last executing test programs: 10.22635081s ago: executing program 3 (id=1401): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x200}, @TCA_FQ_PIE_ALPHA={0xfee0, 0x5, 0x8000}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x2}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8}]}}]}, 0x54}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004000000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 9.868845688s ago: executing program 3 (id=1406): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, &(0x7f0000001b80)=""/4090, 0x46, 0xffa, 0xa, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x28, 0x4, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0x72000000}]}, 0x10) r2 = socket$inet6(0xa, 0x803, 0x6) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0x6, 0x4) connect$packet(r0, &(0x7f0000000280)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, &(0x7f0000001b80)=""/4090, 0x46, 0xffa, 0xa, 0x0, 0x0, @void, @value}, 0x20) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x28, 0x4, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0x72000000}]}, 0x10) (async) socket$inet6(0xa, 0x803, 0x6) (async) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) (async) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0x6, 0x4) (async) connect$packet(r0, &(0x7f0000000280)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) (async) 9.580769368s ago: executing program 3 (id=1408): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000140)={0x3, @null, r3}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) (async) r6 = socket$netlink(0x10, 0x3, 0x9) (async) r7 = gettid() ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f00000001c0)=r7) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x214, r8, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IE={0x103, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0x1, 0x2, 0x40, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x10, 0x9d, 0x6}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @random_vendor={0xdd, 0xda, "7d2e2425254ef1579342a81d9a1d2c72b9f39c28b8c096458b4323676c291c5d5046be2a3966a8262a9da868c560d43695ee658d52a364cdfa24bb1aeca36fb52438fdea050030f6e7a54b73e6dff6e7acac1834dadb3094c67f729c25019694bf40a33f79c07988cabdd326e080286146756eccfcf2dec64979e4e9f35ae0ff0ef91fedf42003edd23fc67d6fdec5137c59bc69d021ef0a7e80f59c390248f20a7d543be789b8f85db3946f44fe51fb1b945b2158b02d56d1b2ef6401b6baace873e69299aee6436ff42ddefe7f66446643d9770708ff373440"}, @mesh_id={0x72, 0x6}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xa, 0xaf, 0xda}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0xb, 0x2a, [@supported_rates={0x1, 0x2, [{0x1b}, {0xc, 0x1}]}, @dsss={0x3, 0x1, 0x8}]}, @NL80211_ATTR_IE={0xc0, 0x2a, [@fast_bss_trans={0x37, 0xba, {0xff, 0x4, "2294d9690e037d7b77382869fe16bf5a", "e6620806ba3138e4a259d470feeba1eadcc1e5ec3cee1e006f93e4dd1d7e8640", "805373dd3afcf1ffc28e35cb6e9eaf6cf234592d639f8ac9af9161c208fb5ece", [{0x2, 0x26, "ac2e972d75a95a26ca88fd89ddea3c76a50cb5cd0ba9abee99855ba26f7222a7cda26eb51493"}, {0x3, 0x21, "09c78419a6f2f35c2f2bed92c7e101ec304417beae54862881d6c2440fd90c0e70"}, {0x2, 0x4, "f4a362d6"}, {0x4, 0x15, "c65863521edcdfc909d74941761efdb717cd516e01"}]}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6b}, @NL80211_ATTR_IE={0xa, 0x2a, [@dsss={0x3, 0x1, 0x84}, @erp={0x2a, 0x1}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5e}]}, 0x214}, 0x1, 0x0, 0x0, 0x20054}, 0x20048040) (async) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x80, r8, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xe, 0x58}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bb034b33b17cf83b4af831cbe5"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000800}, 0x20000010) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, 0x1412, 0x201, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x4000001) (async) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f00000007c0)={0x1f, 0x1, 0x2}, 0x6) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000800)=@gcm_256={{0x304}, "0919c77bf873120a", "5d2a475fac79d9b94293709dfc553451c140e5672c05ba5712694f9caafe8535", "ea586b7f", "c28949910e2f1945"}, 0x38) (async) r11 = socket$inet(0x2, 0xb, 0xb9b) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000840)={0x87, @rand_addr=0x64010102, 0x4e21, 0x1, 'rr\x00', 0x1a, 0x5, 0x14}, 0x2c) (async) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x48, 0x1, 0x9, 0x101, 0x0, 0x0, {0x709d10ec248c6a86}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) getsockopt$bt_BT_VOICE(r10, 0x112, 0xb, &(0x7f00000009c0)=0xa, &(0x7f0000000a00)=0x2) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, r8, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2000, 0x1, 0x5, 0x0, {0x7f, 0x5, 0x0, 0xe3, 0x0, 0x0, 0x0, 0x2}, 0x400, 0x7492, 0x9}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8000, 0x0, 0x2, 0x0, {0x4, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x1, 0x3}, 0x6, 0x0, 0x3}}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x8001}, 0x2000c880) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b80)='memory.swap.events\x00', 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000bc0)={'vxcan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x9, 0x2, 0xfff, 0x484, r12, 0x2, '\x00', r13, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0xa, @void, @value, @void, @value}, 0x50) (async) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000d00)={'nicvf0\x00', &(0x7f0000000c80)=@ethtool_coalesce={0xe, 0x2, 0x6, 0xffffffff, 0x8, 0x1, 0xf, 0x2, 0x917d, 0x6, 0x8, 0x4, 0x8, 0xfffffff9, 0x40, 0x1, 0x3, 0xfffffffd, 0x8, 0xb1b, 0xa8, 0x1, 0x2}}) write(r1, &(0x7f0000000d40)="901f5cebcd05a018ebd1f20b4530fa1b31622cf7339182dacea44df93aa0e4f95307bc90ea8ace17faa7e7c1d275776a2547aef87bc9b83c32ba63f8675a6dff5761c4590ac7e030bfe0ab34e876bc576d1d0b70d180fc08d2ae7b56cdb454a81c2610d63a8d146139beb76f6bfbff4ce1136298476ea32b2be052ba3d2b87de0c1b5bc72d7705758b56970d4cbd29", 0x8f) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000e40)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r12, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e80)={0xc8, r5, 0x200, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x24000004}, 0xa0011) 6.618543344s ago: executing program 3 (id=1416): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[], 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x50) socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000200)=@ethtool_regs={0x1d}}) (fail_nth: 7) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f00000001c0)='D', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 5.234587272s ago: executing program 3 (id=1424): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x2, 0x40000000}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x20000000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x76}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000020}, 0x0) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f00000001c0)=@req={0x4, 0xf, 0x7, 0x4a}, 0x10) 4.431720275s ago: executing program 3 (id=1434): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\n\x00\x00\x00\n\x00\x00\x00B\x00\x00\x00@\x00\b\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="00000000020000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)="cf3ee6fb46ce098277fa16d4774d1dc2652ad518af428c775c6438c9dfdac842945ba143ec1c85cccb7c6860a9186d9e1161c94828389685ddf17c2d3c5ea577c109489ddec3b841f4a81ef7916f3120811509997a04da3fec9504d6b0676d255ca1fa9c2c13ea38ac9ad5f84322c03ec79e9e90f9cd244915eebe408a3c23aab9f5c49b27c81830900f4df1f10c9a96031b37559cb1ec68fcae27e6f510", &(0x7f0000000680)="c3ba2cb317ffffffff78efc465ce00cd97c7e62cd89b9ce4f26d5939123b520debc2ed74", 0x1003, r2}, 0x38) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x4, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000020850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120400048008000640000000050900010073797a30"], 0x10c}}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$kcm(0xa, 0x922000000002, 0x11) sendmsg$kcm(r10, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, 0x0}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000020100000000000022298507e797a862771faa918a04fa999742c96b927c4a092a219b6488814ce33d356e2fb4e631c3511d4b22404a7633aa68fe59c1b78a81cfe280ab198ad1593a7d5142f38f428e912fa27ae198d85d8373f384948aaf1a474516d0c81cada", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000100000000000a000100aaaaaaaaaabb0000"], 0x48}}, 0x0) syz_80211_inject_frame(&(0x7f0000001040), &(0x7f0000001080)=ANY=[@ANYBLOB="94000700080211000001080245000001063000600101cd21608513342a3e0040e000179d9eedf33ba57c009006008e43a5d62a529d2700501600a5a4afa10fa75e0a"], 0x42) 2.788405883s ago: executing program 1 (id=1447): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x15, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r4 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt(r4, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r5, 0x10e, 0xc, 0x0, &(0x7f0000000a00)) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x54}}, 0x0) 2.414580397s ago: executing program 0 (id=1450): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) (async, rerun: 32) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000003c0)={r2, 0x5, 0x3ff, "3d8171f35d5d9c79c60e23fe7190dd13b75ba286afe23ee2df475138fa05b42705f260888f2f78a096eadd0b54f62e0e3b77099c37e00fb4a0ea5c09877d52eb5bd6a1e3eaa505be3d9352545ac4462c627f253259a29c5258ace3afa73defbae5e5ff9096ea9eb8a57d4de5f1c67ca5fa09d08967ce45c84f1a0f865980915957bafab09c1b653c24253b8aa5f3258bead2bfc683667c38eed1ada9cb8b5c4be751130cb3343aff246bfb1875edfd4e4df5e84b100e889a766a41078f94aee2da330e5dc809bb0c8df85939e49d4afc1cec3f3f8775f5b473c456a1"}) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) (async) sendmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) socket$packet(0x11, 0x2, 0x300) (async) socket(0x1d, 0x2, 0x6) (async) socket$alg(0x26, 0x5, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) socket(0x1000000010, 0x80002, 0x0) 2.375175493s ago: executing program 1 (id=1451): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000020000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000007500000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.372777403s ago: executing program 4 (id=1452): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005001100000000000500100000000000"], 0x44}}, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0xfdef) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xbdef}], 0x300, 0x0, 0x4a}, 0x0) 2.284920174s ago: executing program 1 (id=1453): socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l', 0x1}], 0x3}], 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1abb01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000200)={@val={0xa}, @void, @eth={@broadcast, @random="c21e6e367678", @val={@val={0x88a8, 0x0, 0x1, 0x1}, {0x8100, 0x2, 0x1, 0x4}}, {@ipv6={0x86dd, @udp={0x1, 0x6, "c313a0", 0xa4, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x10, 0x0}}, @mcast2, {[@dstopts={0x37}], {0x4e23, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "da877fc65e02fa3562785ec5566fd73fd74ecd49beb850a1f2efcc2e2884a470", "3fccf5d50e7eb26bb3028d745a29ed9c6871ef203bcbde3759353bbf57d259b7e3331273205964fe43269d3ee2fef3e5", "be9453cee34d0b6c92eca4b3b868e9e7f057f3e99a797f5f530d9c5e", {"3636ab22a794fca14b5ccc63a517c5f9", "baf3588bbede256d9f49b48b9437d1fb"}}}}}}}}}, 0xe6) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f00000000c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in6=@private0, 0x4e21, 0x0, 0x4e20, 0x9, 0xa, 0x80, 0x80, 0x62, r8, r9}, {0x1ff, 0x6, 0xfffffffffffffffe, 0x7, 0x5, 0x1, 0x4, 0x80000001}, {0x7fffffff, 0x0, 0xe7, 0x9c}, 0x9, 0x0, 0x2, 0x1, 0x2, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0x4d6, 0x2b}, 0x2, @in=@multicast2, 0x0, 0x2, 0x0, 0xc1, 0x9, 0xffffffff, 0x100}}, 0xe8) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r10, 0xf518, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=@newlink={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2102}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MASTER={0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x4, 0x566, 0x5000000}}]}]}]}, 0x54}}, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 2.170222431s ago: executing program 4 (id=1455): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newsa={0xfc, 0x10, 0x281, 0x0, 0x0, {{@in=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x3c, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x2b}, @in=@empty, {0x9, 0x2, 0x0, 0x6, 0x100}, {0x6}, {0x2, 0x1ff}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x4}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x8}}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 2.028823305s ago: executing program 0 (id=1456): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x1, 0x0, 0xffffffff, {0xa, 0x4e25, 0x3ff, @mcast2, 0x5}}}, 0x3a) 2.028509718s ago: executing program 4 (id=1457): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.009415416s ago: executing program 2 (id=1458): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[], 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x50) socket(0x11, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000000)=@ethtool_eeprom={0x43, 0x0, 0x8, 0x27, "5b7bf7edecc6f5d81fe769ee647ec3ce1f023ef49472977d553dc4d8003595bc91e4e9cbe13a6b"}}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b0000000740496cecbc018886a5e77ecc0000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getnetconf={0x14, 0x52, 0x400, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x5880}, 0x8040) writev(r3, &(0x7f0000000080)=[{&(0x7f00000001c0)='D', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt(r2, 0x80000001, 0x1000, &(0x7f00000000c0)="3e31ccb47e4ba47972dd090fa68101d914ef6a1b8109dbcbb93526e69b660389a21109e785504ad004fd5cdac3ceaabf8a3c573b3b303a2febaa435bc802b04cd2c9b512a06187bd8be89de628dfe71e168e7bdde5cd2a44fa708b861e42107c9831d9501cc12728da259c58071a755dbe9343644a69fa7cb6205655e1ac68f7c53f7dae826bc9ce44a9bddae9d828e50a9fad9d82b0b4169e59243abaf7d10f3b4daafd2b6e9da68ff73255d7d38a01c657f64000e0d764", 0xb8) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000340)) 1.930706698s ago: executing program 4 (id=1459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x11, 0x2, 0x300) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=@delqdisc={0x24, 0x25, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0xd, 0xe}, {0x3, 0x4}}}, 0x24}}, 0x4000011) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x20, {0x0, 0x0, 0x0, r2, {0xfff1, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x9, 0x8}}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @local}]}}]}, 0x50}}, 0x44050) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000180000000000000000000000711231000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) unshare(0x24040400) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x7c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x6}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x6}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='fsi_master_rw_result\x00', r6, 0x0, 0x2}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000040)={0x2, 'veth1_to_bridge\x00', 0x2}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x38, 0x0, 0x1, 0x5, 0xd, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 1.850250538s ago: executing program 0 (id=1460): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) unshare(0x8040480) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000000000000000000008000100e000000108001900", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r4], 0x34}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x0, 0xe40, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write(0xffffffffffffffff, &(0x7f0000000000)="3f010000010000", 0x7) 1.809403311s ago: executing program 1 (id=1461): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev}}}], 0x20}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000003010101000000000000000000000000140019800800010010000000040002"], 0x28}}, 0x20048004) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r3, r3, 0x2e, 0x0, 0x0, @void, @value}, 0x20) unshare(0x400) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001780)={@cgroup=r4, r4, 0x2f, 0x2008, 0x4, @value}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000100000000009500000000000900"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$inet6_udp(0xa, 0x2, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYRES64=r9, @ANYRES64=0x0, @ANYRESHEX=r9], 0x20) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000740)={'veth1_vlan\x00', &(0x7f0000000700)=@ethtool_cmd={0x1f}}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r10) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x30, r11, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x13, 0x1, '\t\xb0a\xe6\xee\xcb\x94\xf79\x8d\xad\xffD:\x00'}]}, 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r12, &(0x7f0000000340)={0x0, 0x7000000, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000216997bc38fc65eca3d9021d50de48848146f0a0ca0c57ec5fa6356012df1c9b8f3c260a296cfb93606638e4eacc6fb7d0cd7b15fc57989cadc097eb5e1e9a9b8da5394994af3a7b4d9d5e35668102ebced55183857303d5d668256b933bdd9013344ff418e1756ad6496bc85f4d752b58daa35c9d31d3cf5ad9f59bfacb464a07e391999ddf39fe340c777116443c88ffadb965c92844b1b81b4e8b8fed2815fb6dd35be95b9f0522104e38fe0ebecdbd08843ea9c167d8b97961f8009e2d44f9f504aaac08e551fc453c003def850326b14a985c0700"/231, @ANYRES16=r13, @ANYBLOB="1105000000000000000010000000"], 0x14}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x1, 0x80, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0x4}, {0x4}, {0x47}, {0xc}}}]}]}, 0x48}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000) 1.808199409s ago: executing program 2 (id=1462): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffd, 0x80000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0) (async, rerun: 32) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x800, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async, rerun: 32) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) listen(r2, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x4, 0x9, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000481418000000001004000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async, rerun: 64) socket$kcm(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0xe0}}, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) (async, rerun: 64) r6 = socket(0x10, 0x2, 0x0) (rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@ipv4_newrule={0x40, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_macvtap\x00'}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000f8", @ANYRES16=0x0, @ANYBLOB="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"], 0x228}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000850) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 1.316948742s ago: executing program 2 (id=1463): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x150, 0x150, 0x250, 0xf8010000, 0x320, 0x238, 0x238, 0x320, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @mcast1, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x220, 0x250, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x2, 0x4, 0x3, 0x0, 0xc}}, @common=@inet=@sctp={{0x148}, {[], [], [], 0x0, [], 0x0, 0x6}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x1, 0x6}, {0x3, 0x2, 0x2}, 0x4, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) recvfrom(r3, &(0x7f0000001480)=""/4096, 0x1000, 0x2041, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200200}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf8, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0xcc, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4048085}, 0x20048050) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r6, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x11}}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) 1.316576342s ago: executing program 0 (id=1464): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="f92926a7", @ANYRES16=r2, @ANYBLOB="00012abd7000fbdbdf250200000008006a00430000000800400001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x44) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)={0x114, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@generic="24d4e3455c7216da3484447f8a081f930884b55764ca84de3d0e7bc8d6f29cd84ba9408cf2351604f1724e10a8fcc3988de886d82375980e92a1ba2f8410b06773cbbf6293af17222761aa1289e6a8f1d888f4809cdccfe1c8695630dcb6bad9b53d1d97f2f820a715ce709fcaa40a70dc4c98ebbe761c0eec46d4f50508215e72fc781a471b1a7c769a074f2d6388253cfdd4b0e37a788fbb7296ae39bb35439c66437fa3347adfaca46f74fbc95f1b070287096cc9bdc953ea637c118a68a8ddc03aa44e8aa8ca5dac063a05", @typed={0x2d, 0x0, 0x0, 0x0, @binary="8bb982eb4ec7e08b552a2807c00bbfbbb5369dd1e04690a1267e29e89d27673db50050419e278e6130"}]}]}, 0x114}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffff1c) 1.107357382s ago: executing program 4 (id=1465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=@delqdisc={0x24, 0x25, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x10}, {0xd, 0xe}, {0x3, 0x3}}}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfffa}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff000000}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @local}]}}]}, 0x44}}, 0x44050) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14004ca91bd78dca27d200001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a300b0000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001708000640ffffff000800034000000038500000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000024000380200000800800034000000002100002800c000280080001800000000004000640140000001000010000000000000000000084000a", @ANYRES16], 0xe4}}, 0x0) 947.475288ms ago: executing program 0 (id=1466): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000f0000000800124000000000050005"], 0x5c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001a00010000000000000000000a"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}]}, 0x34}}, 0x0) 896.901906ms ago: executing program 2 (id=1467): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x18}, [@ldst={0x6, 0x3, 0x2, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c4431f657b04a8ae8f8d203a2633df1308a70511b822eadcc8daae125fbe0ac10f710f800dc24a3434ffb4d3b1cb949314b12c", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) (rerun: 32) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000540)) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}]}, 0x34}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002a00), 0xffffffffffffffff) (async) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="8d17dbcc2640d39c536b0fc866c0ea87aba7e7b07b48a0ca5b686eee897be52450e85812d87ac6e6abbc0cd728d885fc28ecdc86e63e5ace", 0x38, 0x1, &(0x7f00000006c0)={0xa, 0x4e23, 0x5, @empty, 0x3}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fcdbdf250500000008000300060000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "00de3d7b4cd07ec3c1135962ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44045}, 0x4000004) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0xffffffff, 0x0, 0x0, 0xc1000, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) (async) socket(0x23, 0x80000, 0x100) r9 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r9, &(0x7f0000000440)=[{{&(0x7f0000000700)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 896.197811ms ago: executing program 4 (id=1468): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x10}}], 0x10}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f00000000c0)=0xfffffe01, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000240)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000380)={0x1f, 0x0, @none, 0x8}, 0xe) shutdown(r2, 0x1) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) recvmmsg(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f0000000240)=""/57, 0x39}, {&(0x7f0000000380)=""/91, 0x5b}, {&(0x7f00000005c0)=""/152, 0x98}, {&(0x7f0000000680)=""/108, 0x6c}, {&(0x7f0000000700)=""/105, 0x69}, {&(0x7f0000000880)=""/192, 0xc0}, {&(0x7f0000000940)=""/155, 0x9b}], 0x8, &(0x7f0000000280)=""/62, 0x3e}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/31, 0x1f}], 0x1, &(0x7f0000000a80)=""/228, 0xe4}, 0x82}, {{&(0x7f0000000b80)=@ax25={{0x3, @bcast}, [@rose, @remote, @remote, @netrom, @netrom, @null]}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000c00)=""/181, 0xb5}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/109, 0x6d}, {&(0x7f0000001d40)=""/180, 0xb4}, {&(0x7f0000001f00)=""/36, 0x24}], 0x5, &(0x7f0000001fc0)=""/4096, 0x1000}, 0x1000}], 0x3, 0x40000000, &(0x7f0000003080)={0x77359400}) bind$bt_l2cap(r3, &(0x7f0000000000), 0xe) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x76, @fixed, 0x0, 0x2}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000080000018160000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb, @void, @value}, 0x94) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000000c0)=0xfffffe01, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001e80)=ANY=[@ANYBLOB="5c000074c30019a9b0ffb3538bd730240b9300100001040100"/35, @ANYRES64=r3, @ANYBLOB="0000000000000000280012800b00010067656e65760500001800028014000700ff0100000000000000000000000000011400030067656e65766531000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 759.540257ms ago: executing program 0 (id=1469): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x10}}], 0x10}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f00000000c0)=0xfffffe01, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000240)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000380)={0x1f, 0x0, @none, 0x8}, 0xe) shutdown(r2, 0x1) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) recvmmsg(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f0000000240)=""/57, 0x39}, {&(0x7f0000000380)=""/91, 0x5b}, {&(0x7f00000005c0)=""/152, 0x98}, {&(0x7f0000000680)=""/108, 0x6c}, {&(0x7f0000000700)=""/105, 0x69}, {&(0x7f0000000880)=""/192, 0xc0}, {&(0x7f0000000940)=""/155, 0x9b}], 0x8, &(0x7f0000000280)=""/62, 0x3e}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/31, 0x1f}], 0x1, &(0x7f0000000a80)=""/228, 0xe4}, 0x82}, {{&(0x7f0000000b80)=@ax25={{0x3, @bcast}, [@rose, @remote, @remote, @netrom, @netrom, @null]}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000c00)=""/181, 0xb5}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/109, 0x6d}, {&(0x7f0000001d40)=""/180, 0xb4}, {&(0x7f0000001f00)=""/36, 0x24}], 0x5, &(0x7f0000001fc0)=""/4096, 0x1000}, 0x1000}], 0x3, 0x40000000, &(0x7f0000003080)={0x77359400}) bind$bt_l2cap(r3, &(0x7f0000000000), 0xe) listen(r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000080000018160000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb, @void, @value}, 0x94) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000000c0)=0xfffffe01, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001e80)=ANY=[@ANYBLOB="5c000074c30019a9b0ffb3538bd730240b9300100001040100"/35, @ANYRES64=r3, @ANYBLOB="0000000000000000280012800b00010067656e65760500001800028014000700ff0100000000000000000000000000011400030067656e65766531000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 466.447933ms ago: executing program 1 (id=1470): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x1, 0x0, 0xffffffff, {0xa, 0x4e25, 0x3ff, @mcast2, 0x5}}}, 0x3a) 325.139114ms ago: executing program 2 (id=1471): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000020000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x30fb1f3204013731, &(0x7f0000000240)=""/193, &(0x7f0000000040)=0xc1) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$sock_bt_hci(r2, 0x400448e4, &(0x7f0000000340)="72eb65f4a48ef33cff5e1212d9d80ef8719bcb27b42751a624245ea69055d9f7c7a0ff3974e180962f214f654f81d677ac7d5805b73c5a11e2378d6410a94a5a58ba502c01add73be3d4e2274a4885571db0bd589c9ef3d48a7fb649697533ea30b9356193a385972beaad8ecea5d7fca2d2b50c41b87fd3beea8670c229124e283c2b7ea5812ad52682c76715f6c16f8522bcb22d0a599fc9ac28474d361b9e1c05430ee3c6ffbe7526d83bea3c19d02e318e90b1a96ff74af9bc1d861cee52cf84ee4cd650caf6fb091b59d29014f137fe0982ea798b") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 247.816847ms ago: executing program 1 (id=1472): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) close(r1) socket(0x23, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a008}) unshare(0x62040200) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, 0x0, 0x0) unshare(0x4010100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff?\x11\xc8\xdd\x15\xcc\xd2\xf1\xff\'%\xa0\x00\x00\x00,'}, 0x30) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r6, @ANYBLOB="03000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x9}, 0x10) write(r7, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="88ba4ef13404992add7c21", @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r8, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="80030000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fedbdf257a00000008000000901c404b6f8816034669b01065748fbfb0340e5194c8e4", @ANYRES32=r10, @ANYBLOB="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"], 0x380}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) setsockopt$IP_VS_SO_SET_EDITDEST(r7, 0x0, 0x489, &(0x7f0000000280)={{0xff, @empty, 0x4e21, 0x1, 'sed\x00', 0x8, 0x5b, 0x7a}, {@rand_addr=0x64010102, 0x4e21, 0x3, 0x7, 0x63b64985, 0x5ebb}}, 0x44) 0s ago: executing program 2 (id=1473): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x2) syz_emit_ethernet(0x8d, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7f, 0x1400, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1a, 0xc2, 0x0, 0x0, 0x200, {[@mptcp=@remove_addr={0x1e, 0x3b, 0x5, 0x0, "8b44bb4aa92fea812d3ca8a969d3b8f01c65fb64d1bf8e96e32b0865209493266756c7566348158df96d534afc1a6a248c303a440e8d5427"}, @mptcp=@mp_fclose={0x1e, 0xc, 0xbb, 0x0, 0x1}, @timestamp={0x8, 0xa, 0x2, 0x4}]}}, {"c11b5b"}}}}}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1) kernel console output (not intermixed with test programs): _slave_0 [ 86.716240][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.728694][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.740156][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.752504][ T5142] Bluetooth: hci4: command tx timeout [ 86.761169][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.773055][ T5840] veth1_macvtap: entered promiscuous mode [ 86.794878][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.806611][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.819658][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.833392][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.845568][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.889904][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.902287][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.913268][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.925018][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.935772][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.947041][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.961309][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.980042][ T5850] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.001333][ T5850] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.011798][ T5850] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.021579][ T5850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.076636][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.095455][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.105406][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.122454][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.195731][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.218193][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.232075][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.248862][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.262593][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.276392][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.293209][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.327039][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.357129][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.387521][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.404652][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.441657][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.455033][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.474708][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.490378][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.502416][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.517879][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.533991][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.548661][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.560613][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.652306][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.662969][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.675153][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.687229][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.753007][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.805627][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.855240][ T3467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.891578][ T3467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.979131][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.008659][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.227247][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.236376][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.281088][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.291796][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.310013][ T5932] netlink: 'syz.3.8': attribute type 1 has an invalid length. [ 88.319321][ T5932] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8'. [ 88.356658][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.370113][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.509139][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.551148][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.608597][ T5142] Bluetooth: hci0: command tx timeout [ 88.658511][ T5142] Bluetooth: hci1: command tx timeout [ 88.673443][ T5142] Bluetooth: hci2: command tx timeout [ 88.737151][ T5142] Bluetooth: hci3: command tx timeout [ 88.765831][ T5942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9'. [ 88.847184][ T5142] Bluetooth: hci4: command tx timeout [ 88.957145][ T5946] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.971819][ T5946] xt_l2tp: unknown flags: 10 [ 89.407890][ T5964] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15'. [ 89.447283][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15'. [ 89.682863][ T5971] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16'. [ 89.985600][ T5978] tipc: Trying to set illegal importance in message [ 90.139394][ T5984] FAULT_INJECTION: forcing a failure. [ 90.139394][ T5984] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 90.176530][ T5984] CPU: 1 UID: 0 PID: 5984 Comm: syz.0.19 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 90.187310][ T5984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 90.197695][ T5984] Call Trace: [ 90.201199][ T5984] [ 90.204359][ T5984] dump_stack_lvl+0x241/0x360 [ 90.209395][ T5984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.214777][ T5984] ? __pfx__printk+0x10/0x10 [ 90.219465][ T5984] ? __pfx_lock_release+0x10/0x10 [ 90.225445][ T5984] should_fail_ex+0x3b0/0x4e0 [ 90.230672][ T5984] _copy_from_user+0x2f/0xc0 [ 90.237119][ T5984] copy_msghdr_from_user+0xae/0x680 [ 90.244854][ T5984] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 90.252325][ T5984] ? __fget_files+0x2a/0x410 [ 90.257135][ T5984] ? __fget_files+0x2a/0x410 [ 90.262293][ T5984] __sys_sendmmsg+0x32b/0x720 [ 90.267018][ T5984] ? __pfx___sys_sendmmsg+0x10/0x10 [ 90.272261][ T5984] ? __pfx_lock_release+0x10/0x10 [ 90.277374][ T5984] ? kstrtouint_from_user+0x128/0x190 [ 90.282899][ T5984] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 90.288845][ T5984] ? ksys_write+0x22a/0x2b0 [ 90.293946][ T5984] ? __pfx_lock_release+0x10/0x10 [ 90.300437][ T5984] ? vfs_write+0x730/0xd30 [ 90.304986][ T5984] ? __mutex_unlock_slowpath+0x21e/0x790 [ 90.310668][ T5984] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 90.316670][ T5984] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 90.323026][ T5984] ? do_syscall_64+0x100/0x230 [ 90.327841][ T5984] __x64_sys_sendmmsg+0xa0/0xb0 [ 90.333118][ T5984] do_syscall_64+0xf3/0x230 [ 90.337864][ T5984] ? clear_bhb_loop+0x35/0x90 [ 90.344008][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.350067][ T5984] RIP: 0033:0x7f3ddbd85d29 [ 90.354615][ T5984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.375048][ T5984] RSP: 002b:00007f3ddcc19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 90.383794][ T5984] RAX: ffffffffffffffda RBX: 00007f3ddbf75fa0 RCX: 00007f3ddbd85d29 [ 90.391996][ T5984] RDX: 0000000000000213 RSI: 0000000020001dc0 RDI: 0000000000000006 [ 90.401060][ T5984] RBP: 00007f3ddcc19090 R08: 0000000000000000 R09: 0000000000000000 [ 90.409155][ T5984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.417634][ T5984] R13: 0000000000000000 R14: 00007f3ddbf75fa0 R15: 00007ffd955e67c8 [ 90.426607][ T5984] [ 90.450427][ T5988] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20'. [ 90.881589][ T5998] syz.0.21 uses obsolete (PF_INET,SOCK_PACKET) [ 90.930374][ T5998] veth0_to_team: entered allmulticast mode [ 91.095218][ T6003] netlink: 'syz.3.24': attribute type 3 has an invalid length. [ 91.457697][ T5142] Bluetooth: hci2: command tx timeout [ 91.518818][ T6011] xt_l2tp: unknown flags: 10 [ 92.265791][ T58] cfg80211: failed to load regulatory.db [ 92.476735][ T6027] FAULT_INJECTION: forcing a failure. [ 92.476735][ T6027] name failslab, interval 1, probability 0, space 0, times 1 [ 92.496611][ T6027] CPU: 1 UID: 0 PID: 6027 Comm: syz.0.32 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 92.507300][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 92.517609][ T6027] Call Trace: [ 92.520942][ T6027] [ 92.523910][ T6027] dump_stack_lvl+0x241/0x360 [ 92.528697][ T6027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.534119][ T6027] ? __pfx__printk+0x10/0x10 [ 92.539328][ T6027] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 92.545470][ T6027] ? __pfx___might_resched+0x10/0x10 [ 92.550851][ T6027] should_fail_ex+0x3b0/0x4e0 [ 92.555889][ T6027] should_failslab+0xac/0x100 [ 92.560647][ T6027] kmem_cache_alloc_node_noprof+0x77/0x380 [ 92.566535][ T6027] ? __alloc_skb+0x1c3/0x440 [ 92.571381][ T6027] __alloc_skb+0x1c3/0x440 [ 92.576045][ T6027] ? __pfx___alloc_skb+0x10/0x10 [ 92.581230][ T6027] ? __local_bh_enable_ip+0x168/0x200 [ 92.586773][ T6027] ? pppoe_sendmsg+0x51/0x790 [ 92.592314][ T6027] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 92.598485][ T6027] ? do_raw_spin_unlock+0x13c/0x8b0 [ 92.603779][ T6027] sock_wmalloc+0xab/0x120 [ 92.608541][ T6027] pppoe_sendmsg+0x1fa/0x790 [ 92.613393][ T6027] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 92.618576][ T6027] __sock_sendmsg+0x221/0x270 [ 92.623417][ T6027] ____sys_sendmsg+0x52a/0x7e0 [ 92.629233][ T6027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.635119][ T6027] ? __fget_files+0x2a/0x410 [ 92.640395][ T6027] ? __fget_files+0x2a/0x410 [ 92.645165][ T6027] __sys_sendmmsg+0x36a/0x720 [ 92.649922][ T6027] ? __pfx___sys_sendmmsg+0x10/0x10 [ 92.655201][ T6027] ? __pfx_lock_release+0x10/0x10 [ 92.660455][ T6027] ? kstrtouint_from_user+0x128/0x190 [ 92.666177][ T6027] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 92.672162][ T6027] ? ksys_write+0x22a/0x2b0 [ 92.676920][ T6027] ? __pfx_lock_release+0x10/0x10 [ 92.682986][ T6027] ? vfs_write+0x730/0xd30 [ 92.688633][ T6027] ? __mutex_unlock_slowpath+0x21e/0x790 [ 92.694761][ T6027] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 92.701010][ T6027] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 92.707981][ T6027] ? do_syscall_64+0x100/0x230 [ 92.712848][ T6027] __x64_sys_sendmmsg+0xa0/0xb0 [ 92.717917][ T6027] do_syscall_64+0xf3/0x230 [ 92.722790][ T6027] ? clear_bhb_loop+0x35/0x90 [ 92.727654][ T6027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.733707][ T6027] RIP: 0033:0x7f3ddbd85d29 [ 92.738186][ T6027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.758123][ T6027] RSP: 002b:00007f3ddcc19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 92.766852][ T6027] RAX: ffffffffffffffda RBX: 00007f3ddbf75fa0 RCX: 00007f3ddbd85d29 [ 92.774986][ T6027] RDX: 0000000000000213 RSI: 0000000020001dc0 RDI: 0000000000000006 [ 92.783029][ T6027] RBP: 00007f3ddcc19090 R08: 0000000000000000 R09: 0000000000000000 [ 92.791779][ T6027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.800296][ T6027] R13: 0000000000000000 R14: 00007f3ddbf75fa0 R15: 00007ffd955e67c8 [ 92.808798][ T6027] [ 93.064566][ T6034] sctp: [Deprecated]: syz.0.35 (pid 6034) Use of int in max_burst socket option. [ 93.064566][ T6034] Use struct sctp_assoc_value instead [ 93.140253][ T6033] netlink: 'syz.0.35': attribute type 2 has an invalid length. [ 93.232938][ T6033] Tq€!7: entered promiscuous mode [ 93.286348][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 93.377156][ T6043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.38'. [ 93.647705][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.010865][ T6060] netlink: 76 bytes leftover after parsing attributes in process `syz.0.43'. [ 95.116975][ T6091] openvswitch: netlink: ERSPAN option length err (len 4096, max 255). [ 95.863845][ T6108] netlink: 304 bytes leftover after parsing attributes in process `syz.3.50'. [ 97.874237][ T6132] netlink: 28 bytes leftover after parsing attributes in process `syz.3.55'. [ 97.938355][ T6134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.57'. [ 98.361372][ T6141] netlink: 24 bytes leftover after parsing attributes in process `syz.2.60'. [ 98.762822][ T6146] netlink: 84 bytes leftover after parsing attributes in process `syz.1.62'. [ 98.799409][ T6148] netlink: 40 bytes leftover after parsing attributes in process `syz.2.63'. [ 99.270609][ T6157] delete_channel: no stack [ 99.276358][ T6157] delete_channel: no stack [ 99.288502][ T6156] netlink: 'syz.0.65': attribute type 10 has an invalid length. [ 99.375033][ T6156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.417064][ T6156] team0: Port device batadv0 added [ 99.622233][ T6167] netlink: 16 bytes leftover after parsing attributes in process `syz.4.69'. [ 99.645871][ T6168] syzkaller0: entered promiscuous mode [ 99.654349][ T6168] syzkaller0: entered allmulticast mode [ 99.702867][ T6168] netlink: 20 bytes leftover after parsing attributes in process `syz.1.68'. [ 99.917961][ T6171] netlink: 'syz.2.70': attribute type 1 has an invalid length. [ 99.998388][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.70'. [ 100.571735][ T6182] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 100.648331][ T6186] netlink: 1268 bytes leftover after parsing attributes in process `syz.4.72'. [ 101.367884][ T6191] Cannot find add_set index 4096 as target [ 101.534445][ T6195] netlink: 'syz.4.76': attribute type 1 has an invalid length. [ 103.395681][ T6205] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.405223][ T6205] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.414364][ T6205] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.423424][ T6205] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.477751][ T6213] tipc: Started in network mode [ 103.483943][ T6213] tipc: Node identity f2c604cb309f, cluster identity 4711 [ 103.508392][ T6213] tipc: Enabled bearer , priority 0 [ 103.539383][ T6216] tipc: Disabling bearer [ 103.578661][ T6222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.85'. [ 103.588464][ T6222] tipc: Invalid UDP bearer configuration [ 103.588510][ T6222] tipc: Enabling of bearer rejected, failed to enable media [ 104.021987][ T6238] netlink: 'syz.0.91': attribute type 10 has an invalid length. [ 104.220976][ T6239] raw_sendmsg: syz.4.90 forgot to set AF_INET. Fix it! [ 104.252447][ T6242] warning: `syz.0.93' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.604794][ T6250] netlink: 36 bytes leftover after parsing attributes in process `syz.0.94'. [ 104.810745][ T6258] netlink: 'syz.3.98': attribute type 10 has an invalid length. [ 104.944873][ T6258] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.997918][ T6258] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.006208][ T6258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.053622][ T6258] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 105.070180][ T6263] netlink: 32 bytes leftover after parsing attributes in process `syz.3.98'. [ 105.082351][ T6263] tipc: Started in network mode [ 105.095029][ T6263] tipc: Node identity 4, cluster identity 4711 [ 105.102585][ T6263] tipc: Node number set to 4 [ 105.113948][ T6275] netlink: 56 bytes leftover after parsing attributes in process `syz.2.101'. [ 105.146960][ T6275] netlink: 56 bytes leftover after parsing attributes in process `syz.2.101'. [ 105.176238][ T6267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.206539][ T6267] batadv_slave_1: entered promiscuous mode [ 105.232163][ T6278] xt_l2tp: unknown flags: 10 [ 105.953615][ T6307] netlink: 47 bytes leftover after parsing attributes in process `syz.0.113'. [ 106.129004][ T6316] Zero length message leads to an empty skb [ 106.879318][ T6344] netlink: 40 bytes leftover after parsing attributes in process `syz.3.125'. [ 106.895128][ T6346] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 107.303415][ T6357] netlink: 136 bytes leftover after parsing attributes in process `syz.4.129'. [ 107.656991][ T6379] @ÿÿÿ: renamed from bond_slave_0 (while UP) [ 107.869795][ T6386] Bluetooth: MGMT ver 1.23 [ 107.909038][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 107.978661][ T6386] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.106850][ T6395] netlink: 'syz.2.140': attribute type 4 has an invalid length. [ 108.169869][ T6398] netlink: 'syz.2.140': attribute type 4 has an invalid length. [ 108.308899][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'. [ 108.339535][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 108.432212][ T6414] tipc: Started in network mode [ 108.452514][ T6414] tipc: Node identity 7, cluster identity 4711 [ 108.485413][ T6414] tipc: Node number set to 7 [ 108.510934][ T6414] tipc: Cannot configure node identity twice [ 109.536338][ T6466] netlink: 'syz.0.164': attribute type 2 has an invalid length. [ 109.685286][ T6477] bridge0: entered allmulticast mode [ 109.727161][ T6478] __nla_validate_parse: 4 callbacks suppressed [ 109.727187][ T6478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.165'. [ 109.771881][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'. [ 109.802356][ T6478] dummy0: entered promiscuous mode [ 109.821298][ T6478] dummy0: left promiscuous mode [ 109.863226][ T6481] bridge_slave_1: left allmulticast mode [ 109.874975][ T6484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.165'. [ 109.877056][ T6481] bridge_slave_1: left promiscuous mode [ 109.887235][ T6484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.165'. [ 109.904564][ T6481] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.919942][ T6481] bridge_slave_0: left allmulticast mode [ 109.926089][ T6481] bridge_slave_0: left promiscuous mode [ 109.934561][ T6481] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.001878][ T6481] bridge0 (unregistering): left allmulticast mode [ 110.234958][ T6489] x_tables: duplicate underflow at hook 2 [ 110.646001][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.174'. [ 110.749313][ T6510] netlink: 'syz.2.176': attribute type 5 has an invalid length. [ 110.847257][ T6517] netlink: 'syz.3.179': attribute type 9 has an invalid length. [ 110.858543][ T6517] netlink: 'syz.3.179': attribute type 7 has an invalid length. [ 110.866738][ T6517] netlink: 'syz.3.179': attribute type 8 has an invalid length. [ 110.892066][ T6518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.177'. [ 110.967067][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'. [ 111.040148][ T6518] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.883836][ T6537] FAULT_INJECTION: forcing a failure. [ 111.883836][ T6537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.927261][ T6537] CPU: 1 UID: 0 PID: 6537 Comm: syz.0.182 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 111.938123][ T6537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 111.948600][ T6537] Call Trace: [ 111.951935][ T6537] [ 111.954971][ T6537] dump_stack_lvl+0x241/0x360 [ 111.959733][ T6537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.965083][ T6537] ? __pfx__printk+0x10/0x10 [ 111.969749][ T6537] ? __pfx_lock_release+0x10/0x10 [ 111.974862][ T6537] should_fail_ex+0x3b0/0x4e0 [ 111.980150][ T6537] _copy_from_user+0x2f/0xc0 [ 111.985197][ T6537] copy_msghdr_from_user+0xae/0x680 [ 111.991173][ T6537] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 111.997164][ T6537] ? __fget_files+0x2a/0x410 [ 112.001838][ T6537] ? __fget_files+0x2a/0x410 [ 112.006609][ T6537] __sys_sendmsg+0x209/0x350 [ 112.011399][ T6537] ? __pfx_lock_release+0x10/0x10 [ 112.016493][ T6537] ? __pfx___sys_sendmsg+0x10/0x10 [ 112.021784][ T6537] ? __pfx_vfs_write+0x10/0x10 [ 112.026901][ T6537] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 112.033316][ T6537] ? do_syscall_64+0x100/0x230 [ 112.038146][ T6537] ? do_syscall_64+0xb6/0x230 [ 112.042897][ T6537] do_syscall_64+0xf3/0x230 [ 112.047538][ T6537] ? clear_bhb_loop+0x35/0x90 [ 112.052279][ T6537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.058235][ T6537] RIP: 0033:0x7f3ddbd85d29 [ 112.062675][ T6537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.082409][ T6537] RSP: 002b:00007f3ddcbd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.090858][ T6537] RAX: ffffffffffffffda RBX: 00007f3ddbf76160 RCX: 00007f3ddbd85d29 [ 112.098872][ T6537] RDX: 0000000004008804 RSI: 0000000020000280 RDI: 0000000000000004 [ 112.107432][ T6537] RBP: 00007f3ddcbd7090 R08: 0000000000000000 R09: 0000000000000000 [ 112.115631][ T6537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.123738][ T6537] R13: 0000000000000000 R14: 00007f3ddbf76160 R15: 00007ffd955e67c8 [ 112.131772][ T6537] [ 112.295713][ T6547] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 112.339380][ T6547] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 112.672595][ T6570] netlink: 32 bytes leftover after parsing attributes in process `syz.3.194'. [ 112.685916][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.194'. [ 112.913957][ T6578] netlink: 104 bytes leftover after parsing attributes in process `syz.1.196'. [ 113.621333][ T6601] ipvlan2: entered promiscuous mode [ 113.640117][ T6601] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 113.779949][ T6607] bridge0: entered allmulticast mode [ 113.943549][ T6618] FAULT_INJECTION: forcing a failure. [ 113.943549][ T6618] name failslab, interval 1, probability 0, space 0, times 0 [ 114.000129][ T6618] CPU: 1 UID: 0 PID: 6618 Comm: syz.2.206 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 114.011703][ T6618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 114.022354][ T6618] Call Trace: [ 114.025893][ T6618] [ 114.028920][ T6618] dump_stack_lvl+0x241/0x360 [ 114.033903][ T6618] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.039284][ T6618] ? __pfx__printk+0x10/0x10 [ 114.043949][ T6618] ? __kmalloc_noprof+0xb5/0x4c0 [ 114.049082][ T6618] ? __pfx___might_resched+0x10/0x10 [ 114.054619][ T6618] should_fail_ex+0x3b0/0x4e0 [ 114.059367][ T6618] should_failslab+0xac/0x100 [ 114.064150][ T6618] __kmalloc_noprof+0xdd/0x4c0 [ 114.068986][ T6618] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 114.074797][ T6618] ? sock_kmalloc+0xd7/0x160 [ 114.079550][ T6618] sock_kmalloc+0xd7/0x160 [ 114.084039][ T6618] af_alg_sendmsg+0x1140/0x2650 [ 114.089069][ T6618] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 114.094357][ T6618] ? __pfx_aa_sk_perm+0x10/0x10 [ 114.099371][ T6618] ? __pfx_lock_release+0x10/0x10 [ 114.104621][ T6618] ? __import_iovec+0x590/0x870 [ 114.109611][ T6618] ? aa_sock_msg_perm+0x91/0x160 [ 114.114589][ T6618] ? skcipher_sendmsg+0x28/0xf0 [ 114.119456][ T6618] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 114.124844][ T6618] __sock_sendmsg+0x221/0x270 [ 114.129563][ T6618] ____sys_sendmsg+0x52a/0x7e0 [ 114.134659][ T6618] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.140075][ T6618] ? __fget_files+0x2a/0x410 [ 114.144833][ T6618] ? __fget_files+0x2a/0x410 [ 114.149592][ T6618] __sys_sendmsg+0x269/0x350 [ 114.154220][ T6618] ? __pfx_lock_release+0x10/0x10 [ 114.159386][ T6618] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.164723][ T6618] ? __pfx_vfs_write+0x10/0x10 [ 114.169640][ T6618] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 114.176065][ T6618] ? do_syscall_64+0x100/0x230 [ 114.180917][ T6618] ? do_syscall_64+0xb6/0x230 [ 114.185726][ T6618] do_syscall_64+0xf3/0x230 [ 114.190292][ T6618] ? clear_bhb_loop+0x35/0x90 [ 114.195125][ T6618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.201172][ T6618] RIP: 0033:0x7f8853b85d29 [ 114.205647][ T6618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.225331][ T6618] RSP: 002b:00007f885497a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.234663][ T6618] RAX: ffffffffffffffda RBX: 00007f8853d76160 RCX: 00007f8853b85d29 [ 114.243143][ T6618] RDX: 0000000004008804 RSI: 0000000020000280 RDI: 0000000000000004 [ 114.251233][ T6618] RBP: 00007f885497a090 R08: 0000000000000000 R09: 0000000000000000 [ 114.259616][ T6618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.267788][ T6618] R13: 0000000000000000 R14: 00007f8853d76160 R15: 00007ffc5f8b8a78 [ 114.275813][ T6618] [ 114.761744][ T6648] netlink: 'syz.4.219': attribute type 1 has an invalid length. [ 114.809284][ T6650] vlan2: entered promiscuous mode [ 114.817281][ T6650] vlan2: entered allmulticast mode [ 114.824787][ T6650] vlan0: entered allmulticast mode [ 114.832508][ T6650] veth0_vlan: entered allmulticast mode [ 114.841318][ T6650] vlan0: entered promiscuous mode [ 114.893442][ T6650] team0: Port device vlan2 added [ 115.549229][ T6672] __nla_validate_parse: 4 callbacks suppressed [ 115.549256][ T6672] netlink: 68 bytes leftover after parsing attributes in process `syz.1.227'. [ 115.594661][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'. [ 116.052160][ T6688] xt_l2tp: unknown flags: 10 [ 118.164808][ T6730] xt_l2tp: unknown flags: 10 [ 118.540757][ T6736] xt_l2tp: unknown flags: 10 [ 118.794054][ T6741] netlink: 136 bytes leftover after parsing attributes in process `syz.4.249'. [ 118.877200][ T6741] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 118.959778][ T6750] Driver unsupported XDP return value 0 on prog (id 96) dev N/A, expect packet loss! [ 120.317566][ T6774] xt_l2tp: unknown flags: 10 [ 133.220920][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.228292][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.081779][ T6788] netlink: 16 bytes leftover after parsing attributes in process `syz.1.264'. [ 136.241125][ T6796] delete_channel: no stack [ 136.332052][ T6801] netlink: 'syz.3.268': attribute type 4 has an invalid length. [ 136.361626][ T6804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.711647][ T6815] xt_l2tp: unknown flags: 10 [ 136.754119][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.271'. [ 136.806536][ T6816] netlink: 28 bytes leftover after parsing attributes in process `syz.3.271'. [ 137.243905][ T6829] netlink: 120 bytes leftover after parsing attributes in process `syz.1.276'. [ 137.257139][ T6829] netlink: 'syz.1.276': attribute type 1 has an invalid length. [ 137.277607][ T6829] netlink: 68 bytes leftover after parsing attributes in process `syz.1.276'. [ 137.560570][ T6833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.277'. [ 137.808529][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'. [ 137.819018][ T6848] netlink: 16 bytes leftover after parsing attributes in process `syz.4.284'. [ 137.839555][ T6846] veth0_vlan: left allmulticast mode [ 137.914383][ T6846] vlan0: left allmulticast mode [ 137.926580][ T6854] xt_l2tp: unknown flags: 10 [ 137.938012][ T6846] vlan0: left promiscuous mode [ 138.186511][ T6846] team0: Port device vlan2 removed [ 138.355220][ T6872] netlink: 1268 bytes leftover after parsing attributes in process `syz.4.290'. [ 138.394193][ T6872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.470643][ T6872] netlink: 24 bytes leftover after parsing attributes in process `syz.4.290'. [ 138.904769][ T6888] batadv_slave_1: entered promiscuous mode [ 138.949576][ T6887] batadv_slave_1: left promiscuous mode [ 139.141439][ T6895] xt_l2tp: unknown flags: 10 [ 139.442524][ T6889] sctp: [Deprecated]: syz.4.293 (pid 6889) Use of int in max_burst socket option. [ 139.442524][ T6889] Use struct sctp_assoc_value instead [ 140.464337][ T6925] x_tables: duplicate underflow at hook 1 [ 140.577319][ T6937] xt_l2tp: unknown flags: 10 [ 141.373637][ T6967] __nla_validate_parse: 2 callbacks suppressed [ 141.373663][ T6967] netlink: 56 bytes leftover after parsing attributes in process `syz.0.319'. [ 141.435773][ T6967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.319'. [ 141.485199][ T6972] netlink: 36 bytes leftover after parsing attributes in process `syz.4.321'. [ 141.497345][ T6973] netlink: 'syz.0.319': attribute type 1 has an invalid length. [ 141.505353][ T6973] netlink: 'syz.0.319': attribute type 3 has an invalid length. [ 141.635904][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.321'. [ 141.667204][ T6973] netlink: 224 bytes leftover after parsing attributes in process `syz.0.319'. [ 142.136525][ T6981] netlink: 28 bytes leftover after parsing attributes in process `syz.4.325'. [ 143.061640][ T5921] IPVS: starting estimator thread 0... [ 143.089933][ T6994] netlink: 'syz.1.329': attribute type 39 has an invalid length. [ 143.417112][ T7003] IPVS: using max 19 ests per chain, 45600 per kthread [ 143.536993][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 144.216812][ T7017] netlink: 'syz.2.336': attribute type 1 has an invalid length. [ 144.528923][ T7023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.337'. [ 144.652642][ T7019] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 144.665044][ T6103] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 144.682279][ T7020] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.698298][ T7021] vlan0: entered promiscuous mode [ 144.705379][ T7021] bond1: entered promiscuous mode [ 144.711813][ T7021] ip6gretap1: entered promiscuous mode [ 144.735551][ T7021] bond1: left promiscuous mode [ 144.745959][ T7021] ip6gretap1: left promiscuous mode [ 144.794271][ T7035] xt_l2tp: unknown flags: 10 [ 144.840290][ T52] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 145.029570][ T7043] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 145.057824][ T51] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 145.322363][ T7060] netlink: 'syz.4.351': attribute type 10 has an invalid length. [ 145.332460][ T7060] netlink: 2 bytes leftover after parsing attributes in process `syz.4.351'. [ 145.417357][ T7060] bridge0: entered promiscuous mode [ 145.456562][ T7065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.352'. [ 145.667714][ T51] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 145.780793][ T7070] tipc: Enabling of bearer rejected, failed to enable media [ 145.880539][ T7075] bridge1: entered promiscuous mode [ 145.902976][ T7075] bridge1: entered allmulticast mode [ 146.209941][ T7089] netlink: 96 bytes leftover after parsing attributes in process `syz.3.357'. [ 146.397597][ T7094] netlink: 16 bytes leftover after parsing attributes in process `syz.3.357'. [ 146.610534][ T7099] xt_l2tp: unknown flags: 10 [ 147.083529][ T7117] netlink: 28 bytes leftover after parsing attributes in process `syz.2.362'. [ 147.278414][ T7122] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 0, id = 0 [ 147.650252][ T7131] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.365'. [ 147.702349][ T7129] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.365'. [ 147.718780][ T7133] netlink: 16 bytes leftover after parsing attributes in process `syz.4.366'. [ 148.707179][ T7175] netlink: 80 bytes leftover after parsing attributes in process `syz.3.373'. [ 148.716757][ T7175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.373'. [ 149.151946][ T7180] xt_l2tp: unknown flags: 10 [ 149.658623][ T7201] can: request_module (can-proto-0) failed. [ 149.829780][ T7209] tipc: Enabled bearer , priority 0 [ 149.845740][ T7209] syzkaller0: entered promiscuous mode [ 149.861171][ T7209] syzkaller0: entered allmulticast mode [ 149.880663][ T7209] tipc: Resetting bearer [ 149.894611][ T7208] tipc: Resetting bearer [ 149.915151][ T7208] tipc: Disabling bearer [ 149.951124][ T7211] macsec0: entered promiscuous mode [ 149.965184][ T7211] veth1_macvtap: left promiscuous mode [ 150.028489][ T7211] macsec0 (unregistering): left promiscuous mode [ 150.213514][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'. [ 150.249658][ T7217] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.387'. [ 150.296402][ T7214] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.387'. [ 150.346089][ T5200] IPVS: starting estimator thread 0... [ 150.437103][ T7225] IPVS: using max 20 ests per chain, 48000 per kthread [ 150.835972][ T7240] netlink: 'syz.3.394': attribute type 1 has an invalid length. [ 151.008143][ T7240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.025418][ T7238] bond1: (slave gretap1): making interface the new active one [ 151.035419][ T7238] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 151.393841][ T7257] xt_l2tp: unknown flags: 10 [ 151.413789][ T7260] __nla_validate_parse: 1 callbacks suppressed [ 151.413824][ T7260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.400'. [ 151.616767][ T5200] hid-generic 0005:0458:0059.0001: item fetching failed at offset 0/1 [ 151.627936][ T5200] hid-generic 0005:0458:0059.0001: probe with driver hid-generic failed with error -22 [ 151.654500][ T7269] netlink: 1264 bytes leftover after parsing attributes in process `syz.3.405'. [ 151.664106][ T7269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.018459][ T7283] netlink: 16 bytes leftover after parsing attributes in process `syz.4.410'. [ 152.106572][ T7290] netlink: 88 bytes leftover after parsing attributes in process `syz.1.412'. [ 152.772412][ T7308] xt_l2tp: unknown flags: 10 [ 153.950695][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.430'. [ 154.001334][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.430'. [ 154.509197][ T7367] xt_l2tp: unknown flags: 10 [ 154.617931][ T7374] FAULT_INJECTION: forcing a failure. [ 154.617931][ T7374] name failslab, interval 1, probability 0, space 0, times 0 [ 154.657079][ T7374] CPU: 1 UID: 0 PID: 7374 Comm: syz.3.437 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 154.667860][ T7374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 154.677975][ T7374] Call Trace: [ 154.681317][ T7374] [ 154.684344][ T7374] dump_stack_lvl+0x241/0x360 [ 154.689188][ T7374] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.694469][ T7374] ? __pfx__printk+0x10/0x10 [ 154.699151][ T7374] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 154.705308][ T7374] ? __pfx___might_resched+0x10/0x10 [ 154.710669][ T7374] should_fail_ex+0x3b0/0x4e0 [ 154.715420][ T7374] should_failslab+0xac/0x100 [ 154.720167][ T7374] kmem_cache_alloc_node_noprof+0x77/0x380 [ 154.726048][ T7374] ? __alloc_skb+0x1c3/0x440 [ 154.730703][ T7374] __alloc_skb+0x1c3/0x440 [ 154.735195][ T7374] ? __pfx___alloc_skb+0x10/0x10 [ 154.740217][ T7374] ? netlink_autobind+0xd6/0x2f0 [ 154.745283][ T7374] ? netlink_autobind+0x2b0/0x2f0 [ 154.750382][ T7374] netlink_sendmsg+0x638/0xcb0 [ 154.755241][ T7374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.760613][ T7374] ? aa_sock_msg_perm+0x91/0x160 [ 154.765622][ T7374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.770971][ T7374] __sock_sendmsg+0x221/0x270 [ 154.775721][ T7374] ____sys_sendmsg+0x52a/0x7e0 [ 154.780575][ T7374] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.785932][ T7374] ? __fget_files+0x2a/0x410 [ 154.790593][ T7374] ? __fget_files+0x2a/0x410 [ 154.795255][ T7374] __sys_sendmsg+0x269/0x350 [ 154.799910][ T7374] ? __pfx_lock_release+0x10/0x10 [ 154.805027][ T7374] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.810274][ T7374] ? __pfx_vfs_write+0x10/0x10 [ 154.815135][ T7374] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 154.821613][ T7374] ? do_syscall_64+0x100/0x230 [ 154.826448][ T7374] ? do_syscall_64+0xb6/0x230 [ 154.831191][ T7374] do_syscall_64+0xf3/0x230 [ 154.835754][ T7374] ? clear_bhb_loop+0x35/0x90 [ 154.840512][ T7374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.846637][ T7374] RIP: 0033:0x7fe9b2985d29 [ 154.851108][ T7374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.870939][ T7374] RSP: 002b:00007fe9b386d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.879549][ T7374] RAX: ffffffffffffffda RBX: 00007fe9b2b75fa0 RCX: 00007fe9b2985d29 [ 154.887573][ T7374] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 154.895602][ T7374] RBP: 00007fe9b386d090 R08: 0000000000000000 R09: 0000000000000000 [ 154.903626][ T7374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.911738][ T7374] R13: 0000000000000000 R14: 00007fe9b2b75fa0 R15: 00007ffe5c8525e8 [ 154.919798][ T7374] [ 155.151916][ T7380] openvswitch: netlink: IP tunnel dst address not specified [ 155.168278][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.439'. [ 155.185311][ T7381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.439'. [ 155.205492][ T7381] netlink: 36 bytes leftover after parsing attributes in process `syz.3.439'. [ 155.289037][ T7386] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 155.330703][ T7384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.438'. [ 156.126388][ T7404] FAULT_INJECTION: forcing a failure. [ 156.126388][ T7404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.147077][ T7404] CPU: 1 UID: 0 PID: 7404 Comm: syz.3.445 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 156.157838][ T7404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 156.168035][ T7404] Call Trace: [ 156.171364][ T7404] [ 156.174346][ T7404] dump_stack_lvl+0x241/0x360 [ 156.179091][ T7404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.184381][ T7404] ? __pfx__printk+0x10/0x10 [ 156.189035][ T7404] ? __pfx_lock_release+0x10/0x10 [ 156.194127][ T7404] should_fail_ex+0x3b0/0x4e0 [ 156.198875][ T7404] _copy_from_user+0x2f/0xc0 [ 156.203540][ T7404] copy_msghdr_from_user+0xae/0x680 [ 156.208804][ T7404] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 156.214687][ T7404] ? __fget_files+0x2a/0x410 [ 156.219316][ T7404] ? __fget_files+0x2a/0x410 [ 156.223939][ T7404] __sys_sendmsg+0x209/0x350 [ 156.228548][ T7404] ? __pfx_lock_release+0x10/0x10 [ 156.233591][ T7404] ? __pfx___sys_sendmsg+0x10/0x10 [ 156.238736][ T7404] ? __pfx_vfs_write+0x10/0x10 [ 156.243541][ T7404] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 156.249923][ T7404] ? do_syscall_64+0x100/0x230 [ 156.254709][ T7404] ? do_syscall_64+0xb6/0x230 [ 156.259418][ T7404] do_syscall_64+0xf3/0x230 [ 156.263942][ T7404] ? clear_bhb_loop+0x35/0x90 [ 156.268645][ T7404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.274675][ T7404] RIP: 0033:0x7fe9b2985d29 [ 156.279114][ T7404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.298756][ T7404] RSP: 002b:00007fe9b386d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.307215][ T7404] RAX: ffffffffffffffda RBX: 00007fe9b2b75fa0 RCX: 00007fe9b2985d29 [ 156.315269][ T7404] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 156.323290][ T7404] RBP: 00007fe9b386d090 R08: 0000000000000000 R09: 0000000000000000 [ 156.331370][ T7404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.339355][ T7404] R13: 0000000000000000 R14: 00007fe9b2b75fa0 R15: 00007ffe5c8525e8 [ 156.347481][ T7404] [ 156.654346][ T7409] xt_l2tp: unknown flags: 10 [ 156.714443][ T7410] netlink: 'syz.3.447': attribute type 1 has an invalid length. [ 156.753817][ T7410] __nla_validate_parse: 1 callbacks suppressed [ 156.753841][ T7410] netlink: 224 bytes leftover after parsing attributes in process `syz.3.447'. [ 156.974292][ T7419] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 158.173907][ T7442] FAULT_INJECTION: forcing a failure. [ 158.173907][ T7442] name failslab, interval 1, probability 0, space 0, times 0 [ 158.204511][ T7442] CPU: 1 UID: 0 PID: 7442 Comm: syz.3.459 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 158.215284][ T7442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 158.225488][ T7442] Call Trace: [ 158.228804][ T7442] [ 158.231777][ T7442] dump_stack_lvl+0x241/0x360 [ 158.236509][ T7442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.241765][ T7442] ? __pfx__printk+0x10/0x10 [ 158.246422][ T7442] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 158.252482][ T7442] ? __pfx___might_resched+0x10/0x10 [ 158.257830][ T7442] should_fail_ex+0x3b0/0x4e0 [ 158.262573][ T7442] should_failslab+0xac/0x100 [ 158.267313][ T7442] kmem_cache_alloc_node_noprof+0x77/0x380 [ 158.273186][ T7442] ? __alloc_skb+0x1c3/0x440 [ 158.277836][ T7442] __alloc_skb+0x1c3/0x440 [ 158.282306][ T7442] ? __pfx___alloc_skb+0x10/0x10 [ 158.287294][ T7442] ? netlink_autobind+0xd6/0x2f0 [ 158.292310][ T7442] ? netlink_autobind+0x2b0/0x2f0 [ 158.297398][ T7442] netlink_sendmsg+0x638/0xcb0 [ 158.302345][ T7442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.307685][ T7442] ? aa_sock_msg_perm+0x91/0x160 [ 158.312675][ T7442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.318007][ T7442] __sock_sendmsg+0x221/0x270 [ 158.322845][ T7442] ____sys_sendmsg+0x52a/0x7e0 [ 158.327698][ T7442] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.333070][ T7442] ? __fget_files+0x2a/0x410 [ 158.337730][ T7442] ? __fget_files+0x2a/0x410 [ 158.342382][ T7442] __sys_sendmsg+0x269/0x350 [ 158.347018][ T7442] ? __pfx_lock_release+0x10/0x10 [ 158.352125][ T7442] ? __pfx___sys_sendmsg+0x10/0x10 [ 158.357321][ T7442] ? __pfx_vfs_write+0x10/0x10 [ 158.362460][ T7442] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 158.368946][ T7442] ? do_syscall_64+0x100/0x230 [ 158.373794][ T7442] ? do_syscall_64+0xb6/0x230 [ 158.378525][ T7442] do_syscall_64+0xf3/0x230 [ 158.383079][ T7442] ? clear_bhb_loop+0x35/0x90 [ 158.387811][ T7442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.393758][ T7442] RIP: 0033:0x7fe9b2985d29 [ 158.398232][ T7442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.418170][ T7442] RSP: 002b:00007fe9b386d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.426757][ T7442] RAX: ffffffffffffffda RBX: 00007fe9b2b75fa0 RCX: 00007fe9b2985d29 [ 158.435258][ T7442] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 158.443482][ T7442] RBP: 00007fe9b386d090 R08: 0000000000000000 R09: 0000000000000000 [ 158.451608][ T7442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.459632][ T7442] R13: 0000000000000000 R14: 00007fe9b2b75fa0 R15: 00007ffe5c8525e8 [ 158.467762][ T7442] [ 158.728317][ T7451] tipc: Enabled bearer , priority 10 [ 159.054614][ T7458] netlink: 'syz.3.466': attribute type 4 has an invalid length. [ 159.062641][ T7458] netlink: 17 bytes leftover after parsing attributes in process `syz.3.466'. [ 159.098620][ T7458] rdma_op ffff88805ac769f0 conn xmit_rdma 0000000000000000 [ 159.122718][ T7458] netlink: 20 bytes leftover after parsing attributes in process `syz.3.466'. [ 159.863432][ T837] tipc: Node number set to 3260613835 [ 159.987836][ T7480] syzkaller1: entered allmulticast mode [ 160.015357][ T7480] netlink: 36 bytes leftover after parsing attributes in process `syz.1.475'. [ 160.050422][ T7483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.476'. [ 160.093474][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.476'. [ 160.152921][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'. [ 160.173813][ T7483] netlink: 16 bytes leftover after parsing attributes in process `syz.2.476'. [ 160.221370][ T7483] batadv0: entered promiscuous mode [ 160.280930][ T7483] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 160.327202][ T7490] netlink: 24 bytes leftover after parsing attributes in process `syz.1.478'. [ 160.438880][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 162.146733][ T7544] netlink: 'syz.2.499': attribute type 2 has an invalid length. [ 162.520756][ T7554] xt_l2tp: unknown flags: 10 [ 162.559055][ T7552] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 162.598820][ T7552] macsec1: entered allmulticast mode [ 162.604218][ T7552] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 162.605762][ T7556] __nla_validate_parse: 4 callbacks suppressed [ 162.605784][ T7556] netlink: 36 bytes leftover after parsing attributes in process `syz.1.501'. [ 162.637583][ T7552] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 162.644649][ T7552] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 162.901016][ T7566] netlink: 'syz.3.505': attribute type 2 has an invalid length. [ 163.396419][ T7579] syzkaller1: entered promiscuous mode [ 163.414927][ T7579] syzkaller1: entered allmulticast mode [ 163.635025][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.511'. [ 163.980262][ T7584] netlink: 'syz.2.512': attribute type 1 has an invalid length. [ 164.010654][ T7584] pim6reg: entered allmulticast mode [ 164.018700][ T7584] trusted_key: syz.2.512 sent an empty control message without MSG_MORE. [ 164.646000][ T7616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.520'. [ 164.720376][ T7616] tipc: Started in network mode [ 164.750170][ T7616] tipc: Node identity 0000000a000000005f2e002d0000004, cluster identity 4711 [ 164.797724][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.523'. [ 165.013733][ T7630] netlink: 28 bytes leftover after parsing attributes in process `syz.3.528'. [ 165.047149][ T7630] netlink: 28 bytes leftover after parsing attributes in process `syz.3.528'. [ 165.345693][ T7650] netlink: 16 bytes leftover after parsing attributes in process `syz.3.533'. [ 165.565044][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.536'. [ 165.628989][ T7660] veth0: entered promiscuous mode [ 165.649238][ T7660] macvtap1: entered promiscuous mode [ 165.655004][ T7660] macvtap1: entered allmulticast mode [ 165.687037][ T7660] veth0: entered allmulticast mode [ 165.755072][ T7664] veth0: left allmulticast mode [ 165.774485][ T7664] veth0: left promiscuous mode [ 165.918126][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.537'. [ 166.059473][ T7673] FAULT_INJECTION: forcing a failure. [ 166.059473][ T7673] name failslab, interval 1, probability 0, space 0, times 0 [ 166.126452][ T7673] CPU: 0 UID: 0 PID: 7673 Comm: syz.3.539 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 166.137683][ T7673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 166.147890][ T7673] Call Trace: [ 166.151214][ T7673] [ 166.154200][ T7673] dump_stack_lvl+0x241/0x360 [ 166.159126][ T7673] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.164394][ T7673] ? __pfx__printk+0x10/0x10 [ 166.169052][ T7673] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 166.175186][ T7673] ? __pfx___might_resched+0x10/0x10 [ 166.180533][ T7673] should_fail_ex+0x3b0/0x4e0 [ 166.185284][ T7673] should_failslab+0xac/0x100 [ 166.190022][ T7673] kmem_cache_alloc_node_noprof+0x77/0x380 [ 166.195889][ T7673] ? __alloc_skb+0x1c3/0x440 [ 166.200563][ T7673] __alloc_skb+0x1c3/0x440 [ 166.205046][ T7673] ? __pfx___alloc_skb+0x10/0x10 [ 166.210074][ T7673] ? netlink_ack_tlv_len+0x6e/0x200 [ 166.215429][ T7673] netlink_ack+0x145/0xa50 [ 166.219909][ T7673] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 166.225526][ T7673] ? __pfx_nl80211_post_doit+0x10/0x10 [ 166.231069][ T7673] ? __pfx___might_resched+0x10/0x10 [ 166.236530][ T7673] netlink_rcv_skb+0x262/0x430 [ 166.241477][ T7673] ? __pfx_genl_rcv_msg+0x10/0x10 [ 166.246775][ T7673] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 166.252146][ T7673] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 166.257714][ T7673] genl_rcv+0x28/0x40 [ 166.261762][ T7673] netlink_unicast+0x7f6/0x990 [ 166.266603][ T7673] ? __pfx_netlink_unicast+0x10/0x10 [ 166.271952][ T7673] ? __virt_addr_valid+0x45f/0x530 [ 166.275881][ T7678] netlink: 'syz.1.541': attribute type 1 has an invalid length. [ 166.277190][ T7673] ? __phys_addr_symbol+0x2f/0x70 [ 166.277243][ T7673] ? __check_object_size+0x47a/0x730 [ 166.277278][ T7673] netlink_sendmsg+0x8e4/0xcb0 [ 166.277322][ T7673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.305591][ T7673] ? aa_sock_msg_perm+0x91/0x160 [ 166.310602][ T7673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.315958][ T7673] __sock_sendmsg+0x221/0x270 [ 166.320825][ T7673] ____sys_sendmsg+0x52a/0x7e0 [ 166.325765][ T7673] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.331118][ T7673] ? __fget_files+0x2a/0x410 [ 166.335752][ T7673] ? __fget_files+0x2a/0x410 [ 166.340379][ T7673] __sys_sendmsg+0x269/0x350 [ 166.344992][ T7673] ? __pfx_lock_release+0x10/0x10 [ 166.350041][ T7673] ? __pfx___sys_sendmsg+0x10/0x10 [ 166.355209][ T7673] ? __pfx_vfs_write+0x10/0x10 [ 166.360008][ T7673] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 166.366469][ T7673] ? do_syscall_64+0x100/0x230 [ 166.371270][ T7673] ? do_syscall_64+0xb6/0x230 [ 166.376241][ T7673] do_syscall_64+0xf3/0x230 [ 166.380767][ T7673] ? clear_bhb_loop+0x35/0x90 [ 166.385463][ T7673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.391380][ T7673] RIP: 0033:0x7fe9b2985d29 [ 166.395826][ T7673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.415487][ T7673] RSP: 002b:00007fe9b386d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.424054][ T7673] RAX: ffffffffffffffda RBX: 00007fe9b2b75fa0 RCX: 00007fe9b2985d29 [ 166.432232][ T7673] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 166.440244][ T7673] RBP: 00007fe9b386d090 R08: 0000000000000000 R09: 0000000000000000 [ 166.448258][ T7673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.456278][ T7673] R13: 0000000000000000 R14: 00007fe9b2b75fa0 R15: 00007ffe5c8525e8 [ 166.464492][ T7673] [ 167.130117][ T7695] team0: Device ipvlan2 failed to register rx_handler [ 167.503527][ T7695] team0: Device ipvlan2 failed to register rx_handler [ 167.545323][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.550'. [ 167.668161][ T5921] syzkaller1: tun_net_xmit 90 [ 167.690340][ T7695] team0: Device ipvlan2 failed to register rx_handler [ 167.795665][ T7709] netlink: 47 bytes leftover after parsing attributes in process `syz.4.552'. [ 167.816224][ T3467] syzkaller1: tun_net_xmit 86 [ 167.826300][ T7701] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 167.836438][ T7701] syzkaller1: Linktype set failed because interface is up [ 167.883193][ T7695] team0: Device ipvlan2 failed to register rx_handler [ 168.250989][ T7716] netlink: 'syz.4.554': attribute type 1 has an invalid length. [ 168.306029][ T7718] netlink: 32 bytes leftover after parsing attributes in process `syz.4.554'. [ 168.376058][ T7716] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.053620][ T7732] netlink: 'syz.3.555': attribute type 10 has an invalid length. [ 169.086236][ T7733] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 169.106162][ T7732] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.153668][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 169.169669][ T7724] bridge_slave_1: left allmulticast mode [ 169.175395][ T7724] bridge_slave_1: left promiscuous mode [ 169.205551][ T7724] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.263247][ T7724] bridge_slave_0: left promiscuous mode [ 169.269410][ T7724] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.281550][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.562'. [ 169.314805][ T7724] bond0: (slave bridge0): Releasing backup interface [ 169.348166][ T7742] netlink: 36 bytes leftover after parsing attributes in process `syz.1.561'. [ 169.372561][ T7738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.560'. [ 169.425187][ T7743] netlink: 64 bytes leftover after parsing attributes in process `syz.0.560'. [ 169.602286][ T7754] tc_dump_action: action bad kind [ 169.611574][ T7756] tc_dump_action: action bad kind [ 169.617975][ T7750] netlink: 16 bytes leftover after parsing attributes in process `syz.3.564'. [ 169.889116][ T7761] netlink: 'syz.0.568': attribute type 5 has an invalid length. [ 170.021122][ T7772] FAULT_INJECTION: forcing a failure. [ 170.021122][ T7772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.070909][ T7772] CPU: 0 UID: 0 PID: 7772 Comm: syz.3.572 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 170.081586][ T7772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 170.091704][ T7772] Call Trace: [ 170.095108][ T7772] [ 170.098083][ T7772] dump_stack_lvl+0x241/0x360 [ 170.102825][ T7772] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.108081][ T7772] ? __pfx__printk+0x10/0x10 [ 170.112748][ T7772] ? vfs_write+0x730/0xd30 [ 170.117237][ T7772] should_fail_ex+0x3b0/0x4e0 [ 170.122090][ T7772] _copy_from_user+0x2f/0xc0 [ 170.126834][ T7772] move_addr_to_kernel+0x82/0x150 [ 170.131971][ T7772] __sys_connect+0xb6/0x2d0 [ 170.136786][ T7772] ? __fget_files+0x2a/0x410 [ 170.141617][ T7772] ? __pfx___sys_connect+0x10/0x10 [ 170.146862][ T7772] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 170.153253][ T7772] ? do_syscall_64+0x100/0x230 [ 170.156681][ T7775] ipt_ECN: cannot use operation on non-tcp rule [ 170.158147][ T7772] __x64_sys_connect+0x7a/0x90 [ 170.158187][ T7772] do_syscall_64+0xf3/0x230 [ 170.158224][ T7772] ? clear_bhb_loop+0x35/0x90 [ 170.158259][ T7772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.158288][ T7772] RIP: 0033:0x7fe9b2985d29 [ 170.158311][ T7772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.158331][ T7772] RSP: 002b:00007fe9b386d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 170.158359][ T7772] RAX: ffffffffffffffda RBX: 00007fe9b2b75fa0 RCX: 00007fe9b2985d29 [ 170.158376][ T7772] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000003 [ 170.233343][ T7772] RBP: 00007fe9b386d090 R08: 0000000000000000 R09: 0000000000000000 [ 170.241374][ T7772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.249399][ T7772] R13: 0000000000000000 R14: 00007fe9b2b75fa0 R15: 00007ffe5c8525e8 [ 170.257456][ T7772] [ 170.292211][ T7776] netlink: 20 bytes leftover after parsing attributes in process `syz.1.573'. [ 170.418782][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.575'. [ 171.392979][ T7792] Bluetooth: MGMT ver 1.23 [ 172.308487][ T7811] FAULT_INJECTION: forcing a failure. [ 172.308487][ T7811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.377131][ T7811] CPU: 1 UID: 0 PID: 7811 Comm: syz.1.585 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 172.387932][ T7811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 172.398045][ T7811] Call Trace: [ 172.401364][ T7811] [ 172.404337][ T7811] dump_stack_lvl+0x241/0x360 [ 172.409081][ T7811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.414517][ T7811] ? __pfx__printk+0x10/0x10 [ 172.419171][ T7811] ? snprintf+0xda/0x120 [ 172.423468][ T7811] should_fail_ex+0x3b0/0x4e0 [ 172.428198][ T7811] _copy_to_user+0x31/0xb0 [ 172.432674][ T7811] simple_read_from_buffer+0xca/0x150 [ 172.438130][ T7811] proc_fail_nth_read+0x1e9/0x250 [ 172.443227][ T7811] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.448933][ T7811] ? rw_verify_area+0x55e/0x6f0 [ 172.453837][ T7811] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.459454][ T7811] vfs_read+0x1fc/0xb70 [ 172.463678][ T7811] ? __pfx___mutex_lock+0x10/0x10 [ 172.468856][ T7811] ? __pfx_vfs_read+0x10/0x10 [ 172.473634][ T7811] ? __fget_files+0x2a/0x410 [ 172.478287][ T7811] ? __fget_files+0x395/0x410 [ 172.483025][ T7811] ? __fget_files+0x2a/0x410 [ 172.487687][ T7811] ksys_read+0x18f/0x2b0 [ 172.491974][ T7811] ? __pfx_ksys_read+0x10/0x10 [ 172.496790][ T7811] ? do_syscall_64+0x100/0x230 [ 172.501616][ T7811] ? do_syscall_64+0xb6/0x230 [ 172.506363][ T7811] do_syscall_64+0xf3/0x230 [ 172.511022][ T7811] ? clear_bhb_loop+0x35/0x90 [ 172.515766][ T7811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.521718][ T7811] RIP: 0033:0x7fd30a98473c [ 172.526191][ T7811] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 172.545859][ T7811] RSP: 002b:00007fd30b7bb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 172.554341][ T7811] RAX: ffffffffffffffda RBX: 00007fd30ab75fa0 RCX: 00007fd30a98473c [ 172.562372][ T7811] RDX: 000000000000000f RSI: 00007fd30b7bb0a0 RDI: 0000000000000004 [ 172.570492][ T7811] RBP: 00007fd30b7bb090 R08: 0000000000000000 R09: 0000000000000000 [ 172.578517][ T7811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 172.586545][ T7811] R13: 0000000000000000 R14: 00007fd30ab75fa0 R15: 00007ffc95316bd8 [ 172.594703][ T7811] [ 172.830997][ T7821] xt_l2tp: unknown flags: 10 [ 173.356788][ T837] IPVS: starting estimator thread 0... [ 173.392234][ T7828] netlink: 'syz.0.592': attribute type 39 has an invalid length. [ 173.477012][ T7833] IPVS: using max 19 ests per chain, 45600 per kthread [ 173.672068][ T5142] Bluetooth: hci4: link tx timeout [ 173.684568][ T5142] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 173.789285][ T7841] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 173.906380][ T7843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.553519][ T7859] __nla_validate_parse: 1 callbacks suppressed [ 174.553554][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.598'. [ 175.071251][ T7862] syzkaller0: entered promiscuous mode [ 175.076813][ T7862] syzkaller0: entered allmulticast mode [ 175.094819][ T7866] xt_l2tp: unknown flags: 10 [ 175.417654][ T7879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.604'. [ 175.707316][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 176.209413][ T7884] netlink: 28 bytes leftover after parsing attributes in process `syz.4.605'. [ 176.237111][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.605'. [ 178.496233][ T7889] FAULT_INJECTION: forcing a failure. [ 178.496233][ T7889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.510969][ T7889] CPU: 1 UID: 0 PID: 7889 Comm: syz.0.607 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 178.521625][ T7889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 178.531717][ T7889] Call Trace: [ 178.535008][ T7889] [ 178.537969][ T7889] dump_stack_lvl+0x241/0x360 [ 178.542673][ T7889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.547891][ T7889] ? __pfx__printk+0x10/0x10 [ 178.552503][ T7889] ? snprintf+0xda/0x120 [ 178.556759][ T7889] should_fail_ex+0x3b0/0x4e0 [ 178.561460][ T7889] _copy_to_user+0x31/0xb0 [ 178.565899][ T7889] simple_read_from_buffer+0xca/0x150 [ 178.571304][ T7889] proc_fail_nth_read+0x1e9/0x250 [ 178.576442][ T7889] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.582009][ T7889] ? rw_verify_area+0x55e/0x6f0 [ 178.586875][ T7889] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.592449][ T7889] vfs_read+0x1fc/0xb70 [ 178.596620][ T7889] ? __pfx___mutex_lock+0x10/0x10 [ 178.601675][ T7889] ? __pfx_vfs_read+0x10/0x10 [ 178.606462][ T7889] ? __fget_files+0x2a/0x410 [ 178.611077][ T7889] ? __fget_files+0x395/0x410 [ 178.615769][ T7889] ? __fget_files+0x2a/0x410 [ 178.620385][ T7889] ksys_read+0x18f/0x2b0 [ 178.624648][ T7889] ? __pfx_ksys_read+0x10/0x10 [ 178.629424][ T7889] ? do_syscall_64+0x100/0x230 [ 178.634210][ T7889] ? do_syscall_64+0xb6/0x230 [ 178.638907][ T7889] do_syscall_64+0xf3/0x230 [ 178.643948][ T7889] ? clear_bhb_loop+0x35/0x90 [ 178.648651][ T7889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.654565][ T7889] RIP: 0033:0x7f3ddbd8473c [ 178.659015][ T7889] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 178.678746][ T7889] RSP: 002b:00007f3ddcc19030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 178.687187][ T7889] RAX: ffffffffffffffda RBX: 00007f3ddbf75fa0 RCX: 00007f3ddbd8473c [ 178.695176][ T7889] RDX: 000000000000000f RSI: 00007f3ddcc190a0 RDI: 0000000000000004 [ 178.703167][ T7889] RBP: 00007f3ddcc19090 R08: 0000000000000000 R09: 0000000000000000 [ 178.711167][ T7889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.719156][ T7889] R13: 0000000000000000 R14: 00007f3ddbf75fa0 R15: 00007ffd955e67c8 [ 178.727161][ T7889] [ 178.952071][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'. [ 178.955649][ T7899] xt_l2tp: unknown flags: 10 [ 179.451528][ T7915] netlink: 'syz.4.616': attribute type 10 has an invalid length. [ 179.462608][ T7916] netlink: 47 bytes leftover after parsing attributes in process `syz.0.614'. [ 179.472426][ T7912] netlink: 47 bytes leftover after parsing attributes in process `syz.0.614'. [ 179.499851][ T7917] xt_l2tp: unknown flags: 10 [ 179.550259][ T7915] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.607416][ T7915] bond0: (slave team0): Enslaving as an active interface with an up link [ 179.660531][ T7919] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:e08f:75ff:fe65:1458 error=-28 [ 179.781817][ T7921] netdevsim netdevsim0: Direct firmware load for . [ 179.781817][ T7921] failed with error -2 [ 179.818069][ T7926] vlan2: entered promiscuous mode [ 179.831435][ T7921] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 179.831435][ T7921] [ 179.844457][ T7926] macvtap0: entered promiscuous mode [ 180.044413][ T7919] infiniband syz1: set active [ 180.056076][ T7919] infiniband syz1: added team_slave_0 [ 180.213268][ T7919] RDS/IB: syz1: added [ 180.308133][ T7919] smc: adding ib device syz1 with port count 1 [ 180.314705][ T7919] smc: ib device syz1 port 1 has pnetid [ 180.607767][ T7937] netlink: 20 bytes leftover after parsing attributes in process `syz.2.622'. [ 180.859366][ T7945] sctp: [Deprecated]: syz.1.625 (pid 7945) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.859366][ T7945] Use struct sctp_sack_info instead [ 181.404070][ T7960] veth1_to_bridge: entered promiscuous mode [ 181.421035][ T7960] veth1_to_bridge: left promiscuous mode [ 181.617188][ T7958] netlink: 32 bytes leftover after parsing attributes in process `syz.1.629'. [ 182.014174][ T7971] sctp: [Deprecated]: syz.1.632 (pid 7971) Use of int in max_burst socket option. [ 182.014174][ T7971] Use struct sctp_assoc_value instead [ 182.059932][ T7936] tun0: tun_chr_ioctl cmd 1074025675 [ 182.079561][ T7936] tun0: persist disabled [ 182.257561][ T7980] netlink: 48 bytes leftover after parsing attributes in process `syz.0.636'. [ 182.844866][ T7991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.639'. [ 183.833320][ T7995] xt_l2tp: unknown flags: 10 [ 184.033586][ T8014] openvswitch: netlink: IPv4 tun info is not correct [ 184.384304][ T8030] Cannot find set identified by id 0 to match [ 184.736171][ T8045] netlink: 24 bytes leftover after parsing attributes in process `syz.4.653'. [ 184.757863][ T8044] netlink: 48 bytes leftover after parsing attributes in process `syz.1.654'. [ 184.773058][ T8047] netlink: 'syz.2.655': attribute type 10 has an invalid length. [ 185.006634][ T8057] netlink: 243 bytes leftover after parsing attributes in process `syz.0.657'. [ 185.021897][ T8057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.729555][ T8047] team0: Device veth0_macvtap failed to register rx_handler [ 187.575433][ T29] audit: type=1107 audit(1736998530.101:2): pid=8097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='/u%Å¿;/ÖüyL÷kä»e2×koU‹h.*dñ†¡)ƒÈQä$þŠÚÍ”*m~ñaï&gäô"$f_Af{è€ „«ZÓæ¹/×C©k¥«S¥Á°D' [ 187.594709][ T8100] netlink: 36 bytes leftover after parsing attributes in process `syz.2.672'. [ 187.633850][ T8100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.672'. [ 187.649673][ T8100] netlink: 36 bytes leftover after parsing attributes in process `syz.2.672'. [ 187.661528][ T8100] netlink: 36 bytes leftover after parsing attributes in process `syz.2.672'. [ 187.674891][ T8101] netlink: 36 bytes leftover after parsing attributes in process `syz.2.672'. [ 187.687404][ T8101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.672'. [ 187.751221][ T8101] netlink: 36 bytes leftover after parsing attributes in process `syz.2.672'. [ 187.786459][ T8101] netlink: 36 bytes leftover after parsing attributes in process `syz.2.672'. [ 188.664383][ T8133] xt_l2tp: unknown flags: 10 [ 189.136313][ T8147] netlink: 'syz.4.688': attribute type 1 has an invalid length. [ 189.170559][ T8145] netlink: 24 bytes leftover after parsing attributes in process `syz.3.689'. [ 189.299008][ T8153] netlink: 'syz.1.691': attribute type 1 has an invalid length. [ 189.338543][ T8153] bond2: entered promiscuous mode [ 189.343827][ T8153] bond2: entered allmulticast mode [ 189.384941][ T8158] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 189.429143][ T8158] bond2: (slave batadv1): making interface the new active one [ 189.436696][ T8158] batadv1: entered promiscuous mode [ 189.442408][ T8158] batadv1: entered allmulticast mode [ 189.449819][ T8158] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 189.466977][ T8157] netlink: 'syz.2.690': attribute type 12 has an invalid length. [ 189.486920][ T8157] netlink: 'syz.2.690': attribute type 29 has an invalid length. [ 189.505565][ T8157] netlink: 148 bytes leftover after parsing attributes in process `syz.2.690'. [ 189.616648][ T8170] infiniband syz1: set active [ 189.627194][ T51] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 189.877117][ T5882] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 189.958008][ T8183] xt_l2tp: unknown flags: 10 [ 191.121948][ T8223] dummy0: entered promiscuous mode [ 191.154460][ T8219] pim6reg1: entered promiscuous mode [ 191.160207][ T8219] pim6reg1: entered allmulticast mode [ 191.172560][ T8218] dummy0: left promiscuous mode [ 191.527884][ T8230] tipc: Enabling of bearer rejected, failed to enable media [ 191.625520][ T8238] xt_l2tp: unknown flags: 10 [ 192.204268][ T8267] netlink: 'syz.0.724': attribute type 2 has an invalid length. [ 192.229801][ T8266] netlink: 'syz.0.724': attribute type 2 has an invalid length. [ 192.325536][ T8270] netlink: 'syz.1.725': attribute type 1 has an invalid length. [ 192.342518][ T8270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.579969][ T8281] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 4, id = 0 [ 192.676218][ T8284] __nla_validate_parse: 3 callbacks suppressed [ 192.676241][ T8284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.727'. [ 192.760991][ T8283] netlink: 20 bytes leftover after parsing attributes in process `syz.4.728'. [ 192.787521][ T8289] IPVS: stopping backup sync thread 8281 ... [ 192.910036][ T8292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.731'. [ 192.931729][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.731'. [ 192.946098][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.731'. [ 192.955308][ T8292] netlink: 16 bytes leftover after parsing attributes in process `syz.0.731'. [ 193.255252][ T8303] netlink: 28 bytes leftover after parsing attributes in process `syz.4.734'. [ 193.294421][ T8303] netlink: 'syz.4.734': attribute type 64 has an invalid length. [ 193.347602][ T8303] netlink: 830 bytes leftover after parsing attributes in process `syz.4.734'. [ 193.846537][ T8318] xt_l2tp: unknown flags: 10 [ 194.668490][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.781619][ T8354] netlink: 'syz.1.746': attribute type 4 has an invalid length. [ 194.965789][ T8358] xt_TCPMSS: Only works on TCP SYN packets [ 194.974769][ T8358] netlink: 'syz.0.749': attribute type 2 has an invalid length. [ 195.005452][ T8360] netlink: 'syz.3.751': attribute type 10 has an invalid length. [ 195.028240][ T8364] netlink: 60 bytes leftover after parsing attributes in process `syz.1.750'. [ 195.057176][ T8360] team0: Port device netdevsim0 added [ 195.280449][ T8372] xt_l2tp: unknown flags: 10 [ 195.823400][ T8391] pim6reg1: entered promiscuous mode [ 195.839395][ T8391] pim6reg1: entered allmulticast mode [ 195.945278][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.760'. [ 196.002110][ T8407] xt_CT: No such helper "syz0" [ 196.622562][ T8424] xt_l2tp: unknown flags: 10 [ 197.530288][ T8462] netdevsim netdevsim4: Direct firmware load for / [ 197.530288][ T8462] failed with error -2 [ 197.563488][ T8459] xt_CT: No such helper "netbios-ns" [ 197.577193][ T8462] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 197.577193][ T8462] [ 197.795880][ T8472] xt_l2tp: unknown flags: 10 [ 198.064921][ T8482] __nla_validate_parse: 1 callbacks suppressed [ 198.064946][ T8482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.783'. [ 198.091339][ T8482] netlink: 'syz.3.783': attribute type 1 has an invalid length. [ 198.324750][ T8484] syzkaller0: entered promiscuous mode [ 198.352439][ T8484] syzkaller0: entered allmulticast mode [ 198.445619][ T8493] netlink: 'syz.2.788': attribute type 1 has an invalid length. [ 198.485425][ T8493] netlink: 'syz.2.788': attribute type 4 has an invalid length. [ 198.493304][ T8493] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.788'. [ 198.674038][ T8499] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.699177][ T8499] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.712616][ T8499] infiniband syz1: set active [ 198.736040][ T8499] infiniband syz1: set active [ 198.777140][ T8503] netlink: 'syz.4.789': attribute type 21 has an invalid length. [ 198.785220][ T8503] netlink: 128 bytes leftover after parsing attributes in process `syz.4.789'. [ 198.796257][ T8503] netlink: 'syz.4.789': attribute type 4 has an invalid length. [ 198.805047][ T8503] netlink: 3 bytes leftover after parsing attributes in process `syz.4.789'. [ 201.078980][ T8544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.800'. [ 201.146402][ T8544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.800'. [ 201.448275][ T8569] ax25_connect(): syz.3.805 uses autobind, please contact jreuter@yaina.de [ 201.544279][ T8553] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.552036][ T8553] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.718159][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'. [ 201.738744][ T8582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.807'. [ 201.754954][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.808'. [ 201.995337][ T8553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.009889][ T8553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.124397][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'. [ 202.139262][ T8553] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.164324][ T8553] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.184473][ T8553] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.198476][ T8553] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.300367][ T8553] batadv0: left promiscuous mode [ 202.375325][ T8598] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 203.235215][ T8641] __nla_validate_parse: 1 callbacks suppressed [ 203.235240][ T8641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.822'. [ 203.377002][ T5142] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 203.386767][ T5142] Bluetooth: hci0: command 0x0401 tx timeout [ 203.693646][ T8666] syz.2.829[8666] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.693756][ T8666] syz.2.829[8666] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.736672][ T8666] syz.2.829[8666] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.901548][ T8664] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.129038][ T8682] netlink: 'syz.3.834': attribute type 1 has an invalid length. [ 204.345572][ T8682] 8021q: adding VLAN 0 to HW filter on device bond2 [ 204.800273][ T8702] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.819309][ T8703] netlink: 52 bytes leftover after parsing attributes in process `syz.3.838'. [ 204.900212][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 204.921375][ T8711] netlink: 'syz.4.840': attribute type 1 has an invalid length. [ 204.949053][ T8711] netlink: 'syz.4.840': attribute type 1 has an invalid length. [ 204.976528][ T8711] netlink: 'syz.4.840': attribute type 2 has an invalid length. [ 205.005854][ T8713] pim6reg: entered allmulticast mode [ 205.012044][ T8711] netlink: 68 bytes leftover after parsing attributes in process `syz.4.840'. [ 205.014359][ T8713] pim6reg: left allmulticast mode [ 205.185795][ T8717] netlink: 100 bytes leftover after parsing attributes in process `syz.0.842'. [ 205.195797][ T8719] veth0_to_bridge: entered promiscuous mode [ 205.204086][ T8718] veth0_to_bridge: left promiscuous mode [ 205.937645][ T8741] x_tables: duplicate underflow at hook 2 [ 205.963243][ T8741] netlink: 16 bytes leftover after parsing attributes in process `syz.2.851'. [ 205.984420][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.852'. [ 206.060549][ T8744] netlink: 'syz.1.852': attribute type 2 has an invalid length. [ 206.096291][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.852'. [ 206.197047][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.854'. [ 206.245721][ T8744] erspan1: entered promiscuous mode [ 206.249794][ T8752] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 206.251683][ T8744] erspan1: entered allmulticast mode [ 206.405997][ T8744] netlink: 16 bytes leftover after parsing attributes in process `syz.1.852'. [ 206.741742][ T8775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.860'. [ 206.983129][ T5843] Bluetooth: hci0: command 0x0401 tx timeout [ 206.989584][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 206.995670][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 207.002297][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 207.574934][ T8793] netlink: 'syz.2.865': attribute type 3 has an invalid length. [ 208.540071][ T8830] netlink: 'syz.1.877': attribute type 10 has an invalid length. [ 208.557710][ T8831] netlink: 'syz.1.877': attribute type 10 has an invalid length. [ 208.619341][ T8831] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 209.143379][ T8851] nbd: must specify an index to disconnect [ 209.345037][ T8855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.884'. [ 209.692177][ T8869] tc_dump_action: action bad kind [ 209.707316][ T8869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.890'. [ 210.242541][ T8873] netlink: 32 bytes leftover after parsing attributes in process `syz.0.884'. [ 210.290780][ T8877] GUP no longer grows the stack in syz.1.891 (8877): 20006000-2000a000 (20005000) [ 210.328673][ T8877] CPU: 1 UID: 0 PID: 8877 Comm: syz.1.891 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 210.339360][ T8877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 210.350077][ T8877] Call Trace: [ 210.353425][ T8877] [ 210.356403][ T8877] dump_stack_lvl+0x241/0x360 [ 210.361167][ T8877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.366444][ T8877] ? __pfx__printk+0x10/0x10 [ 210.371085][ T8877] ? find_vma+0xf9/0x170 [ 210.375395][ T8877] ? vma_is_secretmem+0xd/0x50 [ 210.380210][ T8877] ? check_vma_flags+0x52b/0x5a0 [ 210.385195][ T8877] __get_user_pages+0x4385/0x49e0 [ 210.390282][ T8877] ? 0xffffffffa0003b40 [ 210.394528][ T8877] ? __pfx___get_user_pages+0x10/0x10 [ 210.400032][ T8877] __gup_longterm_locked+0x49a/0x17f0 [ 210.405567][ T8877] ? __pfx___might_resched+0x10/0x10 [ 210.410924][ T8877] ? __pfx___gup_longterm_locked+0x10/0x10 [ 210.416795][ T8877] ? down_read+0x82b/0xa40 [ 210.421283][ T8877] ? is_valid_gup_args+0x124/0x200 [ 210.426560][ T8877] pin_user_pages+0x137/0x1f0 [ 210.431468][ T8877] ? __pfx_pin_user_pages+0x10/0x10 [ 210.436736][ T8877] ? trace_kmalloc+0x1f/0xd0 [ 210.441429][ T8877] xdp_umem_create+0x978/0xf30 [ 210.446295][ T8877] xsk_setsockopt+0x732/0x950 [ 210.451052][ T8877] ? __pfx_xsk_setsockopt+0x10/0x10 [ 210.456584][ T8877] ? __pfx_lock_acquire+0x10/0x10 [ 210.461853][ T8877] ? aa_sock_opt_perm+0x79/0x120 [ 210.466856][ T8877] ? __pfx_xsk_setsockopt+0x10/0x10 [ 210.472103][ T8877] do_sock_setsockopt+0x3af/0x720 [ 210.477186][ T8877] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 210.482800][ T8877] ? __fget_files+0x395/0x410 [ 210.487587][ T8877] ? __fget_files+0x2a/0x410 [ 210.492251][ T8877] __x64_sys_setsockopt+0x1ee/0x280 [ 210.497514][ T8877] do_syscall_64+0xf3/0x230 [ 210.502067][ T8877] ? clear_bhb_loop+0x35/0x90 [ 210.506797][ T8877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.512844][ T8877] RIP: 0033:0x7fd30a985d29 [ 210.517404][ T8877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.537152][ T8877] RSP: 002b:00007fd30b7bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 210.545629][ T8877] RAX: ffffffffffffffda RBX: 00007fd30ab75fa0 RCX: 00007fd30a985d29 [ 210.553657][ T8877] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000007 [ 210.561681][ T8877] RBP: 00007fd30aa01b08 R08: 0000000000000020 R09: 0000000000000000 [ 210.569696][ T8877] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 210.577704][ T8877] R13: 0000000000000000 R14: 00007fd30ab75fa0 R15: 00007ffc95316bd8 [ 210.585823][ T8877] [ 211.053994][ T8902] netlink: 68 bytes leftover after parsing attributes in process `syz.4.897'. [ 211.065419][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.897'. [ 212.203893][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'. [ 212.307859][ T8955] netlink: 40 bytes leftover after parsing attributes in process `syz.1.914'. [ 213.589216][ T8986] syz.3.925 uses old SIOCAX25GETINFO [ 213.666674][ T8986] syzkaller1: entered promiscuous mode [ 213.693298][ T8994] netlink: 'syz.0.927': attribute type 13 has an invalid length. [ 213.711877][ T8986] syzkaller1: entered allmulticast mode [ 213.851594][ T8999] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 213.862878][ T8999] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 213.873967][ T8999] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 214.039173][ T9005] netlink: 'syz.0.929': attribute type 21 has an invalid length. [ 214.067778][ T9005] netlink: 132 bytes leftover after parsing attributes in process `syz.0.929'. [ 215.229356][ T9041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.357941][ T8910] Set syz1 is full, maxelem 65536 reached [ 215.833790][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.944'. [ 216.088219][ T9065] netlink: 'syz.4.946': attribute type 10 has an invalid length. [ 216.111974][ T9065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.127097][ T5841] Bluetooth: hci0: command 0x0401 tx timeout [ 216.132861][ T9065] team0: Port device batadv0 added [ 216.344345][ T9079] netlink: 'syz.2.947': attribute type 3 has an invalid length. [ 216.371205][ T9079] netlink: 7 bytes leftover after parsing attributes in process `syz.2.947'. [ 216.448594][ T9082] netlink: 'syz.0.950': attribute type 2 has an invalid length. [ 216.514040][ T9082] netlink: 96 bytes leftover after parsing attributes in process `syz.0.950'. [ 217.689208][ T9114] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 217.716048][ T9118] netlink: 16 bytes leftover after parsing attributes in process `syz.0.961'. [ 217.727996][ T9114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.754092][ T9120] netlink: 20 bytes leftover after parsing attributes in process `syz.1.960'. [ 217.774394][ T9120] nbd: must specify at least one socket [ 218.196354][ T9143] netlink: 'syz.1.969': attribute type 11 has an invalid length. [ 218.204967][ T9143] netlink: 224 bytes leftover after parsing attributes in process `syz.1.969'. [ 218.297257][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.970'. [ 218.320196][ T9149] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 218.443031][ T9157] netlink: 'syz.4.972': attribute type 5 has an invalid length. [ 218.451216][ T9157] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.972'. [ 218.466140][ T9157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.508264][ T9160] netlink: 16 bytes leftover after parsing attributes in process `syz.1.974'. [ 218.666134][ T9169] xt_l2tp: v2 doesn't support IP mode [ 218.715399][ T9165] syzkaller0: entered promiscuous mode [ 218.730505][ T9165] syzkaller0: entered allmulticast mode [ 218.816785][ T9165] netlink: 20 bytes leftover after parsing attributes in process `syz.4.976'. [ 219.205833][ T9189] xt_l2tp: unknown flags: 10 [ 219.250550][ T9196] x_tables: unsorted entry at hook 3 [ 219.943371][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 220.436156][ T9224] netlink: 'syz.1.990': attribute type 22 has an invalid length. [ 222.017266][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 222.175982][ T9224] bridge0: left allmulticast mode [ 222.393481][ T9237] netlink: 'syz.4.995': attribute type 1 has an invalid length. [ 222.414792][ T9237] __nla_validate_parse: 3 callbacks suppressed [ 222.414817][ T9237] netlink: 36 bytes leftover after parsing attributes in process `syz.4.995'. [ 222.459134][ T9241] xt_l2tp: unknown flags: 10 [ 222.606066][ T9249] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1000'. [ 222.656175][ T9246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.999'. [ 223.121541][ T9273] IPv6: sit1: Disabled Multicast RS [ 223.152009][ T9273] sit1: entered allmulticast mode [ 223.224453][ T9285] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1009'. [ 223.304010][ T9285] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1009'. [ 223.404083][ T9291] xt_l2tp: unknown flags: 10 [ 223.493313][ T9296] FAULT_INJECTION: forcing a failure. [ 223.493313][ T9296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.496653][ T9295] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1011'. [ 223.513845][ T9296] CPU: 1 UID: 0 PID: 9296 Comm: syz.3.1013 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 223.526379][ T9296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 223.536482][ T9296] Call Trace: [ 223.539800][ T9296] [ 223.542771][ T9296] dump_stack_lvl+0x241/0x360 [ 223.547522][ T9296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.552797][ T9296] ? __pfx__printk+0x10/0x10 [ 223.557459][ T9296] ? __pfx_lock_release+0x10/0x10 [ 223.562557][ T9296] should_fail_ex+0x3b0/0x4e0 [ 223.567306][ T9296] _copy_from_user+0x2f/0xc0 [ 223.571957][ T9296] copy_msghdr_from_user+0xae/0x680 [ 223.577217][ T9296] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 223.583078][ T9296] ? __fget_files+0x2a/0x410 [ 223.587722][ T9296] ? __fget_files+0x2a/0x410 [ 223.592355][ T9296] __sys_sendmmsg+0x32b/0x720 [ 223.597428][ T9296] ? __pfx___sys_sendmmsg+0x10/0x10 [ 223.602679][ T9296] ? __pfx_lock_release+0x10/0x10 [ 223.607729][ T9296] ? kstrtouint_from_user+0x128/0x190 [ 223.613180][ T9296] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 223.619137][ T9296] ? ksys_write+0x22a/0x2b0 [ 223.623675][ T9296] ? __pfx_lock_release+0x10/0x10 [ 223.628780][ T9296] ? vfs_write+0x730/0xd30 [ 223.633228][ T9296] ? __mutex_unlock_slowpath+0x21e/0x790 [ 223.638908][ T9296] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 223.644912][ T9296] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 223.651377][ T9296] ? do_syscall_64+0x100/0x230 [ 223.656186][ T9296] __x64_sys_sendmmsg+0xa0/0xb0 [ 223.661092][ T9296] do_syscall_64+0xf3/0x230 [ 223.665646][ T9296] ? clear_bhb_loop+0x35/0x90 [ 223.670447][ T9296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.676373][ T9296] RIP: 0033:0x7fe9b2985d29 [ 223.680818][ T9296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.700439][ T9296] RSP: 002b:00007fe9b386d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 223.708871][ T9296] RAX: ffffffffffffffda RBX: 00007fe9b2b75fa0 RCX: 00007fe9b2985d29 [ 223.716941][ T9296] RDX: 0000000000000001 RSI: 0000000020004ec0 RDI: 0000000000000003 [ 223.725028][ T9296] RBP: 00007fe9b386d090 R08: 0000000000000000 R09: 0000000000000000 [ 223.733099][ T9296] R10: 0000000020000804 R11: 0000000000000246 R12: 0000000000000001 [ 223.741082][ T9296] R13: 0000000000000000 R14: 00007fe9b2b75fa0 R15: 00007ffe5c8525e8 [ 223.749078][ T9296] [ 223.809011][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1014'. [ 224.314379][ T9321] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1023'. [ 224.466689][ T9336] FAULT_INJECTION: forcing a failure. [ 224.466689][ T9336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.481767][ T9336] CPU: 0 UID: 0 PID: 9336 Comm: syz.4.1027 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 224.492786][ T9336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 224.502888][ T9336] Call Trace: [ 224.506228][ T9336] [ 224.509215][ T9336] dump_stack_lvl+0x241/0x360 [ 224.514053][ T9336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.519320][ T9336] ? __pfx__printk+0x10/0x10 [ 224.523988][ T9336] ? __pfx_lock_release+0x10/0x10 [ 224.529071][ T9336] ? __import_iovec+0x3a8/0x870 [ 224.533959][ T9336] should_fail_ex+0x3b0/0x4e0 [ 224.538779][ T9336] _copy_from_user+0x2f/0xc0 [ 224.543394][ T9336] ____sys_sendmsg+0x2ef/0x7e0 [ 224.548189][ T9336] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.553493][ T9336] ? __fget_files+0x2a/0x410 [ 224.558108][ T9336] ? __fget_files+0x2a/0x410 [ 224.562723][ T9336] __sys_sendmmsg+0x36a/0x720 [ 224.567425][ T9336] ? __pfx___sys_sendmmsg+0x10/0x10 [ 224.572650][ T9336] ? __pfx_lock_release+0x10/0x10 [ 224.577693][ T9336] ? kstrtouint_from_user+0x128/0x190 [ 224.583104][ T9336] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 224.589027][ T9336] ? ksys_write+0x22a/0x2b0 [ 224.593553][ T9336] ? __pfx_lock_release+0x10/0x10 [ 224.598615][ T9336] ? vfs_write+0x730/0xd30 [ 224.603048][ T9336] ? __mutex_unlock_slowpath+0x21e/0x790 [ 224.608741][ T9336] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 224.614778][ T9336] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 224.621159][ T9336] ? do_syscall_64+0x100/0x230 [ 224.625996][ T9336] __x64_sys_sendmmsg+0xa0/0xb0 [ 224.631110][ T9336] do_syscall_64+0xf3/0x230 [ 224.635669][ T9336] ? clear_bhb_loop+0x35/0x90 [ 224.640376][ T9336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.646300][ T9336] RIP: 0033:0x7f982ff85d29 [ 224.650735][ T9336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.670488][ T9336] RSP: 002b:00007f982ddf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 224.679594][ T9336] RAX: ffffffffffffffda RBX: 00007f9830175fa0 RCX: 00007f982ff85d29 [ 224.687598][ T9336] RDX: 0000000000000001 RSI: 0000000020004ec0 RDI: 0000000000000003 [ 224.695588][ T9336] RBP: 00007f982ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 224.703570][ T9336] R10: 0000000020000804 R11: 0000000000000246 R12: 0000000000000001 [ 224.711554][ T9336] R13: 0000000000000000 R14: 00007f9830175fa0 R15: 00007ffde0fde1c8 [ 224.719558][ T9336] [ 224.762393][ T9328] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 225.302245][ T9361] sctp: [Deprecated]: syz.3.1034 (pid 9361) Use of int in max_burst socket option. [ 225.302245][ T9361] Use struct sctp_assoc_value instead [ 225.469984][ T9374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1034'. [ 225.621206][ T9383] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 225.628466][ T9383] macsec0: entered promiscuous mode [ 225.633859][ T9383] macsec0: entered allmulticast mode [ 225.639418][ T9383] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 225.740928][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1042'. [ 225.939180][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 226.006804][ T9395] syzkaller0: entered promiscuous mode [ 226.013161][ T9395] syzkaller0: entered allmulticast mode [ 226.038341][ T9396] netlink: 'syz.2.1043': attribute type 4 has an invalid length. [ 226.456138][ T9415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.213185][ T9408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.221017][ T9408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.229860][ T9408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.251753][ T9408] team0: Port device batadv0 removed [ 228.311643][ T9411] 8021q: adding VLAN 0 to HW filter on device bond2 [ 228.609505][ T9433] pim6reg: entered allmulticast mode [ 228.647039][ T9433] pim6reg: left allmulticast mode [ 228.804493][ T9441] xt_l2tp: unknown flags: 10 [ 228.970718][ T9449] __nla_validate_parse: 5 callbacks suppressed [ 228.970744][ T9449] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1060'. [ 229.302521][ T9466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1065'. [ 229.473567][ T9475] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1067'. [ 229.841311][ T9490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1071'. [ 229.919128][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1070'. [ 230.011107][ T9495] xt_l2tp: unknown flags: 10 [ 230.654842][ T9510] netlink: 'syz.4.1077': attribute type 10 has an invalid length. [ 230.683839][ T9512] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1076'. [ 230.811990][ T9512] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 230.872082][ T9518] tipc: Enabling of bearer rejected, failed to enable media [ 231.593168][ T9536] vlan0: entered promiscuous mode [ 231.655366][ T9539] netlink: 'syz.0.1083': attribute type 30 has an invalid length. [ 231.715934][ T9539] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 231.943858][ T9547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.047907][ T9544] ebt_among: src integrity fail: 100 [ 232.287613][ T9554] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1086'. [ 232.620558][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1092'. [ 232.669107][ T9569] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1092'. [ 232.838519][ T9582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.871751][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1094'. [ 233.219994][ T9597] netlink: 'syz.4.1100': attribute type 10 has an invalid length. [ 233.290130][ T9597] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 233.883325][ T5913] IPVS: starting estimator thread 0... [ 234.008162][ T9609] IPVS: using max 23 ests per chain, 55200 per kthread [ 234.098343][ T9618] __nla_validate_parse: 1 callbacks suppressed [ 234.098364][ T9618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1106'. [ 234.223125][ T9625] netlink: 'syz.3.1109': attribute type 13 has an invalid length. [ 234.248888][ T9625] gretap0: refused to change device tx_queue_len [ 234.255408][ T9625] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 234.277553][ T9622] tun0: tun_chr_ioctl cmd 1074025680 [ 234.291005][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1108'. [ 234.309354][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1109'. [ 234.327414][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1109'. [ 234.732565][ T9642] xt_l2tp: unknown flags: 10 [ 235.076495][ T9652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.115858][ T9654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.244210][ T9661] netlink: 876 bytes leftover after parsing attributes in process `syz.0.1119'. [ 235.419623][ T9666] SET target dimension over the limit! [ 235.632225][ T9673] FAULT_INJECTION: forcing a failure. [ 235.632225][ T9673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.647989][ T9673] CPU: 1 UID: 0 PID: 9673 Comm: syz.1.1124 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 235.658740][ T9673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 235.668843][ T9673] Call Trace: [ 235.672159][ T9673] [ 235.675127][ T9673] dump_stack_lvl+0x241/0x360 [ 235.679866][ T9673] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.685213][ T9673] ? __pfx__printk+0x10/0x10 [ 235.689945][ T9673] ? snprintf+0xda/0x120 [ 235.694232][ T9673] should_fail_ex+0x3b0/0x4e0 [ 235.698963][ T9673] _copy_to_user+0x31/0xb0 [ 235.703433][ T9673] simple_read_from_buffer+0xca/0x150 [ 235.708916][ T9673] proc_fail_nth_read+0x1e9/0x250 [ 235.713995][ T9673] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.719571][ T9673] ? rw_verify_area+0x55e/0x6f0 [ 235.724523][ T9673] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.730180][ T9673] vfs_read+0x1fc/0xb70 [ 235.734365][ T9673] ? __pfx___mutex_lock+0x10/0x10 [ 235.739491][ T9673] ? __pfx_vfs_read+0x10/0x10 [ 235.744649][ T9673] ? __fget_files+0x2a/0x410 [ 235.749294][ T9673] ? __fget_files+0x395/0x410 [ 235.754033][ T9673] ? __fget_files+0x2a/0x410 [ 235.758683][ T9673] ksys_read+0x18f/0x2b0 [ 235.762999][ T9673] ? __pfx_ksys_read+0x10/0x10 [ 235.767795][ T9673] ? do_syscall_64+0x100/0x230 [ 235.772619][ T9673] ? do_syscall_64+0xb6/0x230 [ 235.777546][ T9673] do_syscall_64+0xf3/0x230 [ 235.782079][ T9673] ? clear_bhb_loop+0x35/0x90 [ 235.786783][ T9673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.792703][ T9673] RIP: 0033:0x7fd30a98473c [ 235.797163][ T9673] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 235.816896][ T9673] RSP: 002b:00007fd30b7bb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 235.825338][ T9673] RAX: ffffffffffffffda RBX: 00007fd30ab75fa0 RCX: 00007fd30a98473c [ 235.833322][ T9673] RDX: 000000000000000f RSI: 00007fd30b7bb0a0 RDI: 0000000000000004 [ 235.841309][ T9673] RBP: 00007fd30b7bb090 R08: 0000000000000000 R09: 0000000000000000 [ 235.849320][ T9673] R10: 0000000020000804 R11: 0000000000000246 R12: 0000000000000001 [ 235.857422][ T9673] R13: 0000000000000000 R14: 00007fd30ab75fa0 R15: 00007ffc95316bd8 [ 235.865432][ T9673] [ 236.699736][ T9700] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1131'. [ 237.440193][ T9734] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1141'. [ 237.690131][ T9742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1144'. [ 238.348524][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1148'. [ 238.377103][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1148'. [ 239.167215][ T9782] __nla_validate_parse: 3 callbacks suppressed [ 239.167243][ T9782] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1159'. [ 239.685255][ T9800] netlink: 412 bytes leftover after parsing attributes in process `syz.1.1167'. [ 240.253935][ T9824] netlink: 'syz.0.1174': attribute type 39 has an invalid length. [ 240.304093][ T9826] netlink: 'syz.3.1177': attribute type 11 has an invalid length. [ 240.393969][ T9831] netlink: 'syz.3.1177': attribute type 6 has an invalid length. [ 240.529572][ T9835] netlink: 'syz.4.1180': attribute type 1 has an invalid length. [ 240.601972][ T9835] 8021q: adding VLAN 0 to HW filter on device bond6 [ 240.625612][ T9843] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 240.681380][ T9843] bond6: (slave batadv1): making interface the new active one [ 240.729759][ T9843] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 240.740236][ T9835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1180'. [ 240.891471][ T9835] vlan2: entered promiscuous mode [ 240.896765][ T9835] bond6: entered promiscuous mode [ 240.903712][ T9835] batadv1: entered promiscuous mode [ 240.940042][ T9835] bond6: left promiscuous mode [ 240.946056][ T9835] batadv1: left promiscuous mode [ 241.006688][ T9858] dccp_invalid_packet: P.Data Offset(4) too small [ 241.243149][ T9870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1187'. [ 241.755972][ T9893] netlink: 'syz.2.1195': attribute type 10 has an invalid length. [ 241.795317][ T9893] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.820543][ T9893] bond0: (slave team0): Enslaving as an active interface with an up link [ 242.186388][ T9913] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1203'. [ 242.195862][ T9913] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 242.242809][ T9916] netlink: 'syz.3.1204': attribute type 1 has an invalid length. [ 242.260432][ T9916] netlink: 'syz.3.1204': attribute type 3 has an invalid length. [ 242.269927][ T9916] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1204'. [ 242.286327][ T9916] NCSI netlink: No device for ifindex 0 [ 242.311618][ T9916] netlink: 'syz.3.1204': attribute type 21 has an invalid length. [ 242.329112][ T9916] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1204'. [ 242.412925][ T9921] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1205'. [ 243.748881][ T9972] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 243.890998][ T9975] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1222'. [ 243.927016][ T9975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1222'. [ 244.504087][ T9986] pim6reg: entered allmulticast mode [ 245.313935][T10025] x_tables: duplicate underflow at hook 2 [ 245.415141][T10028] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 4, id = 0 [ 245.822888][T10034] batadv0: mtu greater than device maximum [ 245.839948][T10034] team0: Device batadv0 failed to change mtu [ 246.048897][T10046] __nla_validate_parse: 1 callbacks suppressed [ 246.048921][T10046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1241'. [ 246.168116][T10048] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 246.459067][T10056] xt_l2tp: unknown flags: 10 [ 246.854103][T10081] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1252'. [ 247.022796][T10082] netlink: 'syz.1.1249': attribute type 3 has an invalid length. [ 247.057771][T10082] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1249'. [ 247.378879][T10102] syz.3.1258 (10102) used greatest stack depth: 17776 bytes left [ 247.422890][T10106] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1259'. [ 247.787554][T10124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1263'. [ 248.229460][T10131] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.262839][T10131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1264'. [ 248.330958][T10136] bridge0: entered promiscuous mode [ 248.339243][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1265'. [ 248.363224][T10136] bridge0 (unregistering): left promiscuous mode [ 248.367865][T10134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1264'. [ 248.387690][T10134] nbd: device at index 64 is going down [ 248.449657][T10131] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1264'. [ 249.349122][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1273'. [ 249.539570][T10181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.648198][T10183] sctp: [Deprecated]: syz.0.1276 (pid 10183) Use of int in max_burst socket option. [ 249.648198][T10183] Use struct sctp_assoc_value instead [ 249.851760][T10190] netlink: 'syz.0.1279': attribute type 1 has an invalid length. [ 249.912823][T10190] netlink: 'syz.0.1279': attribute type 10 has an invalid length. [ 250.278851][T10204] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 250.285975][T10204] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 250.444289][T10211] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 250.709628][T10228] openvswitch: netlink: IP tunnel TTL not specified. [ 250.788073][T10228] sctp: [Deprecated]: syz.3.1293 (pid 10228) Use of struct sctp_assoc_value in delayed_ack socket option. [ 250.788073][T10228] Use struct sctp_sack_info instead [ 251.208595][T10253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.357694][T10265] __nla_validate_parse: 4 callbacks suppressed [ 251.357717][T10265] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1301'. [ 251.456191][T10270] netlink: 'syz.2.1303': attribute type 1 has an invalid length. [ 251.467299][T10271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.831804][T10279] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1305'. [ 252.218496][T10291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1310'. [ 252.694123][T10296] macsec1: entered allmulticast mode [ 252.819505][T10309] netlink: 30 bytes leftover after parsing attributes in process `syz.1.1315'. [ 252.853545][T10309] netlink: 'syz.1.1315': attribute type 12 has an invalid length. [ 252.855380][T10310] netlink: 243 bytes leftover after parsing attributes in process `syz.3.1313'. [ 252.895436][T10310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.951275][T10310] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 253.003450][T10316] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1313'. [ 253.017657][T10316] netlink: 'syz.3.1313': attribute type 1 has an invalid length. [ 253.030239][T10318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1317'. [ 253.057138][T10316] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1313'. [ 253.315829][T10333] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1324'. [ 253.529064][T10338] xt_SECMARK: invalid mode: 0 [ 253.544745][T10346] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20003 [ 253.652784][T10349] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1328'. [ 253.689388][T10349] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 253.739007][T10349] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 254.459428][T10378] xt_cgroup: invalid path, errno=-2 [ 254.693698][T10389] netlink: 'syz.4.1342': attribute type 2 has an invalid length. [ 254.771974][T10392] netlink: 'syz.0.1344': attribute type 1 has an invalid length. [ 255.144542][T10406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.101862][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.813805][T10419] openvswitch: netlink: Flow actions attr not present in new flow. [ 257.839864][T10418] __nla_validate_parse: 5 callbacks suppressed [ 257.839887][T10418] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1353'. [ 258.063496][T10428] Bluetooth: MGMT ver 1.23 [ 259.003038][T10466] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 259.031572][T10466] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 259.147751][T10468] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1369'. [ 259.610163][T10493] netlink: 'syz.2.1377': attribute type 10 has an invalid length. [ 259.627447][T10493] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1377'. [ 259.639628][T10504] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1374'. [ 259.674743][T10489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1374'. [ 259.883075][T10510] ebt_among: dst integrity fail: 101 [ 260.080450][T10520] vlan0: entered allmulticast mode [ 260.196493][T10522] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 260.332613][T10530] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1389'. [ 260.364286][T10532] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1391'. [ 260.374610][T10530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1389'. [ 260.478864][T10536] syzkaller0: entered promiscuous mode [ 260.484665][T10536] syzkaller0: entered allmulticast mode [ 260.583302][T10540] netlink: 'syz.2.1393': attribute type 39 has an invalid length. [ 260.788374][T10545] netlink: 'syz.0.1395': attribute type 1 has an invalid length. [ 261.943269][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 262.813057][T10545] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 262.818541][T10554] tipc: Enabled bearer , priority 0 [ 262.840161][T10555] tipc: Disabling bearer [ 262.930057][T10560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1399'. [ 263.088734][T10566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1400'. [ 263.117358][T10567] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1401'. [ 263.185959][T10567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1401'. [ 263.218582][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1402'. [ 263.962622][T10571] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.1403'. [ 265.460405][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 266.565565][T10634] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1414'. [ 266.729683][T10639] FAULT_INJECTION: forcing a failure. [ 266.729683][T10639] name failslab, interval 1, probability 0, space 0, times 0 [ 266.769683][T10639] CPU: 0 UID: 0 PID: 10639 Comm: syz.3.1416 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 266.780637][T10639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 266.790765][T10639] Call Trace: [ 266.794091][T10639] [ 266.797061][T10639] dump_stack_lvl+0x241/0x360 [ 266.801800][T10639] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.807080][T10639] ? __pfx__printk+0x10/0x10 [ 266.811768][T10639] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 266.817756][T10639] ? __pfx___might_resched+0x10/0x10 [ 266.823099][T10639] should_fail_ex+0x3b0/0x4e0 [ 266.827842][T10639] should_failslab+0xac/0x100 [ 266.832581][T10639] ? __get_vm_area_node+0x132/0x2d0 [ 266.837839][T10639] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 266.843638][T10639] __get_vm_area_node+0x132/0x2d0 [ 266.848804][T10639] __vmalloc_node_range_noprof+0x344/0x1380 [ 266.854938][T10639] ? ethtool_get_stats+0x1fb/0x400 [ 266.860205][T10639] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 266.866259][T10639] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 266.872665][T10639] ? ethtool_get_stats+0x1fb/0x400 [ 266.877857][T10639] vzalloc_noprof+0x79/0x90 [ 266.882435][T10639] ? ethtool_get_stats+0x1fb/0x400 [ 266.887628][T10639] ethtool_get_stats+0x1fb/0x400 [ 266.892655][T10639] ? __pfx_ethtool_get_stats+0x10/0x10 [ 266.898222][T10639] ? full_name_hash+0x93/0xe0 [ 266.902991][T10639] dev_ethtool+0xa79/0x1bc0 [ 266.907572][T10639] ? __pfx_dev_ethtool+0x10/0x10 [ 266.912577][T10639] ? tomoyo_path_number_perm+0x679/0x860 [ 266.918296][T10639] ? dev_load+0x21/0x1f0 [ 266.922606][T10639] dev_ioctl+0x785/0x1340 [ 266.926993][T10639] sock_do_ioctl+0x240/0x460 [ 266.931650][T10639] ? __pfx_sock_do_ioctl+0x10/0x10 [ 266.936849][T10639] sock_ioctl+0x626/0x8e0 [ 266.941251][T10639] ? __pfx_sock_ioctl+0x10/0x10 [ 266.943325][T10650] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1421'. [ 266.946138][T10639] ? __fget_files+0x2a/0x410 [ 266.959801][T10639] ? __fget_files+0x2a/0x410 [ 266.964459][T10639] ? __pfx_sock_ioctl+0x10/0x10 [ 266.969815][T10639] __se_sys_ioctl+0xf5/0x170 [ 266.974463][T10639] do_syscall_64+0xf3/0x230 [ 266.979019][T10639] ? clear_bhb_loop+0x35/0x90 [ 266.983738][T10639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.989688][T10639] RIP: 0033:0x7fe9b2985d29 [ 266.994165][T10639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.013977][T10639] RSP: 002b:00007fe9b386d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.022415][T10639] RAX: ffffffffffffffda RBX: 00007fe9b2b75fa0 RCX: 00007fe9b2985d29 [ 267.030493][T10639] RDX: 0000000020000040 RSI: 0000000000008946 RDI: 0000000000000004 [ 267.038481][T10639] RBP: 00007fe9b386d090 R08: 0000000000000000 R09: 0000000000000000 [ 267.046473][T10639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.054541][T10639] R13: 0000000000000000 R14: 00007fe9b2b75fa0 R15: 00007ffe5c8525e8 [ 267.062556][T10639] [ 267.093261][T10639] syz.3.1416: vmalloc error: size 232, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 267.147030][T10639] CPU: 0 UID: 0 PID: 10639 Comm: syz.3.1416 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 267.158141][T10639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 267.168245][T10639] Call Trace: [ 267.171563][T10639] [ 267.174545][T10639] dump_stack_lvl+0x241/0x360 [ 267.179294][T10639] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.184650][T10639] ? __pfx__printk+0x10/0x10 [ 267.189313][T10639] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 267.195801][T10639] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 267.202364][T10639] warn_alloc+0x278/0x410 [ 267.206719][T10639] ? __pfx_warn_alloc+0x10/0x10 [ 267.211582][T10639] ? __kasan_kmalloc+0x23/0xb0 [ 267.216363][T10639] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 267.222393][T10639] ? __get_vm_area_node+0x280/0x2d0 [ 267.227619][T10639] __vmalloc_node_range_noprof+0x369/0x1380 [ 267.233548][T10639] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 267.239544][T10639] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 267.245892][T10639] ? ethtool_get_stats+0x1fb/0x400 [ 267.251029][T10639] vzalloc_noprof+0x79/0x90 [ 267.255569][T10639] ? ethtool_get_stats+0x1fb/0x400 [ 267.260704][T10639] ethtool_get_stats+0x1fb/0x400 [ 267.265673][T10639] ? __pfx_ethtool_get_stats+0x10/0x10 [ 267.271157][T10639] ? full_name_hash+0x93/0xe0 [ 267.275861][T10639] dev_ethtool+0xa79/0x1bc0 [ 267.280658][T10639] ? __pfx_dev_ethtool+0x10/0x10 [ 267.285630][T10639] ? tomoyo_path_number_perm+0x679/0x860 [ 267.291300][T10639] ? dev_load+0x21/0x1f0 [ 267.295564][T10639] dev_ioctl+0x785/0x1340 [ 267.299916][T10639] sock_do_ioctl+0x240/0x460 [ 267.304541][T10639] ? __pfx_sock_do_ioctl+0x10/0x10 [ 267.309719][T10639] sock_ioctl+0x626/0x8e0 [ 267.314276][T10639] ? __pfx_sock_ioctl+0x10/0x10 [ 267.319161][T10639] ? __fget_files+0x2a/0x410 [ 267.323778][T10639] ? __fget_files+0x2a/0x410 [ 267.328418][T10639] ? __pfx_sock_ioctl+0x10/0x10 [ 267.333322][T10639] __se_sys_ioctl+0xf5/0x170 [ 267.337945][T10639] do_syscall_64+0xf3/0x230 [ 267.342525][T10639] ? clear_bhb_loop+0x35/0x90 [ 267.347241][T10639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.353172][T10639] RIP: 0033:0x7fe9b2985d29 [ 267.357609][T10639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.377253][T10639] RSP: 002b:00007fe9b386d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.385774][T10639] RAX: ffffffffffffffda RBX: 00007fe9b2b75fa0 RCX: 00007fe9b2985d29 [ 267.393789][T10639] RDX: 0000000020000040 RSI: 0000000000008946 RDI: 0000000000000004 [ 267.401927][T10639] RBP: 00007fe9b386d090 R08: 0000000000000000 R09: 0000000000000000 [ 267.410120][T10639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.418129][T10639] R13: 0000000000000000 R14: 00007fe9b2b75fa0 R15: 00007ffe5c8525e8 [ 267.426264][T10639] [ 267.452514][T10639] Mem-Info: [ 267.455717][T10639] active_anon:5197 inactive_anon:0 isolated_anon:0 [ 267.455717][T10639] active_file:1993 inactive_file:38323 isolated_file:0 [ 267.455717][T10639] unevictable:768 dirty:79 writeback:0 [ 267.455717][T10639] slab_reclaimable:10431 slab_unreclaimable:105849 [ 267.455717][T10639] mapped:28925 shmem:1431 pagetables:662 [ 267.455717][T10639] sec_pagetables:0 bounce:0 [ 267.455717][T10639] kernel_misc_reclaimable:0 [ 267.455717][T10639] free:1334005 free_pcp:200 free_cma:0 [ 267.541536][T10639] Node 0 active_anon:20988kB inactive_anon:0kB active_file:7972kB inactive_file:153216kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115700kB dirty:316kB writeback:0kB shmem:4188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11840kB pagetables:2748kB sec_pagetables:0kB all_unreclaimable? no [ 267.580157][T10639] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 267.621919][T10639] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 267.654039][T10639] lowmem_reserve[]: 0 2465 2466 0 0 [ 267.659682][T10639] Node 0 DMA32 free:1411436kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:20952kB inactive_anon:0kB active_file:7972kB inactive_file:152376kB unevictable:1536kB writepending:316kB present:3129332kB managed:2552752kB mlocked:0kB bounce:0kB free_pcp:1176kB local_pcp:144kB free_cma:0kB [ 267.696675][T10639] lowmem_reserve[]: 0 0 0 0 0 [ 267.701724][T10639] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:840kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 267.735437][T10639] lowmem_reserve[]: 0 0 0 0 0 [ 267.740521][T10639] Node 1 Normal free:3908000kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 267.784154][T10639] lowmem_reserve[]: 0 0 0 0 0 [ 267.794535][T10639] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 267.808148][T10639] Node 0 DMA32: 1268*4kB (UME) 743*8kB (UME) 440*16kB (UME) 266*32kB (UME) 1265*64kB (UME) 530*128kB (UME) 128*256kB (UM) 24*512kB (UM) 5*1024kB (UM) 7*2048kB (UME) 286*4096kB (M) = 1411336kB [ 267.827644][T10639] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 267.840101][T10639] Node 1 Normal: 234*4kB (UE) 63*8kB (UME) 34*16kB (UME) 203*32kB (UME) 90*64kB (UME) 30*128kB (UME) 11*256kB (UM) 10*512kB (UM) 5*1024kB (UME) 3*2048kB (UE) 945*4096kB (M) = 3908000kB [ 267.860442][T10639] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 267.870308][T10639] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 267.881755][T10639] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 267.891594][T10639] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 267.901072][T10639] 41747 total pagecache pages [ 267.905906][T10639] 0 pages in swap cache [ 267.910223][T10639] Free swap = 124996kB [ 267.914443][T10639] Total swap = 124996kB [ 267.918828][T10639] 2097051 pages RAM [ 267.922667][T10639] 0 pages HighMem/MovableOnly [ 267.927483][T10639] 427013 pages reserved [ 267.931813][T10639] 0 pages cma reserved [ 268.119013][T10669] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1426'. [ 268.195014][T10668] bond0: (slave 0@ÿÿÿ): Releasing backup interface [ 268.233447][T10668] bond0: (slave bond_slave_1): Releasing backup interface [ 268.291106][T10668] team0: Port device team_slave_0 removed [ 268.317379][T10668] team0: Port device team_slave_1 removed [ 268.326020][T10668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.365356][T10668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.383730][T10668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.397029][T10668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.460704][T10668] team0: Port device netdevsim0 removed [ 268.489654][T10668] bond1: (slave gretap1): Releasing active interface [ 268.575145][T10677] bond0: (slave bond_slave_0): Releasing backup interface [ 268.687567][T10677] bond0: (slave bond_slave_1): Releasing backup interface [ 268.808297][T10677] team0: Port device team_slave_0 removed [ 268.846172][T10677] team0: Port device team_slave_1 removed [ 268.870602][T10677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.883437][T10677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.892657][T10677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.903765][T10677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.923914][T10677] bond0: (slave wlan1): Releasing backup interface [ 268.936623][T10677] bond2: (slave batadv1): Releasing active interface [ 268.950910][T10677] batadv1: left promiscuous mode [ 268.961882][T10677] batadv1: left allmulticast mode [ 269.010845][T10703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.610741][T10726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1437'. [ 269.712584][T10731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1437'. [ 269.733763][T10731] batadv2: entered allmulticast mode [ 270.231503][T10748] xt_hashlimit: size too large, truncated to 1048576 [ 270.312194][T10753] : renamed from bond0 [ 270.388679][T10753] pimreg3: entered allmulticast mode [ 270.564219][T10759] pim6reg: entered allmulticast mode [ 270.607379][T10759] pim6reg: left allmulticast mode [ 270.983756][T10773] bridge_slave_0: entered promiscuous mode [ 271.014298][T10773] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 271.630382][T10802] netlink: 'syz.1.1461': attribute type 2 has an invalid length. [ 272.006590][T10806] xt_l2tp: missing protocol rule (udp|l2tpip) [ 272.034417][T10798] netlink: 'syz.1.1461': attribute type 3 has an invalid length. [ 272.070034][T10798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1461'. [ 272.089932][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1464'. [ 272.122953][T10795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.136493][T10808] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 272.178085][T10807] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1464'. [ 272.195508][T10807] unsupported nlmsg_type 40 [ 272.446066][T10816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium Connection to 10.128.1.180 closed by remote host. [ 274.297505][ T5838] bond0: (slave syz_tun): Releasing backup interface [ 274.451751][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.470445][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.545677][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.557964][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.622490][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.633706][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.719374][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.740559][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.825305][ T6739] ------------[ cut here ]------------ [ 274.831306][ T6739] refcount_t: underflow; use-after-free. [ 274.837494][ T6739] WARNING: CPU: 1 PID: 6739 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 274.847055][ T6739] Modules linked in: [ 274.851000][ T6739] CPU: 1 UID: 0 PID: 6739 Comm: kbnepd bnep0 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 274.862017][ T6739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 274.872204][ T6739] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 274.878530][ T6739] Code: a0 6b 5f 8c e8 b7 c0 9d fc 90 0f 0b 90 90 eb 99 e8 db 1c dd fc c6 05 5e 1c 42 0b 01 90 48 c7 c7 00 6c 5f 8c e8 97 c0 9d fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 b8 1c dd fc c6 05 38 1c 42 0b 01 90 [ 274.898261][ T6739] RSP: 0018:ffffc900036877c0 EFLAGS: 00010246 [ 274.904361][ T6739] RAX: 869e5425d7cb2900 RBX: ffff8880249e0878 RCX: ffff888030fe9e00 [ 274.912467][ T6739] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 274.920510][ T6739] RBP: 0000000000000003 R08: ffffffff81602a82 R09: fffffbfff1cfa210 [ 274.928632][ T6739] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff8880249e0860 [ 274.936610][ T6739] R13: 1ffff1100493c10c R14: ffff8880249e0860 R15: ffffffff8603af00 [ 274.944642][ T6739] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 274.953631][ T6739] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.960373][ T6739] CR2: 00007f3ddcaa7d60 CR3: 000000000e736000 CR4: 00000000003526f0 [ 274.968458][ T6739] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 274.976449][ T6739] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 274.984508][ T6739] Call Trace: [ 274.987883][ T6739] [ 274.990869][ T6739] ? __warn+0x165/0x4d0 [ 274.995044][ T6739] ? refcount_warn_saturate+0x15a/0x1d0 [ 275.000657][ T6739] ? report_bug+0x2b3/0x500 [ 275.005171][ T6739] ? refcount_warn_saturate+0x15a/0x1d0 [ 275.011232][ T6739] ? handle_bug+0x60/0x90 [ 275.015586][ T6739] ? exc_invalid_op+0x1a/0x50 [ 275.020334][ T6739] ? asm_exc_invalid_op+0x1a/0x20 [ 275.025369][ T6739] ? __pfx_klist_children_put+0x10/0x10 [ 275.031034][ T6739] ? __warn_printk+0x292/0x360 [ 275.035810][ T6739] ? refcount_warn_saturate+0x15a/0x1d0 [ 275.041409][ T6739] klist_dec_and_del+0x3ec/0x3f0 [ 275.046378][ T6739] ? __pfx_klist_children_put+0x10/0x10 [ 275.052011][ T6739] klist_del+0xa7/0x110 [ 275.056186][ T6739] device_del+0x2c9/0x9b0 [ 275.060776][ T6739] ? __pfx_device_del+0x10/0x10 [ 275.065718][ T6739] ? netdev_unregister_kobject+0x178/0x250 [ 275.071601][ T6739] unregister_netdevice_many_notify+0x1859/0x1da0 [ 275.078216][ T6739] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 275.084993][ T6739] ? rcu_is_watching+0x15/0xb0 [ 275.089827][ T6739] ? trace_contention_end+0x3c/0x120 [ 275.095132][ T6739] ? __mutex_lock+0x37f/0xee0 [ 275.099928][ T6739] ? __pfx_lock_acquire+0x10/0x10 [ 275.105008][ T6739] ? unregister_netdev+0x17/0x30 [ 275.110056][ T6739] unregister_netdevice_queue+0x303/0x370 [ 275.115824][ T6739] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 275.122308][ T6739] ? down_write+0x18c/0x220 [ 275.126909][ T6739] ? __pfx_down_write+0x10/0x10 [ 275.131779][ T6739] unregister_netdev+0x21/0x30 [ 275.136551][ T6739] bnep_session+0x2e3c/0x3030 [ 275.141535][ T6739] ? __pfx_bnep_session+0x10/0x10 [ 275.146591][ T6739] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 275.152585][ T6739] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 275.158970][ T6739] ? __pfx_woken_wake_function+0x10/0x10 [ 275.164705][ T6739] ? __kthread_parkme+0x169/0x1d0 [ 275.169890][ T6739] ? __pfx_bnep_session+0x10/0x10 [ 275.174927][ T6739] kthread+0x2f0/0x390 [ 275.179120][ T6739] ? __pfx_bnep_session+0x10/0x10 [ 275.184185][ T6739] ? __pfx_kthread+0x10/0x10 [ 275.188930][ T6739] ret_from_fork+0x4b/0x80 [ 275.193500][ T6739] ? __pfx_kthread+0x10/0x10 [ 275.198231][ T6739] ret_from_fork_asm+0x1a/0x30 [ 275.203027][ T6739] [ 275.206073][ T6739] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 275.213370][ T6739] CPU: 1 UID: 0 PID: 6739 Comm: kbnepd bnep0 Not tainted 6.13.0-rc6-syzkaller-01077-g9eb8069d9940 #0 [ 275.224219][ T6739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 275.234270][ T6739] Call Trace: [ 275.237545][ T6739] [ 275.240477][ T6739] dump_stack_lvl+0x241/0x360 [ 275.245166][ T6739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.250369][ T6739] ? __pfx__printk+0x10/0x10 [ 275.254968][ T6739] ? _printk+0xd5/0x120 [ 275.259127][ T6739] ? __init_begin+0x41000/0x41000 [ 275.264164][ T6739] ? vscnprintf+0x5d/0x90 [ 275.268494][ T6739] panic+0x349/0x880 [ 275.272394][ T6739] ? __warn+0x174/0x4d0 [ 275.276552][ T6739] ? __pfx_panic+0x10/0x10 [ 275.281240][ T6739] ? ret_from_fork_asm+0x1a/0x30 [ 275.286231][ T6739] __warn+0x344/0x4d0 [ 275.290256][ T6739] ? refcount_warn_saturate+0x15a/0x1d0 [ 275.295822][ T6739] report_bug+0x2b3/0x500 [ 275.300180][ T6739] ? refcount_warn_saturate+0x15a/0x1d0 [ 275.305739][ T6739] handle_bug+0x60/0x90 [ 275.309947][ T6739] exc_invalid_op+0x1a/0x50 [ 275.314493][ T6739] asm_exc_invalid_op+0x1a/0x20 [ 275.319371][ T6739] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 275.325537][ T6739] Code: a0 6b 5f 8c e8 b7 c0 9d fc 90 0f 0b 90 90 eb 99 e8 db 1c dd fc c6 05 5e 1c 42 0b 01 90 48 c7 c7 00 6c 5f 8c e8 97 c0 9d fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 b8 1c dd fc c6 05 38 1c 42 0b 01 90 [ 275.345159][ T6739] RSP: 0018:ffffc900036877c0 EFLAGS: 00010246 [ 275.351232][ T6739] RAX: 869e5425d7cb2900 RBX: ffff8880249e0878 RCX: ffff888030fe9e00 [ 275.359204][ T6739] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 275.367186][ T6739] RBP: 0000000000000003 R08: ffffffff81602a82 R09: fffffbfff1cfa210 [ 275.375200][ T6739] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff8880249e0860 [ 275.383186][ T6739] R13: 1ffff1100493c10c R14: ffff8880249e0860 R15: ffffffff8603af00 [ 275.391446][ T6739] ? __pfx_klist_children_put+0x10/0x10 [ 275.397025][ T6739] ? __warn_printk+0x292/0x360 [ 275.401857][ T6739] klist_dec_and_del+0x3ec/0x3f0 [ 275.406826][ T6739] ? __pfx_klist_children_put+0x10/0x10 [ 275.412388][ T6739] klist_del+0xa7/0x110 [ 275.416573][ T6739] device_del+0x2c9/0x9b0 [ 275.420914][ T6739] ? __pfx_device_del+0x10/0x10 [ 275.425772][ T6739] ? netdev_unregister_kobject+0x178/0x250 [ 275.431596][ T6739] unregister_netdevice_many_notify+0x1859/0x1da0 [ 275.438052][ T6739] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 275.444823][ T6739] ? rcu_is_watching+0x15/0xb0 [ 275.449680][ T6739] ? trace_contention_end+0x3c/0x120 [ 275.454980][ T6739] ? __mutex_lock+0x37f/0xee0 [ 275.459681][ T6739] ? __pfx_lock_acquire+0x10/0x10 [ 275.464730][ T6739] ? unregister_netdev+0x17/0x30 [ 275.469679][ T6739] unregister_netdevice_queue+0x303/0x370 [ 275.475407][ T6739] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 275.481663][ T6739] ? down_write+0x18c/0x220 [ 275.486172][ T6739] ? __pfx_down_write+0x10/0x10 [ 275.491137][ T6739] unregister_netdev+0x21/0x30 [ 275.496080][ T6739] bnep_session+0x2e3c/0x3030 [ 275.500916][ T6739] ? __pfx_bnep_session+0x10/0x10 [ 275.505981][ T6739] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 275.511879][ T6739] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 275.518215][ T6739] ? __pfx_woken_wake_function+0x10/0x10 [ 275.523862][ T6739] ? __kthread_parkme+0x169/0x1d0 [ 275.528907][ T6739] ? __pfx_bnep_session+0x10/0x10 [ 275.533951][ T6739] kthread+0x2f0/0x390 [ 275.538026][ T6739] ? __pfx_bnep_session+0x10/0x10 [ 275.543073][ T6739] ? __pfx_kthread+0x10/0x10 [ 275.547669][ T6739] ret_from_fork+0x4b/0x80 [ 275.552087][ T6739] ? __pfx_kthread+0x10/0x10 [ 275.556681][ T6739] ret_from_fork_asm+0x1a/0x30 [ 275.561463][ T6739] [ 276.669452][ T6739] Shutting down cpus with NMI [ 276.674478][ T6739] Kernel Offset: disabled [ 276.678951][ T6739] Rebooting in 86400 seconds..