last executing test programs: 10.545776793s ago: executing program 3 (id=972): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f00000002c0)="922b22c06d1ff7de12df5ae341dbac30653a135a8e18b1c58d85e24957a4cddc", 0x20) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0xfdef, 0x0) (async) splice(r2, 0x0, r3, 0x0, 0xfdef, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x94, 0x2, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_SEQ_ADJ_ORIG={0x54, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xce}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x30}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xf}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7fff}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x8000) getsockopt$inet_int(r1, 0x10d, 0x2, &(0x7f0000000200), &(0x7f0000000280)=0x1c) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) (async) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) socket$inet(0x2, 0x5, 0x7) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r4, &(0x7f0000000000)="240000005f005f0314f9f407000904008100400001000000000000000800040001000000", 0x24) socket$kcm(0x10, 0x2, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e41b0000500ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 7.916463014s ago: executing program 3 (id=993): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000065c0)=[{{&(0x7f0000000440)={0x2, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x28}}], 0x1, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012800b0001006d6163736563000004000280080005003bdfb82bed689308652ba06f98e846ef63dea9963a7023b4b7b132d20a72961e071904696076419980c6575805ae40c3765bfa9bb9e8dcde7d8e9679fda3b7cf8756a0fd009da7ec55ae1431bfd67548a381dd60de9660fb5aba9abb35a0c857010000809a7bca84000319", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) 7.721813827s ago: executing program 3 (id=995): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x0, @local, 0x8}]}, &(0x7f0000000100)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x38}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) recvmmsg(r0, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x44}}, 0x0) 6.723930606s ago: executing program 3 (id=1009): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) tee(r0, r0, 0x9, 0x1e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) 6.541507497s ago: executing program 3 (id=1011): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000002d0c96c0a641751b00000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000001540)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x37) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001840)={0x0, 0x32, "13b2928ce4eac058b03df71878b59c1b8a0f702652311a3d198eaf521d9cfdba60e6cf0ddc44acb9b101a35efbf902665981"}, &(0x7f0000001880)=0x3a) (async, rerun: 32) r3 = socket$inet(0x2, 0x2, 0x0) (rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x190, 0x194, 0x194, 0x190, 0x194, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x23}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'geneve1\x00', 'tunl0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001580)) close(0xffffffffffffffff) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014100000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) (async) sendmsg(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) (async, rerun: 32) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4) (rerun: 32) sendto$unix(r6, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001740)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001800)={'sit0\x00', &(0x7f0000001780)={'syztnl1\x00', r7, 0x7800, 0x700, 0x9, 0x9def, {{0x14, 0x4, 0x1, 0x6, 0x50, 0x65, 0x0, 0x0, 0x4, 0x0, @broadcast, @private=0xa010100, {[@timestamp={0x44, 0xc, 0xbf, 0x0, 0x9, [0x4, 0x6]}, @ssrr={0x89, 0x17, 0x82, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast2, @multicast1, @empty]}, @noop, @generic={0x94, 0xa, "a48d5c555c495e9f"}, @lsrr={0x83, 0xb, 0x91, [@multicast1, @dev={0xac, 0x14, 0x14, 0x3a}]}]}}}}}) (async, rerun: 64) recvfrom(r6, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x0, 0x0, 0xffffffffffffff54) (async, rerun: 64) sendmmsg$unix(r6, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000001c0)=',', 0x1}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYRES64=r2], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000830071120b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 64) 5.920989221s ago: executing program 3 (id=1018): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000e0300000000000000000000000000000105000000100000000000000000000003000000000200000002000000000004000061"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000640)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf002abd702e9df945251200000008000300d9c152ca81382d30f13bbff3b85fed5db159f33a5bfcebbb63dcf67ef9b6dde26a699dd109359505488ccabe2c9edc8a8a985a5d597583eabac3431677676f001f6c49604257e7939cf12c49076c3dcfc150cbf8ef42121d7eb7ad677d449c9a1ae9040ff4573676c01b3c74ff5be99302c8bdeebf2f3a307099eed4b4a47f902537eb505306babbce17ef12046766687eb4bcd087c41a40785e7dd2277c", @ANYRES32=r4, @ANYBLOB="0a0006000802110000010000050029000c000000"], 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) sendmsg$inet6(r5, &(0x7f0000000580)={&(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) shutdown(r5, 0x1) setsockopt(r5, 0x84, 0x82, &(0x7f00000001c0)="020000000980ffff", 0x8) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000000)={@default, @default}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x18, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x405aa822, 0x1, 0x9}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000480)={r9, @in6={{0xa, 0x4e21, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8d}}, 0x0, 0x64}, &(0x7f0000000540)=0x90) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r8, @ANYBLOB="f7e9a4160a7c70f345df16ad22752918331b9f822ac8d08f63e64af5309c412f2fede82fec5dbcde419c588c3022d18eaedda0662dd07b3dbc1264147b09647eefbad942441bce3bb7f3f68059268cc3d32a902719bfbf12a2ebdbbdcd5e682800a6585c1b9710fc925eb8f0f10507216e8c3d4bac05837561b4a41e96f67ac801141cf225"], 0x1c}}, 0x0) 4.873754449s ago: executing program 4 (id=1031): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x80000002, 0x12) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3000}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}]}, 0x4c}}, 0x0) 4.094334056s ago: executing program 0 (id=1034): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x800, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x6, 0xfff3}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x6, 0xfff3}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4.011834917s ago: executing program 4 (id=1037): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44b8874fdf8a"}}, 0x48}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x274}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmsg$can_bcm(r0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 3.834293484s ago: executing program 2 (id=1038): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) (fail_nth: 4) 3.705546189s ago: executing program 0 (id=1039): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001800)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async, rerun: 64) r3 = socket$kcm(0x2, 0x1, 0x0) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x13, 0x0, 0x0) (async) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x20042, 0x1}, 0x10) sendmsg$tipc(r4, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x0) (async, rerun: 64) sendmsg$inet(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async, rerun: 64) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = socket(0x10, 0x3, 0x0) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000480)) (async, rerun: 64) r11 = accept4$tipc(r10, &(0x7f0000000240)=@name, &(0x7f0000000300)=0x10, 0x80800) (rerun: 64) ioctl$sock_SIOCGIFBR(r11, 0x8940, &(0x7f0000000340)=@generic={0x2, 0x9, 0x3}) (async) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0x80400020}, 0x2) (async) sendmsg$nl_route(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r3, @ANYRES32=r5, @ANYBLOB="00000000000000000e000400bbbbbbbbbbbb0000640012800e00010069703665727370616e000000500002"], 0xa4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async, rerun: 64) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 64) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r12}, 0xc) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r2}) (async) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x1a002}], 0x1}, 0x0) r13 = accept4$packet(r10, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14, 0x0) getsockname$packet(r13, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) 3.246770652s ago: executing program 2 (id=1041): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x400) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netdev_private(r2, 0x891d, &(0x7f0000000040)="26a8415a54a6867f8a1e3a") r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xfff3, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044040}, 0x20000000) 3.110464237s ago: executing program 1 (id=1042): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10, 0x1800) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000280)={@mcast2}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="a40000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000007c0012800e00010069703665727370616e0000006800028006000300060000000600020009000000050016001100000004001200080015008af50f00050008001100000014000600fc010000000000000000000000000001050016000200006fb6dcbd5af31f7d0000000000000000000000000005000b0008000000080003"], 0xa4}}, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x0, @multicast1}], 0x10) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800009c0c5388a37bef883e65000100000080000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="030000000300"/28], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x10, 0xd, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000400)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r9 = socket(0x27, 0x6, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={r10}, 0x8) write(r9, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r9, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) 2.997880103s ago: executing program 0 (id=1043): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0xa, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f0000007680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0xa14, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_delrule={0x30, 0x21, 0x105, 0x0, 0x0, {}, [@FRA_TUN_ID={0xc}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8}]}, 0x30}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000041000000950000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x2a}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfffffffe}}, @TCA_CT_ACTION={0x6, 0x3, 0x14}, @TCA_CT_MARK={0x8, 0x5, 0x200}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) r5 = socket(0x23, 0x80805, 0x0) bind$packet(r5, &(0x7f0000000200)={0x11, 0x19, 0x0, 0x1, 0x4}, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300000000edff8500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000001000008500000085000000b70000000000000095"], &(0x7f0000000c40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x2, 0xd50, 0x0, &(0x7f0000000200)="967ea6141c24565debcb", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 2.795207375s ago: executing program 4 (id=1044): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x10}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='}', 0x4164, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 2.781726591s ago: executing program 2 (id=1045): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) socket$igmp(0x2, 0x3, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)='H', 0x1}], 0x1}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x4008001) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f00000002c0), 0x4) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.645914314s ago: executing program 1 (id=1046): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001840)=@filter={'filter\x00', 0x42, 0x4, 0x1310, 0xffffffff, 0x0, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x1278, 0x1278, 0x1278, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private, @multicast2, 0x0, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1148, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x9800}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7}}]}, @common=@SET={0x60}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1370) 2.610161371s ago: executing program 0 (id=1047): r0 = socket(0x11, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) (async) syz_emit_ethernet(0x7e, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb28feee412b8f86dd60ddff0000482f00fc020000000000000000000000000000fe8000000000000000000000000000aa242088c50000000007ff000008000006000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$inet6(0xa, 0x5, 0x0) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/ipc\x00') (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) (async) r7 = socket$l2tp(0x2, 0x2, 0x73) (async) r8 = socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 64) socket$inet_dccp(0x2, 0x6, 0x0) (rerun: 64) r9 = socket$nl_rdma(0x10, 0x3, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="1f02ffff0000000000003b00000008000300", @ANYRES32=r7, @ANYRESDEC=r8, @ANYRES8], 0x40}}, 0x804) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES8=0x0, @ANYRES32=r9, @ANYBLOB="75decf1b6631fda6b5000000000000000000c6912c2331ae757dbd0e86c9578aad4562a34358f9825e7e6555328912cb2c29b484806015060d432df774dbf85dffb218c0da3159ddfe981a4a41ff7377830eaa217e99678b1983c5267c68b5c0ca65ce5edf30a4d673eb9fded3d9ff73cc0000c8e171e8e068925e5144796e08dfb97b1e48a5293a46da563a424b6b9d809a8625e96f26e4c940848f93e56a53bc2725098abe942e5157de44edc583503d6e4dcddc564850fe6f3f91fd", @ANYRES32=r3, @ANYRESDEC=r5, @ANYRESDEC=r0, @ANYRES8, @ANYBLOB="b9c7580eb720912666fbb04e752acbce4bb902c78886f6efd0862d104f67aaa1ecdf0d76edf009f1b4c0463f905ecae7a5d2338b6c04ef43", @ANYRES8=r9, @ANYRESHEX=r12, @ANYRESOCT=r6, @ANYBLOB="3d01e66a77178168442e71f3a8307d36bb49b0f7c6e464c3e09886653786ade88fb813e23a7470b2ec84929d82383fa630c6726a46c4425b2803fa833bb1f9159cf39b0c8deace3c2740983e2463ae18899542ee6e9209ee39bf7e99c11714c8291e8f0e88fa626e54e628f39e8a0e456feaf6629f71de38b857a785bb7723cbf4e44040"], 0x50) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114008cdc18000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0) 2.501951167s ago: executing program 1 (id=1048): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000040000000b0000000c000580080001"], 0x20}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) 2.325743206s ago: executing program 0 (id=1049): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvfrom$inet6(r0, &(0x7f0000000080)=""/165, 0xa5, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x27}}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)={0x14, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) write(r1, &(0x7f00000002c0)="40f59322c4a9cd951233c5ae918a36be4fcb901eb1c2425098308adc2e0fed6587231f7e087882225682ffa6a7c9aefc0e75ea24a094333b7b7ed76ad50dd9f75f1f5c2ed33d2ac2bacf267ef170021bd4cbd164b9b2348029a670acca9650310c544ef66da68564fa5d1e559a1214aef22bd8dd5e09a4587f18be3aa3bb19977a341aa99feffb3f739e130f22ecbd14be9285c98f9ee82cc919481f97fca31a9a93090d8ff599cdb3abc060116ae41c3a0bbe3ec8411beb248f107679fb019e8fade0a2", 0xc4) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x30, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x24c, 0x1000, 0x8, 0x400, 0x7, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x29, 0x5, 0x4, 0x5, 0x49d2, 0x80, 0x8, 0x4]}}]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) 2.305467008s ago: executing program 1 (id=1050): r0 = socket(0x2a, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042dbd700000c991485dff1685e4063159170d1f727a1400fe00f3943c0ba0cbd76aef41c2114d782ba508001f01fffeffff"], 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}}, 0x2672805cb667efd7) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@local}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth0_to_batadv\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x53, 0x0, 0x4000, 0x0, 0xd05, 0x80006, r3}) unshare(0x20000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fedb51df25190000003000018014000200766972745f776966694c000000000000080003000400000008000100", @ANYRES32=r3, @ANYBLOB="0800030003000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x1404c000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000880)="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", 0xfe}, {&(0x7f00000006c0)="73c2b43c206f2478edbe72fdb7c80b64ff32c39e51cb389b9a85260471b816e0e78ddf26e85d44c6095e7ce23aab7fd391eb6dca4675c500cc7ab014d96c14057e3a7f7ab377520ae14e7ad1adabb4e8fe520db3d00d93f73359a6a2d4c823e6ebcf3c7fb031b1c05c4e198b5109f206f07c4cccfe468ef7468382f8849b44ff74460b72c6ff4fb17fc1fc78bc5b1f6d98083aeeec7c707c8584010f134fedef0730cbe83f750957f9f1e1ced6fcd5287fec0af1a7b4db38acafe3c2b356c61781f136ee3a91a782ce808cd9c372c35760811702fad20ee4e0f01a36ef985b6576b03db74f5c1650b538fd3f86ec6d943f2e", 0xf2}, {&(0x7f0000001500)="ae6a289e75eda05f0744ddcc54159f922dbc39c6e9da067b8a97291713999363ebe9192000c6838ee7047c646199aad8523c20bdda73a070c79fc539d0c09ba7c4ff8563c793769f1f61810926c2fef911e5154d18829998186d75e68a38aa7b5450a40d4c1c2d004891012372668cfa690cc7bc88a6839053dbd6eafb552b0b78b608b37fbc76201f20cc2adaabfdde7c054735c8ee1d944a39bea3b128f38b3ac99fe1aa763e0f08d41794c5f62fb86ad822b38e5ab188705e41a1ea4da41605bd9d9263d22becc4770c2a66e87c450ca61fb0a8e5a3a194db9437e6373ee478a5e28949bff7910b63e13bd4aa0038dcf4819af94aae55e5aa181e2c29da47ebc1657efdf7188caf5e80bc69e66b742b0ffad97f1411ea660168793a542bfc335ffd348f95cfa8c969e5667294e2a2e0d291ed8ebfcbaece71b912cd252c2fe0aa7506777d59dcabefc0ae1c0de48168f79e3c5233067f714beabf3ec8aef8218b56c4af4f862ddf0ae1389ac758199fcc3d627f49d3f60cac9134e710b7583204a64de38c183ca633c263ca223e884f3ebf672f62f7229ff3b2b798a5f173a37cd2c2e6ddc789a850b7f9232bdc6add44abed5b7b23eac4f0d369a178c63d4c620b7c59312e79ab564a10de6afdd6c7c51aecacef2335decb67897733e6c2d403eca233a0693ee69450db4258fd3e332924a486c27c52b179fbe975c3967ca8597a059c085dfd42d5b249e91469505143bb5660cbce1562d8dd6cc65b8e204f64bba9bd41c867b07d8359b0288ebca3b62e7ec06958416b21ca677d758fb5b0c4b38108c4af630933e76950847589453060ae04b6044549402eefb773c492eb9196132af3920dc44f183fd4dd5adcb45a51409fb5cb11c40821f5d22d2a4402b9ed3d2902d8bbfb8810f2cd91e9099553c281c084fddfdb6c6c922466c90288d5a186faa601168420fcd87a979e0358b8caeb448075e0f71e374231cda730bb8152f709897c6b7bc51345d02d732f49141e9322ddc28154814145660975758cd07999a8230f4256abf54235751163c81c39b5905035b477a537010335e33807d20bcf1ac5d18427c80dc0dfa57b0154cb0d095f4d90cd5c84769c968e2a6e0eeed61f298bb7938c6f03435442a09ac66e15648f60e35c4345b46991ee0d0761863f783db8fa64a44c5c9e117dad6caa315fadccb61a950e215213932acc614babae5ea51d43b4a3c9fc98d623e7f0a1e66a15283bddf90f2cc95393ffda8e3cb18fe0d66e5d957aaa6f9489b5d00b1793a67bfdf5b1a62cb49bde18fac1c9b40b5a3aff1a60a9ce9c1a899f08e732fa2612f4ba012572626edf3aa1298fbf8eaf7d793acbad54ead957d10a8ae747fdf8e4d240dd7f88180df9fa558786a634f06101203a1968b517e40c67a492c4b44c37a9fc9f45af3608638de727e8b4df9adf1f9258d9de052f9e5a2de0a0c17cb2bf664a3eaf9574fa32ae39a6e3c8636047663a8ec73c24a69554069465f23328da820f4cc0965ef4f87b763b05759db3104804f89ec9f09320f7c28e2c4031862bc63ab90babdda036d261a7f956c52437fbb62ab45d6ac06a3b28fc7b1da407020e297432a58c8136c3f3654336545d8f2757f0a38e769286797b22bc7e446b3050492fafc9b64411ec09186b80d0ca15ae40ad59bada141eeb628e8407f915b95ef1035faae9fd8cd2fd639ad2c3903a3ce74d0fe9c17aaeb318fc05431ae0f01c2f06dc725d0cce2aff35ceea00ea360ed519987a1129ffc78c3e911bf9f67222861e1af5d421a9097231a71a9a56d3324ffdb6c9cf32e1dd24852a416daa85249f0838d1fd3c72d028d5105b43cfa9c9f0c6aa2b5b884002dcadd52ddc82f46944fc0f1cbd66ecfc5e7b0af1c3adc283a61f8f164153362df0889ecd91d669a1983aad166e2895242ca6c734133c55468b0c3e3274ea611678dda84e21d22d974946f810e1e15d01ca536a8a0c7b262b9ae107bf1590c48a0594ff0aa569c11e883a4de6d32bfc1867892a1e0584e36d084493541613e32269b78415b23078e1645a4268dc2c28b1162eefcfb3a8735f7c34b70374e69662f5e4543cb92da56278c5461e168ace42b3f38b42f4a9c1c68a8d9b571dcda058dfcf40e67ea666340486c0c52fad0717c24e0846265331713ce6c8e992efab49115963a140ac4a8d3375701838af6c8307b345b9f1ea24c0ef4d5d23aa540e7c5a0f1c0d5428a1eaa66f4fc2385583958a6253091d3e8414a45d65c433a27254a0f040be3efb56be22eccec51fa4e01d54d93c7e6871f6fcfa7218b3460d83c304cd6843e7d3a3a0843ba2b22da6989bbc5ba50caf6839672510831cb7773564952f469eb2e7fe36775a7765b40d0b3bc60b0a9dbeb6b2c61726043e7af422bfa794c95ba5314a1d2713f070f44de645ca630e4a39ea2c2e0b19b7ac29466850ad924c94d6b5b69dd3afda4484aaa98ac7391ba8994855fd521b54bdb09d044a657071cfad24f90af63a57529c2eb9a9714b5011b19354a6e15e409bd94d986aa54756025bdfb222759c91b1e71ec2a8adac2c26317ae932da435f3293e663847f0cf65f9ae10653c6ccc0bb2f797f0db129f91cf88a3776043fea61ec371d10d41b7e4d008f600a33be533ae6ddabe585470bdb14122da6bcd8b59ef7018205a37f1aaa28ed959604324415efb8ddab981528ac13919c93662f66fe3b6da875489188828ea3d27d64352c4182a47394e09f21094b756aa4550771b9b9ea3bfbc364d99c7427574b00c53d736610184f656ec8dd97fb77d62a6646645b56635e2272b2301d668175750329998e864832a4181c580ffde0507edb6eefd44935af1fc743c0125b67dd379f0227e8adb56bd38f8f77539092024e898f6d657f512361f66002422974b90123c61cc801ffaf98951609aacf3e2e572d9f06987d81b78d01e8e554d7dd61f8216175bd612917770b4feb095ba891e16223dd88cfd25fddf20f77c35ebf3cfcc5041a0ef34fe05edd62a5a031019df1fba8e52a9226bd3ee8e94b875e9f611b2cf1ee4e63848ab9e8390b944dae84e46155ee6afe3438bbb5237dd4b47c4202b6f19e53be0332d89b9ba6c013b877dbc9f960e4f5f81485205e5f04a1338d9023cc915e9a0890d400e3410d6b2351bd19788380e9d41d1ccdb2b0b03a9bfc11cc18730bf4f11fbac87f619956cea786f820e111c4ebdd61eab6ce400e3358abf64022fddf85fbba29650276c4217f043cdd7d1c0b6c5c009dea34a89eaeba153ffa83ba4cc41b876f4199ed6e5780d2b9d0f0633052ad41e429ecbe606c12dd327124b1410848f1a8aa812ea9d42f7c4cde1212c1ab8e87e9dafc1003659ecc38b4bf0c417943aa2d03c00b1805a09a3d60de68a65df527b4dfbd845354773a83ad8f04ec3bd3696a0f1ac671917aa57a5f85d5b1e80497b048d3ec9ba17550a51c8467e90be562b4d21b080c2a8081ed17ded671ced84e56e99b36211deb362f04e03d8fda7e5b90fb72713247ef6646c2c393e09fab10efab0c2fa2012884022f683c5e956c32457ac5414ccd022b77ca54e0b46939b1434a0e056bd433dcb239a3858458cb7d82f30143aab2885f1daff90d38db496093c6d92acd0f224442af448d345ad1cac97a82302074d8205ba355da1eabe78e399f5e006ee4cc84fc525e77ab63f6c55d3d39ea9fb1ebed4c22466de6f127103568bcdd96870ccf7f74c7bfc82d7f1d17612e8ca305b4285ba61a3e5d65da3a0a3045ea80d206c4615929df6756f68a3dbe898dc381aca4d989450d85a4c8d4515063f1a3d2899b06f01ce7fec9600fe69b522e942d82d77482a4543a48e8d8712c9579c7482746850725d125522db5b0fb89cd38be0fe7de142e73644d196745dc83d11194621c57351027186b589449fa3f59dd27e689d9f099667097502255c24f7abd8fd0b81c151e12e4e741d54de90b21bde2b0fdd6131e987e99ddebdbe2f8a3773843ac2baf0d9315c9af4a43d5d3444d1fcd3cbcc6302e6152779f7c792abdcb1c85a539ceae49cb3e65b00d9a38b5cf166ac5a4de64226289c4e07c2c7d471df75ce12d6e2026f3e2ab517537de81ff158c48adfc90d22b242d1c074b09cc3b5d1bf322df61660379ec4a7ba41db44100a5bf9551bd59321597dbb42a7ceafad55ede16fe3a8715ce95707fd37e0dc6d34fd67a1802de928c5049eae2ac559433f9bb8c338fe6cd7df216dc3237ae7e67e364a7646fcc2f1b79e2946e80dd22aff992956e181bae37b684765fa2f4628c39dd7bdd0ac1101c0208dc1de7dbfa52788ba65e58827256f905f471ca5ba43e10bed0fbec90e1bc3598bee9202c3fa919df01b650ad73fcf46de74e532aea679e896eef42ee33c1d99ef54f04764676a3cf6b25028fc3ce85bc1942ba778ace47fd708daf62b304f0a8fa1c9fa48903f21cff4763e97b2d0747d47d7028faa6577a91277c58013c433f174f61ac912159cef8f289c52dfdeff6968a7c2941147e769778b97f11ea0725ead9a58c980e84a112f3c869bd29dbf419ee141c9be5c3ab015c6c21783ddecad83bb01495d2a3ce4a42d7cb0b11aa67aa196f4f5b495b5461a772ec4ba7b7fc47211cb780852c45bed044d72226a6b7a01efc445ece53d21cda7b9ebf760c07d4da5146c7ec2840cd98c4098a702ce8a42e4c7c087d29ec0d4bb292cb5a2f6b318aea92a4cc8496c5f6cd11e20f72e69448b758ea4f91f7f4302ab4fb8c6439496b1f65bf4d84f6bf7e175a598c55229935a9e19e2cff7dc0048b732614f0da7f68bc78065b8764138ea0934af4da3d92053e5d873900c82f1de0e2825819e229cc21e7603d5283299ebb9222b1868614eb94afcc5f5e16942820eb17a59c6c6fc1474845c6b9b84546c284bd779b15c0238e74a202d3297f76162bf2820a572096353214f8c7f11921835f04248e5402b7bdaf2a211b50cbdb1503ef392eb2b3b4e6aaad763d7e33c30e756537f232a164d65eb82645c1977c2a76ecba025ae21d08f61abdad69d15762906c55e68bda53e7171916c3a258d0765796dbba17ca5184e1af0138b61f9d317f10bd710b9d693869fa88312bfa35c3fc2c5bf106551525d907e3e126650d4bd8ecb110da99ec6082f1f92affd3c94027775b9532408110a33416b8a6dc1987fdca1f19e54c4ac461b61719585fff1f82507f8d9827b3327d07a019027f80cb53df76c600317df70b4ffec7c0726b8dee53fb507bd61962da25702ec93b97b8e4ba9c62b6ae2a38d2168cc42946f5a97589ae20953160c71877951fd270e35f9258f9c9ded590bf2fd86b725818967a849b4764a6a363644ed183f0134255a04200df2fc43c2fde27bf2cedd4f6ed421f606d5ddc0c46f16e6d3dc858b560e5e79fc7ae1b48f73aa4dbdd68aec63d78dbce4a1fbfc78b687ceabce50ee4309b8269404364303aa0e02b0b569a5d92897d27c8bab82cba20b9ef26cdeffb3e0de523d2139225515984a75ab6fe00e0ab0b4ef9b8e5b4eb32276f1939f89897d3ca97a44439618dfe19205e02c6f18fab5258f98a4b6f37dc692d3baddf4e2c100191c26621e1de0b1ccd98980d32a935c6e043b0106c50e2b759d3f4863f89c5e77aa91eeab07ffb000725eeefcec60adef9aa77e11f6ba33f2d9ef1d7b8e689f36a63ebb39b70bd4f52785d4ff051c6e1eb71dcf2abf6781f6c2aee9cf7d4289c3621ce7992381330ad2f99853c6340b8e89d4b9f86837724ee79e4321bb9710097fb831dff9bba", 0x1000}, {&(0x7f0000000480)="6648cfcc8bd869aa1fcfb27e294e9ca3ce82d0499c7cff5c9f2277853b929e050db0e9f9338bbb97f2f71916e54d566889895d6b07efb51afb5b1d0319d9e034", 0x40}], 0x4}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b60ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003b0007010000000020000000047c0000040000001400018006000600800a00000800"], 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$phonet(0x23, 0x2, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 1.805676135s ago: executing program 4 (id=1051): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x80}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x4, 0x1, 0x0, 0x9}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xdc}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000003900), 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x0, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = openat$cgroup_devices(r2, 0x0, 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB='b 0:'], 0xa) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000064000000060a01040000009a230000000100000008000b40000000003c000480140001800c000100636f756e7465720004000280240001800b000100657874686472000014000280080007010000000008000640000000010900010073797a30"], 0xd8}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00e6ff84d6bb48c016a87298000000000000000000000000c02482", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000080000000000000000000850000009b00000018110000", @ANYRES32=r6], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x800, 0x745, 0x0, 0x350, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xb, 0x0, &(0x7f0000000900)="e02742e8680d85ff978276", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x54, r8, 0x400, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xfffffffa}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x3ff}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x7e1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x786}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x800}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008005}, 0x4000004) r9 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r9, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100), &(0x7f0000000140)=0x8) 1.709822546s ago: executing program 2 (id=1052): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f00000003c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c250000000000206ea37b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001fffffff080001"], 0x60}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}, {0x0}, {0x0}], 0x3}, 0x20000800) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x6, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x1c0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5"}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) r6 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x81, 0x5, 0x73, 0xfffffff8}, {0x9, 0x40, 0x5, 0x3ff}, {0x7f, 0x1, 0xfb, 0x8}]}, 0x10) 535.355628ms ago: executing program 2 (id=1053): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)={0x0, 0x0, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, 0x0, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180), 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000a00)) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xffffffff, 0x7, 0x5, 0x8, 0x61, 0xfff, 0x6, 0x80000001, 0x80000000}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x14000000, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x8c0}], 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e22, 0x101, 0x4e23, 0x5dd0, 0x2, 0x0, 0x80, 0x29}, {0x3, 0xfffffffffffffff9, 0x7, 0x100000000, 0x640, 0xfe, 0x800}, {0x0, 0xdc, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x2, 0x1, 0x3, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x32}, 0xa, @in=@multicast2, 0x0, 0x2, 0x0, 0xb9, 0x2d, 0x8, 0xde}}, 0xe8) syz_emit_ethernet(0x6a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "e75210fc09fc3eefd208fd1773f138d7cd9f1704bedfa13b", "7a8b9d31547f43e658d4f7a20c27c883a0aee13e36d959b611e58e80f363a585"}}}}}}, 0x0) 477.58046ms ago: executing program 0 (id=1054): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44b8874fdf8a"}}, 0x48}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x274}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmsg$can_bcm(r0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 412.738125ms ago: executing program 1 (id=1055): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 411.225698ms ago: executing program 4 (id=1056): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x1, 0x80, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x71, &(0x7f0000000500)={r2}, 0x8) (async) syz_emit_ethernet(0x5e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000280400fc020000000000000000000000000000000000000000010002000000000000c91000000000000000000000ffffe00000020000000000003a00681066000000000000000300000000"], 0x0) 149.832424ms ago: executing program 1 (id=1057): r0 = socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001740)={0x24, r1, 0x701, 0x0, 0x10000, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x24}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="220000000000000000ffff0000000000001b"], 0x20) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)) (async) ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) (async) read(r3, 0x0, 0x2) (async) pwrite64(r3, &(0x7f0000000340)="5da1", 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0xfffd, 0x0, @private1, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000480)}}, {{&(0x7f0000000100)={0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x95}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)="0344fc43ce358f68ee4d9119d876116494f878ab6085426eb629c0498794d5e75fd0b7b8853728bee6ff7008a20869c83f15563b1119797648b052423ef15f2cfd1a636997f65cca5ae4ed3bca95b4df20", 0x51}], 0x1}}], 0x2, 0x5eee) 99.124674ms ago: executing program 4 (id=1058): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) (fail_nth: 13) 0s ago: executing program 2 (id=1059): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f118db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df974c298a289e47091", 0xd}], 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x401) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) accept(r0, &(0x7f00000001c0)=@isdn, &(0x7f00000000c0)=0x80) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000d00), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000010000100"/20, @ANYRES32=r5, @ANYBLOB="00000000071600001800168014000180100006000600000007000000370c0000b019c9b9db75de1d5ae2d9010e0ed03e8c25ba28cce776cbd021e692e5592a"], 0x38}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) sendto$inet(r0, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) recvmsg(r0, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x120) kernel console output (not intermixed with test programs): f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.257409][ T5898] RSP: 002b:00007f140ffb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 106.265972][ T5898] RAX: ffffffffffffffda RBX: 00007f140f335f80 RCX: 00007f140f17def9 [ 106.273985][ T5898] RDX: 0000000000000001 RSI: 0000000020000080 RDI: 0000000000000003 [ 106.281997][ T5898] RBP: 00007f140ffb2090 R08: 0000000000000000 R09: 0000000000000000 [ 106.290026][ T5898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.298010][ T5898] R13: 0000000000000000 R14: 00007f140f335f80 R15: 00007ffe3d4bd618 [ 106.306275][ T5898] [ 106.354293][ T5902] netlink: 'syz.4.181': attribute type 10 has an invalid length. [ 106.409221][ T5902] geneve0: entered promiscuous mode [ 106.482973][ T5902] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 106.549097][ T5915] __nla_validate_parse: 11 callbacks suppressed [ 106.549119][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.184'. [ 106.601813][ T5916] netlink: 48 bytes leftover after parsing attributes in process `syz.3.184'. [ 106.613385][ T5917] netlink: 188 bytes leftover after parsing attributes in process `syz.1.185'. [ 106.632964][ T5917] netlink: 'syz.1.185': attribute type 1 has an invalid length. [ 106.671211][ T5922] netlink: 20 bytes leftover after parsing attributes in process `syz.4.187'. [ 106.876847][ T5925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.189'. [ 106.919593][ T5929] tipc: Started in network mode [ 106.928060][ T5929] tipc: Node identity 2ecb8821c747, cluster identity 4711 [ 106.940114][ T5929] tipc: Enabled bearer , priority 0 [ 106.998083][ T5932] netlink: 'syz.0.189': attribute type 4 has an invalid length. [ 107.096311][ T29] audit: type=1107 audit(1727058705.055:3): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 107.122406][ T5931] can: request_module (can-proto-0) failed. [ 107.181143][ T5929] tipc: Resetting bearer [ 107.275786][ T5926] tipc: Resetting bearer [ 107.364870][ T5953] FAULT_INJECTION: forcing a failure. [ 107.364870][ T5953] name failslab, interval 1, probability 0, space 0, times 0 [ 107.393492][ T5953] CPU: 1 UID: 0 PID: 5953 Comm: syz.2.195 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 107.403906][ T5953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 107.414014][ T5953] Call Trace: [ 107.417434][ T5953] [ 107.420398][ T5953] dump_stack_lvl+0x241/0x360 [ 107.425141][ T5953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.430412][ T5953] ? __pfx__printk+0x10/0x10 [ 107.435071][ T5953] ? fs_reclaim_acquire+0x93/0x140 [ 107.440246][ T5953] ? __pfx___might_resched+0x10/0x10 [ 107.446111][ T5953] should_fail_ex+0x3b0/0x4e0 [ 107.450906][ T5953] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 107.456661][ T5953] should_failslab+0xac/0x100 [ 107.461404][ T5953] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 107.467179][ T5953] __kmalloc_noprof+0xd8/0x400 [ 107.471972][ T5953] ? kfree+0x4e/0x360 [ 107.475977][ T5953] tomoyo_realpath_from_path+0xcf/0x5e0 [ 107.481740][ T5953] tomoyo_path_number_perm+0x23a/0x880 [ 107.487335][ T5953] ? tomoyo_path_number_perm+0x208/0x880 [ 107.493269][ T5953] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 107.499345][ T5953] ? __fget_files+0x29/0x470 [ 107.503995][ T5953] ? __fget_files+0x3f6/0x470 [ 107.508695][ T5953] ? __fget_files+0x29/0x470 [ 107.513375][ T5953] security_file_ioctl+0x75/0xb0 [ 107.518349][ T5953] __se_sys_ioctl+0x47/0x170 [ 107.523053][ T5953] do_syscall_64+0xf3/0x230 [ 107.527598][ T5953] ? clear_bhb_loop+0x35/0x90 [ 107.532289][ T5953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.538200][ T5953] RIP: 0033:0x7fbe7297def9 [ 107.542872][ T5953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.562518][ T5953] RSP: 002b:00007fbe73825038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.571001][ T5953] RAX: ffffffffffffffda RBX: 00007fbe72b35f80 RCX: 00007fbe7297def9 [ 107.579097][ T5953] RDX: 0000000020000900 RSI: 0000000000008946 RDI: 000000000000000d [ 107.587110][ T5953] RBP: 00007fbe73825090 R08: 0000000000000000 R09: 0000000000000000 [ 107.595611][ T5953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.603685][ T5953] R13: 0000000000000000 R14: 00007fbe72b35f80 R15: 00007fffafe6a4e8 [ 107.611708][ T5953] [ 107.630447][ T5953] ERROR: Out of memory at tomoyo_realpath_from_path. [ 108.031472][ T5231] tipc: Node number set to 3918301217 [ 109.728943][ T5926] tipc: Disabling bearer [ 109.740033][ T5957] netlink: 'syz.4.196': attribute type 9 has an invalid length. [ 109.749290][ T5966] netlink: 'syz.0.198': attribute type 10 has an invalid length. [ 109.770140][ T5957] netlink: 173628 bytes leftover after parsing attributes in process `syz.4.196'. [ 109.921847][ T5958] netlink: 'syz.4.196': attribute type 9 has an invalid length. [ 109.953912][ T5958] netlink: 173628 bytes leftover after parsing attributes in process `syz.4.196'. [ 109.966784][ T5972] Cannot find add_set index 0 as target [ 110.185312][ T5984] tipc: Failed to remove unknown binding: 66,1,1/0:2638362016/2638362018 [ 110.215030][ T5984] tipc: Failed to remove unknown binding: 66,1,1/0:2638362016/2638362018 [ 110.302771][ T5988] FAULT_INJECTION: forcing a failure. [ 110.302771][ T5988] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 110.332466][ T5988] CPU: 1 UID: 0 PID: 5988 Comm: syz.1.205 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 110.342961][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 110.353205][ T5988] Call Trace: [ 110.356649][ T5988] [ 110.359608][ T5988] dump_stack_lvl+0x241/0x360 [ 110.364330][ T5988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.369590][ T5988] ? __pfx__printk+0x10/0x10 [ 110.374258][ T5988] ? snprintf+0xda/0x120 [ 110.378552][ T5988] should_fail_ex+0x3b0/0x4e0 [ 110.383282][ T5988] _copy_to_user+0x2f/0xb0 [ 110.387734][ T5988] simple_read_from_buffer+0xca/0x150 [ 110.393134][ T5988] proc_fail_nth_read+0x1ec/0x260 [ 110.398190][ T5988] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.403757][ T5988] ? rw_verify_area+0x520/0x6b0 [ 110.408626][ T5988] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.414208][ T5988] vfs_read+0x204/0xbc0 [ 110.418436][ T5988] ? __pfx_lock_release+0x10/0x10 [ 110.423597][ T5988] ? __pfx_vfs_read+0x10/0x10 [ 110.428318][ T5988] ? bpf_prog_test_run+0x352/0x3b0 [ 110.433500][ T5988] ? __fget_files+0x29/0x470 [ 110.438109][ T5988] ? __fget_files+0x3f6/0x470 [ 110.442826][ T5988] ksys_read+0x1a0/0x2c0 [ 110.447094][ T5988] ? __pfx_ksys_read+0x10/0x10 [ 110.451872][ T5988] ? do_syscall_64+0x100/0x230 [ 110.456835][ T5988] ? do_syscall_64+0xb6/0x230 [ 110.461538][ T5988] do_syscall_64+0xf3/0x230 [ 110.466234][ T5988] ? clear_bhb_loop+0x35/0x90 [ 110.471050][ T5988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.476970][ T5988] RIP: 0033:0x7f3e4cd7c93c [ 110.481409][ T5988] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 110.501227][ T5988] RSP: 002b:00007f3e4c7ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.509865][ T5988] RAX: ffffffffffffffda RBX: 00007f3e4cf35f80 RCX: 00007f3e4cd7c93c [ 110.518069][ T5988] RDX: 000000000000000f RSI: 00007f3e4c7ff0a0 RDI: 0000000000000005 [ 110.526447][ T5988] RBP: 00007f3e4c7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 110.534581][ T5988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.542944][ T5988] R13: 0000000000000000 R14: 00007f3e4cf35f80 R15: 00007ffe67459fd8 [ 110.551299][ T5988] [ 110.603827][ T5991] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 110.761487][ T5989] can: request_module (can-proto-0) failed. [ 111.029870][ T6003] netlink: 276 bytes leftover after parsing attributes in process `syz.4.211'. [ 111.122901][ T6003] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 111.192435][ T6010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.213'. [ 111.282805][ T6021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.217'. [ 111.356588][ T6024] Cannot find add_set index 0 as target [ 111.450607][ T6031] dccp_invalid_packet: invalid packet type [ 112.412179][ T6051] can: request_module (can-proto-0) failed. [ 130.668404][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 130.684198][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 130.694150][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 130.714910][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 130.724257][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 130.732257][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 130.798775][ T4620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 130.831489][ T4620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 130.840626][ T4620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 130.863705][ T4620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 130.879524][ T4620] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 130.888582][ T4620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 130.919504][ T5236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 130.931905][ T5236] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 130.954237][ T5242] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 130.965754][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 130.966049][ T5242] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 130.976781][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 130.983733][ T5242] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 130.991995][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.005357][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.008891][ T5242] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 131.013678][ T5236] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 131.027777][ T4620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 131.045455][ T4620] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 131.064692][ T5236] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 131.081583][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 131.092938][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 131.108777][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 131.132055][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 131.307168][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.478319][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.583962][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.713707][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.031229][ T6073] chnl_net:caif_netlink_parms(): no params data found [ 132.179968][ T6074] chnl_net:caif_netlink_parms(): no params data found [ 132.365951][ T6077] chnl_net:caif_netlink_parms(): no params data found [ 132.394352][ T35] bridge_slave_1: left allmulticast mode [ 132.400460][ T35] bridge_slave_1: left promiscuous mode [ 132.408755][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.427525][ T35] bridge_slave_0: left allmulticast mode [ 132.433636][ T35] bridge_slave_0: left promiscuous mode [ 132.439658][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.896985][ T54] Bluetooth: hci0: command tx timeout [ 132.920391][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.938528][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.950635][ T35] bond0 (unregistering): Released all slaves [ 132.966164][ T35] bond1 (unregistering): Released all slaves [ 132.972362][ T54] Bluetooth: hci2: command tx timeout [ 133.062025][ T54] Bluetooth: hci5: command tx timeout [ 133.127201][ T35] IPVS: stopping backup sync thread 5492 ... [ 133.142313][ T54] Bluetooth: hci3: command tx timeout [ 133.187442][ T6081] chnl_net:caif_netlink_parms(): no params data found [ 133.206473][ T6073] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.214699][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.222405][ T54] Bluetooth: hci6: command tx timeout [ 133.229003][ T6073] bridge_slave_0: entered allmulticast mode [ 133.237940][ T6073] bridge_slave_0: entered promiscuous mode [ 133.267879][ T6078] chnl_net:caif_netlink_parms(): no params data found [ 133.298703][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.305843][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.327682][ T6073] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.334946][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.351760][ T6073] bridge_slave_1: entered allmulticast mode [ 133.358907][ T6073] bridge_slave_1: entered promiscuous mode [ 133.427341][ T6074] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.436864][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.444273][ T6074] bridge_slave_0: entered allmulticast mode [ 133.456832][ T6074] bridge_slave_0: entered promiscuous mode [ 133.541149][ T6077] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.548494][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.558840][ T6077] bridge_slave_0: entered allmulticast mode [ 133.566690][ T6077] bridge_slave_0: entered promiscuous mode [ 133.586405][ T6077] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.594707][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.602186][ T6077] bridge_slave_1: entered allmulticast mode [ 133.609452][ T6077] bridge_slave_1: entered promiscuous mode [ 133.633117][ T6074] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.640254][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.648182][ T6074] bridge_slave_1: entered allmulticast mode [ 133.657131][ T6074] bridge_slave_1: entered promiscuous mode [ 133.723876][ T6073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.819119][ T6073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.877260][ T6077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.891132][ T6077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.933590][ T6081] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.940943][ T6081] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.948849][ T6081] bridge_slave_0: entered allmulticast mode [ 133.956254][ T6081] bridge_slave_0: entered promiscuous mode [ 134.058585][ T6074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.078751][ T6074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.089732][ T6081] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.098230][ T6081] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.106152][ T6081] bridge_slave_1: entered allmulticast mode [ 134.114284][ T6081] bridge_slave_1: entered promiscuous mode [ 134.125863][ T6073] team0: Port device team_slave_0 added [ 134.139670][ T6073] team0: Port device team_slave_1 added [ 134.283644][ T6077] team0: Port device team_slave_0 added [ 134.343447][ T6073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.350456][ T6073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.378962][ T6073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.392611][ T6078] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.400078][ T6078] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.410140][ T6078] bridge_slave_0: entered allmulticast mode [ 134.418263][ T6078] bridge_slave_0: entered promiscuous mode [ 134.428538][ T6078] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.435975][ T6078] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.444486][ T6078] bridge_slave_1: entered allmulticast mode [ 134.452549][ T6078] bridge_slave_1: entered promiscuous mode [ 134.477781][ T35] hsr_slave_0: left promiscuous mode [ 134.494756][ T35] hsr_slave_1: left promiscuous mode [ 134.501505][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.515588][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.531154][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.549774][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.603987][ T35] veth1_macvtap: left promiscuous mode [ 134.619310][ T35] veth0_macvtap: left promiscuous mode [ 134.627163][ T35] veth1_vlan: left promiscuous mode [ 134.633413][ T35] veth0_vlan: left promiscuous mode [ 134.971898][ T54] Bluetooth: hci0: command tx timeout [ 135.051889][ T54] Bluetooth: hci2: command tx timeout [ 135.131906][ T54] Bluetooth: hci5: command tx timeout [ 135.212776][ T54] Bluetooth: hci3: command tx timeout [ 135.294982][ T54] Bluetooth: hci6: command tx timeout [ 135.418139][ T35] team0 (unregistering): Port device team_slave_1 removed [ 135.470222][ T35] team0 (unregistering): Port device team_slave_0 removed [ 135.983654][ T6077] team0: Port device team_slave_1 added [ 135.999045][ T6074] team0: Port device team_slave_0 added [ 136.027913][ T6074] team0: Port device team_slave_1 added [ 136.046783][ T6081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.057457][ T6073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.064861][ T6073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.092049][ T6073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.236885][ T6081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.287052][ T6078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.303062][ T6077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.310495][ T6077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.340035][ T6077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.356058][ T6077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.363132][ T6077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.390659][ T6077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.473598][ T6078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.526372][ T6078] team0: Port device team_slave_0 added [ 136.533663][ T6074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.540649][ T6074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.567460][ T6074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.588627][ T6081] team0: Port device team_slave_0 added [ 136.599246][ T6081] team0: Port device team_slave_1 added [ 136.609776][ T6073] hsr_slave_0: entered promiscuous mode [ 136.619771][ T6073] hsr_slave_1: entered promiscuous mode [ 136.690657][ T6078] team0: Port device team_slave_1 added [ 136.710380][ T6074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.718987][ T6074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.748284][ T6074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.786305][ T6081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.794642][ T6081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.821232][ T6081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.858666][ T6078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.865846][ T6078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.900739][ T6078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.945890][ T6081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.953004][ T6081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.979471][ T6081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.003793][ T6077] hsr_slave_0: entered promiscuous mode [ 137.010985][ T6077] hsr_slave_1: entered promiscuous mode [ 137.018368][ T6077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.026786][ T6077] Cannot create hsr debugfs directory [ 137.052865][ T54] Bluetooth: hci0: command tx timeout [ 137.060555][ T6078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.068221][ T6078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.095615][ T6078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.132488][ T54] Bluetooth: hci2: command tx timeout [ 137.214180][ T54] Bluetooth: hci5: command tx timeout [ 137.293686][ T54] Bluetooth: hci3: command tx timeout [ 137.313711][ T6078] hsr_slave_0: entered promiscuous mode [ 137.330004][ T6078] hsr_slave_1: entered promiscuous mode [ 137.340028][ T6078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.358072][ T6078] Cannot create hsr debugfs directory [ 137.372178][ T54] Bluetooth: hci6: command tx timeout [ 137.480799][ T6081] hsr_slave_0: entered promiscuous mode [ 137.490311][ T6081] hsr_slave_1: entered promiscuous mode [ 137.507099][ T6081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.520348][ T6081] Cannot create hsr debugfs directory [ 137.538759][ T6074] hsr_slave_0: entered promiscuous mode [ 137.558121][ T6074] hsr_slave_1: entered promiscuous mode [ 137.569552][ T6074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.587499][ T6074] Cannot create hsr debugfs directory [ 138.067988][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.209383][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.263761][ T6077] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.333736][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.372345][ T6077] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.435460][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.511058][ T6077] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.601516][ T6077] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.840186][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.947314][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.044670][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.131918][ T54] Bluetooth: hci0: command tx timeout [ 139.186367][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.211912][ T54] Bluetooth: hci2: command tx timeout [ 139.291807][ T54] Bluetooth: hci5: command tx timeout [ 139.371911][ T54] Bluetooth: hci3: command tx timeout [ 139.452023][ T54] Bluetooth: hci6: command tx timeout [ 139.535007][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.554411][ T6073] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 139.566979][ T6073] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 139.611339][ T6073] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 139.640225][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.663767][ T6073] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 139.733705][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.865228][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.088970][ T6073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.121453][ T35] bridge_slave_1: left allmulticast mode [ 140.128690][ T35] bridge_slave_1: left promiscuous mode [ 140.135782][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.155079][ T35] bridge_slave_0: left allmulticast mode [ 140.160797][ T35] bridge_slave_0: left promiscuous mode [ 140.178616][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.197800][ T35] bridge_slave_1: left allmulticast mode [ 140.211984][ T35] bridge_slave_1: left promiscuous mode [ 140.217818][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.238568][ T35] bridge_slave_0: left allmulticast mode [ 140.252053][ T35] bridge_slave_0: left promiscuous mode [ 140.258046][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.293507][ T35] bridge_slave_1: left allmulticast mode [ 140.299234][ T35] bridge_slave_1: left promiscuous mode [ 140.324723][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.354357][ T35] bridge_slave_0: left allmulticast mode [ 140.360342][ T35] bridge_slave_0: left promiscuous mode [ 140.376168][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.398917][ T35] bridge_slave_1: left allmulticast mode [ 140.421793][ T35] bridge_slave_1: left promiscuous mode [ 140.427729][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.446791][ T35] bridge_slave_0: left allmulticast mode [ 140.458572][ T35] bridge_slave_0: left promiscuous mode [ 140.468249][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.397848][ T35] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 141.787952][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.799987][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.811835][ T35] bond0 (unregistering): Released all slaves [ 141.938666][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.958841][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.970154][ T35] bond0 (unregistering): Released all slaves [ 142.099588][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.117317][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.128948][ T35] bond0 (unregistering): Released all slaves [ 142.266878][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.278633][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.291459][ T35] bond0 (unregistering): Released all slaves [ 142.464106][ T6073] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.494728][ T35] tipc: Left network mode [ 142.528944][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.536324][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.583050][ T35] tipc: Left network mode [ 142.643285][ T6078] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 142.671277][ T2513] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.678577][ T2513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.766229][ T6078] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 142.833569][ T6078] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 142.850783][ T6078] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 143.621131][ T6073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.760887][ T6081] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 143.780511][ T6081] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 143.899433][ T6078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.907041][ T6081] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 143.974449][ T6081] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 144.069559][ T6078] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.157941][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.165188][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.288336][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.295594][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.373728][ T6073] veth0_vlan: entered promiscuous mode [ 144.451286][ T35] hsr_slave_0: left promiscuous mode [ 144.463495][ T35] hsr_slave_1: left promiscuous mode [ 144.473258][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.481025][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.490956][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.501254][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.515232][ T35] hsr_slave_0: left promiscuous mode [ 144.523708][ T35] hsr_slave_1: left promiscuous mode [ 144.531366][ T35] batadv0: left promiscuous mode [ 144.544259][ T35] veth0: left promiscuous mode [ 144.556737][ T35] hsr_slave_0: left promiscuous mode [ 144.568946][ T35] hsr_slave_1: left promiscuous mode [ 144.577413][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.593387][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.601579][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.609778][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.627666][ T35] hsr_slave_0: left promiscuous mode [ 144.638959][ T35] hsr_slave_1: left promiscuous mode [ 144.650556][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.662417][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.673068][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.680923][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.806535][ T35] veth1_macvtap: left promiscuous mode [ 144.814755][ T35] veth0_macvtap: left promiscuous mode [ 144.820511][ T35] veth1_vlan: left promiscuous mode [ 144.838461][ T35] veth0_vlan: left promiscuous mode [ 144.847831][ T35] veth1_macvtap: left promiscuous mode [ 144.854070][ T35] veth0_macvtap: left promiscuous mode [ 144.859801][ T35] veth1_vlan: left promiscuous mode [ 144.877052][ T35] veth0_vlan: left promiscuous mode [ 144.890290][ T35] veth1_macvtap: left promiscuous mode [ 144.897056][ T35] veth0_macvtap: left promiscuous mode [ 144.911959][ T35] veth1_vlan: left promiscuous mode [ 144.917373][ T35] veth0_vlan: left promiscuous mode [ 144.934932][ T35] veth1_macvtap: left promiscuous mode [ 144.940646][ T35] veth0_macvtap: left promiscuous mode [ 144.956721][ T35] veth1_vlan: left promiscuous mode [ 144.962556][ T35] veth0_vlan: left promiscuous mode [ 146.420149][ T35] team0 (unregistering): Port device team_slave_1 removed [ 146.468993][ T35] team0 (unregistering): Port device team_slave_0 removed [ 147.314825][ T35] team0 (unregistering): Port device team_slave_1 removed [ 147.369698][ T35] team0 (unregistering): Port device team_slave_0 removed [ 148.256888][ T35] team0 (unregistering): Port device team_slave_1 removed [ 148.300531][ T35] team0 (unregistering): Port device team_slave_0 removed [ 149.364769][ T35] team0 (unregistering): Port device team_slave_1 removed [ 149.418126][ T35] team0 (unregistering): Port device team_slave_0 removed [ 149.997989][ T6073] veth1_vlan: entered promiscuous mode [ 150.137048][ T6074] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 150.233791][ T6074] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 150.250376][ T6074] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 150.268083][ T6074] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 150.370247][ T6077] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 150.405886][ T6077] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 150.428490][ T6073] veth0_macvtap: entered promiscuous mode [ 150.448398][ T6073] veth1_macvtap: entered promiscuous mode [ 150.486268][ T6077] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 150.533108][ T6077] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 150.621406][ T6073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.641582][ T6081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.690639][ T6078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.706131][ T6073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.728772][ T6073] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.738168][ T6073] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.747417][ T6073] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.756517][ T6073] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.925166][ T6081] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.041383][ T6074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.133840][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.141836][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.163875][ T6078] veth0_vlan: entered promiscuous mode [ 151.190016][ T6074] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.248046][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.255319][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.320418][ T6078] veth1_vlan: entered promiscuous mode [ 151.417748][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.425066][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.486760][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.505439][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.527350][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.534594][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.583997][ T6077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.680343][ T6077] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.733370][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.741263][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.794762][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.802059][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.860819][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.868178][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.984531][ T6078] veth0_macvtap: entered promiscuous mode [ 152.064086][ T6078] veth1_macvtap: entered promiscuous mode [ 152.093008][ T6285] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 152.211363][ T6078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.255467][ T6078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.282600][ T6078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.336344][ T6078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.382649][ T6078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.419114][ T6078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.495735][ T6078] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.526768][ T6078] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.562198][ T6078] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.570997][ T6078] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.609637][ T6302] netlink: 56 bytes leftover after parsing attributes in process `syz.0.230'. [ 152.649305][ T6302] netlink: 56 bytes leftover after parsing attributes in process `syz.0.230'. [ 152.686684][ T6081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.827016][ T6074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.902967][ T6309] Cannot find add_set index 0 as target [ 153.023994][ T6312] netlink: 20 bytes leftover after parsing attributes in process `syz.0.232'. [ 153.050596][ T2513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.071739][ T2513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.152712][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.173937][ T6077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.190407][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.219461][ T6074] veth0_vlan: entered promiscuous mode [ 153.296213][ T6074] veth1_vlan: entered promiscuous mode [ 153.514294][ T6074] veth0_macvtap: entered promiscuous mode [ 153.587535][ T6074] veth1_macvtap: entered promiscuous mode [ 153.675642][ T6330] sch_tbf: burst 5526 is lower than device lo mtu (65550) ! [ 153.700114][ T6077] veth0_vlan: entered promiscuous mode [ 153.747270][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.758649][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.769878][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.794477][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.808170][ T6074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.823016][ T6081] veth0_vlan: entered promiscuous mode [ 153.848443][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.862749][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.872766][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.884536][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.903077][ T6074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.966058][ T6077] veth1_vlan: entered promiscuous mode [ 154.002990][ T6074] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.023061][ T6074] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.042238][ T6074] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.057059][ T6074] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.080391][ T6081] veth1_vlan: entered promiscuous mode [ 154.208686][ T6081] veth0_macvtap: entered promiscuous mode [ 154.276028][ T6081] veth1_macvtap: entered promiscuous mode [ 154.289067][ T6077] veth0_macvtap: entered promiscuous mode [ 154.346740][ T6077] veth1_macvtap: entered promiscuous mode [ 154.411130][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.424009][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.434427][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.446980][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.457189][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.470714][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.485827][ T6081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.523890][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.525419][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.550160][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.578142][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.589989][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.627720][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.637913][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.658124][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.670595][ T6081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.679476][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.691147][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.701165][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.712771][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.722695][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.737657][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.749254][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.760125][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.771563][ T6077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.855964][ T6081] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.865402][ T6081] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.874851][ T6081] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.884321][ T6081] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.911838][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.934735][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.962181][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.980226][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.990827][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.002654][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.013094][ T6077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.024231][ T6077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.037243][ T6077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.062954][ T6343] delete_channel: no stack [ 155.069277][ T6077] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.082481][ T6077] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.091295][ T6077] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.100131][ T6077] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.116807][ T6343] delete_channel: no stack [ 155.164796][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.191430][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.413445][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.448504][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.493547][ T6353] macsec1: entered promiscuous mode [ 155.498939][ T6353] macsec1: entered allmulticast mode [ 155.508293][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.528448][ T6354] netlink: 168 bytes leftover after parsing attributes in process `syz.0.240'. [ 155.538537][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.626851][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.664952][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.759640][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.802139][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.938384][ T6365] bridge1: entered promiscuous mode [ 155.963150][ T6365] bridge1: entered allmulticast mode [ 155.997362][ T6365] team0: Port device bridge1 added [ 156.026354][ T6368] netlink: 'syz.0.243': attribute type 10 has an invalid length. [ 156.139358][ T6368] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 156.248190][ T6379] netlink: 'syz.2.245': attribute type 9 has an invalid length. [ 156.295269][ T6379] netlink: 173628 bytes leftover after parsing attributes in process `syz.2.245'. [ 156.458229][ T6382] netlink: 'syz.2.245': attribute type 9 has an invalid length. [ 156.522113][ T6382] netlink: 173628 bytes leftover after parsing attributes in process `syz.2.245'. [ 156.629726][ T6393] netlink: 'syz.0.249': attribute type 9 has an invalid length. [ 156.639362][ T6393] netlink: 173628 bytes leftover after parsing attributes in process `syz.0.249'. [ 156.740267][ T6390] netlink: 'syz.0.249': attribute type 9 has an invalid length. [ 156.790244][ T6390] netlink: 173628 bytes leftover after parsing attributes in process `syz.0.249'. [ 156.984321][ T5240] Bluetooth: hci6: command 0x0405 tx timeout [ 157.095389][ T6402] Cannot find del_set index 4 as target [ 157.385971][ T6406] tipc: Started in network mode [ 157.399775][ T6406] tipc: Node identity bae6fef53cc8, cluster identity 4711 [ 157.425952][ T6406] tipc: Enabled bearer , priority 0 [ 157.558125][ T6406] tipc: Resetting bearer [ 157.597323][ T6412] netlink: 'syz.3.257': attribute type 9 has an invalid length. [ 157.616232][ T6412] netlink: 173628 bytes leftover after parsing attributes in process `syz.3.257'. [ 157.653218][ T29] audit: type=1107 audit(1727058755.605:4): pid=6405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 157.739653][ T6405] tipc: Resetting bearer [ 158.481772][ T5326] tipc: Node number set to 2251226869 [ 159.062525][ T5240] Bluetooth: hci6: command 0x0405 tx timeout [ 159.777627][ T6405] tipc: Disabling bearer [ 159.806412][ T6415] netlink: 'syz.3.257': attribute type 9 has an invalid length. [ 159.815327][ T6415] netlink: 173628 bytes leftover after parsing attributes in process `syz.3.257'. [ 160.018597][ T6423] netlink: 'syz.4.260': attribute type 1 has an invalid length. [ 160.046626][ T6423] netlink: 224 bytes leftover after parsing attributes in process `syz.4.260'. [ 160.073356][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.260'. [ 160.092319][ T6431] vlan0: entered promiscuous mode [ 160.097437][ T6431] vlan0: entered allmulticast mode [ 160.139705][ T6431] macvlan0: entered allmulticast mode [ 160.167647][ T6431] veth1_vlan: entered allmulticast mode [ 160.204991][ T6431] macvlan0: entered promiscuous mode [ 160.240663][ T6431] team0: Port device vlan0 added [ 160.319470][ T6437] xt_TCPMSS: Only works on TCP SYN packets [ 160.405327][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.265'. [ 160.639418][ T6451] FAULT_INJECTION: forcing a failure. [ 160.639418][ T6451] name failslab, interval 1, probability 0, space 0, times 0 [ 160.659813][ T6451] CPU: 0 UID: 0 PID: 6451 Comm: syz.3.272 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 160.670135][ T6451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 160.680561][ T6451] Call Trace: [ 160.683887][ T6451] [ 160.686858][ T6451] dump_stack_lvl+0x241/0x360 [ 160.691598][ T6451] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.696942][ T6451] ? __pfx__printk+0x10/0x10 [ 160.701599][ T6451] ? ref_tracker_alloc+0x332/0x490 [ 160.706855][ T6451] should_fail_ex+0x3b0/0x4e0 [ 160.711590][ T6451] ? skb_clone+0x20c/0x390 [ 160.716065][ T6451] should_failslab+0xac/0x100 [ 160.720897][ T6451] ? skb_clone+0x20c/0x390 [ 160.725380][ T6451] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 160.730824][ T6451] skb_clone+0x20c/0x390 [ 160.735140][ T6451] __netlink_deliver_tap+0x3cc/0x7c0 [ 160.740594][ T6451] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.745919][ T6451] netlink_deliver_tap+0x19d/0x1b0 [ 160.751318][ T6451] netlink_sendskb+0x68/0x140 [ 160.756050][ T6451] netlink_unicast+0x39d/0x990 [ 160.760915][ T6451] ? __asan_memcpy+0x40/0x70 [ 160.765559][ T6451] ? __pfx_netlink_unicast+0x10/0x10 [ 160.770992][ T6451] netlink_rcv_skb+0x262/0x430 [ 160.775806][ T6451] ? __pfx_genl_rcv_msg+0x10/0x10 [ 160.780862][ T6451] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 160.786188][ T6451] ? __netlink_deliver_tap+0x77e/0x7c0 [ 160.792160][ T6451] genl_rcv+0x28/0x40 [ 160.796473][ T6451] netlink_unicast+0x7f6/0x990 [ 160.801305][ T6451] ? __pfx_netlink_unicast+0x10/0x10 [ 160.806610][ T6451] ? __virt_addr_valid+0x183/0x530 [ 160.811748][ T6451] ? __check_object_size+0x49c/0x900 [ 160.817077][ T6451] ? bpf_lsm_netlink_send+0x9/0x10 [ 160.822332][ T6451] netlink_sendmsg+0x8e4/0xcb0 [ 160.827185][ T6451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.832518][ T6451] ? __import_iovec+0x536/0x820 [ 160.837410][ T6451] ? aa_sock_msg_perm+0x91/0x160 [ 160.842363][ T6451] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 160.847667][ T6451] ? security_socket_sendmsg+0x87/0xb0 [ 160.853147][ T6451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.858535][ T6451] __sock_sendmsg+0x221/0x270 [ 160.863236][ T6451] ____sys_sendmsg+0x525/0x7d0 [ 160.868067][ T6451] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.873432][ T6451] __sys_sendmsg+0x2b0/0x3a0 [ 160.878063][ T6451] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.883386][ T6451] ? vfs_write+0x7c4/0xc90 [ 160.887961][ T6451] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 160.894762][ T6451] ? do_syscall_64+0x100/0x230 [ 160.899854][ T6451] ? do_syscall_64+0xb6/0x230 [ 160.904678][ T6451] do_syscall_64+0xf3/0x230 [ 160.909315][ T6451] ? clear_bhb_loop+0x35/0x90 [ 160.914112][ T6451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.920116][ T6451] RIP: 0033:0x7f394417def9 [ 160.924602][ T6451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.944420][ T6451] RSP: 002b:00007f3945030038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.952872][ T6451] RAX: ffffffffffffffda RBX: 00007f3944335f80 RCX: 00007f394417def9 [ 160.960860][ T6451] RDX: 0000000000000000 RSI: 0000000020000740 RDI: 0000000000000003 [ 160.968847][ T6451] RBP: 00007f3945030090 R08: 0000000000000000 R09: 0000000000000000 [ 160.977062][ T6451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 160.985156][ T6451] R13: 0000000000000000 R14: 00007f3944335f80 R15: 00007ffe356eb998 [ 160.993161][ T6451] [ 161.100554][ T6460] netlink: 20 bytes leftover after parsing attributes in process `syz.1.275'. [ 161.192725][ T6462] sctp: [Deprecated]: syz.1.275 (pid 6462) Use of int in max_burst socket option. [ 161.192725][ T6462] Use struct sctp_assoc_value instead [ 161.372308][ T6471] Cannot find add_set index 0 as target [ 161.602762][ T6479] delete_channel: no stack [ 161.846890][ T6490] FAULT_INJECTION: forcing a failure. [ 161.846890][ T6490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.880043][ T6490] CPU: 1 UID: 0 PID: 6490 Comm: syz.0.287 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 161.890504][ T6490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 161.900749][ T6490] Call Trace: [ 161.904152][ T6490] [ 161.907112][ T6490] dump_stack_lvl+0x241/0x360 [ 161.911865][ T6490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.917121][ T6490] ? __pfx__printk+0x10/0x10 [ 161.921799][ T6490] ? __pfx_lock_release+0x10/0x10 [ 161.926865][ T6490] ? __lock_acquire+0x137a/0x2040 [ 161.931922][ T6490] should_fail_ex+0x3b0/0x4e0 [ 161.936647][ T6490] _copy_from_user+0x2f/0xe0 [ 161.941285][ T6490] kstrtouint_from_user+0xc6/0x190 [ 161.946425][ T6490] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 161.952202][ T6490] ? __pfx_lock_acquire+0x10/0x10 [ 161.957356][ T6490] proc_fail_nth_write+0xaa/0x2d0 [ 161.962397][ T6490] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 161.968524][ T6490] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 161.974459][ T6490] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 161.980118][ T6490] vfs_write+0x2a2/0xc90 [ 161.984401][ T6490] ? __pfx_vfs_write+0x10/0x10 [ 161.989192][ T6490] ? __fget_files+0x29/0x470 [ 161.994246][ T6490] ? __fget_files+0x3f6/0x470 [ 161.998956][ T6490] ksys_write+0x1a0/0x2c0 [ 162.005240][ T6490] ? __pfx_ksys_write+0x10/0x10 [ 162.011113][ T6490] ? do_syscall_64+0x100/0x230 [ 162.016116][ T6490] ? do_syscall_64+0xb6/0x230 [ 162.020845][ T6490] do_syscall_64+0xf3/0x230 [ 162.025426][ T6490] ? clear_bhb_loop+0x35/0x90 [ 162.030327][ T6490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.036350][ T6490] RIP: 0033:0x7f672537c9df [ 162.040789][ T6490] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 162.060616][ T6490] RSP: 002b:00007f67261e6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 162.069060][ T6490] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f672537c9df [ 162.077946][ T6490] RDX: 0000000000000001 RSI: 00007f67261e60a0 RDI: 0000000000000004 [ 162.085947][ T6490] RBP: 00007f67261e6090 R08: 0000000000000000 R09: 0000000000000000 [ 162.094235][ T6490] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 162.102517][ T6490] R13: 0000000000000000 R14: 00007f6725535f80 R15: 00007ffda45a5fd8 [ 162.110784][ T6490] [ 162.138354][ T6494] netlink: 'syz.1.289': attribute type 1 has an invalid length. [ 162.166608][ T6494] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.289'. [ 162.176619][ T6494] netlink: 'syz.1.289': attribute type 1 has an invalid length. [ 162.190758][ T6492] netlink: 'syz.4.288': attribute type 4 has an invalid length. [ 162.452020][ T6505] Cannot find add_set index 0 as target [ 162.602570][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.294'. [ 162.686119][ T6515] macvlan0: left allmulticast mode [ 162.691572][ T6515] veth1_vlan: left allmulticast mode [ 162.697795][ T6515] macvlan0: left promiscuous mode [ 162.741083][ T6515] team0: Port device vlan0 removed [ 162.760785][ T6515] bridge0: port 3(vlan0) entered blocking state [ 162.769327][ T6515] bridge0: port 3(vlan0) entered disabled state [ 162.789097][ T6515] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 162.809450][ T6513] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 163.057793][ T6524] netlink: 168 bytes leftover after parsing attributes in process `syz.4.299'. [ 163.186095][ T6538] netlink: 44 bytes leftover after parsing attributes in process `syz.4.302'. [ 163.214587][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.302'. [ 163.241803][ T6537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.302'. [ 163.646083][ T6555] Cannot find add_set index 0 as target [ 163.794706][ T6562] netlink: 168 bytes leftover after parsing attributes in process `syz.2.312'. [ 163.875627][ T6570] netlink: 'syz.0.313': attribute type 11 has an invalid length. [ 163.996105][ T6574] syz.3.316[6574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.997844][ T6574] syz.3.316[6574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.051222][ T6574] netlink: 40 bytes leftover after parsing attributes in process `syz.3.316'. [ 164.238609][ T6583] netlink: 'syz.2.319': attribute type 25 has an invalid length. [ 164.259513][ T6583] netlink: 'syz.2.319': attribute type 7 has an invalid length. [ 164.534477][ T6597] Cannot find add_set index 0 as target [ 164.820111][ T6604] netlink: 168 bytes leftover after parsing attributes in process `syz.3.327'. [ 165.644866][ T6630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.337'. [ 165.722509][ T6634] Cannot find add_set index 0 as target [ 165.737731][ T6636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.340'. [ 165.892003][ T6638] netlink: 168 bytes leftover after parsing attributes in process `syz.3.339'. [ 165.968793][ T6642] netlink: 'syz.2.341': attribute type 3 has an invalid length. [ 166.106804][ T6647] openvswitch: netlink: Actions may not be safe on all matching packets [ 166.633056][ T6660] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20000 [ 166.644868][ T6664] Cannot find add_set index 0 as target [ 167.147082][ T6686] Êü: entered promiscuous mode [ 167.847621][ T6713] Cannot find add_set index 0 as target [ 168.072772][ T6717] __nla_validate_parse: 6 callbacks suppressed [ 168.072800][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.366'. [ 168.241225][ T6722] netlink: 168 bytes leftover after parsing attributes in process `syz.3.368'. [ 168.565946][ T6734] netlink: 'syz.3.371': attribute type 1 has an invalid length. [ 168.679482][ T6732] netlink: 'syz.3.371': attribute type 1 has an invalid length. [ 168.689841][ T6732] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 168.706849][ T6705] netlink: 24 bytes leftover after parsing attributes in process `syz.4.360'. [ 169.200047][ T6759] Cannot find add_set index 0 as target [ 169.807644][ T6771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.383'. [ 169.838901][ T6772] netlink: 168 bytes leftover after parsing attributes in process `syz.2.381'. [ 169.884905][ T6777] netlink: 108 bytes leftover after parsing attributes in process `syz.1.385'. [ 169.968377][ T6779] tun0: tun_chr_ioctl cmd 1074025677 [ 169.981905][ T6779] tun0: linktype set to 774 [ 170.295918][ T6792] sctp: [Deprecated]: syz.4.390 (pid 6792) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.295918][ T6792] Use struct sctp_sack_info instead [ 170.354552][ T6794] Cannot find add_set index 0 as target [ 170.359661][ T6792] IPv6: sit1: Disabled Multicast RS [ 170.654611][ T6809] netlink: 56 bytes leftover after parsing attributes in process `syz.4.394'. [ 171.198680][ T6824] netlink: 168 bytes leftover after parsing attributes in process `syz.4.398'. [ 171.645316][ T6845] Cannot find add_set index 0 as target [ 171.775630][ T6847] netlink: 'syz.1.407': attribute type 9 has an invalid length. [ 171.811573][ T6847] netlink: 173628 bytes leftover after parsing attributes in process `syz.1.407'. [ 171.959701][ T6853] netlink: 'syz.1.407': attribute type 9 has an invalid length. [ 171.978694][ T6853] netlink: 173628 bytes leftover after parsing attributes in process `syz.1.407'. [ 172.573469][ T6875] netlink: 'syz.4.417': attribute type 11 has an invalid length. [ 172.630689][ T6879] netlink: 'syz.3.419': attribute type 2 has an invalid length. [ 172.777557][ T6884] dccp_invalid_packet: P.type (SYNC) not Data || [Data]Ack, while P.X == 0 [ 173.014941][ T6893] Cannot find add_set index 0 as target [ 174.051829][ T6936] can: request_module (can-proto-0) failed. [ 174.430602][ T6949] __nla_validate_parse: 3 callbacks suppressed [ 174.430627][ T6949] netlink: 244 bytes leftover after parsing attributes in process `syz.1.440'. [ 174.658824][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 174.688694][ T6957] netlink: 72 bytes leftover after parsing attributes in process `syz.1.444'. [ 174.719134][ T6957] netlink: 92 bytes leftover after parsing attributes in process `syz.1.444'. [ 174.769254][ T6957] netlink: 92 bytes leftover after parsing attributes in process `syz.1.444'. [ 175.058553][ T6977] Cannot find add_set index 0 as target [ 175.073179][ T6971] can: request_module (can-proto-0) failed. [ 175.459142][ T6994] netlink: 56 bytes leftover after parsing attributes in process `syz.3.455'. [ 175.514618][ T6994] netlink: 56 bytes leftover after parsing attributes in process `syz.3.455'. [ 176.198445][ T7012] can: request_module (can-proto-0) failed. [ 177.116097][ T7046] can: request_module (can-proto-0) failed. [ 177.213656][ T7056] Cannot find add_set index 0 as target [ 177.962741][ T7078] netlink: 56 bytes leftover after parsing attributes in process `syz.2.487'. [ 178.000313][ T7078] netlink: 56 bytes leftover after parsing attributes in process `syz.2.487'. [ 178.352120][ T7084] can: request_module (can-proto-0) failed. [ 179.068425][ T7119] veth0_macvtap: left promiscuous mode [ 179.315705][ T7123] can: request_module (can-proto-0) failed. [ 179.482509][ T7136] Cannot find add_set index 0 as target [ 179.707268][ T7142] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 180.424667][ T7164] can: request_module (can-proto-0) failed. [ 180.563309][ T7174] netlink: 56 bytes leftover after parsing attributes in process `syz.4.519'. [ 180.593701][ T7174] netlink: 56 bytes leftover after parsing attributes in process `syz.4.519'. [ 180.663343][ T7178] netlink: 'syz.3.521': attribute type 1 has an invalid length. [ 180.671500][ T7178] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.521'. [ 181.250310][ T7202] can: request_module (can-proto-0) failed. [ 181.590272][ T7220] Cannot find add_set index 0 as target [ 182.289485][ T7240] can: request_module (can-proto-0) failed. [ 182.424252][ T7255] netlink: 56 bytes leftover after parsing attributes in process `syz.1.547'. [ 182.442904][ T7255] netlink: 56 bytes leftover after parsing attributes in process `syz.1.547'. [ 182.569697][ T7259] netlink: 28 bytes leftover after parsing attributes in process `syz.3.549'. [ 183.330424][ T7279] can: request_module (can-proto-0) failed. [ 183.425644][ T7290] Cannot find add_set index 0 as target [ 183.757914][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.568'. [ 183.934891][ T7307] netlink: 'syz.2.569': attribute type 11 has an invalid length. [ 183.953034][ T7307] netlink: 'syz.2.569': attribute type 1 has an invalid length. [ 183.978297][ T7307] netlink: 191384 bytes leftover after parsing attributes in process `syz.2.569'. [ 184.014283][ T29] audit: type=1107 audit(1727058781.975:5): pid=7304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 184.324487][ T7319] netlink: 140 bytes leftover after parsing attributes in process `syz.1.575'. [ 184.348304][ T7324] Cannot find add_set index 0 as target [ 184.400709][ T7316] can: request_module (can-proto-0) failed. [ 184.759501][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.578'. [ 186.061545][ T7362] can: request_module (can-proto-0) failed. [ 186.242089][ T7371] Cannot find add_set index 0 as target [ 187.722989][ T7319] caif0 speed is unknown, defaulting to 1000 [ 187.735536][ T7364] netlink: 'syz.4.587': attribute type 1 has an invalid length. [ 187.746484][ T7374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.591'. [ 187.766085][ T7319] caif0 speed is unknown, defaulting to 1000 [ 187.814328][ T7319] caif0 speed is unknown, defaulting to 1000 [ 188.133818][ T7390] FAULT_INJECTION: forcing a failure. [ 188.133818][ T7390] name failslab, interval 1, probability 0, space 0, times 0 [ 188.191800][ T7390] CPU: 1 UID: 0 PID: 7390 Comm: syz.4.597 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 188.202124][ T7390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 188.212234][ T7390] Call Trace: [ 188.215537][ T7390] [ 188.218484][ T7390] dump_stack_lvl+0x241/0x360 [ 188.223222][ T7390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.228518][ T7390] ? __pfx__printk+0x10/0x10 [ 188.233167][ T7390] ? ref_tracker_alloc+0x332/0x490 [ 188.238416][ T7390] should_fail_ex+0x3b0/0x4e0 [ 188.243130][ T7390] ? skb_clone+0x20c/0x390 [ 188.247576][ T7390] should_failslab+0xac/0x100 [ 188.252490][ T7390] ? skb_clone+0x20c/0x390 [ 188.257036][ T7390] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 188.262611][ T7390] skb_clone+0x20c/0x390 [ 188.266891][ T7390] __netlink_deliver_tap+0x3cc/0x7c0 [ 188.272270][ T7390] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.277736][ T7390] netlink_deliver_tap+0x19d/0x1b0 [ 188.283014][ T7390] netlink_sendskb+0x68/0x140 [ 188.287759][ T7390] netlink_unicast+0x39d/0x990 [ 188.292678][ T7390] ? __asan_memcpy+0x40/0x70 [ 188.297685][ T7390] ? __pfx_netlink_unicast+0x10/0x10 [ 188.303217][ T7390] netlink_rcv_skb+0x262/0x430 [ 188.308019][ T7390] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 188.313683][ T7390] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 188.319047][ T7390] xfrm_netlink_rcv+0x79/0x90 [ 188.323960][ T7390] netlink_unicast+0x7f6/0x990 [ 188.328765][ T7390] ? __pfx_netlink_unicast+0x10/0x10 [ 188.334074][ T7390] ? __virt_addr_valid+0x183/0x530 [ 188.339707][ T7390] ? __check_object_size+0x49c/0x900 [ 188.345044][ T7390] ? bpf_lsm_netlink_send+0x9/0x10 [ 188.350290][ T7390] netlink_sendmsg+0x8e4/0xcb0 [ 188.355134][ T7390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.360461][ T7390] ? __import_iovec+0x536/0x820 [ 188.365659][ T7390] ? aa_sock_msg_perm+0x91/0x160 [ 188.370654][ T7390] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 188.376003][ T7390] ? security_socket_sendmsg+0x87/0xb0 [ 188.381764][ T7390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.387163][ T7390] __sock_sendmsg+0x221/0x270 [ 188.391872][ T7390] ____sys_sendmsg+0x525/0x7d0 [ 188.396777][ T7390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.402358][ T7390] __sys_sendmsg+0x2b0/0x3a0 [ 188.406991][ T7390] ? __pfx___sys_sendmsg+0x10/0x10 [ 188.412141][ T7390] ? vfs_write+0x7c4/0xc90 [ 188.416708][ T7390] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 188.423176][ T7390] ? do_syscall_64+0x100/0x230 [ 188.427969][ T7390] ? do_syscall_64+0xb6/0x230 [ 188.432679][ T7390] do_syscall_64+0xf3/0x230 [ 188.437237][ T7390] ? clear_bhb_loop+0x35/0x90 [ 188.441946][ T7390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.447870][ T7390] RIP: 0033:0x7fb15537def9 [ 188.452307][ T7390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.473508][ T7390] RSP: 002b:00007fb154dff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.482034][ T7390] RAX: ffffffffffffffda RBX: 00007fb155535f80 RCX: 00007fb15537def9 [ 188.490126][ T7390] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000003 [ 188.498545][ T7390] RBP: 00007fb154dff090 R08: 0000000000000000 R09: 0000000000000000 [ 188.506646][ T7390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.514847][ T7390] R13: 0000000000000000 R14: 00007fb155535f80 R15: 00007ffd605e1608 [ 188.523075][ T7390] [ 188.603255][ T7319] infiniband syz1: set down [ 188.608203][ T7319] infiniband syz1: added caif0 [ 188.614806][ T5284] caif0 speed is unknown, defaulting to 1000 [ 188.630641][ T7319] syz1: rxe_create_cq: returned err = -12 [ 188.638934][ T7319] infiniband syz1: Couldn't create ib_mad CQ [ 188.653436][ T7319] infiniband syz1: Couldn't open port 1 [ 188.703073][ T7319] RDS/IB: syz1: added [ 188.708007][ T7319] smc: adding ib device syz1 with port count 1 [ 188.715264][ T7319] smc: ib device syz1 port 1 has pnetid [ 188.723972][ T5284] caif0 speed is unknown, defaulting to 1000 [ 188.761161][ T7319] caif0 speed is unknown, defaulting to 1000 [ 188.870888][ T7397] can: request_module (can-proto-0) failed. [ 189.230278][ T7415] tipc: Can't bind to reserved service type 2 [ 189.282755][ T29] audit: type=1107 audit(1727058787.245:6): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 189.371430][ T7319] caif0 speed is unknown, defaulting to 1000 [ 191.958127][ T7319] caif0 speed is unknown, defaulting to 1000 [ 192.143136][ T7440] FAULT_INJECTION: forcing a failure. [ 192.143136][ T7440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.171906][ T7440] CPU: 1 UID: 0 PID: 7440 Comm: syz.3.613 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 192.182318][ T7440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 192.192421][ T7440] Call Trace: [ 192.195753][ T7440] [ 192.198717][ T7440] dump_stack_lvl+0x241/0x360 [ 192.203458][ T7440] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.208719][ T7440] ? __pfx__printk+0x10/0x10 [ 192.213400][ T7440] ? snprintf+0xda/0x120 [ 192.217798][ T7440] should_fail_ex+0x3b0/0x4e0 [ 192.222548][ T7440] _copy_to_user+0x2f/0xb0 [ 192.227026][ T7440] simple_read_from_buffer+0xca/0x150 [ 192.232730][ T7440] proc_fail_nth_read+0x1ec/0x260 [ 192.237811][ T7440] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.243418][ T7440] ? rw_verify_area+0x520/0x6b0 [ 192.248409][ T7440] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.254272][ T7440] vfs_read+0x204/0xbc0 [ 192.258571][ T7440] ? __pfx_lock_release+0x10/0x10 [ 192.264287][ T7440] ? __pfx_vfs_read+0x10/0x10 [ 192.269326][ T7440] ? __fget_files+0x29/0x470 [ 192.274093][ T7440] ? __fget_files+0x3f6/0x470 [ 192.279072][ T7440] ksys_read+0x1a0/0x2c0 [ 192.283475][ T7440] ? __pfx_ksys_read+0x10/0x10 [ 192.288283][ T7440] ? do_syscall_64+0x100/0x230 [ 192.293112][ T7440] ? do_syscall_64+0xb6/0x230 [ 192.297864][ T7440] do_syscall_64+0xf3/0x230 [ 192.302511][ T7440] ? clear_bhb_loop+0x35/0x90 [ 192.307288][ T7440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.313492][ T7440] RIP: 0033:0x7f394417c93c [ 192.317948][ T7440] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 192.337643][ T7440] RSP: 002b:00007f3945030030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 192.346375][ T7440] RAX: ffffffffffffffda RBX: 00007f3944335f80 RCX: 00007f394417c93c [ 192.354581][ T7440] RDX: 000000000000000f RSI: 00007f39450300a0 RDI: 0000000000000004 [ 192.362596][ T7440] RBP: 00007f3945030090 R08: 0000000000000000 R09: 0000000000000000 [ 192.370635][ T7440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.378692][ T7440] R13: 0000000000000000 R14: 00007f3944335f80 R15: 00007ffe356eb998 [ 192.386905][ T7440] [ 192.421737][ T7443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.429763][ T7443] IPv6: NLM_F_CREATE should be set when creating new route [ 192.437290][ T7443] IPv6: NLM_F_CREATE should be set when creating new route [ 192.444710][ T7443] IPv6: NLM_F_CREATE should be set when creating new route [ 192.511275][ T7319] caif0 speed is unknown, defaulting to 1000 [ 192.603605][ T7444] can: request_module (can-proto-0) failed. [ 192.623637][ T7452] FAULT_INJECTION: forcing a failure. [ 192.623637][ T7452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.654187][ T7452] CPU: 1 UID: 0 PID: 7452 Comm: syz.3.617 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 192.664546][ T7452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 192.675263][ T7452] Call Trace: [ 192.678596][ T7452] [ 192.681564][ T7452] dump_stack_lvl+0x241/0x360 [ 192.686320][ T7452] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.691589][ T7452] ? __pfx__printk+0x10/0x10 [ 192.696532][ T7452] ? __pfx_lock_release+0x10/0x10 [ 192.701710][ T7452] ? vfs_write+0x7c4/0xc90 [ 192.706368][ T7452] should_fail_ex+0x3b0/0x4e0 [ 192.711120][ T7452] _copy_from_user+0x2f/0xe0 [ 192.715791][ T7452] __sys_bpf+0x1a4/0x810 [ 192.720177][ T7452] ? __pfx___sys_bpf+0x10/0x10 [ 192.725253][ T7452] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 192.731477][ T7452] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 192.737968][ T7452] ? do_syscall_64+0x100/0x230 [ 192.742996][ T7452] __x64_sys_bpf+0x7c/0x90 [ 192.747515][ T7452] do_syscall_64+0xf3/0x230 [ 192.752218][ T7452] ? clear_bhb_loop+0x35/0x90 [ 192.757046][ T7452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.763086][ T7452] RIP: 0033:0x7f394417def9 [ 192.767617][ T7452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.787527][ T7452] RSP: 002b:00007f3945030038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 192.796344][ T7452] RAX: ffffffffffffffda RBX: 00007f3944335f80 RCX: 00007f394417def9 [ 192.804519][ T7452] RDX: 000000000000000c RSI: 0000000020000000 RDI: 000000000000000a [ 192.812910][ T7452] RBP: 00007f3945030090 R08: 0000000000000000 R09: 0000000000000000 [ 192.821450][ T7452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.829625][ T7452] R13: 0000000000000000 R14: 00007f3944335f80 R15: 00007ffe356eb998 [ 192.837727][ T7452] [ 193.170942][ T7319] caif0 speed is unknown, defaulting to 1000 [ 193.490080][ T29] audit: type=1107 audit(1727058791.445:7): pid=7465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 194.170772][ T7486] FAULT_INJECTION: forcing a failure. [ 194.170772][ T7486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.185827][ T7486] CPU: 1 UID: 0 PID: 7486 Comm: syz.4.629 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 194.196332][ T7486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 194.206892][ T7486] Call Trace: [ 194.210211][ T7486] [ 194.213188][ T7486] dump_stack_lvl+0x241/0x360 [ 194.217919][ T7486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.223239][ T7486] ? __pfx__printk+0x10/0x10 [ 194.227860][ T7486] ? __pfx_lock_release+0x10/0x10 [ 194.233046][ T7486] should_fail_ex+0x3b0/0x4e0 [ 194.237921][ T7486] _copy_to_user+0x2f/0xb0 [ 194.242396][ T7486] bpf_prog_test_run_syscall+0x34b/0x4e0 [ 194.248070][ T7486] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 194.254368][ T7486] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 194.260576][ T7486] bpf_prog_test_run+0x33a/0x3b0 [ 194.265610][ T7486] __sys_bpf+0x48d/0x810 [ 194.269991][ T7486] ? __pfx___sys_bpf+0x10/0x10 [ 194.275166][ T7486] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 194.281206][ T7486] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 194.287759][ T7486] ? do_syscall_64+0x100/0x230 [ 194.292602][ T7486] __x64_sys_bpf+0x7c/0x90 [ 194.297142][ T7486] do_syscall_64+0xf3/0x230 [ 194.302000][ T7486] ? clear_bhb_loop+0x35/0x90 [ 194.307033][ T7486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.314678][ T7486] RIP: 0033:0x7fb15537def9 [ 194.320033][ T7486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.340203][ T7486] RSP: 002b:00007fb154dff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 194.349027][ T7486] RAX: ffffffffffffffda RBX: 00007fb155535f80 RCX: 00007fb15537def9 [ 194.357215][ T7486] RDX: 000000000000000c RSI: 0000000020000000 RDI: 000000000000000a [ 194.365206][ T7486] RBP: 00007fb154dff090 R08: 0000000000000000 R09: 0000000000000000 [ 194.373378][ T7486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.381390][ T7486] R13: 0000000000000000 R14: 00007fb155535f80 R15: 00007ffd605e1608 [ 194.389607][ T7486] [ 194.428693][ T7484] can: request_module (can-proto-0) failed. [ 194.726443][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.630'. [ 194.750915][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.757600][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.902041][ T7512] Cannot find add_set index 0 as target [ 196.966336][ T7513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.635'. [ 197.229210][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 197.352436][ T7533] bond0: (slave bond_slave_0): Releasing backup interface [ 197.394428][ T7523] can: request_module (can-proto-0) failed. [ 197.480722][ T7540] netlink: 'syz.3.644': attribute type 1 has an invalid length. [ 197.514090][ T7540] netlink: 9384 bytes leftover after parsing attributes in process `syz.3.644'. [ 197.700791][ T7551] x_tables: duplicate underflow at hook 4 [ 197.730852][ T7551] netlink: 'syz.0.649': attribute type 1 has an invalid length. [ 197.799950][ T7553] Cannot find add_set index 0 as target [ 197.957066][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.649'. [ 198.203164][ T7574] netlink: 'syz.4.653': attribute type 4 has an invalid length. [ 198.373962][ T7573] caif0 speed is unknown, defaulting to 1000 [ 198.390754][ T7584] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.658'. [ 198.418536][ T7584] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 198.419032][ T7576] can: request_module (can-proto-0) failed. [ 198.807108][ T7596] sctp: [Deprecated]: syz.1.662 (pid 7596) Use of int in max_burst socket option. [ 198.807108][ T7596] Use struct sctp_assoc_value instead [ 198.831861][ T7595] Cannot find add_set index 0 as target [ 199.017689][ T7601] netlink: 'syz.0.665': attribute type 4 has an invalid length. [ 199.122917][ T7608] netlink: 'syz.0.665': attribute type 4 has an invalid length. [ 199.641351][ T7626] xt_hashlimit: overflow, rate too high: 0 [ 199.668577][ T7621] can: request_module (can-proto-0) failed. [ 199.701060][ T7626] netlink: 312 bytes leftover after parsing attributes in process `syz.1.670'. [ 200.262842][ T7643] Cannot find add_set index 0 as target [ 200.974445][ T7678] macvlan2: entered promiscuous mode [ 200.980087][ T7668] can: request_module (can-proto-0) failed. [ 200.996729][ T7678] macvlan2: entered allmulticast mode [ 201.070753][ T7683] FAULT_INJECTION: forcing a failure. [ 201.070753][ T7683] name failslab, interval 1, probability 0, space 0, times 0 [ 201.113690][ T7683] CPU: 1 UID: 0 PID: 7683 Comm: syz.2.690 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 201.124108][ T7683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 201.134304][ T7683] Call Trace: [ 201.137676][ T7683] [ 201.140820][ T7683] dump_stack_lvl+0x241/0x360 [ 201.145674][ T7683] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.151046][ T7683] ? __pfx__printk+0x10/0x10 [ 201.155698][ T7683] ? __kmalloc_noprof+0xb0/0x400 [ 201.160698][ T7683] ? __pfx___might_resched+0x10/0x10 [ 201.166051][ T7683] should_fail_ex+0x3b0/0x4e0 [ 201.170794][ T7683] ? iovec_from_user+0x87/0x240 [ 201.175980][ T7683] should_failslab+0xac/0x100 [ 201.180810][ T7683] ? iovec_from_user+0x87/0x240 [ 201.185757][ T7683] __kmalloc_noprof+0xd8/0x400 [ 201.190595][ T7683] iovec_from_user+0x87/0x240 [ 201.195361][ T7683] __import_iovec+0x132/0x820 [ 201.200113][ T7683] import_iovec+0xeb/0x120 [ 201.204854][ T7683] copy_msghdr_from_user+0x52f/0x680 [ 201.210211][ T7683] ? _parse_integer_limit+0x1b5/0x200 [ 201.215653][ T7683] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 201.217998][ T7688] Cannot find add_set index 0 as target [ 201.221522][ T7683] __sys_sendmmsg+0x374/0x740 [ 201.231842][ T7683] ? __pfx___sys_sendmmsg+0x10/0x10 [ 201.237163][ T7683] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 201.243134][ T7683] ? ksys_write+0x23e/0x2c0 [ 201.247871][ T7683] ? __pfx_lock_release+0x10/0x10 [ 201.253058][ T7683] ? vfs_write+0x7c4/0xc90 [ 201.257802][ T7683] ? __mutex_unlock_slowpath+0x21d/0x750 [ 201.263495][ T7683] ? __pfx_vfs_write+0x10/0x10 [ 201.268510][ T7683] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 201.274712][ T7683] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 201.281388][ T7683] ? do_syscall_64+0x100/0x230 [ 201.286238][ T7683] __x64_sys_sendmmsg+0xa0/0xb0 [ 201.291387][ T7683] do_syscall_64+0xf3/0x230 [ 201.295964][ T7683] ? clear_bhb_loop+0x35/0x90 [ 201.301654][ T7683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.307705][ T7683] RIP: 0033:0x7f7992d7def9 [ 201.312381][ T7683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.332490][ T7683] RSP: 002b:00007f7993aab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 201.341056][ T7683] RAX: ffffffffffffffda RBX: 00007f7992f35f80 RCX: 00007f7992d7def9 [ 201.349457][ T7683] RDX: 0400000000000172 RSI: 0000000020003cc0 RDI: 0000000000000005 [ 201.357482][ T7683] RBP: 00007f7993aab090 R08: 0000000000000000 R09: 0000000000000000 [ 201.365509][ T7683] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.373622][ T7683] R13: 0000000000000000 R14: 00007f7992f35f80 R15: 00007ffea9fb48b8 [ 201.381847][ T7683] [ 201.444630][ T7679] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode [ 201.468892][ T7698] netlink: 204 bytes leftover after parsing attributes in process `syz.0.694'. [ 201.714329][ T7710] netlink: 'syz.0.698': attribute type 4 has an invalid length. [ 201.722555][ T7710] netlink: 'syz.0.698': attribute type 2 has an invalid length. [ 202.122261][ T7729] Cannot find add_set index 0 as target [ 202.133223][ T7728] FAULT_INJECTION: forcing a failure. [ 202.133223][ T7728] name failslab, interval 1, probability 0, space 0, times 0 [ 202.162177][ T7721] can: request_module (can-proto-0) failed. [ 202.183754][ T7728] CPU: 1 UID: 0 PID: 7728 Comm: syz.2.706 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 202.194164][ T7728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 202.199009][ T7733] sock: sock_timestamping_bind_phc: sock not bind to device [ 202.204494][ T7728] Call Trace: [ 202.204512][ T7728] [ 202.204523][ T7728] dump_stack_lvl+0x241/0x360 [ 202.204574][ T7728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.228832][ T7728] ? __pfx__printk+0x10/0x10 [ 202.233487][ T7728] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 202.238992][ T7728] ? __pfx___might_resched+0x10/0x10 [ 202.244434][ T7728] should_fail_ex+0x3b0/0x4e0 [ 202.249346][ T7728] should_failslab+0xac/0x100 [ 202.254455][ T7728] ? ip6_setup_cork+0x1c3/0xfb0 [ 202.259384][ T7728] __kmalloc_cache_noprof+0x6c/0x2c0 [ 202.264749][ T7728] ip6_setup_cork+0x1c3/0xfb0 [ 202.269848][ T7728] ip6_make_skb+0x1fb/0x530 [ 202.274513][ T7728] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 202.280131][ T7728] ? __pfx_ip6_make_skb+0x10/0x10 [ 202.285234][ T7728] ? __pfx_lock_release+0x10/0x10 [ 202.290524][ T7728] udpv6_sendmsg+0x2382/0x3270 [ 202.295641][ T7728] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 202.301340][ T7728] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 202.306606][ T7728] ? irqentry_exit+0x63/0x90 [ 202.312135][ T7728] ? exc_page_fault+0x590/0x8c0 [ 202.317081][ T7728] ? inet_send_prepare+0x21/0x260 [ 202.322169][ T7728] ? inet_send_prepare+0x5a/0x260 [ 202.327328][ T7728] __sock_sendmsg+0xef/0x270 [ 202.331982][ T7728] ____sys_sendmsg+0x525/0x7d0 [ 202.336807][ T7728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.342168][ T7728] __sys_sendmmsg+0x3b2/0x740 [ 202.346910][ T7728] ? __pfx___sys_sendmmsg+0x10/0x10 [ 202.352323][ T7728] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 202.358374][ T7728] ? ksys_write+0x23e/0x2c0 [ 202.363106][ T7728] ? __pfx_lock_release+0x10/0x10 [ 202.368242][ T7728] ? vfs_write+0x7c4/0xc90 [ 202.372724][ T7728] ? __mutex_unlock_slowpath+0x21d/0x750 [ 202.378526][ T7728] ? __pfx_vfs_write+0x10/0x10 [ 202.383643][ T7728] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 202.389690][ T7728] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 202.396083][ T7728] ? do_syscall_64+0x100/0x230 [ 202.401001][ T7728] __x64_sys_sendmmsg+0xa0/0xb0 [ 202.405909][ T7728] do_syscall_64+0xf3/0x230 [ 202.410739][ T7728] ? clear_bhb_loop+0x35/0x90 [ 202.415506][ T7728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.421457][ T7728] RIP: 0033:0x7f7992d7def9 [ 202.425922][ T7728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.446011][ T7728] RSP: 002b:00007f7993aab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 202.454638][ T7728] RAX: ffffffffffffffda RBX: 00007f7992f35f80 RCX: 00007f7992d7def9 [ 202.462643][ T7728] RDX: 0400000000000172 RSI: 0000000020003cc0 RDI: 0000000000000005 [ 202.470643][ T7728] RBP: 00007f7993aab090 R08: 0000000000000000 R09: 0000000000000000 [ 202.478641][ T7728] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.486811][ T7728] R13: 0000000000000000 R14: 00007f7992f35f80 R15: 00007ffea9fb48b8 [ 202.495151][ T7728] [ 202.868011][ T7749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.712'. [ 202.992958][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.710'. [ 203.070830][ T7747] geneve1: entered promiscuous mode [ 203.122997][ T7747] batadv_slave_0: entered promiscuous mode [ 203.177365][ T7752] netlink: 20 bytes leftover after parsing attributes in process `syz.1.712'. [ 203.211354][ T7760] netlink: 16 bytes leftover after parsing attributes in process `syz.2.715'. [ 203.295614][ T7765] netlink: 56 bytes leftover after parsing attributes in process `syz.3.716'. [ 203.316813][ T7765] netlink: 56 bytes leftover after parsing attributes in process `syz.3.716'. [ 203.369252][ T7768] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 203.661249][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.722'. [ 203.723233][ T7776] netlink: 596 bytes leftover after parsing attributes in process `syz.3.722'. [ 203.765261][ T7785] netlink: 60 bytes leftover after parsing attributes in process `syz.0.724'. [ 203.818308][ T7789] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 203.929990][ T7783] can: request_module (can-proto-0) failed. [ 204.220930][ T7804] raw_sendmsg: syz.4.729 forgot to set AF_INET. Fix it! [ 205.534243][ T7845] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 205.719158][ T7848] caif0 speed is unknown, defaulting to 1000 [ 205.880648][ T7852] can: request_module (can-proto-0) failed. [ 206.497824][ T7878] __nla_validate_parse: 6 callbacks suppressed [ 206.497847][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'. [ 206.531925][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'. [ 206.937541][ T29] audit: type=1107 audit(1727058804.895:8): pid=7880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 206.973194][ T7887] Cannot find add_set index 0 as target [ 207.576581][ T7906] FAULT_INJECTION: forcing a failure. [ 207.576581][ T7906] name failslab, interval 1, probability 0, space 0, times 0 [ 207.597400][ T7906] CPU: 1 UID: 0 PID: 7906 Comm: syz.1.759 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 207.607723][ T7906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 207.617970][ T7906] Call Trace: [ 207.621300][ T7906] [ 207.624443][ T7906] dump_stack_lvl+0x241/0x360 [ 207.629163][ T7906] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.634578][ T7906] ? __pfx__printk+0x10/0x10 [ 207.639200][ T7906] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 207.645636][ T7906] ? __pfx___might_resched+0x10/0x10 [ 207.651038][ T7906] should_fail_ex+0x3b0/0x4e0 [ 207.655768][ T7906] should_failslab+0xac/0x100 [ 207.660466][ T7906] ? __alloc_skb+0x1c3/0x440 [ 207.665111][ T7906] kmem_cache_alloc_node_noprof+0x71/0x320 [ 207.670992][ T7906] ? stack_trace_save+0x118/0x1d0 [ 207.676050][ T7906] __alloc_skb+0x1c3/0x440 [ 207.680536][ T7906] ? __pfx___alloc_skb+0x10/0x10 [ 207.685594][ T7906] sock_omalloc+0xd5/0x1e0 [ 207.690130][ T7906] msg_zerocopy_realloc+0x9a/0x7d0 [ 207.695297][ T7906] __ip6_append_data+0xd65/0x40a0 [ 207.700363][ T7906] ? __pfx_lock_acquire+0x10/0x10 [ 207.705450][ T7906] ? ip6_mtu+0x81/0x3f0 [ 207.709974][ T7906] ? __pfx_lock_release+0x10/0x10 [ 207.715088][ T7906] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 207.720804][ T7906] ? __pfx___ip6_append_data+0x10/0x10 [ 207.726299][ T7906] ? ip6_setup_cork+0x9fd/0xfb0 [ 207.731183][ T7906] ip6_make_skb+0x43b/0x530 [ 207.735837][ T7906] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 207.741731][ T7906] ? __pfx_ip6_make_skb+0x10/0x10 [ 207.746887][ T7906] ? __pfx_lock_release+0x10/0x10 [ 207.752002][ T7906] ? ip6_sk_dst_lookup_flow+0x893/0xa30 [ 207.757729][ T7906] udpv6_sendmsg+0x2382/0x3270 [ 207.762542][ T7906] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 207.768148][ T7906] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 207.773390][ T7906] ? irqentry_exit+0x63/0x90 [ 207.778022][ T7906] ? exc_page_fault+0x590/0x8c0 [ 207.782921][ T7906] ? inet_send_prepare+0x21/0x260 [ 207.787969][ T7906] ? inet_send_prepare+0x5a/0x260 [ 207.793312][ T7906] __sock_sendmsg+0xef/0x270 [ 207.798201][ T7906] ____sys_sendmsg+0x525/0x7d0 [ 207.803136][ T7906] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.808476][ T7906] __sys_sendmmsg+0x3b2/0x740 [ 207.813450][ T7906] ? __pfx___sys_sendmmsg+0x10/0x10 [ 207.819770][ T7906] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 207.825879][ T7906] ? ksys_write+0x23e/0x2c0 [ 207.830597][ T7906] ? __pfx_lock_release+0x10/0x10 [ 207.835854][ T7906] ? vfs_write+0x7c4/0xc90 [ 207.840296][ T7906] ? __mutex_unlock_slowpath+0x21d/0x750 [ 207.846075][ T7906] ? __pfx_vfs_write+0x10/0x10 [ 207.850971][ T7906] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 207.857004][ T7906] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 207.863373][ T7906] ? do_syscall_64+0x100/0x230 [ 207.868719][ T7906] __x64_sys_sendmmsg+0xa0/0xb0 [ 207.873724][ T7906] do_syscall_64+0xf3/0x230 [ 207.878291][ T7906] ? clear_bhb_loop+0x35/0x90 [ 207.883085][ T7906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.889169][ T7906] RIP: 0033:0x7fd0ba17def9 [ 207.893692][ T7906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.913423][ T7906] RSP: 002b:00007fd0bafed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 207.921860][ T7906] RAX: ffffffffffffffda RBX: 00007fd0ba335f80 RCX: 00007fd0ba17def9 [ 207.929854][ T7906] RDX: 0400000000000172 RSI: 0000000020003cc0 RDI: 0000000000000005 [ 207.938014][ T7906] RBP: 00007fd0bafed090 R08: 0000000000000000 R09: 0000000000000000 [ 207.946027][ T7906] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.954008][ T7906] R13: 0000000000000000 R14: 00007fd0ba335f80 R15: 00007ffe9cc2d708 [ 207.962050][ T7906] [ 208.149568][ T7914] netlink: 20 bytes leftover after parsing attributes in process `syz.1.761'. [ 209.915889][ T7849] caif0 speed is unknown, defaulting to 1000 [ 210.065805][ T7918] netlink: 'syz.2.762': attribute type 2 has an invalid length. [ 210.084955][ T7922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.135710][ T7924] Cannot find add_set index 0 as target [ 210.629345][ T7934] netlink: 'syz.2.770': attribute type 1 has an invalid length. [ 210.651257][ T7934] netlink: 'syz.2.770': attribute type 2 has an invalid length. [ 210.853138][ T7942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.773'. [ 211.228631][ T29] audit: type=1107 audit(1727058809.185:9): pid=7946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 211.274884][ T7955] Cannot find add_set index 0 as target [ 211.467804][ T7961] netlink: 'syz.1.779': attribute type 4 has an invalid length. [ 212.175126][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'. [ 212.220647][ T7983] netlink: 40 bytes leftover after parsing attributes in process `syz.1.783'. [ 212.437252][ T7991] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20003 [ 212.759619][ T7997] netlink: 20 bytes leftover after parsing attributes in process `syz.0.788'. [ 212.932604][ T29] audit: type=1107 audit(1727058810.895:10): pid=8001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 213.130395][ T8012] netlink: 'syz.2.795': attribute type 12 has an invalid length. [ 213.538136][ T8027] Cannot find add_set index 0 as target [ 213.604854][ T8031] netlink: 'syz.3.803': attribute type 2 has an invalid length. [ 213.637430][ T8032] netlink: 20 bytes leftover after parsing attributes in process `syz.1.802'. [ 213.781876][ T8034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.955359][ T8041] IPv6: NLM_F_CREATE should be specified when creating new route [ 213.964686][ T8041] netlink: 1 bytes leftover after parsing attributes in process `syz.1.807'. [ 213.992279][ T29] audit: type=1107 audit(1727058811.955:11): pid=8038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 214.055182][ T8046] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 214.081187][ T8046] netlink: 144 bytes leftover after parsing attributes in process `syz.1.807'. [ 214.150631][ T8048] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 214.601178][ T8067] netlink: 'syz.3.815': attribute type 2 has an invalid length. [ 214.675560][ T8071] netlink: 20 bytes leftover after parsing attributes in process `syz.4.817'. [ 214.894215][ T8082] tipc: Started in network mode [ 214.899275][ T8082] tipc: Node identity 864bbd6b15c2, cluster identity 4711 [ 214.919259][ T8082] tipc: Enabled bearer , priority 0 [ 214.939041][ T29] audit: type=1107 audit(1727058812.895:12): pid=8080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 214.963172][ T8080] tipc: Disabling bearer [ 215.192842][ T8098] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 215.509341][ T8108] netlink: 'syz.3.829': attribute type 2 has an invalid length. [ 215.641238][ T8110] netlink: 20 bytes leftover after parsing attributes in process `syz.4.830'. [ 215.711543][ T8113] tun0: tun_chr_ioctl cmd 2147767517 [ 215.725178][ T8113] tun0: tun_chr_ioctl cmd 2147767511 [ 215.731081][ T8113] tun0: tun_chr_ioctl cmd 1342215231 [ 216.005786][ T8122] tipc: Started in network mode [ 216.013668][ T8122] tipc: Node identity 4a4726d690a8, cluster identity 4711 [ 216.022597][ T8122] tipc: Enabled bearer , priority 0 [ 216.051208][ T8125] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 216.076483][ T29] audit: type=1107 audit(1727058814.035:13): pid=8121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 216.118609][ T8121] tipc: Disabling bearer [ 216.397797][ T8138] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 216.446208][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.838'. [ 216.459325][ T8135] bridge_slave_1: left allmulticast mode [ 216.467331][ T8135] bridge_slave_1: left promiscuous mode [ 216.478862][ T8135] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.498609][ T8135] bridge_slave_0: left allmulticast mode [ 216.510594][ T8135] bridge_slave_0: left promiscuous mode [ 216.527705][ T8135] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.897590][ T8150] netlink: 'syz.0.843': attribute type 2 has an invalid length. [ 216.954966][ T8154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.845'. [ 217.197370][ T8161] tipc: Enabled bearer , priority 0 [ 217.208867][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.850'. [ 217.220344][ T8169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.850'. [ 217.237935][ T8169] vlan2: entered promiscuous mode [ 217.299707][ T29] audit: type=1107 audit(1727058815.245:14): pid=8160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 217.360016][ T8160] tipc: Disabling bearer [ 217.374957][ T8174] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 217.427800][ T8178] netlink: 'syz.2.852': attribute type 9 has an invalid length. [ 217.442989][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.850'. [ 217.448492][ T8178] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.852'. [ 217.474700][ T8182] FAULT_INJECTION: forcing a failure. [ 217.474700][ T8182] name failslab, interval 1, probability 0, space 0, times 0 [ 217.501261][ T8182] CPU: 1 UID: 0 PID: 8182 Comm: syz.3.853 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 217.511940][ T8182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 217.522128][ T8182] Call Trace: [ 217.525636][ T8182] [ 217.528642][ T8182] dump_stack_lvl+0x241/0x360 [ 217.534154][ T8182] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.539542][ T8182] ? __pfx__printk+0x10/0x10 [ 217.544302][ T8182] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 217.550352][ T8182] ? __pfx___might_resched+0x10/0x10 [ 217.555713][ T8182] should_fail_ex+0x3b0/0x4e0 [ 217.560452][ T8182] should_failslab+0xac/0x100 [ 217.565446][ T8182] ? __alloc_skb+0x1c3/0x440 [ 217.570461][ T8182] kmem_cache_alloc_node_noprof+0x71/0x320 [ 217.576323][ T8182] ? stack_trace_save+0x118/0x1d0 [ 217.581512][ T8182] __alloc_skb+0x1c3/0x440 [ 217.586001][ T8182] ? __pfx___alloc_skb+0x10/0x10 [ 217.591031][ T8182] sock_omalloc+0xd5/0x1e0 [ 217.595603][ T8182] msg_zerocopy_realloc+0x9a/0x7d0 [ 217.600786][ T8182] __ip6_append_data+0xd65/0x40a0 [ 217.606370][ T8182] ? __pfx_lock_acquire+0x10/0x10 [ 217.611735][ T8182] ? ip6_mtu+0x81/0x3f0 [ 217.615997][ T8182] ? __pfx_lock_release+0x10/0x10 [ 217.621137][ T8182] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 217.626828][ T8182] ? __pfx___ip6_append_data+0x10/0x10 [ 217.626875][ T8182] ? ip6_setup_cork+0x9fd/0xfb0 [ 217.626917][ T8182] ip6_make_skb+0x43b/0x530 [ 217.642440][ T8182] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 217.648686][ T8182] ? __pfx_ip6_make_skb+0x10/0x10 [ 217.653787][ T8182] ? __pfx_lock_release+0x10/0x10 [ 217.659053][ T8182] ? ip6_sk_dst_lookup_flow+0x6bf/0xa30 [ 217.665039][ T8182] udpv6_sendmsg+0x2382/0x3270 [ 217.669881][ T8182] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 217.675496][ T8182] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 217.681167][ T8182] ? inet_send_prepare+0x21/0x260 [ 217.686422][ T8182] ? inet_send_prepare+0x5a/0x260 [ 217.691510][ T8182] __sock_sendmsg+0xef/0x270 [ 217.696248][ T8182] ____sys_sendmsg+0x525/0x7d0 [ 217.701079][ T8182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.706463][ T8182] ? __might_fault+0xaa/0x120 [ 217.711395][ T8182] __sys_sendmmsg+0x3b2/0x740 [ 217.716406][ T8182] ? __pfx___sys_sendmmsg+0x10/0x10 [ 217.721724][ T8182] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 217.727685][ T8182] ? ksys_write+0x23e/0x2c0 [ 217.732252][ T8182] ? __pfx_lock_release+0x10/0x10 [ 217.737525][ T8182] ? vfs_write+0x7c4/0xc90 [ 217.742091][ T8182] ? __mutex_unlock_slowpath+0x21d/0x750 [ 217.747883][ T8182] ? __pfx_vfs_write+0x10/0x10 [ 217.752818][ T8182] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 217.758892][ T8182] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 217.765301][ T8182] ? do_syscall_64+0x100/0x230 [ 217.770235][ T8182] __x64_sys_sendmmsg+0xa0/0xb0 [ 217.775149][ T8182] do_syscall_64+0xf3/0x230 [ 217.775167][ T8183] netlink: 'syz.2.852': attribute type 9 has an invalid length. [ 217.775195][ T8182] ? clear_bhb_loop+0x35/0x90 [ 217.783477][ T8183] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.852'. [ 217.787512][ T8182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.807613][ T8182] RIP: 0033:0x7f394417def9 [ 217.812118][ T8182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.832395][ T8182] RSP: 002b:00007f3945030038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 217.841529][ T8182] RAX: ffffffffffffffda RBX: 00007f3944335f80 RCX: 00007f394417def9 [ 217.841552][ T8182] RDX: 0400000000000172 RSI: 0000000020003cc0 RDI: 0000000000000005 [ 217.841567][ T8182] RBP: 00007f3945030090 R08: 0000000000000000 R09: 0000000000000000 [ 217.841582][ T8182] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000002 [ 217.841597][ T8182] R13: 0000000000000000 R14: 00007f3944335f80 R15: 00007ffe356eb998 [ 217.841633][ T8182] [ 218.314540][ T8207] netlink: 'syz.2.860': attribute type 2 has an invalid length. [ 218.377351][ T8211] netlink: 'syz.1.862': attribute type 1 has an invalid length. [ 218.401895][ T8211] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.862'. [ 218.411293][ T8211] netlink: 1 bytes leftover after parsing attributes in process `syz.1.862'. [ 218.883774][ T8236] netlink: 'syz.3.871': attribute type 9 has an invalid length. [ 218.907446][ T8236] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.871'. [ 219.008948][ T8242] netlink: 'syz.3.871': attribute type 9 has an invalid length. [ 219.039362][ T8242] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.871'. [ 219.409309][ T8256] netlink: 'syz.1.875': attribute type 2 has an invalid length. [ 219.488042][ T8258] netlink: 'syz.3.876': attribute type 2 has an invalid length. [ 220.113061][ T8268] netlink: 28 bytes leftover after parsing attributes in process `syz.3.881'. [ 220.162636][ T8268] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 220.248523][ T8268] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 221.585040][ T8322] tipc: Started in network mode [ 221.596976][ T8322] tipc: Node identity d66a55ab4867, cluster identity 4711 [ 221.622482][ T8322] tipc: Enabled bearer , priority 0 [ 221.658990][ T29] audit: type=1107 audit(1727058819.615:15): pid=8321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 221.680084][ T8321] tipc: Disabling bearer [ 222.623613][ T8340] netlink: 'syz.3.902': attribute type 9 has an invalid length. [ 222.631335][ T8340] __nla_validate_parse: 2 callbacks suppressed [ 222.631356][ T8340] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.902'. [ 222.726758][ T8343] netlink: 'syz.3.902': attribute type 9 has an invalid length. [ 222.742353][ T8343] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.902'. [ 222.889951][ T8344] netlink: 'syz.1.903': attribute type 9 has an invalid length. [ 222.933322][ T8344] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.903'. [ 223.059178][ T8349] netlink: 'syz.1.903': attribute type 9 has an invalid length. [ 223.084383][ T8349] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.903'. [ 223.239479][ T29] audit: type=1107 audit(1727058821.195:16): pid=8352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 223.902889][ T8375] caif0 speed is unknown, defaulting to 1000 [ 224.196294][ T8387] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 224.633007][ T8401] tipc: Enabling of bearer rejected, failed to enable media [ 224.741874][ T29] audit: type=1107 audit(1727058822.695:17): pid=8400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 225.310314][ T8425] FAULT_INJECTION: forcing a failure. [ 225.310314][ T8425] name failslab, interval 1, probability 0, space 0, times 0 [ 225.393150][ T8425] CPU: 1 UID: 0 PID: 8425 Comm: syz.3.925 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 225.403568][ T8425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 225.413849][ T8425] Call Trace: [ 225.417169][ T8425] [ 225.420141][ T8425] dump_stack_lvl+0x241/0x360 [ 225.424883][ T8425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.430218][ T8425] ? __pfx__printk+0x10/0x10 [ 225.434872][ T8425] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 225.440400][ T8425] ? __pfx___might_resched+0x10/0x10 [ 225.445737][ T8425] should_fail_ex+0x3b0/0x4e0 [ 225.450560][ T8425] should_failslab+0xac/0x100 [ 225.455313][ T8425] ? ip6_setup_cork+0x1c3/0xfb0 [ 225.460570][ T8425] __kmalloc_cache_noprof+0x6c/0x2c0 [ 225.465927][ T8425] ip6_setup_cork+0x1c3/0xfb0 [ 225.470688][ T8425] ip6_make_skb+0x1fb/0x530 [ 225.475251][ T8425] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 225.480849][ T8425] ? __pfx_ip6_make_skb+0x10/0x10 [ 225.486109][ T8425] ? __pfx_lock_release+0x10/0x10 [ 225.491467][ T8425] ? ip6_sk_dst_lookup_flow+0x6bf/0xa30 [ 225.497107][ T8425] udpv6_sendmsg+0x2382/0x3270 [ 225.502043][ T8425] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 225.507662][ T8425] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 225.512966][ T8425] ? inet_send_prepare+0x21/0x260 [ 225.518065][ T8425] ? inet_send_prepare+0x5a/0x260 [ 225.523168][ T8425] __sock_sendmsg+0xef/0x270 [ 225.528000][ T8425] ____sys_sendmsg+0x525/0x7d0 [ 225.532828][ T8425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.538301][ T8425] ? __might_fault+0xaa/0x120 [ 225.543050][ T8425] __sys_sendmmsg+0x3b2/0x740 [ 225.548053][ T8425] ? __pfx___sys_sendmmsg+0x10/0x10 [ 225.553377][ T8425] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 225.559365][ T8425] ? ksys_write+0x23e/0x2c0 [ 225.563925][ T8425] ? __pfx_lock_release+0x10/0x10 [ 225.569131][ T8425] ? vfs_write+0x7c4/0xc90 [ 225.573631][ T8425] ? __mutex_unlock_slowpath+0x21d/0x750 [ 225.579397][ T8425] ? __pfx_vfs_write+0x10/0x10 [ 225.584376][ T8425] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 225.590434][ T8425] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 225.596934][ T8425] ? do_syscall_64+0x100/0x230 [ 225.602031][ T8425] __x64_sys_sendmmsg+0xa0/0xb0 [ 225.607044][ T8425] do_syscall_64+0xf3/0x230 [ 225.611644][ T8425] ? clear_bhb_loop+0x35/0x90 [ 225.616406][ T8425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.622454][ T8425] RIP: 0033:0x7f394417def9 [ 225.627044][ T8425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.646835][ T8425] RSP: 002b:00007f3945030038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 225.655395][ T8425] RAX: ffffffffffffffda RBX: 00007f3944335f80 RCX: 00007f394417def9 [ 225.663418][ T8425] RDX: 0400000000000172 RSI: 0000000020003cc0 RDI: 0000000000000005 [ 225.671525][ T8425] RBP: 00007f3945030090 R08: 0000000000000000 R09: 0000000000000000 [ 225.679736][ T8425] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000002 [ 225.687755][ T8425] R13: 0000000000000000 R14: 00007f3944335f80 R15: 00007ffe356eb998 [ 225.695897][ T8425] [ 226.231779][ T8442] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 227.102934][ T8468] FAULT_INJECTION: forcing a failure. [ 227.102934][ T8468] name failslab, interval 1, probability 0, space 0, times 0 [ 227.153104][ T8468] CPU: 0 UID: 0 PID: 8468 Comm: syz.4.939 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 227.163521][ T8468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 227.173812][ T8468] Call Trace: [ 227.177416][ T8468] [ 227.180400][ T8468] dump_stack_lvl+0x241/0x360 [ 227.185272][ T8468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.190932][ T8468] ? __pfx__printk+0x10/0x10 [ 227.195775][ T8468] ? __kmalloc_node_track_caller_noprof+0xb2/0x440 [ 227.202633][ T8468] ? __pfx___might_resched+0x10/0x10 [ 227.208164][ T8468] should_fail_ex+0x3b0/0x4e0 [ 227.213034][ T8468] should_failslab+0xac/0x100 [ 227.217956][ T8468] __kmalloc_node_track_caller_noprof+0xda/0x440 [ 227.222927][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.940'. [ 227.224595][ T8468] ? ip6_setup_cork+0x659/0xfb0 [ 227.224638][ T8468] ? ip6_setup_cork+0x1c3/0xfb0 [ 227.243605][ T8468] kmemdup_noprof+0x2a/0x60 [ 227.248521][ T8468] ip6_setup_cork+0x659/0xfb0 [ 227.253719][ T8468] ip6_make_skb+0x1fb/0x530 [ 227.258320][ T8468] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 227.264603][ T8468] ? __pfx_ip6_make_skb+0x10/0x10 [ 227.269782][ T8468] ? __pfx_lock_release+0x10/0x10 [ 227.274869][ T8468] ? ip6_sk_dst_lookup_flow+0x6bf/0xa30 [ 227.280587][ T8468] udpv6_sendmsg+0x2382/0x3270 [ 227.285502][ T8468] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 227.291380][ T8468] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 227.297265][ T8468] ? inet_send_prepare+0x21/0x260 [ 227.302563][ T8468] ? inet_send_prepare+0x5a/0x260 [ 227.307768][ T8468] __sock_sendmsg+0xef/0x270 [ 227.313015][ T8468] ____sys_sendmsg+0x525/0x7d0 [ 227.318602][ T8468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.324179][ T8468] ? __might_fault+0xaa/0x120 [ 227.329005][ T8468] __sys_sendmmsg+0x3b2/0x740 [ 227.333966][ T8468] ? __pfx___sys_sendmmsg+0x10/0x10 [ 227.339411][ T8468] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 227.345959][ T8468] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 227.352516][ T8468] ? __send_signal_locked+0xb44/0xdc0 [ 227.358216][ T8468] ? __lock_task_sighand+0x2a5/0x2d0 [ 227.363632][ T8468] ? __lock_task_sighand+0x29/0x2d0 [ 227.369638][ T8468] ? group_send_sig_info+0x2e0/0x310 [ 227.375157][ T8468] ? bpf_trace_run2+0x1fc/0x540 [ 227.380023][ T8468] ? bpf_send_signal_common+0x2dd/0x430 [ 227.387801][ T8468] ? __pfx_lock_release+0x10/0x10 [ 227.393082][ T8468] ? bpf_trace_run2+0x1fc/0x540 [ 227.398088][ T8468] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 227.404455][ T8468] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 227.410880][ T8468] __x64_sys_sendmmsg+0xa0/0xb0 [ 227.415771][ T8468] do_syscall_64+0xf3/0x230 [ 227.420301][ T8468] ? clear_bhb_loop+0x35/0x90 [ 227.425029][ T8468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.430938][ T8468] RIP: 0033:0x7fb15537def9 [ 227.435545][ T8468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.457129][ T8468] RSP: 002b:00007fb154dff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 227.465932][ T8468] RAX: ffffffffffffffda RBX: 00007fb155535f80 RCX: 00007fb15537def9 [ 227.474156][ T8468] RDX: 0400000000000172 RSI: 0000000020003cc0 RDI: 0000000000000005 [ 227.482259][ T8468] RBP: 00007fb154dff090 R08: 0000000000000000 R09: 0000000000000000 [ 227.490345][ T8468] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000002 [ 227.498344][ T8468] R13: 0000000000000000 R14: 00007fb155535f80 R15: 00007ffd605e1608 [ 227.506462][ T8468] [ 228.038250][ T8487] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 228.258557][ T8498] caif0 speed is unknown, defaulting to 1000 [ 228.326681][ T8501] Cannot find add_set index 0 as target [ 228.556055][ T8505] vlan3: entered promiscuous mode [ 228.580144][ T8505] macvtap0: entered promiscuous mode [ 228.595734][ T8505] vlan3: entered allmulticast mode [ 228.604017][ T8505] macvtap0: entered allmulticast mode [ 228.611390][ T8505] veth0_macvtap: entered allmulticast mode [ 228.737981][ T8505] macvtap0: left allmulticast mode [ 228.763099][ T8505] veth0_macvtap: left allmulticast mode [ 228.783164][ T8505] macvtap0: left promiscuous mode [ 229.204094][ T8526] netlink: 28 bytes leftover after parsing attributes in process `syz.4.956'. [ 229.237532][ T8526] netlink: 96 bytes leftover after parsing attributes in process `syz.4.956'. [ 229.432474][ T8534] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 229.513970][ T8538] netlink: 'syz.4.961': attribute type 9 has an invalid length. [ 229.533664][ T8538] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.961'. [ 229.719832][ T8539] netlink: 'syz.4.961': attribute type 9 has an invalid length. [ 229.746013][ T8539] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.961'. [ 229.948894][ T8553] netlink: 20 bytes leftover after parsing attributes in process `syz.3.965'. [ 230.160962][ T8561] netlink: 'syz.0.968': attribute type 9 has an invalid length. [ 230.169313][ T8561] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.968'. [ 230.316036][ T8566] netlink: 'syz.0.968': attribute type 9 has an invalid length. [ 230.408414][ T8566] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.968'. [ 230.632048][ T8574] netlink: 'syz.1.970': attribute type 9 has an invalid length. [ 230.652928][ T8574] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.970'. [ 230.797941][ T8583] caif0 speed is unknown, defaulting to 1000 [ 230.874912][ T8576] netlink: 'syz.1.970': attribute type 9 has an invalid length. [ 230.912027][ T8576] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.970'. [ 231.196952][ T8595] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 231.319331][ T8601] netlink: 20 bytes leftover after parsing attributes in process `syz.2.977'. [ 231.563051][ T8609] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 231.732748][ T8611] can: request_module (can-proto-0) failed. [ 232.550905][ T8640] netlink: 'syz.1.988': attribute type 9 has an invalid length. [ 232.688048][ T8642] tipc: Enabled bearer , priority 0 [ 232.698274][ T8644] netlink: 'syz.1.988': attribute type 9 has an invalid length. [ 233.801950][ T5231] tipc: Node number set to 2651674027 [ 233.832677][ T8684] ɶƣ0GC¦: entered promiscuous mode [ 233.981034][ T8699] Cannot find add_set index 0 as target [ 234.081908][ T8701] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 234.419028][ T8714] __nla_validate_parse: 8 callbacks suppressed [ 234.419051][ T8714] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1010'. [ 234.575625][ T8716] FAULT_INJECTION: forcing a failure. [ 234.575625][ T8716] name failslab, interval 1, probability 0, space 0, times 0 [ 234.604304][ T8716] CPU: 0 UID: 0 PID: 8716 Comm: syz.4.1012 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 234.615023][ T8716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 234.625386][ T8716] Call Trace: [ 234.628698][ T8716] [ 234.631749][ T8716] dump_stack_lvl+0x241/0x360 [ 234.636586][ T8716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.641853][ T8716] ? __pfx__printk+0x10/0x10 [ 234.646902][ T8716] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 234.652944][ T8716] ? __pfx___might_resched+0x10/0x10 [ 234.658289][ T8716] should_fail_ex+0x3b0/0x4e0 [ 234.663011][ T8716] should_failslab+0xac/0x100 [ 234.667896][ T8716] ? __alloc_skb+0x1c3/0x440 [ 234.672598][ T8716] kmem_cache_alloc_node_noprof+0x71/0x320 [ 234.678510][ T8716] __alloc_skb+0x1c3/0x440 [ 234.683077][ T8716] ? __pfx___alloc_skb+0x10/0x10 [ 234.688042][ T8716] ? netlink_autobind+0xd6/0x2f0 [ 234.692995][ T8716] ? netlink_autobind+0x2b0/0x2f0 [ 234.698146][ T8716] netlink_sendmsg+0x638/0xcb0 [ 234.703432][ T8716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.708957][ T8716] ? __import_iovec+0x536/0x820 [ 234.713864][ T8716] ? aa_sock_msg_perm+0x91/0x160 [ 234.718835][ T8716] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 234.724256][ T8716] ? security_socket_sendmsg+0x87/0xb0 [ 234.729784][ T8716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.735104][ T8716] __sock_sendmsg+0x221/0x270 [ 234.739808][ T8716] ____sys_sendmsg+0x525/0x7d0 [ 234.744695][ T8716] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.750096][ T8716] __sys_sendmsg+0x2b0/0x3a0 [ 234.754804][ T8716] ? __pfx___sys_sendmsg+0x10/0x10 [ 234.760139][ T8716] ? vfs_write+0x7c4/0xc90 [ 234.764615][ T8716] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 234.771080][ T8716] ? do_syscall_64+0x100/0x230 [ 234.776079][ T8716] ? do_syscall_64+0xb6/0x230 [ 234.780804][ T8716] do_syscall_64+0xf3/0x230 [ 234.785587][ T8716] ? clear_bhb_loop+0x35/0x90 [ 234.790547][ T8716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.796780][ T8716] RIP: 0033:0x7fb15537def9 [ 234.801231][ T8716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.821744][ T8716] RSP: 002b:00007fb154dff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.830625][ T8716] RAX: ffffffffffffffda RBX: 00007fb155535f80 RCX: 00007fb15537def9 [ 234.838792][ T8716] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000004 [ 234.846784][ T8716] RBP: 00007fb154dff090 R08: 0000000000000000 R09: 0000000000000000 [ 234.854791][ T8716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.862846][ T8716] R13: 0000000000000000 R14: 00007fb155535f80 R15: 00007ffd605e1608 [ 234.870996][ T8716] [ 235.133320][ T8729] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 235.202828][ T8731] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 235.302279][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.413954][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.556388][ T5285] IPVS: starting estimator thread 0... [ 235.579419][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.661984][ T8745] IPVS: using max 20 ests per chain, 48000 per kthread [ 235.735562][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.047213][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.059662][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.070117][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.087878][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.102292][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 236.112189][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.195107][ T35] bridge_slave_1: left allmulticast mode [ 236.201444][ T35] bridge_slave_1: left promiscuous mode [ 236.208035][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.221535][ T35] bridge_slave_0: left allmulticast mode [ 236.229101][ T35] bridge_slave_0: left promiscuous mode [ 236.236985][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.445671][ T8780] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 236.817544][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.831409][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.844177][ T35] bond0 (unregistering): Released all slaves [ 236.859827][ T35] bond1 (unregistering): Released all slaves [ 236.879200][ T8775] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.027627][ T8766] caif0 speed is unknown, defaulting to 1000 [ 237.031943][ T35] Êü: left promiscuous mode [ 237.158528][ T8793] netlink: 'syz.4.1037': attribute type 9 has an invalid length. [ 237.176885][ T8788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1034'. [ 237.202011][ T8793] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1037'. [ 237.247983][ T8797] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1036'. [ 237.370747][ T8803] FAULT_INJECTION: forcing a failure. [ 237.370747][ T8803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.416438][ T8803] CPU: 1 UID: 0 PID: 8803 Comm: syz.2.1038 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 237.426857][ T8803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 237.437049][ T8803] Call Trace: [ 237.440371][ T8803] [ 237.443338][ T8803] dump_stack_lvl+0x241/0x360 [ 237.448177][ T8803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.453414][ T8803] ? __pfx__printk+0x10/0x10 [ 237.458049][ T8803] ? __pfx_lock_release+0x10/0x10 [ 237.463130][ T8803] should_fail_ex+0x3b0/0x4e0 [ 237.467932][ T8803] _copy_from_iter+0x1f6/0x1960 [ 237.472898][ T8803] ? __virt_addr_valid+0x183/0x530 [ 237.478024][ T8803] ? __pfx_lock_release+0x10/0x10 [ 237.483442][ T8803] ? __alloc_skb+0x28f/0x440 [ 237.488142][ T8803] ? __pfx__copy_from_iter+0x10/0x10 [ 237.493452][ T8803] ? __virt_addr_valid+0x183/0x530 [ 237.498756][ T8803] ? __virt_addr_valid+0x183/0x530 [ 237.503879][ T8803] ? __virt_addr_valid+0x45f/0x530 [ 237.509017][ T8803] ? __check_object_size+0x49c/0x900 [ 237.514530][ T8803] netlink_sendmsg+0x73d/0xcb0 [ 237.519359][ T8803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.524685][ T8803] ? __import_iovec+0x536/0x820 [ 237.529587][ T8803] ? aa_sock_msg_perm+0x91/0x160 [ 237.534741][ T8803] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 237.540086][ T8803] ? security_socket_sendmsg+0x87/0xb0 [ 237.545851][ T8803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.551169][ T8803] __sock_sendmsg+0x221/0x270 [ 237.555892][ T8803] ____sys_sendmsg+0x525/0x7d0 [ 237.560784][ T8803] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.566323][ T8803] __sys_sendmsg+0x2b0/0x3a0 [ 237.571025][ T8803] ? __pfx___sys_sendmsg+0x10/0x10 [ 237.576508][ T8803] ? vfs_write+0x7c4/0xc90 [ 237.581064][ T8803] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 237.587418][ T8803] ? do_syscall_64+0x100/0x230 [ 237.592305][ T8803] ? do_syscall_64+0xb6/0x230 [ 237.597009][ T8803] do_syscall_64+0xf3/0x230 [ 237.601540][ T8803] ? clear_bhb_loop+0x35/0x90 [ 237.606248][ T8803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.612159][ T8803] RIP: 0033:0x7f7992d7def9 [ 237.616695][ T8803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.636412][ T8803] RSP: 002b:00007f7993aab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.644935][ T8803] RAX: ffffffffffffffda RBX: 00007f7992f35f80 RCX: 00007f7992d7def9 [ 237.653271][ T8803] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000004 [ 237.661992][ T8803] RBP: 00007f7993aab090 R08: 0000000000000000 R09: 0000000000000000 [ 237.670241][ T8803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.678227][ T8803] R13: 0000000000000000 R14: 00007f7992f35f80 R15: 00007ffea9fb48b8 [ 237.686346][ T8803] [ 237.771799][ T8800] netlink: 'syz.4.1037': attribute type 9 has an invalid length. [ 237.798381][ T8800] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1037'. [ 238.172133][ T54] Bluetooth: hci1: command tx timeout [ 238.202646][ T8828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1042'. [ 238.457330][ T8843] Cannot find add_set index 0 as target [ 238.816528][ T35] hsr_slave_0: left promiscuous mode [ 238.837225][ T35] hsr_slave_1: left promiscuous mode [ 238.845582][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.855934][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.866757][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.875118][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.897038][ T35] veth1_macvtap: left promiscuous mode [ 238.906860][ T35] veth0_macvtap: left promiscuous mode [ 238.913400][ T35] veth1_vlan: left promiscuous mode [ 238.918932][ T35] veth0_vlan: left promiscuous mode [ 238.964725][ T8866] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 239.707545][ T35] team0 (unregistering): Port device team_slave_1 removed [ 239.760066][ T35] team0 (unregistering): Port device team_slave_0 removed [ 240.252994][ T54] Bluetooth: hci1: command tx timeout [ 240.589508][ T8766] chnl_net:caif_netlink_parms(): no params data found [ 240.703891][ T8886] netlink: 'syz.0.1054': attribute type 9 has an invalid length. [ 240.722123][ T8886] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1054'. [ 240.789086][ T8891] netlink: 'syz.4.1056': attribute type 3 has an invalid length. [ 240.903746][ T8893] netlink: 'syz.0.1054': attribute type 9 has an invalid length. [ 240.927045][ T8893] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1054'. [ 241.067159][ T8907] FAULT_INJECTION: forcing a failure. [ 241.067159][ T8907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.067271][ T8907] [ 241.067278][ T8907] ====================================================== [ 241.067286][ T8907] WARNING: possible circular locking dependency detected [ 241.067307][ T8907] 6.11.0-syzkaller-01459-g151ac45348af #0 Not tainted [ 241.067319][ T8907] ------------------------------------------------------ [ 241.067327][ T8907] syz.4.1058/8907 is trying to acquire lock: [ 241.067338][ T8907] ffffffff8e813cb8 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x20/0xa0 [ 241.067390][ T8907] [ 241.067390][ T8907] but task is already holding lock: [ 241.067397][ T8907] ffff8880b893e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 241.067447][ T8907] [ 241.067447][ T8907] which lock already depends on the new lock. [ 241.067447][ T8907] [ 241.067455][ T8907] [ 241.067455][ T8907] the existing dependency chain (in reverse order) is: [ 241.067462][ T8907] [ 241.067462][ T8907] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 241.067489][ T8907] lock_acquire+0x1ed/0x550 [ 241.067517][ T8907] _raw_spin_lock_nested+0x31/0x40 [ 241.067546][ T8907] raw_spin_rq_lock_nested+0x2a/0x140 [ 241.067571][ T8907] task_fork_fair+0x61/0x1e0 [ 241.067599][ T8907] sched_cgroup_fork+0x37c/0x410 [ 241.067618][ T8907] copy_process+0x2217/0x3dc0 [ 241.067644][ T8907] kernel_clone+0x226/0x8f0 [ 241.067671][ T8907] user_mode_thread+0x132/0x1a0 [ 241.067700][ T8907] rest_init+0x23/0x300 [ 241.067720][ T8907] start_kernel+0x47a/0x500 [ 241.067738][ T8907] x86_64_start_reservations+0x2a/0x30 [ 241.067763][ T8907] x86_64_start_kernel+0x9f/0xa0 [ 241.067787][ T8907] common_startup_64+0x13e/0x147 [ 241.067809][ T8907] [ 241.067809][ T8907] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 241.067835][ T8907] lock_acquire+0x1ed/0x550 [ 241.067861][ T8907] _raw_spin_lock_irqsave+0xd5/0x120 [ 241.067888][ T8907] try_to_wake_up+0xb0/0x1470 [ 241.067917][ T8907] up+0x72/0x90 [ 241.067933][ T8907] console_unlock+0x22f/0x4d0 [ 241.067951][ T8907] vprintk_emit+0x5dc/0x7c0 [ 241.067968][ T8907] dev_vprintk_emit+0x2ae/0x330 [ 241.067994][ T8907] dev_printk_emit+0xdd/0x120 [ 241.068020][ T8907] _dev_warn+0x122/0x170 [ 241.068046][ T8907] firmware_fallback_sysfs+0x4cf/0x9e0 [ 241.068077][ T8907] _request_firmware+0xcf5/0x12b0 [ 241.068098][ T8907] request_firmware_work_func+0x12a/0x280 [ 241.068121][ T8907] process_scheduled_works+0xa2c/0x1830 [ 241.068146][ T8907] worker_thread+0x870/0xd30 [ 241.068172][ T8907] kthread+0x2f0/0x390 [ 241.068200][ T8907] ret_from_fork+0x4b/0x80 [ 241.068229][ T8907] ret_from_fork_asm+0x1a/0x30 [ 241.068257][ T8907] [ 241.068257][ T8907] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 241.068285][ T8907] validate_chain+0x18e0/0x5900 [ 241.068304][ T8907] __lock_acquire+0x137a/0x2040 [ 241.068331][ T8907] lock_acquire+0x1ed/0x550 [ 241.068356][ T8907] _raw_spin_lock_irqsave+0xd5/0x120 [ 241.068383][ T8907] down_trylock+0x20/0xa0 [ 241.068402][ T8907] __down_trylock_console_sem+0x109/0x250 [ 241.068423][ T8907] vprintk_emit+0x2aa/0x7c0 [ 241.068441][ T8907] _printk+0xd5/0x120 [ 241.068468][ T8907] should_fail_ex+0x391/0x4e0 [ 241.068485][ T8907] strncpy_from_user+0x36/0x2e0 [ 241.068515][ T8907] strncpy_from_user_nofault+0x71/0x140 [ 241.068548][ T8907] bpf_probe_read_user_str+0x2a/0x70 [ 241.068576][ T8907] bpf_prog_bc7c5c6b9645592f+0x3d/0x3f [ 241.068593][ T8907] bpf_trace_run4+0x334/0x590 [ 241.068618][ T8907] __traceiter_sched_switch+0x98/0xd0 [ 241.068637][ T8907] __schedule+0x2591/0x4a60 [ 241.068663][ T8907] preempt_schedule_irq+0xfb/0x1c0 [ 241.068690][ T8907] irqentry_exit+0x5e/0x90 [ 241.068718][ T8907] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 241.068741][ T8907] __sanitizer_cov_trace_const_cmp4+0x35/0x90 [ 241.068770][ T8907] unwind_get_return_address+0x68/0xc0 [ 241.068800][ T8907] arch_stack_walk+0x125/0x1b0 [ 241.068819][ T8907] stack_trace_save+0x118/0x1d0 [ 241.068842][ T8907] kasan_save_track+0x3f/0x80 [ 241.068868][ T8907] kasan_save_free_info+0x40/0x50 [ 241.068890][ T8907] poison_slab_object+0xe0/0x150 [ 241.068918][ T8907] __kasan_slab_free+0x37/0x60 [ 241.068945][ T8907] kmem_cache_free+0x145/0x350 [ 241.068965][ T8907] pfkey_broadcast+0x3e3/0x400 [ 241.068983][ T8907] pfkey_send_policy_notify+0x599/0x920 [ 241.069015][ T8907] km_policy_notify+0x126/0x210 [ 241.069042][ T8907] xfrm_add_policy+0x54c/0x980 [ 241.069077][ T8907] xfrm_user_rcv_msg+0x75b/0xa80 [ 241.069103][ T8907] netlink_rcv_skb+0x1e3/0x430 [ 241.069133][ T8907] xfrm_netlink_rcv+0x79/0x90 [ 241.069159][ T8907] netlink_unicast+0x7f6/0x990 [ 241.069184][ T8907] netlink_sendmsg+0x8e4/0xcb0 [ 241.069213][ T8907] __sock_sendmsg+0x221/0x270 [ 241.069238][ T8907] ____sys_sendmsg+0x525/0x7d0 [ 241.069257][ T8907] __sys_sendmsg+0x2b0/0x3a0 [ 241.069276][ T8907] do_syscall_64+0xf3/0x230 [ 241.069304][ T8907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.069327][ T8907] [ 241.069327][ T8907] other info that might help us debug this: [ 241.069327][ T8907] [ 241.069334][ T8907] Chain exists of: [ 241.069334][ T8907] (console_sem).lock --> &p->pi_lock --> &rq->__lock [ 241.069334][ T8907] [ 241.069368][ T8907] Possible unsafe locking scenario: [ 241.069368][ T8907] [ 241.069374][ T8907] CPU0 CPU1 [ 241.069380][ T8907] ---- ---- [ 241.069386][ T8907] lock(&rq->__lock); [ 241.069398][ T8907] lock(&p->pi_lock); [ 241.069412][ T8907] lock(&rq->__lock); [ 241.069427][ T8907] lock((console_sem).lock); [ 241.069440][ T8907] [ 241.069440][ T8907] *** DEADLOCK *** [ 241.069440][ T8907] [ 241.069445][ T8907] 4 locks held by syz.4.1058/8907: [ 241.069465][ T8907] #0: ffff888027851918 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{3:3}, at: xfrm_netlink_rcv+0x6a/0x90 [ 241.069524][ T8907] #1: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: km_policy_notify+0x2e/0x210 [ 241.069579][ T8907] #2: ffff8880b893e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 241.069633][ T8907] #3: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x244/0x590 [ 241.069682][ T8907] [ 241.069682][ T8907] stack backtrace: [ 241.069690][ T8907] CPU: 1 UID: 0 PID: 8907 Comm: syz.4.1058 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 241.069713][ T8907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 241.069735][ T8907] Call Trace: [ 241.069743][ T8907] [ 241.069751][ T8907] dump_stack_lvl+0x241/0x360 [ 241.069800][ T8907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.069840][ T8907] ? print_circular_bug+0x130/0x1a0 [ 241.069866][ T8907] check_noncircular+0x36a/0x4a0 [ 241.069892][ T8907] ? __pfx_check_noncircular+0x10/0x10 [ 241.069914][ T8907] ? lockdep_lock+0x123/0x2b0 [ 241.069948][ T8907] ? _find_first_zero_bit+0xd3/0x100 [ 241.069981][ T8907] validate_chain+0x18e0/0x5900 [ 241.070019][ T8907] ? __pfx_validate_chain+0x10/0x10 [ 241.070040][ T8907] ? __pfx_prb_first_seq+0x10/0x10 [ 241.070087][ T8907] ? this_cpu_in_panic+0x4f/0x80 [ 241.070120][ T8907] ? _prb_read_valid+0xa39/0xac0 [ 241.070162][ T8907] ? mark_lock+0x9a/0x350 [ 241.070195][ T8907] __lock_acquire+0x137a/0x2040 [ 241.070236][ T8907] lock_acquire+0x1ed/0x550 [ 241.070263][ T8907] ? down_trylock+0x20/0xa0 [ 241.070286][ T8907] ? __pfx_desc_update_last_finalized+0x10/0x10 [ 241.070318][ T8907] ? __pfx_lock_acquire+0x10/0x10 [ 241.070346][ T8907] ? rcu_is_watching+0x15/0xb0 [ 241.070380][ T8907] ? vprintk_store+0xd3e/0x1160 [ 241.070408][ T8907] _raw_spin_lock_irqsave+0xd5/0x120 [ 241.070436][ T8907] ? down_trylock+0x20/0xa0 [ 241.070457][ T8907] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 241.070487][ T8907] ? validate_chain+0x11e/0x5900 [ 241.070513][ T8907] down_trylock+0x20/0xa0 [ 241.070535][ T8907] __down_trylock_console_sem+0x109/0x250 [ 241.070561][ T8907] ? _printk+0xd5/0x120 [ 241.070590][ T8907] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 241.070618][ T8907] ? __pfx_validate_chain+0x10/0x10 [ 241.070644][ T8907] vprintk_emit+0x2aa/0x7c0 [ 241.070668][ T8907] ? __pfx_vprintk_emit+0x10/0x10 [ 241.070693][ T8907] ? mark_lock+0x9a/0x350 [ 241.070730][ T8907] _printk+0xd5/0x120 [ 241.070763][ T8907] ? __pfx__printk+0x10/0x10 [ 241.070803][ T8907] should_fail_ex+0x391/0x4e0 [ 241.070827][ T8907] strncpy_from_user+0x36/0x2e0 [ 241.070864][ T8907] strncpy_from_user_nofault+0x71/0x140 [ 241.070901][ T8907] bpf_probe_read_user_str+0x2a/0x70 [ 241.070934][ T8907] ? bpf_trace_run4+0x244/0x590 [ 241.070957][ T8907] bpf_prog_bc7c5c6b9645592f+0x3d/0x3f [ 241.070976][ T8907] bpf_trace_run4+0x334/0x590 [ 241.071001][ T8907] ? psi_group_change+0xb88/0x11c0 [ 241.071027][ T8907] ? __pfx_bpf_trace_run4+0x10/0x10 [ 241.071057][ T8907] ? __pfx_probe_sched_switch+0x10/0x10 [ 241.071162][ T8907] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 241.071187][ T8907] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 241.071208][ T8907] __traceiter_sched_switch+0x98/0xd0 [ 241.071233][ T8907] __schedule+0x2591/0x4a60 [ 241.071278][ T8907] ? __pfx___schedule+0x10/0x10 [ 241.071310][ T8907] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 241.071347][ T8907] ? preempt_schedule_irq+0xf0/0x1c0 [ 241.071380][ T8907] preempt_schedule_irq+0xfb/0x1c0 [ 241.071411][ T8907] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 241.071452][ T8907] irqentry_exit+0x5e/0x90 [ 241.071482][ T8907] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 241.071516][ T8907] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x35/0x90 [ 241.071549][ T8907] Code: 14 25 80 d4 03 00 65 8b 05 80 43 70 7e 25 00 01 ff 00 74 10 3d 00 01 00 00 75 5b 83 ba 1c 16 00 00 00 74 52 8b 82 f8 15 00 00 <83> f8 03 75 47 48 8b 8a 00 16 00 00 44 8b 8a fc 15 00 00 49 c1 e1 [ 241.071567][ T8907] RSP: 0018:ffffc90009e0edb0 EFLAGS: 00000246 [ 241.071583][ T8907] RAX: 0000000000000000 RBX: ffffc90009e0ee28 RCX: ffffffff91755000 [ 241.071598][ T8907] RDX: ffff88806f4dbc00 RSI: 0000000000000001 RDI: 0000000000000000 [ 241.071612][ T8907] RBP: 0000000000000001 R08: ffffffff814125f8 R09: ffffffff814140bf [ 241.071626][ T8907] R10: 0000000000000003 R11: ffff88806f4dbc00 R12: ffff88806f4dbc00 [ 241.071641][ T8907] R13: ffffffff817f2f80 R14: dffffc0000000000 R15: 1ffff920013c1dc5 [ 241.071658][ T8907] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 241.071687][ T8907] ? unwind_next_frame+0x196f/0x2a00 [ 241.071717][ T8907] ? unwind_get_return_address+0x68/0xc0 [ 241.071747][ T8907] ? __init_begin+0x41000/0x41000 [ 241.071779][ T8907] unwind_get_return_address+0x68/0xc0 [ 241.071804][ T8907] ? do_syscall_64+0xf3/0x230 [ 241.071829][ T8907] arch_stack_walk+0x125/0x1b0 [ 241.071849][ T8907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.071871][ T8907] stack_trace_save+0x118/0x1d0 [ 241.071892][ T8907] ? __pfx_stack_trace_save+0x10/0x10 [ 241.071914][ T8907] ? mark_lock+0x9a/0x350 [ 241.071942][ T8907] kasan_save_track+0x3f/0x80 [ 241.071964][ T8907] ? kasan_save_track+0x3f/0x80 [ 241.071985][ T8907] ? kasan_save_free_info+0x40/0x50 [ 241.072004][ T8907] ? poison_slab_object+0xe0/0x150 [ 241.072026][ T8907] ? __kasan_slab_free+0x37/0x60 [ 241.072048][ T8907] ? kmem_cache_free+0x145/0x350 [ 241.072071][ T8907] ? pfkey_broadcast+0x3e3/0x400 [ 241.072087][ T8907] ? pfkey_send_policy_notify+0x599/0x920 [ 241.072112][ T8907] ? km_policy_notify+0x126/0x210 [ 241.072134][ T8907] ? xfrm_add_policy+0x54c/0x980 [ 241.072156][ T8907] ? xfrm_user_rcv_msg+0x75b/0xa80 [ 241.072178][ T8907] ? netlink_rcv_skb+0x1e3/0x430 [ 241.072202][ T8907] ? xfrm_netlink_rcv+0x79/0x90 [ 241.072224][ T8907] ? netlink_unicast+0x7f6/0x990 [ 241.072244][ T8907] ? netlink_sendmsg+0x8e4/0xcb0 [ 241.072267][ T8907] ? __sock_sendmsg+0x221/0x270 [ 241.072288][ T8907] ? ____sys_sendmsg+0x525/0x7d0 [ 241.072305][ T8907] ? __sys_sendmsg+0x2b0/0x3a0 [ 241.072322][ T8907] ? do_syscall_64+0xf3/0x230 [ 241.072365][ T8907] ? skb_release_data+0x677/0x8a0 [ 241.072384][ T8907] ? pfkey_broadcast+0x3e3/0x400 [ 241.072398][ T8907] kasan_save_free_info+0x40/0x50 [ 241.072416][ T8907] poison_slab_object+0xe0/0x150 [ 241.072442][ T8907] ? pfkey_broadcast+0x3e3/0x400 [ 241.072457][ T8907] __kasan_slab_free+0x37/0x60 [ 241.072481][ T8907] kmem_cache_free+0x145/0x350 [ 241.072501][ T8907] ? pfkey_broadcast+0x45/0x400 [ 241.072516][ T8907] pfkey_broadcast+0x3e3/0x400 [ 241.072531][ T8907] ? pfkey_broadcast+0x45/0x400 [ 241.072549][ T8907] pfkey_send_policy_notify+0x599/0x920 [ 241.072576][ T8907] ? __pfx_pfkey_send_policy_notify+0x10/0x10 [ 241.072603][ T8907] km_policy_notify+0x126/0x210 [ 241.072626][ T8907] ? km_policy_notify+0x2e/0x210 [ 241.072650][ T8907] xfrm_add_policy+0x54c/0x980 [ 241.072677][ T8907] ? __pfx_xfrm_add_policy+0x10/0x10 [ 241.072705][ T8907] ? __nla_parse+0x40/0x60 [ 241.072728][ T8907] xfrm_user_rcv_msg+0x75b/0xa80 [ 241.072755][ T8907] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 241.072797][ T8907] ? __mutex_trylock_common+0x183/0x2e0 [ 241.072814][ T8907] ? __pfx___might_resched+0x10/0x10 [ 241.072841][ T8907] netlink_rcv_skb+0x1e3/0x430 [ 241.072867][ T8907] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 241.072891][ T8907] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 241.072931][ T8907] xfrm_netlink_rcv+0x79/0x90 [ 241.072954][ T8907] netlink_unicast+0x7f6/0x990 [ 241.072981][ T8907] ? __pfx_netlink_unicast+0x10/0x10 [ 241.073002][ T8907] ? __virt_addr_valid+0x183/0x530 [ 241.073019][ T8907] ? __check_object_size+0x49c/0x900 [ 241.073042][ T8907] ? bpf_lsm_netlink_send+0x9/0x10 [ 241.073069][ T8907] netlink_sendmsg+0x8e4/0xcb0 [ 241.073101][ T8907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.073128][ T8907] ? __import_iovec+0x536/0x820 [ 241.073149][ T8907] ? aa_sock_msg_perm+0x91/0x160 [ 241.073168][ T8907] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 241.073190][ T8907] ? security_socket_sendmsg+0x87/0xb0 [ 241.073214][ T8907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.073239][ T8907] __sock_sendmsg+0x221/0x270 [ 241.073262][ T8907] ____sys_sendmsg+0x525/0x7d0 [ 241.073284][ T8907] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.073310][ T8907] __sys_sendmsg+0x2b0/0x3a0 [ 241.073330][ T8907] ? __pfx___sys_sendmsg+0x10/0x10 [ 241.073346][ T8907] ? vfs_write+0x7c4/0xc90 [ 241.073386][ T8907] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 241.073410][ T8907] ? do_syscall_64+0x100/0x230 [ 241.073436][ T8907] ? do_syscall_64+0xb6/0x230 [ 241.073462][ T8907] do_syscall_64+0xf3/0x230 [ 241.073488][ T8907] ? clear_bhb_loop+0x35/0x90 [ 241.073509][ T8907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.073527][ T8907] RIP: 0033:0x7fb15537def9 [ 241.073540][ T8907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.073555][ T8907] RSP: 002b:00007fb154dff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.073571][ T8907] RAX: ffffffffffffffda RBX: 00007fb155535f80 RCX: 00007fb15537def9 [ 241.073586][ T8907] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 241.073596][ T8907] RBP: 00007fb154dff090 R08: 0000000000000000 R09: 0000000000000000 [ 241.073607][ T8907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 241.073616][ T8907] R13: 0000000000000000 R14: 00007fb155535f80 R15: 00007ffd605e1608 [ 241.073636][ T8907] [ 242.587521][ T8907] CPU: 1 UID: 0 PID: 8907 Comm: syz.4.1058 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 242.598110][ T8907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 242.608172][ T8907] Call Trace: [ 242.611695][ T8907] [ 242.614624][ T8907] dump_stack_lvl+0x241/0x360 [ 242.619341][ T8907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.624584][ T8907] ? __pfx__printk+0x10/0x10 [ 242.629643][ T8907] should_fail_ex+0x3b0/0x4e0 [ 242.634418][ T8907] strncpy_from_user+0x36/0x2e0 [ 242.639538][ T8907] strncpy_from_user_nofault+0x71/0x140 [ 242.645131][ T8907] bpf_probe_read_user_str+0x2a/0x70 [ 242.650536][ T8907] ? bpf_trace_run4+0x244/0x590 [ 242.655427][ T8907] bpf_prog_bc7c5c6b9645592f+0x3d/0x3f [ 242.661010][ T8907] bpf_trace_run4+0x334/0x590 [ 242.665988][ T8907] ? psi_group_change+0xb88/0x11c0 [ 242.671326][ T8907] ? __pfx_bpf_trace_run4+0x10/0x10 [ 242.676550][ T8907] ? __pfx_probe_sched_switch+0x10/0x10 [ 242.682109][ T8907] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 242.688987][ T8907] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 242.695366][ T8907] __traceiter_sched_switch+0x98/0xd0 [ 242.700856][ T8907] __schedule+0x2591/0x4a60 [ 242.705489][ T8907] ? __pfx___schedule+0x10/0x10 [ 242.710472][ T8907] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 242.716541][ T8907] ? preempt_schedule_irq+0xf0/0x1c0 [ 242.721873][ T8907] preempt_schedule_irq+0xfb/0x1c0 [ 242.727117][ T8907] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 242.732885][ T8907] irqentry_exit+0x5e/0x90 [ 242.737485][ T8907] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 242.743914][ T8907] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x35/0x90 [ 242.750877][ T8907] Code: 14 25 80 d4 03 00 65 8b 05 80 43 70 7e 25 00 01 ff 00 74 10 3d 00 01 00 00 75 5b 83 ba 1c 16 00 00 00 74 52 8b 82 f8 15 00 00 <83> f8 03 75 47 48 8b 8a 00 16 00 00 44 8b 8a fc 15 00 00 49 c1 e1 [ 242.770579][ T8907] RSP: 0018:ffffc90009e0edb0 EFLAGS: 00000246 [ 242.776846][ T8907] RAX: 0000000000000000 RBX: ffffc90009e0ee28 RCX: ffffffff91755000 [ 242.785126][ T8907] RDX: ffff88806f4dbc00 RSI: 0000000000000001 RDI: 0000000000000000 [ 242.793246][ T8907] RBP: 0000000000000001 R08: ffffffff814125f8 R09: ffffffff814140bf [ 242.801615][ T8907] R10: 0000000000000003 R11: ffff88806f4dbc00 R12: ffff88806f4dbc00 [ 242.809870][ T8907] R13: ffffffff817f2f80 R14: dffffc0000000000 R15: 1ffff920013c1dc5 [ 242.817977][ T8907] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 242.824594][ T8907] ? unwind_next_frame+0x196f/0x2a00 [ 242.829913][ T8907] ? unwind_get_return_address+0x68/0xc0 [ 242.835585][ T8907] ? __init_begin+0x41000/0x41000 [ 242.840799][ T8907] unwind_get_return_address+0x68/0xc0 [ 242.846812][ T8907] ? do_syscall_64+0xf3/0x230 [ 242.851603][ T8907] arch_stack_walk+0x125/0x1b0 [ 242.856388][ T8907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.862753][ T8907] stack_trace_save+0x118/0x1d0 [ 242.868193][ T8907] ? __pfx_stack_trace_save+0x10/0x10 [ 242.873608][ T8907] ? mark_lock+0x9a/0x350 [ 242.878013][ T8907] kasan_save_track+0x3f/0x80 [ 242.882825][ T8907] ? kasan_save_track+0x3f/0x80 [ 242.887785][ T8907] ? kasan_save_free_info+0x40/0x50 [ 242.892984][ T8907] ? poison_slab_object+0xe0/0x150 [ 242.898098][ T8907] ? __kasan_slab_free+0x37/0x60 [ 242.903125][ T8907] ? kmem_cache_free+0x145/0x350 [ 242.908058][ T8907] ? pfkey_broadcast+0x3e3/0x400 [ 242.913105][ T8907] ? pfkey_send_policy_notify+0x599/0x920 [ 242.919153][ T8907] ? km_policy_notify+0x126/0x210 [ 242.924253][ T8907] ? xfrm_add_policy+0x54c/0x980 [ 242.929309][ T8907] ? xfrm_user_rcv_msg+0x75b/0xa80 [ 242.934441][ T8907] ? netlink_rcv_skb+0x1e3/0x430 [ 242.939392][ T8907] ? xfrm_netlink_rcv+0x79/0x90 [ 242.944253][ T8907] ? netlink_unicast+0x7f6/0x990 [ 242.949305][ T8907] ? netlink_sendmsg+0x8e4/0xcb0 [ 242.954348][ T8907] ? __sock_sendmsg+0x221/0x270 [ 242.959223][ T8907] ? ____sys_sendmsg+0x525/0x7d0 [ 242.964252][ T8907] ? __sys_sendmsg+0x2b0/0x3a0 [ 242.969218][ T8907] ? do_syscall_64+0xf3/0x230 [ 242.974043][ T8907] ? skb_release_data+0x677/0x8a0 [ 242.979075][ T8907] ? pfkey_broadcast+0x3e3/0x400 [ 242.984036][ T8907] kasan_save_free_info+0x40/0x50 [ 242.989432][ T8907] poison_slab_object+0xe0/0x150 [ 242.994429][ T8907] ? pfkey_broadcast+0x3e3/0x400 [ 242.999378][ T8907] __kasan_slab_free+0x37/0x60 [ 243.004167][ T8907] kmem_cache_free+0x145/0x350 [ 243.008958][ T8907] ? pfkey_broadcast+0x45/0x400 [ 243.014425][ T8907] pfkey_broadcast+0x3e3/0x400 [ 243.019210][ T8907] ? pfkey_broadcast+0x45/0x400 [ 243.024187][ T8907] pfkey_send_policy_notify+0x599/0x920 [ 243.029946][ T8907] ? __pfx_pfkey_send_policy_notify+0x10/0x10 [ 243.036033][ T8907] km_policy_notify+0x126/0x210 [ 243.040895][ T8907] ? km_policy_notify+0x2e/0x210 [ 243.045865][ T8907] xfrm_add_policy+0x54c/0x980 [ 243.050898][ T8907] ? __pfx_xfrm_add_policy+0x10/0x10 [ 243.056197][ T8907] ? __nla_parse+0x40/0x60 [ 243.060718][ T8907] xfrm_user_rcv_msg+0x75b/0xa80 [ 243.065690][ T8907] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 243.071188][ T8907] ? __mutex_trylock_common+0x183/0x2e0 [ 243.076753][ T8907] ? __pfx___might_resched+0x10/0x10 [ 243.082049][ T8907] netlink_rcv_skb+0x1e3/0x430 [ 243.086855][ T8907] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 243.092405][ T8907] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 243.097825][ T8907] xfrm_netlink_rcv+0x79/0x90 [ 243.102519][ T8907] netlink_unicast+0x7f6/0x990 [ 243.107587][ T8907] ? __pfx_netlink_unicast+0x10/0x10 [ 243.113051][ T8907] ? __virt_addr_valid+0x183/0x530 [ 243.118162][ T8907] ? __check_object_size+0x49c/0x900 [ 243.124003][ T8907] ? bpf_lsm_netlink_send+0x9/0x10 [ 243.129300][ T8907] netlink_sendmsg+0x8e4/0xcb0 [ 243.134200][ T8907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.140224][ T8907] ? __import_iovec+0x536/0x820 [ 243.145097][ T8907] ? aa_sock_msg_perm+0x91/0x160 [ 243.150217][ T8907] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 243.155636][ T8907] ? security_socket_sendmsg+0x87/0xb0 [ 243.161320][ T8907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.166632][ T8907] __sock_sendmsg+0x221/0x270 [ 243.171410][ T8907] ____sys_sendmsg+0x525/0x7d0 [ 243.176202][ T8907] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.181514][ T8907] __sys_sendmsg+0x2b0/0x3a0 [ 243.186118][ T8907] ? __pfx___sys_sendmsg+0x10/0x10 [ 243.191268][ T8907] ? vfs_write+0x7c4/0xc90 [ 243.195827][ T8907] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 243.202530][ T8907] ? do_syscall_64+0x100/0x230 [ 243.207389][ T8907] ? do_syscall_64+0xb6/0x230 [ 243.212461][ T8907] do_syscall_64+0xf3/0x230 [ 243.217206][ T8907] ? clear_bhb_loop+0x35/0x90 [ 243.222112][ T8907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.228216][ T8907] RIP: 0033:0x7fb15537def9 [ 243.232931][ T8907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.253321][ T8907] RSP: 002b:00007fb154dff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.261747][ T8907] RAX: ffffffffffffffda RBX: 00007fb155535f80 RCX: 00007fb15537def9 [ 243.269764][ T8907] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 243.277839][ T8907] RBP: 00007fb154dff090 R08: 0000000000000000 R09: 0000000000000000 [ 243.285838][ T8907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 243.293882][ T8907] R13: 0000000000000000 R14: 00007fb155535f80 R15: 00007ffd605e1608 [ 243.302393][ T8907] [ 243.313883][ T54] Bluetooth: hci1: command tx timeout [ 243.341798][ T5218] syz-executor (5218) used greatest stack depth: 18960 bytes left SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 243.434526][ T8766] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.470195][ T8766] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.496193][ T8766] bridge_slave_0: entered allmulticast mode [ 243.525385][ T8766] bridge_slave_0: entered promiscuous mode [ 244.290615][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.359006][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.438682][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.530510][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.682149][ T11] bridge_slave_1: left allmulticast mode [ 244.688809][ T11] bridge_slave_1: left promiscuous mode [ 244.695548][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.705300][ T11] bridge_slave_0: left allmulticast mode [ 244.711052][ T11] bridge_slave_0: left promiscuous mode [ 244.717820][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.857352][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.868198][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.878973][ T11] bond0 (unregistering): Released all slaves [ 244.971455][ T11] tipc: Left network mode [ 245.255319][ T11] hsr_slave_0: left promiscuous mode [ 245.263834][ T11] hsr_slave_1: left promiscuous mode [ 245.270365][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.278142][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.288525][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.296198][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.306437][ T11] veth1_macvtap: left promiscuous mode [ 245.312397][ T11] veth0_macvtap: left promiscuous mode [ 245.318356][ T11] veth1_vlan: left promiscuous mode [ 245.323820][ T11] veth0_vlan: left promiscuous mode [ 245.524557][ T11] team0 (unregistering): Port device team_slave_1 removed [ 245.562268][ T11] team0 (unregistering): Port device team_slave_0 removed [ 246.026635][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.073521][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.121822][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.199107][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.336048][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.379618][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.437838][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.503261][ T11] bond0: (slave netdevsim0): Releasing backup interface [ 246.515565][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.643678][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.690010][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.745650][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.799345][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.924784][ T11] bridge_slave_1: left allmulticast mode [ 246.930497][ T11] bridge_slave_1: left promiscuous mode [ 246.938325][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.948222][ T11] bridge_slave_0: left allmulticast mode [ 246.956359][ T11] bridge_slave_0: left promiscuous mode [ 246.962414][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.975820][ T11] bridge0: port 3(vlan0) entered disabled state [ 246.985235][ T11] bridge_slave_1: left allmulticast mode [ 246.990928][ T11] bridge_slave_1: left promiscuous mode [ 246.997307][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.006994][ T11] bridge_slave_0: left allmulticast mode [ 247.014011][ T11] bridge_slave_0: left promiscuous mode [ 247.020020][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.034844][ T11] bridge_slave_0: left allmulticast mode [ 247.040557][ T11] bridge_slave_0: left promiscuous mode [ 247.047979][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.356495][ T11] geneve1 (unregistering): left promiscuous mode [ 247.453171][ T11] team0: Port device bridge1 removed [ 247.591877][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.603794][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.615777][ T11] bond0 (unregistering): Released all slaves [ 247.633676][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.646394][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.657614][ T11] bond0 (unregistering): Released all slaves [ 247.673562][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.683709][ T11] bond0 (unregistering): Released all slaves [ 247.695240][ T11] bond0 (unregistering): Released all slaves [ 247.778457][ T11] ɶƣ0GC¦: left promiscuous mode [ 247.844718][ T11] tipc: Left network mode [ 247.860641][ T11] tipc: Left network mode [ 247.877257][ T11] tipc: Disabling bearer [ 247.884399][ T11] tipc: Left network mode [ 248.890923][ T11] hsr_slave_0: left promiscuous mode [ 248.898025][ T11] hsr_slave_1: left promiscuous mode [ 248.904465][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.921075][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.929537][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.937242][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.954089][ T11] batadv_slave_0: left promiscuous mode [ 248.964134][ T11] hsr_slave_0: left promiscuous mode [ 248.970390][ T11] hsr_slave_1: left promiscuous mode [ 248.976882][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.985766][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.996407][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.005026][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.017706][ T11] hsr_slave_0: left promiscuous mode [ 249.023951][ T11] hsr_slave_1: left promiscuous mode [ 249.029933][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.037512][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.047436][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.055055][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.068220][ T11] veth1_macvtap: left promiscuous mode [ 249.073949][ T11] veth1_vlan: left promiscuous mode [ 249.079335][ T11] veth0_vlan: left promiscuous mode [ 249.085820][ T11] veth1_macvtap: left promiscuous mode [ 249.091541][ T11] veth0_macvtap: left promiscuous mode [ 249.097559][ T11] veth1_vlan: left promiscuous mode [ 249.103944][ T11] veth0_vlan: left promiscuous mode [ 249.110481][ T11] veth1_macvtap: left promiscuous mode [ 249.117046][ T11] veth0_macvtap: left promiscuous mode [ 249.124936][ T11] veth1_vlan: left promiscuous mode [ 249.130647][ T11] veth0_vlan: left promiscuous mode [ 249.496224][ T11] team0 (unregistering): Port device team_slave_1 removed [ 249.510669][ T11] team0 (unregistering): Port device team_slave_0 removed [ 249.602679][ T144] smc: removing ib device syz1 [ 249.883291][ T11] team0 (unregistering): Port device team_slave_1 removed [ 249.923648][ T11] team0 (unregistering): Port device team_slave_0 removed [ 250.205545][ T11] team0 (unregistering): Port device team_slave_1 removed [ 250.236055][ T11] team0 (unregistering): Port device team_slave_0 removed