftover after parsing attributes in process `syz.3.566'. [ 147.524145][ T7925] bond0: (slave bond1): Enslaving as an active interface with an up link [ 147.758717][ T7943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.568'. [ 147.946784][ T7949] netlink: 48 bytes leftover after parsing attributes in process `syz.4.569'. [ 147.984279][ T5840] Bluetooth: hci4: link tx timeout [ 147.990860][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.377697][ T7960] rdma_op ffff8880285211f0 conn xmit_rdma 0000000000000000 [ 148.612049][ T7966] netlink: 32 bytes leftover after parsing attributes in process `syz.3.575'. [ 148.864161][ T7979] netlink: 36 bytes leftover after parsing attributes in process `syz.4.581'. [ 149.005683][ T7984] xt_cgroup: invalid path, errno=-2 [ 149.108716][ T7986] (unnamed net_device) (uninitialized): down delay (38) is not a multiple of miimon (100), value rounded to 0 ms [ 149.242010][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.582'. [ 149.385449][ T7993] netlink: 48 bytes leftover after parsing attributes in process `syz.4.585'. [ 149.804188][ T8002] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 149.811367][ T8002] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 149.998357][ T8012] netlink: 48 bytes leftover after parsing attributes in process `syz.1.591'. [ 150.015405][ T55] Bluetooth: hci4: link tx timeout [ 150.022783][ T55] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 150.031959][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 150.155750][ T8017] netlink: 'syz.3.593': attribute type 178 has an invalid length. [ 150.155898][ T8018] netlink: 'syz.3.593': attribute type 178 has an invalid length. [ 150.830602][ T8045] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 151.553832][ T8057] bond0: entered promiscuous mode [ 151.610691][ T8057] bond0: entered allmulticast mode [ 151.616281][ T8057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.651564][ T8063] netlink: 'syz.2.607': attribute type 21 has an invalid length. [ 151.659413][ T8063] netlink: 'syz.2.607': attribute type 4 has an invalid length. [ 151.824607][ T8063] netlink: 'syz.2.607': attribute type 5 has an invalid length. [ 151.913159][ T8064] vxcan1 speed is unknown, defaulting to 1000 [ 152.004302][ T8064] vxcan1 speed is unknown, defaulting to 1000 [ 152.042277][ T8064] vxcan1 speed is unknown, defaulting to 1000 [ 152.496508][ T8073] __nla_validate_parse: 2 callbacks suppressed [ 152.496530][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'. [ 152.519518][ T8074] netlink: 'syz.4.612': attribute type 11 has an invalid length. [ 152.715512][ T8064] infiniband syz0: set active [ 152.750915][ T8064] infiniband syz0: added vxcan1 [ 152.757033][ T8064] syz0: rxe_create_cq: returned err = -12 [ 152.763284][ T47] vxcan1 speed is unknown, defaulting to 1000 [ 152.792722][ T8064] infiniband syz0: Couldn't create ib_mad CQ [ 152.811036][ T8064] infiniband syz0: Couldn't open port 1 [ 152.876348][ T8064] RDS/IB: syz0: added [ 152.881443][ T8064] smc: adding ib device syz0 with port count 1 [ 152.887843][ T8064] smc: ib device syz0 port 1 has pnetid [ 152.921780][ T5882] vxcan1 speed is unknown, defaulting to 1000 [ 152.930187][ T8064] vxcan1 speed is unknown, defaulting to 1000 [ 152.992864][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'. [ 153.034030][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'. [ 153.048051][ T8088] netlink: 40 bytes leftover after parsing attributes in process `syz.0.615'. [ 153.058095][ T8085] netlink: 40 bytes leftover after parsing attributes in process `syz.0.615'. [ 153.096040][ T8095] netlink: 232 bytes leftover after parsing attributes in process `syz.4.618'. [ 153.252616][ T8064] vxcan1 speed is unknown, defaulting to 1000 [ 153.638630][ T8064] vxcan1 speed is unknown, defaulting to 1000 [ 153.712066][ T8120] openvswitch: netlink: Tunnel attr 54 out of range max 16 [ 153.974855][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.628'. [ 153.976208][ T8134] netlink: 28 bytes leftover after parsing attributes in process `syz.0.630'. [ 154.001678][ T8064] vxcan1 speed is unknown, defaulting to 1000 [ 154.206866][ T8142] netlink: 72 bytes leftover after parsing attributes in process `syz.0.632'. [ 154.248947][ T8064] vxcan1 speed is unknown, defaulting to 1000 [ 154.278143][ T8142] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 154.481142][ T8064] vxcan1 speed is unknown, defaulting to 1000 [ 154.724719][ T8064] vxcan1 speed is unknown, defaulting to 1000 [ 154.926011][ T8064] vxcan1 speed is unknown, defaulting to 1000 [ 155.135444][ T8064] vxcan1 speed is unknown, defaulting to 1000 [ 155.340905][ T8160] netlink: 116 bytes leftover after parsing attributes in process `syz.3.637'. [ 155.711115][ T8169] netlink: 'syz.2.640': attribute type 30 has an invalid length. [ 156.161271][ T8178] netlink: 'syz.1.642': attribute type 10 has an invalid length. [ 156.210115][ T8178] syz_tun: left promiscuous mode [ 156.285394][ T8180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.927393][ T8189] bridge_slave_0: left allmulticast mode [ 156.942164][ T8189] bridge_slave_0: left promiscuous mode [ 156.955637][ T8189] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.979743][ T8189] bridge_slave_1: left allmulticast mode [ 156.991577][ T8189] bridge_slave_1: left promiscuous mode [ 157.008911][ T8189] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.024979][ T8189] bond0: (slave bond_slave_0): Releasing backup interface [ 157.052200][ T8189] bond0: (slave bond_slave_1): Releasing backup interface [ 157.224418][ T8189] team0: Port device team_slave_0 removed [ 157.267945][ T8189] team0: Port device team_slave_1 removed [ 157.280977][ T8189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.298784][ T8189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.325523][ T8189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.340343][ T8189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.607118][ T8213] __nla_validate_parse: 4 callbacks suppressed [ 157.607145][ T8213] netlink: 36 bytes leftover after parsing attributes in process `syz.2.650'. [ 157.862342][ T8226] netlink: 'syz.1.654': attribute type 1 has an invalid length. [ 157.883518][ T8226] netlink: 220 bytes leftover after parsing attributes in process `syz.1.654'. [ 157.916840][ T8231] netlink: 'syz.2.653': attribute type 10 has an invalid length. [ 158.022458][ T8233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.653'. [ 158.246651][ T8221] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.254614][ T8221] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.317737][ T8221] infiniband syz0: set down [ 158.365058][ T8221] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 158.388252][ T8222] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 158.406001][ T8222] macvlan3: entered allmulticast mode [ 158.412744][ T8222] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 158.434273][ T8222] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 158.441640][ T8238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.657'. [ 158.523515][ T8231] team0: Port device netdevsim0 removed [ 158.537094][ T47] vxcan1 speed is unknown, defaulting to 1000 [ 158.568752][ T47] vxcan1 speed is unknown, defaulting to 1000 [ 158.922743][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.661'. [ 158.935105][ T8251] sctp: [Deprecated]: syz.2.660 (pid 8251) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.935105][ T8251] Use struct sctp_sack_info instead [ 159.089756][ T8255] netlink: 44 bytes leftover after parsing attributes in process `syz.1.662'. [ 159.629406][ T8269] netlink: 176 bytes leftover after parsing attributes in process `syz.2.669'. [ 159.926764][ T8275] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.945122][ T8280] netlink: 376 bytes leftover after parsing attributes in process `syz.4.672'. [ 160.076124][ T8275] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.132806][ T8287] netlink: 28 bytes leftover after parsing attributes in process `syz.0.675'. [ 160.187553][ T8275] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.303965][ T8275] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.473219][ T8275] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.517640][ T8275] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.541560][ T8275] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.561379][ T8275] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.624864][ T5926] IPVS: starting estimator thread 0... [ 160.652609][ T8297] batadv0: entered promiscuous mode [ 160.677048][ T8296] batadv0: left promiscuous mode [ 160.747403][ T8299] IPVS: using max 26 ests per chain, 62400 per kthread [ 161.090888][ T8307] tipc: Started in network mode [ 161.095837][ T8307] tipc: Node identity 9add6790c126, cluster identity 4711 [ 161.116628][ T8307] tipc: Enabled bearer , priority 0 [ 161.135630][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.684'. [ 161.202559][ T8306] tipc: Disabling bearer [ 161.425728][ T8318] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 161.597149][ T8333] vxcan1 speed is unknown, defaulting to 1000 [ 161.681179][ T8339] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 161.815941][ T8339] netlink: 'syz.2.694': attribute type 10 has an invalid length. [ 162.479648][ T8377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.664586][ T8381] syzkaller1: entered promiscuous mode [ 162.708007][ T8381] syzkaller1: entered allmulticast mode [ 162.981374][ T8390] IPv6: Can't replace route, no match found [ 163.704776][ T8413] __nla_validate_parse: 1 callbacks suppressed [ 163.704796][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 163.726722][ T8416] netlink: 'syz.2.714': attribute type 12 has an invalid length. [ 163.886904][ T8417] netlink: 'syz.2.714': attribute type 12 has an invalid length. [ 163.962986][ T8428] netlink: 'syz.3.715': attribute type 4 has an invalid length. [ 164.000360][ T8428] netlink: 152 bytes leftover after parsing attributes in process `syz.3.715'. [ 164.061354][ T8428] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 164.206263][ T8437] netlink: 24 bytes leftover after parsing attributes in process `syz.4.717'. [ 164.288628][ T8446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.427643][ T8457] xt_socket: unknown flags 0xd0 [ 164.978009][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.728'. [ 165.242733][ T8504] openvswitch: netlink: Missing key (keys=40, expected=100) [ 165.305471][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'. [ 165.393913][ T8512] netlink: 16 bytes leftover after parsing attributes in process `syz.3.735'. [ 165.758158][ T8528] netlink: 560 bytes leftover after parsing attributes in process `syz.3.739'. [ 165.788559][ T8528] netlink: 36 bytes leftover after parsing attributes in process `syz.3.739'. [ 165.843116][ T8534] FAULT_INJECTION: forcing a failure. [ 165.843116][ T8534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.900499][ T8534] CPU: 1 UID: 0 PID: 8534 Comm: syz.1.741 Not tainted 6.13.0-rc3-syzkaller-00768-g3fff5da4ca21 #0 [ 165.911193][ T8534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 165.921277][ T8534] Call Trace: [ 165.924560][ T8534] [ 165.927489][ T8534] dump_stack_lvl+0x241/0x360 [ 165.932177][ T8534] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.937385][ T8534] ? __pfx__printk+0x10/0x10 [ 165.942006][ T8534] ? snprintf+0xda/0x120 [ 165.946265][ T8534] should_fail_ex+0x3b0/0x4e0 [ 165.950949][ T8534] _copy_to_user+0x31/0xb0 [ 165.955376][ T8534] simple_read_from_buffer+0xca/0x150 [ 165.960773][ T8534] proc_fail_nth_read+0x1e9/0x250 [ 165.965805][ T8534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 165.971372][ T8534] ? rw_verify_area+0x55e/0x6f0 [ 165.976234][ T8534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 165.981800][ T8534] vfs_read+0x1fc/0xb70 [ 165.985971][ T8534] ? __pfx___mutex_lock+0x10/0x10 [ 165.991003][ T8534] ? __pfx_vfs_read+0x10/0x10 [ 165.995686][ T8534] ? __fget_files+0x2a/0x410 [ 166.000290][ T8534] ? __fget_files+0x395/0x410 [ 166.004982][ T8534] ? __fget_files+0x2a/0x410 [ 166.009590][ T8534] ksys_read+0x18f/0x2b0 [ 166.013836][ T8534] ? __pfx_ksys_read+0x10/0x10 [ 166.018597][ T8534] ? do_syscall_64+0x100/0x230 [ 166.023366][ T8534] ? do_syscall_64+0xb6/0x230 [ 166.028063][ T8534] do_syscall_64+0xf3/0x230 [ 166.032571][ T8534] ? clear_bhb_loop+0x35/0x90 [ 166.037861][ T8534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.043758][ T8534] RIP: 0033:0x7fb60d38473c [ 166.048192][ T8534] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 166.067804][ T8534] RSP: 002b:00007fb60e258030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 166.076226][ T8534] RAX: ffffffffffffffda RBX: 00007fb60d575fa0 RCX: 00007fb60d38473c [ 166.084209][ T8534] RDX: 000000000000000f RSI: 00007fb60e2580a0 RDI: 0000000000000008 [ 166.092196][ T8534] RBP: 00007fb60e258090 R08: 0000000000000000 R09: 0000000000000000 [ 166.100171][ T8534] R10: 0000000020000f40 R11: 0000000000000246 R12: 0000000000000001 [ 166.108148][ T8534] R13: 0000000000000000 R14: 00007fb60d575fa0 R15: 00007fff8bc9f158 [ 166.116243][ T8534] [ 166.647141][ T8573] ieee802154 phy1 wpan1: encryption failed: -22 [ 166.726716][ T8582] netlink: 20 bytes leftover after parsing attributes in process `syz.4.752'. [ 166.786302][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.752'. [ 167.063202][ T8602] xt_hashlimit: max too large, truncated to 1048576 [ 167.593698][ T8631] FAULT_INJECTION: forcing a failure. [ 167.593698][ T8631] name failslab, interval 1, probability 0, space 0, times 0 [ 167.658841][ T8631] CPU: 0 UID: 0 PID: 8631 Comm: syz.1.763 Not tainted 6.13.0-rc3-syzkaller-00768-g3fff5da4ca21 #0 [ 167.669516][ T8631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 167.679601][ T8631] Call Trace: [ 167.682910][ T8631] [ 167.685870][ T8631] dump_stack_lvl+0x241/0x360 [ 167.690586][ T8631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.695822][ T8631] ? __pfx__printk+0x10/0x10 [ 167.700452][ T8631] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 167.706383][ T8631] ? __pfx___might_resched+0x10/0x10 [ 167.711696][ T8631] should_fail_ex+0x3b0/0x4e0 [ 167.716825][ T8631] should_failslab+0xac/0x100 [ 167.721514][ T8631] ? __get_vm_area_node+0x132/0x2d0 [ 167.726804][ T8631] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 167.732539][ T8631] __get_vm_area_node+0x132/0x2d0 [ 167.737580][ T8631] __vmalloc_node_range_noprof+0x344/0x1380 [ 167.743505][ T8631] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 167.749063][ T8631] ? mark_lock+0x9a/0x360 [ 167.753412][ T8631] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 167.759752][ T8631] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 167.765305][ T8631] __vmalloc_noprof+0x79/0x90 [ 167.769988][ T8631] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 167.775625][ T8631] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 167.780999][ T8631] ? bpf_prog_alloc+0x28/0x1b0 [ 167.785766][ T8631] bpf_prog_alloc+0x3a/0x1b0 [ 167.790357][ T8631] bpf_prog_load+0x7f7/0x20f0 [ 167.795048][ T8631] ? __pfx_bpf_prog_load+0x10/0x10 [ 167.800177][ T8631] ? __pfx___might_resched+0x10/0x10 [ 167.805477][ T8631] ? __might_fault+0xc6/0x120 [ 167.810159][ T8631] __sys_bpf+0x4ee/0x810 [ 167.814406][ T8631] ? __pfx___sys_bpf+0x10/0x10 [ 167.819177][ T8631] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 167.825164][ T8631] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 167.831495][ T8631] ? do_syscall_64+0x100/0x230 [ 167.836264][ T8631] __x64_sys_bpf+0x7c/0x90 [ 167.840689][ T8631] do_syscall_64+0xf3/0x230 [ 167.845199][ T8631] ? clear_bhb_loop+0x35/0x90 [ 167.849885][ T8631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.855782][ T8631] RIP: 0033:0x7fb60d385d29 [ 167.860205][ T8631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.879820][ T8631] RSP: 002b:00007fb60e258038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 167.888244][ T8631] RAX: ffffffffffffffda RBX: 00007fb60d575fa0 RCX: 00007fb60d385d29 [ 167.896306][ T8631] RDX: 0000000000000094 RSI: 0000000020000040 RDI: 0000000000000005 [ 167.904277][ T8631] RBP: 00007fb60e258090 R08: 0000000000000000 R09: 0000000000000000 [ 167.912335][ T8631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.920738][ T8631] R13: 0000000000000001 R14: 00007fb60d575fa0 R15: 00007fff8bc9f158 [ 167.928731][ T8631] [ 168.037999][ T8631] syz.1.763: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 168.086239][ T8631] CPU: 1 UID: 0 PID: 8631 Comm: syz.1.763 Not tainted 6.13.0-rc3-syzkaller-00768-g3fff5da4ca21 #0 [ 168.096912][ T8631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 168.106999][ T8631] Call Trace: [ 168.110302][ T8631] [ 168.113254][ T8631] dump_stack_lvl+0x241/0x360 [ 168.117969][ T8631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.123205][ T8631] ? __pfx__printk+0x10/0x10 [ 168.127999][ T8631] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 168.134429][ T8631] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 168.140955][ T8631] warn_alloc+0x278/0x410 [ 168.145315][ T8631] ? __pfx_warn_alloc+0x10/0x10 [ 168.150183][ T8631] ? __kasan_kmalloc+0x23/0xb0 [ 168.154985][ T8631] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 168.160986][ T8631] ? __get_vm_area_node+0x280/0x2d0 [ 168.166227][ T8631] __vmalloc_node_range_noprof+0x369/0x1380 [ 168.172120][ T8631] ? mark_lock+0x9a/0x360 [ 168.176467][ T8631] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 168.182838][ T8631] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 168.188390][ T8631] __vmalloc_noprof+0x79/0x90 [ 168.193070][ T8631] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 168.198619][ T8631] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 168.203994][ T8631] ? bpf_prog_alloc+0x28/0x1b0 [ 168.208758][ T8631] bpf_prog_alloc+0x3a/0x1b0 [ 168.213355][ T8631] bpf_prog_load+0x7f7/0x20f0 [ 168.218044][ T8631] ? __pfx_bpf_prog_load+0x10/0x10 [ 168.223171][ T8631] ? __pfx___might_resched+0x10/0x10 [ 168.228477][ T8631] ? __might_fault+0xc6/0x120 [ 168.233247][ T8631] __sys_bpf+0x4ee/0x810 [ 168.237510][ T8631] ? __pfx___sys_bpf+0x10/0x10 [ 168.242284][ T8631] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 168.248275][ T8631] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 168.254613][ T8631] ? do_syscall_64+0x100/0x230 [ 168.259382][ T8631] __x64_sys_bpf+0x7c/0x90 [ 168.263811][ T8631] do_syscall_64+0xf3/0x230 [ 168.268317][ T8631] ? clear_bhb_loop+0x35/0x90 [ 168.273012][ T8631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.278944][ T8631] RIP: 0033:0x7fb60d385d29 [ 168.283362][ T8631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.303154][ T8631] RSP: 002b:00007fb60e258038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 168.311623][ T8631] RAX: ffffffffffffffda RBX: 00007fb60d575fa0 RCX: 00007fb60d385d29 [ 168.319600][ T8631] RDX: 0000000000000094 RSI: 0000000020000040 RDI: 0000000000000005 [ 168.327600][ T8631] RBP: 00007fb60e258090 R08: 0000000000000000 R09: 0000000000000000 [ 168.335584][ T8631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.343561][ T8631] R13: 0000000000000001 R14: 00007fb60d575fa0 R15: 00007fff8bc9f158 [ 168.351583][ T8631] [ 168.398049][ T8631] Mem-Info: [ 168.464737][ T8631] active_anon:6442 inactive_anon:0 isolated_anon:0 [ 168.464737][ T8631] active_file:1583 inactive_file:38287 isolated_file:0 [ 168.464737][ T8631] unevictable:768 dirty:331 writeback:0 [ 168.464737][ T8631] slab_reclaimable:10160 slab_unreclaimable:103159 [ 168.464737][ T8631] mapped:28950 shmem:1412 pagetables:770 [ 168.464737][ T8631] sec_pagetables:0 bounce:0 [ 168.464737][ T8631] kernel_misc_reclaimable:0 [ 168.464737][ T8631] free:1337224 free_pcp:600 free_cma:0 [ 168.569359][ T8631] Node 0 active_anon:25768kB inactive_anon:0kB active_file:6332kB inactive_file:153076kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115800kB dirty:1324kB writeback:0kB shmem:4112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11072kB pagetables:3080kB sec_pagetables:0kB all_unreclaimable? no [ 168.602140][ T8631] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 168.645199][ T8631] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 168.687770][ T8631] lowmem_reserve[]: 0 2465 2466 0 0 [ 168.699387][ T8631] Node 0 DMA32 free:1427396kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:25728kB inactive_anon:0kB active_file:6332kB inactive_file:152248kB unevictable:1536kB writepending:1324kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:1924kB local_pcp:1664kB free_cma:0kB [ 168.738935][ T8631] lowmem_reserve[]: 0 0 0 0 0 [ 168.744024][ T8631] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 168.787603][ T8631] lowmem_reserve[]: 0 0 0 0 0 [ 168.792612][ T8631] Node 1 Normal free:3906380kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:204kB local_pcp:0kB free_cma:0kB [ 168.828873][ T8668] vxcan1 speed is unknown, defaulting to 1000 [ 168.851106][ T8631] lowmem_reserve[]: 0 0 0 0 0 [ 168.855918][ T8631] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 168.874857][ T8631] Node 0 DMA32: 257*4kB (UE) 185*8kB (UME) 182*16kB (UME) 639*32kB (UME) 1324*64kB (UME) 265*128kB (UME) 63*256kB (UME) 13*512kB (UME) 7*1024kB (UME) 7*2048kB (UME) 302*4096kB (UM) = 1425804kB [ 168.895207][ T8631] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 168.915835][ T8631] Node 1 Normal: 217*4kB (UME) 51*8kB (UME) 31*16kB (UME) 207*32kB (UME) 82*64kB (UME) 34*128kB (UME) 7*256kB (UM) 5*512kB (UM) 5*1024kB (UME) 4*2048kB (UE) 945*4096kB (M) = 3906380kB [ 168.936287][ T8631] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 168.945954][ T8631] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 168.956232][ T8631] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 168.983475][ T8631] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 169.000499][ T8631] 41857 total pagecache pages [ 169.005301][ T8631] 0 pages in swap cache [ 169.009573][ T8631] Free swap = 124996kB [ 169.013814][ T8631] Total swap = 124996kB [ 169.017986][ T8631] 2097051 pages RAM [ 169.030374][ T8631] 0 pages HighMem/MovableOnly [ 169.035240][ T8631] 427011 pages reserved [ 169.039408][ T8631] 0 pages cma reserved [ 169.081252][ T8663] __nla_validate_parse: 7 callbacks suppressed [ 169.081272][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.771'. [ 169.269124][ T8688] macsec1: entered allmulticast mode [ 169.274640][ T8688] veth1_macvtap: entered allmulticast mode [ 169.333032][ T8688] veth1_macvtap: left allmulticast mode [ 169.357646][ T8690] netlink: 72 bytes leftover after parsing attributes in process `syz.4.778'. [ 169.865146][ T8703] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 169.961560][ T8718] netlink: 72 bytes leftover after parsing attributes in process `syz.1.781'. [ 170.125716][ T8728] x_tables: duplicate underflow at hook 2 [ 170.171183][ T8733] netlink: 'syz.4.783': attribute type 10 has an invalid length. [ 170.219707][ T8738] x_tables: duplicate underflow at hook 2 [ 170.243999][ T8741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.783'. [ 170.488517][ T8719] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 170.646728][ T8742] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 170.665006][ T8742] macvlan2: entered allmulticast mode [ 170.676461][ T8742] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 170.702789][ T8758] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.703182][ T8742] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 170.925360][ T8764] netlink: 72 bytes leftover after parsing attributes in process `syz.4.793'. [ 171.072839][ T8764] dccp_invalid_packet: P.Data Offset(0) too small [ 171.657735][ T8806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.800'. [ 172.033709][ T8826] IPVS: length: 60 != 8 [ 172.081360][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'. [ 172.123700][ T8832] netlink: 'syz.0.806': attribute type 10 has an invalid length. [ 172.131869][ T8832] netlink: 55 bytes leftover after parsing attributes in process `syz.0.806'. [ 172.168628][ T8833] netlink: 72 bytes leftover after parsing attributes in process `syz.3.808'. [ 172.286720][ T8837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.809'. [ 172.664732][ T8858] veth0_virt_wifi: entered promiscuous mode [ 172.682784][ T8858] veth0_virt_wifi: left promiscuous mode [ 173.581798][ T8898] netlink: 'syz.2.830': attribute type 2 has an invalid length. [ 173.589513][ T8898] netlink: 'syz.2.830': attribute type 3 has an invalid length. [ 174.143269][ T8946] __nla_validate_parse: 4 callbacks suppressed [ 174.143310][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.846'. [ 174.274965][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'. [ 174.437175][ T8963] sock: sock_timestamping_bind_phc: sock not bind to device [ 174.699524][ T8975] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 174.766037][ T8976] hsr0: entered promiscuous mode [ 174.771849][ T8975] netlink: 'syz.4.859': attribute type 10 has an invalid length. [ 174.822067][ T8991] netlink: 16 bytes leftover after parsing attributes in process `syz.4.859'. [ 175.223683][ T9002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.865'. [ 175.583799][ T9025] netlink: 28 bytes leftover after parsing attributes in process `syz.2.873'. [ 175.679847][ T9031] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.688639][ T9031] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.697075][ T9031] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.705422][ T9031] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.926521][ T9052] netlink: 'syz.1.881': attribute type 4 has an invalid length. [ 175.948363][ T9052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.881'. [ 175.949588][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.880'. [ 176.225667][ T9061] batadv_slave_1: entered promiscuous mode [ 176.313793][ T9060] batadv_slave_1: left promiscuous mode [ 176.778510][ T9096] netlink: 72 bytes leftover after parsing attributes in process `syz.2.892'. [ 176.795503][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.893'. [ 176.830789][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.893'. [ 177.013342][ T9110] bpq0: entered promiscuous mode [ 177.853873][ T9164] netlink: 'syz.2.906': attribute type 2 has an invalid length. [ 177.862719][ T9164] netlink: 'syz.2.906': attribute type 3 has an invalid length. [ 178.595310][ T9215] veth0_virt_wifi: entered promiscuous mode [ 178.608784][ T9215] veth0_virt_wifi: left promiscuous mode [ 178.992536][ T9237] netlink: 'syz.0.925': attribute type 10 has an invalid length. [ 179.133211][ T9233] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.141885][ T9233] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.151567][ T9233] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.160070][ T9233] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.171290][ T9235] netlink: 'syz.4.926': attribute type 11 has an invalid length. [ 179.268356][ T9244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.281497][ T9244] netlink: 'syz.4.927': attribute type 10 has an invalid length. [ 179.304582][ T9244] team0: Port device wlan1 removed [ 179.345868][ T9244] IPVS: Error connecting to the multicast addr [ 179.381754][ T5882] ------------[ cut here ]------------ [ 179.387736][ T5882] Invalid VIF (ffff888028d629d0) magic 0x0, 08:02:11:00:00:01, 1/0 [ 179.396160][ T5882] WARNING: CPU: 0 PID: 5882 at drivers/net/wireless/virtual/mac80211_hwsim.c:237 mac80211_hwsim_tx+0x1b6f/0x23c0 [ 179.408186][ T5882] Modules linked in: [ 179.412177][ T5882] CPU: 0 UID: 0 PID: 5882 Comm: kworker/0:3 Not tainted 6.13.0-rc3-syzkaller-00768-g3fff5da4ca21 #0 [ 179.423013][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 179.433174][ T5882] Workqueue: mld mld_ifc_work [ 179.437894][ T5882] RIP: 0010:mac80211_hwsim_tx+0x1b6f/0x23c0 [ 179.443905][ T5882] Code: 28 84 c0 0f 85 06 08 00 00 45 0f b6 8e 61 04 00 00 48 c7 c7 00 4a a9 8c 4c 89 f6 44 89 e2 48 89 e9 41 89 d8 e8 f2 a0 50 fa 90 <0f> 0b 90 90 e9 69 f2 ff ff e8 23 fd 8f fa 90 0f 0b 90 e9 d5 f2 ff [ 179.463691][ T5882] RSP: 0018:ffffc900042debf0 EFLAGS: 00010246 [ 179.469883][ T5882] RAX: 1f8d57a40d4ca900 RBX: 0000000000000001 RCX: ffff88805f0eda00 [ 179.477927][ T5882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.482827][ T9252] __nla_validate_parse: 9 callbacks suppressed [ 179.482844][ T9252] netlink: 24 bytes leftover after parsing attributes in process `syz.0.931'. [ 179.485947][ T5882] RBP: ffff888028d62e2a R08: ffffffff81601a42 R09: fffffbfff1cfa210 [ 179.494655][ T9252] netlink: 48 bytes leftover after parsing attributes in process `syz.0.931'. [ 179.501056][ T5882] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 0000000000000000 [ 179.526018][ T5882] R13: dffffc0000000000 R14: ffff888028d629d0 R15: 0000000000000000 [ 179.534070][ T5882] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 179.543068][ T5882] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 179.549684][ T5882] CR2: 0000555573f125c8 CR3: 000000000e736000 CR4: 00000000003526f0 [ 179.557728][ T5882] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 179.565771][ T5882] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 179.573839][ T5882] Call Trace: [ 179.577169][ T5882] [ 179.580129][ T5882] ? __warn+0x165/0x4d0 [ 179.584371][ T5882] ? mac80211_hwsim_tx+0x1b6f/0x23c0 [ 179.589704][ T5882] ? report_bug+0x2b3/0x500 [ 179.594337][ T5882] ? mac80211_hwsim_tx+0x1b6f/0x23c0 [ 179.599707][ T5882] ? handle_bug+0x60/0x90 [ 179.604129][ T5882] ? exc_invalid_op+0x1a/0x50 [ 179.608844][ T5882] ? asm_exc_invalid_op+0x1a/0x20 [ 179.613966][ T5882] ? __warn_printk+0x292/0x360 [ 179.618811][ T5882] ? mac80211_hwsim_tx+0x1b6f/0x23c0 [ 179.624227][ T5882] ieee80211_handle_wake_tx_queue+0x1ae/0x2d0 [ 179.630381][ T5882] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 179.637020][ T5882] ? ieee80211_queue_skb+0x18b6/0x24b0 [ 179.642569][ T5882] ? do_raw_spin_unlock+0x13c/0x8b0 [ 179.647844][ T5882] ieee80211_queue_skb+0x1ae9/0x24b0 [ 179.653259][ T5882] ieee80211_tx+0x2c4/0x470 [ 179.657817][ T5882] ? __pfx_ieee80211_tx+0x10/0x10 [ 179.662664][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.933'. [ 179.662969][ T5882] ? ieee80211_xmit+0x30f/0x3f0 [ 179.676569][ T5882] __ieee80211_subif_start_xmit+0xe93/0x1600 [ 179.682631][ T5882] ? ip6_finish_output2+0x12c7/0x17b0 [ 179.688046][ T5882] ? ip6_finish_output+0x41e/0x840 [ 179.693257][ T5882] ? __ieee80211_subif_start_xmit+0x300/0x1600 [ 179.699455][ T5882] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 179.705972][ T5882] ? __lock_acquire+0x1397/0x2100 [ 179.711125][ T5882] ieee80211_subif_start_xmit+0xde/0x4d0 [ 179.716806][ T5882] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 179.723144][ T5882] ? __pfx_lock_acquire+0x10/0x10 [ 179.728317][ T5882] dev_hard_start_xmit+0x27a/0x7d0 [ 179.733550][ T5882] __dev_queue_xmit+0x1b73/0x3f50 [ 179.738733][ T5882] ? __dev_queue_xmit+0x2f4/0x3f50 [ 179.743950][ T5882] ? __pfx___dev_queue_xmit+0x10/0x10 [ 179.749372][ T5882] ? neigh_resolve_output+0x450/0x740 [ 179.754821][ T5882] ? read_seqbegin+0x157/0x2b0 [ 179.759632][ T5882] ? lockdep_hardirqs_on+0x99/0x150 [ 179.764932][ T5882] ? read_seqbegin+0x208/0x2b0 [ 179.769759][ T5882] ? __pfx_read_seqbegin+0x10/0x10 [ 179.774966][ T5882] ? neigh_resolve_output+0x2e5/0x740 [ 179.780420][ T5882] ? eth_header+0x11c/0x1f0 [ 179.784968][ T5882] ? __asan_memcpy+0x40/0x70 [ 179.789605][ T5882] ? eth_header+0x11c/0x1f0 [ 179.794198][ T5882] ? __pfx_eth_header+0x10/0x10 [ 179.799108][ T5882] ? neigh_resolve_output+0x61f/0x740 [ 179.805018][ T5882] ip6_finish_output2+0x12c7/0x17b0 [ 179.810301][ T5882] ? ip6_mtu+0x81/0x3f0 [ 179.814587][ T5882] ? ip6_finish_output2+0x63a/0x17b0 [ 179.820015][ T5882] ? __pfx_ip6_finish_output2+0x10/0x10 [ 179.825797][ T5882] ? ip6_mtu+0x81/0x3f0 [ 179.829992][ T5882] ip6_finish_output+0x41e/0x840 [ 179.835114][ T5882] NF_HOOK+0x9e/0x430 [ 179.839136][ T5882] ? NF_HOOK+0xfa/0x430 [ 179.843372][ T5882] ? __pfx_NF_HOOK+0x10/0x10 [ 179.848012][ T5882] ? __pfx_dst_output+0x10/0x10 [ 179.852964][ T5882] ? icmp6_dst_alloc+0x3aa/0x420 [ 179.858060][ T5882] mld_sendpack+0x843/0xdb0 [ 179.862729][ T5882] ? __pfx_mld_newpack+0x10/0x10 [ 179.867736][ T5882] ? mld_sendpack+0x1e8/0xdb0 [ 179.872478][ T5882] ? __pfx_mld_sendpack+0x10/0x10 [ 179.877564][ T5882] mld_ifc_work+0x7d9/0xd90 [ 179.882154][ T5882] ? process_scheduled_works+0x976/0x1840 [ 179.887925][ T5882] process_scheduled_works+0xa66/0x1840 [ 179.893578][ T5882] ? __pfx_process_scheduled_works+0x10/0x10 [ 179.899608][ T5882] ? assign_work+0x364/0x3d0 [ 179.904311][ T5882] worker_thread+0x870/0xd30 [ 179.908962][ T5882] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 179.914961][ T5882] ? __kthread_parkme+0x169/0x1d0 [ 179.920046][ T5882] ? __pfx_worker_thread+0x10/0x10 [ 179.925241][ T5882] kthread+0x2f0/0x390 [ 179.929351][ T5882] ? __pfx_worker_thread+0x10/0x10 [ 179.934547][ T5882] ? __pfx_kthread+0x10/0x10 [ 179.939188][ T5882] ret_from_fork+0x4b/0x80 [ 179.943861][ T5882] ? __pfx_kthread+0x10/0x10 [ 179.948518][ T5882] ret_from_fork_asm+0x1a/0x30 [ 179.953372][ T5882] [ 179.956416][ T5882] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 179.963712][ T5882] CPU: 0 UID: 0 PID: 5882 Comm: kworker/0:3 Not tainted 6.13.0-rc3-syzkaller-00768-g3fff5da4ca21 #0 [ 179.974597][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 179.984664][ T5882] Workqueue: mld mld_ifc_work [ 179.989354][ T5882] Call Trace: [ 179.992631][ T5882] [ 179.995564][ T5882] dump_stack_lvl+0x241/0x360 [ 180.000251][ T5882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.005505][ T5882] ? __pfx__printk+0x10/0x10 [ 180.010138][ T5882] ? vscnprintf+0x5d/0x90 [ 180.014505][ T5882] panic+0x349/0x880 [ 180.018523][ T5882] ? __warn+0x174/0x4d0 [ 180.022712][ T5882] ? __pfx_panic+0x10/0x10 [ 180.027175][ T5882] ? ret_from_fork_asm+0x1a/0x30 [ 180.032154][ T5882] __warn+0x344/0x4d0 [ 180.036165][ T5882] ? mac80211_hwsim_tx+0x1b6f/0x23c0 [ 180.041622][ T5882] report_bug+0x2b3/0x500 [ 180.045994][ T5882] ? mac80211_hwsim_tx+0x1b6f/0x23c0 [ 180.051322][ T5882] handle_bug+0x60/0x90 [ 180.055541][ T5882] exc_invalid_op+0x1a/0x50 [ 180.060120][ T5882] asm_exc_invalid_op+0x1a/0x20 [ 180.065001][ T5882] RIP: 0010:mac80211_hwsim_tx+0x1b6f/0x23c0 [ 180.070938][ T5882] Code: 28 84 c0 0f 85 06 08 00 00 45 0f b6 8e 61 04 00 00 48 c7 c7 00 4a a9 8c 4c 89 f6 44 89 e2 48 89 e9 41 89 d8 e8 f2 a0 50 fa 90 <0f> 0b 90 90 e9 69 f2 ff ff e8 23 fd 8f fa 90 0f 0b 90 e9 d5 f2 ff [ 180.090575][ T5882] RSP: 0018:ffffc900042debf0 EFLAGS: 00010246 [ 180.096679][ T5882] RAX: 1f8d57a40d4ca900 RBX: 0000000000000001 RCX: ffff88805f0eda00 [ 180.104690][ T5882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 180.112692][ T5882] RBP: ffff888028d62e2a R08: ffffffff81601a42 R09: fffffbfff1cfa210 [ 180.120694][ T5882] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 0000000000000000 [ 180.128773][ T5882] R13: dffffc0000000000 R14: ffff888028d629d0 R15: 0000000000000000 [ 180.136790][ T5882] ? __warn_printk+0x292/0x360 [ 180.141637][ T5882] ieee80211_handle_wake_tx_queue+0x1ae/0x2d0 [ 180.147751][ T5882] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 180.154386][ T5882] ? ieee80211_queue_skb+0x18b6/0x24b0 [ 180.159891][ T5882] ? do_raw_spin_unlock+0x13c/0x8b0 [ 180.165140][ T5882] ieee80211_queue_skb+0x1ae9/0x24b0 [ 180.170510][ T5882] ieee80211_tx+0x2c4/0x470 [ 180.175053][ T5882] ? __pfx_ieee80211_tx+0x10/0x10 [ 180.180137][ T5882] ? ieee80211_xmit+0x30f/0x3f0 [ 180.185124][ T5882] __ieee80211_subif_start_xmit+0xe93/0x1600 [ 180.191142][ T5882] ? ip6_finish_output2+0x12c7/0x17b0 [ 180.196549][ T5882] ? ip6_finish_output+0x41e/0x840 [ 180.201717][ T5882] ? __ieee80211_subif_start_xmit+0x300/0x1600 [ 180.207917][ T5882] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 180.214375][ T5882] ? __lock_acquire+0x1397/0x2100 [ 180.219447][ T5882] ieee80211_subif_start_xmit+0xde/0x4d0 [ 180.225129][ T5882] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 180.231420][ T5882] ? __pfx_lock_acquire+0x10/0x10 [ 180.236493][ T5882] dev_hard_start_xmit+0x27a/0x7d0 [ 180.241664][ T5882] __dev_queue_xmit+0x1b73/0x3f50 [ 180.246742][ T5882] ? __dev_queue_xmit+0x2f4/0x3f50 [ 180.251900][ T5882] ? __pfx___dev_queue_xmit+0x10/0x10 [ 180.257305][ T5882] ? neigh_resolve_output+0x450/0x740 [ 180.262708][ T5882] ? read_seqbegin+0x157/0x2b0 [ 180.267505][ T5882] ? lockdep_hardirqs_on+0x99/0x150 [ 180.272789][ T5882] ? read_seqbegin+0x208/0x2b0 [ 180.277677][ T5882] ? __pfx_read_seqbegin+0x10/0x10 [ 180.282851][ T5882] ? neigh_resolve_output+0x2e5/0x740 [ 180.288270][ T5882] ? eth_header+0x11c/0x1f0 [ 180.292818][ T5882] ? __asan_memcpy+0x40/0x70 [ 180.297444][ T5882] ? eth_header+0x11c/0x1f0 [ 180.302004][ T5882] ? __pfx_eth_header+0x10/0x10 [ 180.306895][ T5882] ? neigh_resolve_output+0x61f/0x740 [ 180.312322][ T5882] ip6_finish_output2+0x12c7/0x17b0 [ 180.317568][ T5882] ? ip6_mtu+0x81/0x3f0 [ 180.321756][ T5882] ? ip6_finish_output2+0x63a/0x17b0 [ 180.327088][ T5882] ? __pfx_ip6_finish_output2+0x10/0x10 [ 180.332792][ T5882] ? ip6_mtu+0x81/0x3f0 [ 180.336991][ T5882] ip6_finish_output+0x41e/0x840 [ 180.341991][ T5882] NF_HOOK+0x9e/0x430 [ 180.346024][ T5882] ? NF_HOOK+0xfa/0x430 [ 180.350218][ T5882] ? __pfx_NF_HOOK+0x10/0x10 [ 180.354859][ T5882] ? __pfx_dst_output+0x10/0x10 [ 180.359810][ T5882] ? icmp6_dst_alloc+0x3aa/0x420 [ 180.364790][ T5882] mld_sendpack+0x843/0xdb0 [ 180.369333][ T5882] ? __pfx_mld_newpack+0x10/0x10 [ 180.374328][ T5882] ? mld_sendpack+0x1e8/0xdb0 [ 180.379041][ T5882] ? __pfx_mld_sendpack+0x10/0x10 [ 180.384133][ T5882] mld_ifc_work+0x7d9/0xd90 [ 180.388854][ T5882] ? process_scheduled_works+0x976/0x1840 [ 180.394615][ T5882] process_scheduled_works+0xa66/0x1840 [ 180.400232][ T5882] ? __pfx_process_scheduled_works+0x10/0x10 [ 180.406264][ T5882] ? assign_work+0x364/0x3d0 [ 180.410909][ T5882] worker_thread+0x870/0xd30 [ 180.415560][ T5882] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 180.421496][ T5882] ? __kthread_parkme+0x169/0x1d0 [ 180.426564][ T5882] ? __pfx_worker_thread+0x10/0x10 [ 180.431709][ T5882] kthread+0x2f0/0x390 [ 180.435816][ T5882] ? __pfx_worker_thread+0x10/0x10 [ 180.440969][ T5882] ? __pfx_kthread+0x10/0x10 [ 180.445604][ T5882] ret_from_fork+0x4b/0x80 [ 180.450058][ T5882] ? __pfx_kthread+0x10/0x10 [ 180.454783][ T5882] ret_from_fork_asm+0x1a/0x30 [ 180.459693][ T5882] [ 180.463195][ T5882] Kernel Offset: disabled [ 180.467640][ T5882] Rebooting in 86400 seconds..