last executing test programs: 1m30.632008065s ago: executing program 0 (id=620): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="9feb010018000000000000000000000000040000f2cf3f7516659366a247a700"/47], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0xa, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x28, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x4, 0x15}]}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getnexthop={0x20, 0x6a, 0xe976912f002a1383, 0x0, 0x0, {}, [@NHA_MASTER={0x8, 0xe}]}, 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m17.659266891s ago: executing program 0 (id=620): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="9feb010018000000000000000000000000040000f2cf3f7516659366a247a700"/47], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0xa, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x28, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x4, 0x15}]}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getnexthop={0x20, 0x6a, 0xe976912f002a1383, 0x0, 0x0, {}, [@NHA_MASTER={0x8, 0xe}]}, 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m7.037173322s ago: executing program 0 (id=620): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="9feb010018000000000000000000000000040000f2cf3f7516659366a247a700"/47], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0xa, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x28, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x4, 0x15}]}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getnexthop={0x20, 0x6a, 0xe976912f002a1383, 0x0, 0x0, {}, [@NHA_MASTER={0x8, 0xe}]}, 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 55.418022759s ago: executing program 0 (id=620): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="9feb010018000000000000000000000000040000f2cf3f7516659366a247a700"/47], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0xa, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x28, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x4, 0x15}]}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getnexthop={0x20, 0x6a, 0xe976912f002a1383, 0x0, 0x0, {}, [@NHA_MASTER={0x8, 0xe}]}, 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 44.575205923s ago: executing program 0 (id=620): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="9feb010018000000000000000000000000040000f2cf3f7516659366a247a700"/47], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0xa, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x28, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x4, 0x15}]}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getnexthop={0x20, 0x6a, 0xe976912f002a1383, 0x0, 0x0, {}, [@NHA_MASTER={0x8, 0xe}]}, 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 37.07996635s ago: executing program 1 (id=1153): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32=0x0, @ANYBLOB="0000000000000001bfff00000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xb8, &(0x7f0000000100)=""/184, 0x0, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="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", 0x182}, {&(0x7f0000000800)="3ec347663c099e51b14f69819afc92c21a425d8e9916373e6e3e341132090609d322970f842051be9cbd920891541ec975011ed4250b", 0x36}], 0x2, 0x0, 0x0, 0x20000011}}], 0x1, 0x40045) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000540)=ANY=[], 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x503}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20008850) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0xfff1, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[], 0xc8}}, 0x0) 36.72462115s ago: executing program 1 (id=1157): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000001240)={0x0, 0xa4, &(0x7f0000001140)=[@in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400}, @in6={0xa, 0x4e24, 0x6, @private2, 0x8}, @in={0x2, 0x4e20, @private=0xa010101}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000012c0)={r6, @in6={{0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}, 0x8001, 0x8}, &(0x7f0000001380)=0x90) (async) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0xfc, 0x8, 0x0, 0x0, @multicast}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x2}, @func_proto={0x0, 0x0, 0x0, 0x9, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmmsg$unix(r7, &(0x7f00000014c0)=[{{&(0x7f0000000540)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000a80)=[{&(0x7f00000006c0)="7f59c516015d928ffa6a2ad7f19848cc576ec896df2a7965ac396a90d12eea20654bd3348c18c3858f41c85c06c5d73f7f2be1338301d344040487741bc763d9df9dd87e7a8f8f5c494625f7850ffd48816247aefd33e4e4e137d8800acdfdffbf4de02142f11bcc34dda2c4a416e9d3d0", 0x71}, {&(0x7f0000000740)="d6e813c6d4ca3f2d4d022eb7c29f5e15a3020c0c234d1d0c63eed3f77492271d11e47f863c07c01d84e4f09a1cacdf5f066c8b57872dee94a73a215aa066737337476a1d37902bd2ca03e06d69e23e4cda551d6df30f740b04373d", 0x5b}, {&(0x7f00000007c0)="ef6731a81c4395b45362d6f1facb8da1e61eab4d49b5dd316f36f9a83b554daabf7b65ec4254903f03bc0503d02ee88a4245a863707584c6e85a511f5a23c5052adc03d62f199febb47eefb0eac72bde7e64f5c6c998ca06d7facad836b2687a60dc0dc7ec736985e6ee7e541eec064cb00c4e2e1e197afe99318c26ff3ace81f2b303928b707a37a174e33e3814f52417d9b2c2e1339acc49d11a39f42672a25767d08b17178d1635b7f55c6b41b9109969f0fd0989a320a6df734abdb6edc37d75e3d64c6b82ea5560a900c125a7311ed935e64f81b655f85ea8793eefebae8519", 0xe2}, {&(0x7f0000000b00)="b89e6f3e401685b5be9ad9dabfbcc2094c89b45df9c760fd905ec54b09428f95ec019eae39a199ade8a37bb7a7934fcec21992cc162bc495586068335082151ef4432a959c383659d62115fc1478ef966852ebd25e034359548dce94d0a41c57ae78612652fcee23ced9487d29bdc166903cd06f339da6d2eb9e0c91a73d45d1ba1d576f0daa0954f05717562b5cd0472a26747f9749f4e2b9b6ffeee1a8c394384a977e939497f411952186dba40e920c2b0b9082bebaf7042b278d6c045c1a00055a597146d7e380c14618ebd0d866b8d86c889393c7fb0c3790e11405abc0da2e5b13dd192e452a925eaa9d197e401193528e645af70ed3c7994c1aa4f3925a541cdc1088031f8e928dac4da37d47db179c80b2c4d04a5a3611ad20e32c", 0x11f}, {&(0x7f00000009c0)="5855733b7dcc9beb6c9a441d6ac3420d8d2b94c1a7d7249c54c641f705733395b1a7e1db70a6484388efdf1c0c1acb31b98ed6022ca578fd3ccbd0c70ac12f03954033e257ff5886051e34b1a7d088dd16c8e2aafcf518bf2fbcdaee0b4e9cb8391faa11277490227bca98c88b13d50bc9dab051fa1b5eb1043fc739bd0e6ca52231be3cd75a90fa3c9589335be30ccdf97dbd9d62e4b1c237cc1a00e6380f34a445b0218eeb", 0xa6}, {&(0x7f0000000300)="42631fcbea1cdd31", 0x8}], 0x6, 0x0, 0x0, 0x4810}}, {{&(0x7f0000001000)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001580), 0x0, 0x0, 0x0, 0x40000}}, {{&(0x7f0000001080)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x80d0}}], 0x3, 0x2404c002) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d00)={0x1c, r8, 0x1, 0x70bd2b, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x804) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, r10, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x2, 0xff, 0x70000000, 0x0, 0x6, 0x81}}, {0x4}}]}, @TCA_RATE={0x6, 0x5, {0x1, 0x14}}]}, 0x50}}, 0x0) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f40), r4) sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f0000001100)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, r11, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x56}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040004}, 0x400) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x1, 0xfffffffe, 0x63, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x0, 0x1}}) (async) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) (async) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file1\x00', 0x0, 0x4010, r1}, 0x18) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x4, 0x2, 0x4, 0x80002, 0x0, r13, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x1, 0x20001, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%-010d \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c40)={&(0x7f00000008c0)="9ccfc215dd7fb13e1c313914067969159b708f7af3cd8758ba297a9f075b3279b0ffeeb02832ff8aa1386b28c5aa2f0ff1302152155615beed31ff226d3675223b7393808dfa677fa6b43cddcce0b9b7827c5e7d6b926fdd5b63a5c02219d97e1c5eb4efd965232fd3cbf170f652253930be3aa73090cea4ae9394110f0cc485dd2982733baa95300a0f3a374cfabe7f0945f911f1a4941f6384a2cf7f9d38d9386f59dec0c40d4de76da72d5202a7271679e2c70e8d158730b3df07a54904cd0e3c3f6b12dcb6c507b1e01b7a3ce0", &(0x7f0000000cc0)=""/235, &(0x7f0000000dc0)="72e6533996bd48284ae4604cfb77083eed701de784c6842e8ba56e3f3cd5d1e4e2fb49941f36f2b07c9bded6a077cec2374663d26a86adbd23756b458d208896c09474f7b292a5c2521a27d72f00324ae26f228bde", &(0x7f0000000e40)="4bac0ee368b12c81cf271c3b2177713d8983a0f5a1c2968d1b4dfa88eb93d3a2428192175df1cb1d6089dd4ad86b22595e72531ba778fcc2a89849078604cbc4654627b688e3a8b5de975bfc63298b2134a55a4e85e0dc6d75173e861284bf64ee4e3d0613c7503b46d02839ea1d92c9edf0f8e7989f9b9f7ca0c521f8eabed5f820b82581013648cf7f8a0e33e8d971f95f", 0x4, r15, 0x4}, 0x38) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f00000005c0)={0x1, 'veth1_vlan\x00', {}, 0x3}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x8, &(0x7f00000000c0)=@raw=[@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}], &(0x7f00000001c0)='syzkaller\x00', 0x18000000, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, 0x0, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0xf, 0x80, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000480)=[0x1, r13, r14, r15], &(0x7f00000004c0)=[{0x4, 0x1, 0x3, 0x8}, {0x0, 0x1, 0x10, 0x6}, {0x2, 0x5, 0xa, 0x6}, {0x1, 0x1, 0xb}, {0x3, 0x1, 0xf, 0x3}, {0x1, 0x5, 0x0, 0x3}], 0x10, 0xd7, @void, @value}, 0x94) 36.528209219s ago: executing program 1 (id=1159): socket$inet(0x2, 0x4000000000000001, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_buf(r0, 0x29, 0x2d, &(0x7f0000000a00), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000200)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x0, 0x0, 0xfff, 0xfffffffffffffffd, 0x7fffffff}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x0, 0x0, 0xfff, 0xfffffffffffffffd, 0x7fffffff}, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmmsg$sock(r3, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x1, @random="aa9d5ea22833", 'veth0_to_bond\x00'}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)="dd1d4d348677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x1, 0x0) (async) sendmmsg$sock(r3, &(0x7f00000003c0)=[{{&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x1, @random="aa9d5ea22833", 'veth0_to_bond\x00'}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)="dd1d4d348677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="a000000021000100000000000000000000000000000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00005de41e35000050001100fc000000003ac56ab600000000000000fe800000000000000000000000000000fe8000000000000000000000000000aa7f00000100000000000000000000000000000000000000000000000049860c60d3dada406254c187c30cf158724651c43d0ebaf62de8cbd0a5b1c160553af23ae6da0d02c70853ade0cb6c97f3f4da248fa0ce08f596dde4d56b1719926395a43366fcabf51c714b6e2b39764e8815f2f82f6745"], 0xa0}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x440261, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8d0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) socket(0x1e, 0x5, 0x0) (async) r7 = socket(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'macvlan1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) 36.177456423s ago: executing program 1 (id=1161): syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209476", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x4}}}}}}}, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 36.037248686s ago: executing program 2 (id=1173): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) r0 = socket(0x2b, 0x80801, 0x1) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000200)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x128, 0x5c, 0x160, 0x128, 0x3e0, 0x320, 0x228, 0x25a, 0x320, 0x228, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2e}, @dev, [], [], 'macvtap0\x00', 'wg1\x00', {0xff}, {0x222cecdb0fb5a62a}, 0x4}, 0x5002, 0x100, 0x128, 0x52020000, {0x0, 0x6802000000000000}, [@common=@srh={{0x30}, {0x5e, 0x4, 0xfe, 0x8, 0x0, 0xb}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x3, 'system_u:object_r:depmod_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) listen(r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x0, 0x20, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x64, 0x2000, 0x0, 0x0, 0x0, @local, @multicast2, {[@end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000600)={'erspan0\x00', 0x0, 0x0, 0x8000, 0x7fff, 0x0, {{0xc, 0x4, 0x0, 0x0, 0x30, 0x67, 0x0, 0x3, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0xfc, 0x0}, {[@timestamp_prespec={0x44, 0x1c, 0xff, 0x3, 0xa, [{@broadcast, 0x80000000}, {@empty, 0x7}, {@private=0xa010102, 0x1}]}]}}}}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b40800000300000061104b0000bf06000000000000009500"/37], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x74, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0xc, 0xb, 0x0, &(0x7f0000000240)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000020000100feffffff2000000102c40600020000001e0001000c001400", @ANYRES32=0xee01, @ANYRES32, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000004c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000016c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000001700)={{{@in6, @in6=@mcast2}}, {{@in=@private}, 0x0, @in6=@ipv4={""/10, ""/2, @loopback}}}, &(0x7f0000001800)=0xe8) getgid() r8 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r8, 0x110, 0x4, &(0x7f00000003c0), 0x4) 35.81625134s ago: executing program 1 (id=1164): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x4}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x8, '\x00', 0x0, r0, 0x3, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000009, 0x10, r1, 0x58046000) pselect6(0x40, &(0x7f0000000300)={0x8001, 0x100000000, 0xfff, 0xffffffff, 0x9, 0xff, 0x0, 0x9}, 0x0, &(0x7f00000003c0)={0x10000, 0x40, 0xd, 0x3, 0x0, 0xab, 0x2, 0x27}, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000811) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000000b0605000000000000000000030000010900020073797a300000000005000100070000004c0008800c00078007001af1232e0000100007800c0018400000000000000009100007800c001b40b28ed1a900000000000000100c0007800500030000000000100007800c000280080001"], 0x74}}, 0x40c4) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280000514"], 0x528}}, 0xc000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x6, 0xa, 0x9, 0xff}, {0xb49, 0x2, 0x1, 0x1}]}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) getsockopt$inet6_opts(r6, 0x29, 0x39, 0xffffffffffffffff, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 35.770023158s ago: executing program 2 (id=1165): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={0xffffffffffffffff, r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xd17}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x6004}, 0x20000000) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x9}}]}, {0x0, [0x0, 0x0, 0x2e, 0x61, 0x0, 0x2e]}}, &(0x7f0000000340)=""/26, 0x38, 0x1a, 0x1, 0x8, 0x10000, @value}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1e, 0x3, 0x5, 0x3, 0x33, 0xffffffffffffffff, 0x24, '\x00', r3, r4, 0x3, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r1) r6 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000500)={0x3d4, r7, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xff}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x31}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x935f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ce0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xae8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2f3b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8c74}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffc9a}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff00d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xba55}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x53}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf7da}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb4c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "273fd58c11a5ffe02aec189873edd142422eff9dcebbf3884e41bf7bc3"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x3d4}}, 0x40015) bpf$TOKEN_CREATE(0x24, &(0x7f0000000980)={0x0, r4}, 0x8) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f00000009c0)=0x81) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000a40)=0x200040) writev(r8, &(0x7f0000000c80)=[{&(0x7f0000000a80)="4018cf27d57c3358cf47ee5f35e02918cde5b5cb1e5d25d9ec469a17c4313ff295ae9eac9e54a88272997510add1430af01dc649081c600824fa29475e76880a32d97e8430f3b2a39d8f37527ea316de1c7025c463f8a7900dd65e6948473fc252213091c051e2a54b76c5b506f97e2369ab22f9470e24384f1007a03fa5307c8ab4d56409572a1efc47961c2cf82a3d2a7dc9ec", 0x94}, {&(0x7f0000000b40)="b0326c59592377802181401339d6", 0xe}, {&(0x7f0000000b80)="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", 0xfc}], 0x3) setsockopt(r9, 0xa, 0x2, &(0x7f0000000cc0)="87c3320db0dc546e785ba9b6e4a798fd572842211f2bef259a752e9d3db72a", 0x1f) r10 = socket(0x5, 0x5, 0x0) ioctl$PPPIOCGIDLE(r9, 0x8010743f, &(0x7f0000000d00)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d40)={0x1b, 0x0, 0x0, 0x0, 0x0, r5, 0x401, '\x00', r3, r9, 0x1, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e40)={r8, 0x58, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$NFT_BATCH(r10, &(0x7f00000012c0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001280)={&(0x7f0000000ec0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x7c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x2e, 0x6, "f8f452c04b0f8b5a59e203c607381b97dd0b8052e9f546fc75b94096f2ee8f408f1914ccee9d4aa2fe83"}]}, @NFT_MSG_DELSET={0x9c, 0xb, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xc77}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x380}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @ct={{0x7}, @void}}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELTABLE={0x1f8, 0x2, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xb5, 0x6, "484a6eaf3c8ebd4cfdcd6bbaa551a40cbc3da0349f3fa794b7bf359c3fb00d39e8f47b0b23202716901d184d42df5159802140a0ddbd29e1e5fce0712239f2708ef85918b231d8c75a24fc401ce3878d2897542f4a968063b0616e90ce78e1a24eaf7b4c4d88b67e2f451c315e0a2ae48ee2eb22da8fcd37558d831cb394ac36363d609f302635474a5533403abf3ed6ace7b5a16b90ac9c7f55584e19a8da5792978a9d416e98619d3dee83cd5760164d"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xf2, 0x6, "393eb3b716e607737cd161e8183604ce81f4064e0ab23a9de5bf3741c88ac279196053af1a65d527c43908c31a01644474e448737f8f133df025ce68200d4e700473242ef7bd9f82e15bacaa7f57ae111605157b7e94f629d87b8e2e89d842adfa1994ad125535bbdf60661fad56bc379f60bbfd9fe5c3e1348349198f3924d690bdc3e3e71061fa415050fe1c7045168be14ab923ab086fae089906248603845afb458230f056ada3c51425b0ca75f3193c4405dd56d46f7024602833e6952b7c3ad55870bd2735da95c2594f8b2d74f78ab4247718cbeaf0f8e10a21815c36a12de8de0ff349bc8357e9950eb4"}]}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x398}, 0x1, 0x0, 0x0, 0x40004}, 0x48000) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000001340), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r10, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x54, r12, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x33}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}]}, 0x54}, 0x1, 0x0, 0x0, 0x200008c4}, 0x20004000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001480)=0x0) write$cgroup_pid(r9, &(0x7f00000014c0)=r13, 0x12) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001540), r10) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x30, r14, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfff}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x30}}, 0x20008021) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 35.54959449s ago: executing program 2 (id=1167): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xfffffffd) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000140)={0x80fd}) 35.54653815s ago: executing program 3 (id=1168): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x32900, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)="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", 0xfe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) ioctl$TUNSETOWNER(r0, 0x400454cc, r7) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff000000bfa30000000000000703000018feffff720aa9fff8ffffff71a400fe0000000072030200000000131d400500000000004704000001ed00006b030000000000001d440000000000007a0a00fe00ffffffc303000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7109000000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e50002a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de5c028d6112a0c2d21b2dc98814106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c53218294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb118888876b617398d00a7526103ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e08b7ab6cd9c65ba55f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddc42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293d364b9effa9a9406ac2683e231d4774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479517dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a79e59e1712c8c546768e5722da19fcdb4c2890cda1f96b952511e3a49d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767987d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c32040098e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1be62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070f66b2b388f0f744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028a3a981463f25c068d4410dad0c74e2a9478fa3be18a1a27bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab07001b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe293308b2a146f12a4c205235924cee765d94b1cc06641247c773ab8d1abbeb03ea68"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0x8c, r9, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_KEY={0x70, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a85730df8299d08400645d21c4fd6cb646b381d4e68107db9a5e2f88b15ff3ea"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x812}, 0x10) unshare(0x8000400) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r11, 0x0, &(0x7f0000001700)=""/53}, 0x20) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r8, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r12, 0x5361b3168ffd007, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x600000005}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x841) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000010601"], 0x1c}, 0x1, 0x0, 0x0, 0x40019}, 0x44) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000080)={'ip6tnl0\x00', 0x600}) 35.453408238s ago: executing program 2 (id=1169): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x4e23, @local}], 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r2, 0xffffc000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x240, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xa0, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x5, 0x8, @broadcast, 0x36d, @value=@broadcast, 0x1, 0x7fffffff, @device_a, 0x3}}, @random_vendor={0xdd, 0x59, "1434379787446789527d6be271fbf5cc89056f5b042929bdcfa2546d4d4a6581b0fdcb91d7afb2fdbd67ba26d208ffd359960b4023d14415cb3a9bbca5a18274f20d917b058ae021051ae5213ec2ffe2c1aa86c47abb8fb92c"}, @rann={0x7e, 0x15, {{0x0, 0x6f}, 0x5, 0xd7, @device_b, 0xa, 0xbe, 0x80}}, @challenge={0x10, 0x1, 0x86}]}, @NL80211_ATTR_IE={0xa6, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @peer_mgmt={0x75, 0x4, {0x0, 0x4, @void, @void, @void}}, @perr={0x84, 0x22, {0x3, 0x2, [{{}, @device_a, 0x5, @void, 0x35}, {{0x0, 0x1}, @device_b, 0x1ff, @value=@broadcast, 0x39}]}}, @measure_req={0x26, 0x6e, {0x8, 0x7, 0x6, "7933f77741e6e231111b4e72687f80791bc851fddce15b9e4739f16bd5e364b3e939f87af7c407e62f108ba6918c45a7618664621267d09c29b303f58a7e1b550378bd2245c4e5cbf371a151be901367260d0334606f8873870260b43fe42a85727e060e704bbcb4f64d89"}}]}, @NL80211_ATTR_IE={0x82, 0x2a, [@ibss={0x6, 0x2, 0x4}, @gcr_ga={0xbd, 0x6}, @fast_bss_trans={0x37, 0x6a, {0xe4, 0x1, "3cdd50e8b18a701c248068b7ed6e2ce2", "5fb651b312fea304d169a70083b212759d211c222b7f5f71db5d60a0f94f03e8", "055ccb8df52401c89bcdc9d6a3d06fa066e0813e3b2822e813076ed2daa6f713", [{0x4, 0x16, "e18aae9142ccc6d74066f7895aba3580fc09e2dbb0c3"}]}}, @chsw_timing={0x68, 0x4, {0x4, 0x58b}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xff8f}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e5d47cfbe4bc"}, @NL80211_ATTR_IE={0x38, 0x2a, [@erp={0x2a, 0x1}, @mesh_chsw={0x76, 0x6, {0x9, 0x2, 0x3c, 0xd}}, @prep={0x83, 0x1f, {{}, 0x0, 0x5, @device_b, 0x2, @void, 0x82, 0x7}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x48040}, 0x48c0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10031412e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c000000100007010000000000000000037c00001800018014"], 0x2c}}, 0x0) 35.434148673s ago: executing program 0 (id=620): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="9feb010018000000000000000000000000040000f2cf3f7516659366a247a700"/47], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0xa, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x28, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x4, 0x15}]}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getnexthop={0x20, 0x6a, 0xe976912f002a1383, 0x0, 0x0, {}, [@NHA_MASTER={0x8, 0xe}]}, 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 34.369349301s ago: executing program 3 (id=1170): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001, 0x7}, 0xfffffffffffffdd0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000091, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) mmap(&(0x7f0000d04000/0x2000)=nil, 0x2000, 0x1000009, 0x4000010, r4, 0xd1383000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x1000002, 0x12, r2, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) r6 = openat$cgroup_ro(r2, &(0x7f0000000100)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f000060c000/0x3000)=nil, 0x3000, 0x800001, 0x100010, r6, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) 34.368823803s ago: executing program 1 (id=1171): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) unshare(0x26020480) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, 0x4f, 0x1, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$inet(0x2, 0x2, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x1, 0x1, 0x1000, 0xfffff800, {{0x5, 0x4, 0x3, 0x9, 0x14, 0x64, 0x0, 0xd6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @multicast1}}}}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 34.367449426s ago: executing program 2 (id=1172): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000a2800000000000000001000085100000000000000002000000000000ff00000100da"], 0x0, 0x52, 0x0, 0x40000008, 0x5, 0x0, @void, @value}, 0x28) (async, rerun: 64) r0 = socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 64) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0637bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) (async, rerun: 64) shutdown(r0, 0x92f064826e9b4a79) (async, rerun: 64) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000000)=""/7, &(0x7f0000000080)=0x7) 32.670156955s ago: executing program 4 (id=1174): sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb0, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x400}, {0x8, 0xb, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x86}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x7}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40c5}, 0x11) r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000540)={'filter\x00', 0x2, [{}, {}]}, 0x48) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x44}}, 0x81) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000a00)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001000)={&(0x7f0000001080)={0x6d8, 0x2d, 0x20, 0x70bd25, 0x25dfdbfe, {0x16}, [@nested={0x158, 0x12d, 0x0, 0x1, [@generic="09993a364659f602359fc98287029bb1628d3a6e05ae472f2f961968eb89519d7e71f910a2769b89399f411593cab00fb200784fa10c501752be1cc455e6cff549cee5a5854f75fe17bf645169787bc1f3aab4863992754799298b40dd407121010e007392d972e3f7e4a71090ff4f6cadb0558cd80560b669455c547c392ea095c82f811b8fea7e90d39af7", @generic="bf104a84ce8f0e4dbe787090115da9a61764b26e15ae77b78bb4bf462c3054e0bdf6388680b8f9a83df6e71b9069a28e6775ad8eb78936a532edd034e95549f3dc1a1cab4c8ebf02e30a2434953d4581d22e22f65b752edc9e7866ba7629c6c6ed436cf092905893a78b5b9b4ba8c04bd7d04d4a37b4b2c7022bfd7c2d9ad23caeeefd128a991b7bfcd14a6a62c1d72d35b09b2533", @typed={0x8, 0x109, 0x0, 0x0, @pid=r2}, @generic="8a0a39fabe383d33da74853173af1b43b3fa991cb044395ce0fca62b9d2c35c9b5137178f54306938dc09d"]}, @generic="1cb59c4ca68997983189e7f80a17d804f7ec6db7e41fd87a2fc116dde249872b8905ecd5ddd3b493161715ab8e0276f8f8a22f9f41f9bfbc111773030c787a65744acbbeb198b461a61de15c21dedf3e92f86c2785ea9aef3a53016e394ca71f2bb65c00f37cbed4bca297f2391a2358ecc463bfc0df84ed794c92db4b026c87358b3218555914379a28e0413d8bb76fadc962f4ab163330c49c56c033c081f556e2435fd740dfb184136e7fc417f3f9af31cd8bacfd7e1435141d9082e7f37064445c433c973c50f4d34ee7579ad5511589", @typed={0x8, 0x9d, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x103, 0x0, 0x0, @uid}, @nested={0x33b, 0x84, 0x0, 0x1, [@generic="7e9f9a381569562233ba19e522ddf87c5e0dab15ac9cc5b03dbb60057c3b4961a6f245b0406c3923711009470e9ffdf9147bb845cbf72500bcfb9c889b8b97c5f1632fa3ba1ce624397be98dd400371988de81fdd9ff1e2dd355df7bc8ff663c9a47fb4609f9fe961ce20187a8d9bfd74cc38066c074e1bbac0e3b4ca8deacdafde3c8f78166014360a0ca7c471a6a3544ed003b8f9bc2ce7d232c03cb21cc3c77620f2be66101ec716e607a9d7ec2a7ad523578ca7071e074041044827c2752165bb0ae0d657076c101a9d55af8529b514fee639433006b9c8bbce1d1b04f6f423e815174", @typed={0xf4, 0x111, 0x0, 0x0, @binary="aa4da90fd86fa16672d6d3fcd9d123247554590277f617926f1f6ff0f80a774a7300b4adf37bfebeb8136e0385e84651a995e0a10546138deb461576fff3a58241e97de9bc9d69325a73be8e1bab61d6a9853b7b10e490eaaf74576e748c6ae1a7ff7c4a43b37e56c362e197ecd93c11744b38e2f8d7985c946cbc5e118691c6a033d123ddad91ac33f8ac15ab50b7d0eef31fa7b9339eccc3813f592158114e47af86a9191a62e97e82279e26f9a9c83c5a27c07a35b209d1259a3c17c9ec682ebf101f6320d5a8130652b3b7a21b9471b5f438a9f55f5ac197eb9084e8ae88a28dc904667aa810e9e1ea13e5afc248"}, @nested={0x4, 0x3d}, @generic="e128b4d8652630192e6fbfa7039e2277d8550d5683d67a8f6656e3cc428769d1979599b4470b66bd07c78acd5c8cd3bde7b90e31d47dea081ed7e8209a5434ed0b62fcbb85a4978b02228f73be2ba984a5dec0ce1c0177dbd4ebf18b78bbb9c88d0804d02d71819d7edbe6590a0a7bdf15e5a065e6396fa985be90683749bc8af8", @generic="1554bc9ae8f8a7722d840c50743d5d011fa2b67a074c13a564328833bf17cdbaf09a684c1ccbf1e64a757eeb69a28f3e54ddd20b5727d6408187493a3327dea70908e94ded9aa35463346374c8091ef93db8aa9baf2c738feedf14d876681965a16d950e40ca3c5fe592509a0f2f05aada49db6629057d1bf3b04855417ed179e5545c3bae9ee1cea9a8d550684229a04ad486abb6ac32665555d39a4249c6eeca88e7be12e27d36e3", @generic="defd06107648b53c17ff1a251fab7b37511bb97acd603acb", @nested={0x4, 0x131}, @typed={0x13, 0xa3, 0x0, 0x0, @str='batadv_slave_0\x00'}]}, @generic="adbd14b0ed0f12ca05fe1c629c91f18d77e65da47e0a308d08609f249f4ddeac0aa7d7bae1df9c2bfd1cbb36009ad211e8ec4cf56f6e893a31dac6337915750922f8747b0db8c4afd0fc5ea4a00ebfba91575cc8f274fa35ac560e951840b4a344001251f6d3821c2cfe77039d74a5abfe21351a04683498a5b7b0a670b056b05a7c2a5fdcd2347f309cb83164eed56761234ead2d41d643294a689358cc020450ff26e32f0a7016bbb48482b679f778c667cd36d767e570cc63ff495edad95f6e4e4dfac60bc7d3ec3e25488c20d34e97cb2cbe852a02", @generic="ae215f2aa04ffdafdc6d395d5e46fc82eaaa0542b6e06c006d1d885ab7ae16dd7bc4094a81b2f25d2f1c86e051a7a1d3d139af1f3ea1bb7aff9c1abfa7a864b94528c95998b8174543e9773bf2e99b39351c0ea86cb5952a412befceebfe27b9a260ce8b9cf5a05baa789ef31367fbfff7c7ab54e960fa"]}, 0x6d8}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r3 = getpid() r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = socket$isdn_base(0x22, 0x3, 0x0) r6 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r7 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0xc0800) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[], 0x14}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r13, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0xffffff1f, 0x70bd29, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xf3a}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}]}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x64}}, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000280)=0xc) sendmsg$netlink(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)={0x34, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r15}, @nested={0x1c, 0x0, 0x0, 0x1, [@nested={0x18, 0x131, 0x0, 0x1, [@typed={0x11, 0x11d, 0x0, 0x0, @str='}!#^#\\,/,)\'/\x00'}]}]}]}, 0x34}], 0x1}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x28}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xf3, 0x6, 0x4e22, 0x5040, 0xa, 0x80, 0xc0, 0x21, r13, r15}, {0xad, 0xffffffffffffffff, 0x7, 0x6, 0xef1, 0x2, 0x5, 0x2}, {0x5, 0x7, 0x3ff, 0xc4}, 0x3, 0x6e6bbb, 0x0, 0x1, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x4d2, 0x33}, 0xa, @in6=@private2, 0x0, 0x3, 0x1, 0x81, 0x0, 0x7, 0x400}}, 0xe8) r16 = getgid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)={0x24, 0x40, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x8, 0xa0, 0x0, 0x0, @u32=0x1}, @typed={0xc, 0x97, 0x0, 0x0, @u64=0x6}]}, 0x24}, {&(0x7f0000000380)={0x194, 0x1c, 0x4, 0x70bd2d, 0x25dfdbfc, "", [@typed={0xca, 0x9a, 0x0, 0x0, @binary="7290efd04158b942f2c54d8a34a58c6f240fd83a6c3d97b152c358d9baaf680b10399e7e335d59a27844543b19ab86dd920f8a4dc31aa2c04249838cd5c04acb734b08b7d95ee7de3929e1dbcadef7c5a483c3b7381afb08991c634dc7ed54b7ab99388ab39311b2b7d9cfd2a5d68e5565733bbe9f21c4bd41b62a8871c01c248c377b412f2b95068d4a426d6ba59880eccc5fe7fe0fddd239a6086c29d6c2de33a11d324052108ff23dc660a6b32c73c8e2e70f505c692ff636b22f82ceab89ddc59fab9678"}, @nested={0x38, 0x11a, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @uid}, @typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x24}}, @nested={0x4, 0x71}, @typed={0x14, 0xfb, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, @typed={0xc, 0xe6, 0x0, 0x0, @u64=0x3}, @generic="3e890cecc18cdebeb6ef7a7d8ff8caec8644d2f5e88adfe253843fda1cfb62b7fff8e412bb7f79315d5f6613ca4438c3ff3d69bccdf17952ae9b24e123f06ca78cb1283a35ee3b24e818a16af1a822e7d58f367d6ad042e75acbe3a17aec36", @typed={0xc, 0x5b, 0x0, 0x0, @u64=0xbcd}, @typed={0x8, 0x141, 0x0, 0x0, @pid=r3}]}, 0x194}, {&(0x7f00000001c0)={0xe8, 0x2e, 0x200, 0x70bd28, 0x25dfdbff, "", [@nested={0x4, 0x143}, @generic, @nested={0xd3, 0xf0, 0x0, 0x1, [@generic="10d284366d849b10983f3c67da7068affb6bb1c55e8bb687479f6f22626737c730461888f9389107ea3038d6f81280c30b9d7151723a5894c04ae61f3b1cb5ec39c2defc225546dd3342034e261c747f63b38234e06a3920f54f7773e175637f76beb5654f4f9e0269d6f7e05b96c3576bf93bfb1f984514ada5b8a582b96d09a95d03355d1d260daa391c1697e492bc00347b784999ba3e596f25dad31b2f8b3c16012e455e0d3ceaeb868949fd733bf38c65c982d157c8bcafe8e83b2dd3b7c0b12e23bfba50412030ac195a9d3e"]}]}, 0xe8}, {&(0x7f0000000600)={0x4e8, 0x1a, 0x0, 0x70bd2b, 0x25dfdbfc, "", [@generic="4e29715f57804507654c21837be0156a7e915ac77bdf7eda258cad257b2c0f7156858a34f968e4803a99c600dba16268c3df2ebd37f7bd61e03dd2f7750276037372704f4e9fecf57520b2eedd480d28a523d1a318f9db5129", @generic="bff54bb4a7d23a76216939e1b730fc334ab2d84e1894a0a4418ecec9e1b4d2ff0b5d58061617462adb187f0be9aa6b18fc7bad7573f6e670161f938b75868803c81e2bd7a507bd17629a92c0a11544d1", @nested={0x2b8, 0x112, 0x0, 0x1, [@generic="b4d39d08b6d00e0ceab9254061c129c6a284abb47334d79e2049fc02b42723c3b22d73f1d3f5296dfc15380cfedc4512cf0ac745ca31b150ab6152cde47886641c3f9d5e97acf1a586a1eed0239f98e2f1f343618ebc082b5ac78c007f8daf2b016d599ac3bf5e702fda9b28801dee93c0e7d35e441e6d5ae42813b6f557743c8855763c19e61119caf8795724c855805082f39d1fbb5eb4094b22b0f569c96f10f2e7a777d8de35b4a759dbf8065828e99f63208e22442cb83943e3d2b55ed0135220dff79ffb7836d9cf1be843b0b13031187c024623e5513fa71e305a14ef781d696d76b56dcc20afcb8aa7", @typed={0x8, 0x33, 0x0, 0x0, @fd=r4}, @nested={0x4, 0xbc}, @typed={0x7, 0xe9, 0x0, 0x0, @str='{{\x00'}, @nested={0x4, 0x85}, @generic="b059e0c9456b9a7d9b31f95fcb193c46", @generic="5caab49d8445feac2999441b9026539d6037376e299aaeae20ebe5af2bba0f25212bee677f551b21d1ae2b1e54bd2f7598662f41115b75ee822fe92adc49b1ca07ee5e2553e75a93e0708d23739bee820bb6ff1892f74102e3c5b2c14d0c663f5d8da30df7a04d5fb70233bd810875aed1d45d146b2258ee49b446022056d885334e764c889bba31b5833ec377dc3b99de0bac1820bb9901633b16088c52df0112926e0310f104bc2658c3aff76dd047096498d0584bbfc2957244816ea2a0964f6920257a32b7115bc2206762055b9247a0e8d94adf5a5c17599447e28adc8e6e2982fc3628dccc8c8a72808303c3b8c3f4cca560fe9c1ae5", @generic="fe27cfed6b3ecbf49e45b95cd004d2d753a850cabafdbff86ecb521ee82ec29d8cbefa405233d54025faa8ba98da102611ece4d6c8a6d7a3dab32dba421aaa2dd27ce0f227c6da21150784e2ea9768f629b98ec49912b5a3ef8498aa3f41c35a07ec21539e4a545daf3fe9e68984b483e5eca5493051d1059bb3a879b97e8f333d0eb7a0b03e2df8d72b80c81e23506f823e456c451b21d491a6081415de", @nested={0x4, 0xaa}, @nested={0x4, 0xf6}]}, @generic="b9c6727b74a560373f57fb4c4048312af4773dcc1f7975fbc87feecc40b39c76e4ca9405033918632ca599c0c8d1e9dad393f128b030263b8dbe9f42feff7c4cc21dcb3291b1dd17b230e15d391c156c", @typed={0x8, 0x98, 0x0, 0x0, @fd=r5}, @nested={0x10c, 0xf7, 0x0, 0x1, [@generic="94931e906c0beb4c63420e7c6af2bf99801d15d33238d049a4eef802eed9c447230078faa9bbde2c5da937936157bc4600e3ae04d3aeac61b2ea6e4daf3ae9ee30c244845d54815b8a828ad6b97df75eed0ad26e34df3df512c7751fb8505ab7d57a27e49de4f06c845007e0803f534c1902f8074e2cb834084d5aa44074bbeb3ae985a3020a90a7525b2f214c14e17309b0777f1e037a939405eef4a27dac702b07bcfa30fc7c1b0f0813b510b763a11f73a9be3fed7652fa2f17f53a54dc6ece2c6708587ddf75b2423752b2e0836aeb3e0fa9fab5020f274d1f2da352f00439731be17b29fe82242016c9b2b585dbd801", @generic="81e1e64f7478de39e3706d754797cb6454bc243e56d9"]}, @typed={0x8, 0xd7, 0x0, 0x0, @fd=r6}, @typed={0x8, 0xa1, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x4e8}], 0x4, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [r7, r8]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r15, r16}}}, @rights={{0x1c, 0x1, 0x1, [r17, r18, 0xffffffffffffffff]}}], 0x58, 0x24048815}, 0x40041) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000800000000000000000000711033000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @cgroup_sock=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 32.669041869s ago: executing program 2 (id=1175): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000500)=0x70, 0x4) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000500)=0x70, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) (async) sendto$inet(r1, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10) (async) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]}) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0x7, 0x4}, {0xfffd, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x10}}, @TCA_RATE={0x6, 0x5, {0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x24000014) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000840)) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) recvmmsg(r3, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) accept4(r2, 0x0, 0x0, 0x0) (async) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000280)="625e4bc431896083fd715a3aff81dfb42f9ba756d3baf3c2929f1bb273fa59db3aed7f332b5c816216ed4310cd1ef491f527f60401b75e4905f4dc5da655fdc315", 0xffffffffffffff3c, 0x24824, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000004c0)=0x9, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000004c0)=0x9, 0x4) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) (async) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) write$ppp(r0, &(0x7f0000000300)="4daf8a728e", 0x5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000791079000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000791079000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = accept4$ax25(r4, &(0x7f0000000140)={{0x3, @rose}, [@rose, @default, @bcast, @bcast, @null, @bcast, @default, @netrom]}, &(0x7f0000000200)=0x48, 0x0) ioctl$SIOCAX25OPTRT(r5, 0x89e7, &(0x7f0000000240)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, 0x44}) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000440200180022000dc8a9ed89f75c6d84e8d4b8b194460f9f08002c0000000100040014edffffff"], 0x44}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 32.666827422s ago: executing program 3 (id=1176): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) (async) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) close(0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000900)='%+9llu \x00'}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xcd}, @generic={0x3, 0x3, 0x9, 0x0, 0xffff8000}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}]}, &(0x7f0000000200)='GPL\x00', 0xffffffff, 0xf3, &(0x7f0000000400)=""/243, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x202, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x4, 0x36}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000005c0)=[0x1, 0x1, r1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000600)=[{0x4, 0x5, 0x0, 0x9}, {0x4, 0x2, 0x6, 0x9}, {0x3, 0x5, 0x9, 0xc}, {0x4, 0x1, 0x6, 0x6}, {0x5, 0x5, 0x6, 0x7}, {0x3, 0x2, 0x8, 0x7}, {0x4, 0x4, 0xa, 0xc}, {0x0, 0x2, 0x2, 0x6}, {0x3, 0x2, 0xc, 0x9}], 0x10, 0xfff, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg(0xffffffffffffffff, 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[], 0xa) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[@ANYBLOB="d4000000010901040000000000000000000000000900010073797a31000000000900010073797a310000000008000340000000000c00048008000140000000000c00048008000140000000070800054000000000740002001400018008000100ffffffff08000200ac1414bb0c0002"], 0xd4}}, 0x0) (async) syz_emit_ethernet(0xda, &(0x7f0000000800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0xa4, 0x3c, 0x1, @local, @mcast2, {[@fragment={0x87, 0x0, 0xd0, 0x1, 0x0, 0x8, 0x67}], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "9cabc44139361c99ec9158985b68463557172e16e0768d14482532e53264a937", "6522bf6290685e9b588c4ef13eac667fe6e3efab47922db79758e2a4199adc488950df348cf0eaa027d79207f8c7f5f9", "e2ad1aff558c900d72a16357b870739dfb7b76cc2c88153c596a98e1", {"b731d5b4281473f401be54206769566b", "b08d058405ca581cd24e96e8cf755e7f"}}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2400000019000100feffffff000008001d01070008000900", @ANYBLOB='\b\x00\n'], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000800010000000000140004800500030007000000050003000100000008000200010000000800020001000000a00008801c0007800800850002000000080006000000000008000500400003"], 0xe0}}, 0x0) 32.665025838s ago: executing program 4 (id=1177): r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x27, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6197}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @ldst={0x3, 0x0, 0x4, 0x8, 0x2, 0x18, 0xffffffffffffffff}, @cb_func={0x18, 0xc, 0x4, 0x0, 0x1}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @printk={@ld}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x32, &(0x7f0000000100)=""/50, 0x40f00, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xc, 0x8000, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0xffffffffffffffff, 0x1], &(0x7f0000000240)=[{0x4, 0x3, 0xe}, {0x4, 0x5, 0x2, 0xc}], 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='fsi_master_gpio_cmd_same_addr\x00', r1, 0x0, 0x8}, 0x18) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/238, 0xee}], 0x1) 32.664321848s ago: executing program 3 (id=1178): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x80, 0x1, 0x5, 0x1, {{0xc, 0x4, 0x0, 0x1b, 0x30, 0x68, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast2, {[@lsrr={0x83, 0x1b, 0xd9, [@remote, @local, @dev={0xac, 0x14, 0x14, 0x36}, @rand_addr=0x64010101, @empty, @loopback]}, @noop]}}}}}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000740)={0x0, @in={{0x2, 0x4e20, @multicast2}}}, &(0x7f0000000500)=0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, {&(0x7f0000000200)=@in6={0xa, 0x4e23, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}, 0x216d}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000240)="348f5eecdb0669af5de0104884896c27b41408a10b0d72", 0x17}, {&(0x7f0000000340)="594fdb6c8cc14a57cc7992e6c640175c624e1d13d33219e1ad111f60e72d9aadd9841ec8b1fd3dce3b908ac0bac03b04593f7b15d98936d05543bbf2f673383faf26872208c600c995ac96ed17614abba25c92c31718232fb1270db484c6735c7791c30e50a00cf555c242685fb5786153258852fc3174a6f1c9ff4eccbe3f01d88bbc7ff60d99fa359012835d1ac640260c717aec54c61616853fe17310439f99c694e297eeb0cb8b4c3a1db1421fec5b00e33a509ecb6c66c2afdc1f85348f55762ce2303aaaad0dcfad59cf3e48c26444c8ce8a1120e63ab31adb5c0889c08e5c0447019591736b1b3e39c0b0a160cf94ca7db4", 0xf5}, {&(0x7f0000000440)="0abc3ab50d1f5c87a64c0b8d3630b928e765c920d38e2716a1ae4085ea421aafb69f5a104f0c0febccb7811942134ed4f9dbefe130b904e620729db10652148f64b85510deb24eded897d4920cd964123110a6c629f778a9d25e2038cc3bdf63f75955e12f2e0688ec4e0a4169606a11f69d545fce406a443eb1ba4324c76b2ceed054985b23800f117abe6fb1f54381dd5bbe26f8966b477c5c233b8a237726e6", 0xa1}, {&(0x7f00000005c0)="8304d3d4b8b3b044e613d9f42033022ee1831d72b83e331c0b892ece5928c26f825166fa01b79db1e130cb462a194eb422ec77bc4e36c749bacfc3d773314ad8fe2026b00592c41933ccc3111e448115f85110473caa2d65102f85f0afa6e9dd41e39f5b4dc56584a2d33d8666483e3fe37d4fdec2142b", 0x77}, {&(0x7f0000000640)="9532579d47e93f6c6e8f2e4a7dca0d4ea1b035f3359740f06bf0e4b85666238fb7d9ff34a0fa78293ef8effd9f79c83ae1737c40bfbec03c935f275d2140bac1ee6db33c1e180b95ecd2f8", 0x4b}], 0x5, &(0x7f0000000800)=[@sndinfo={0x20, 0x84, 0x2, {0xffff, 0x208, 0xcb, 0xcef, r2}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x38, 0x88040}], 0x2, 0x4040050) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=r4], 0x9) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffca8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x300, 0x0, 0x36}, 0x9c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000000540), &(0x7f0000000580)) 32.656267991s ago: executing program 3 (id=1179): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 64) unshare(0x20040600) (async, rerun: 64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async, rerun: 64) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1060}}, 0x1) (async) recvmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x140) (async) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000001c0)=0xfffff800, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newsa={0xf0, 0x10, 0x819, 0x70bd2a, 0x25dfdbfc, {{@in=@local, @in=@multicast2, 0x4e21, 0x20, 0x4e22, 0x400, 0xa, 0xc0, 0x80, 0x87}, {@in6=@local, 0x4d5, 0x2b}, @in=@rand_addr=0x64010101, {0x3, 0x5, 0x7, 0x7, 0x6, 0x5, 0x39d, 0x85}, {0x2, 0x81, 0x8, 0x38}, {0x6, 0x0, 0x3}, 0x70bd2a, 0x0, 0xa, 0x3, 0x0, 0x40}}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x2000080c) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x80, 0x80, 0x80, 0x10, 0x0, 0x0, 0x3, 0x4}, [@FRA_DST={0x14, 0x1, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x44}}, 0x40000) (async, rerun: 64) r6 = socket$inet6(0xa, 0x6, 0x0) (rerun: 64) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) (async) listen(r6, 0x101) (async, rerun: 32) r7 = socket$inet_dccp(0x2, 0x6, 0x0) (rerun: 32) setsockopt(r7, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) (async, rerun: 64) connect$inet(r7, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) (async, rerun: 64) r8 = accept4(r6, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r8) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, r9, 0x2, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x4000081) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e8014000300200100000000000000000d000000000114000200fc0200"/68], 0x5c}}, 0x0) (rerun: 32) 32.655316095s ago: executing program 3 (id=1180): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20005}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r3, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040820}, 0x8804) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000130d00"/20, @ANYRES32=0x0, @ANYBLOB="d11101000000000008000500", @ANYRES32=r1, @ANYBLOB="140012800c0001006d6163766c616e"], 0x3c}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd}]}}) 32.653983619s ago: executing program 4 (id=1181): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000200), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @empty}], 0x10) sendto$inet6(r0, &(0x7f00000002c0)="b1", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="cb", 0x19fff, 0xc0, 0x0, 0x0) 20.037440411s ago: executing program 4 (id=1182): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}]}}}]}, 0x40}}, 0x0) sendto$packet(r2, &(0x7f0000000000)='1', 0x26, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB="c37700000000000000000000bebcfd8f4574d0f9ebafcb74142ad33c2baf471c95b814936162b51d5ed2d9633348d462194598014f34ad0f50300442bd56d7e68f355d276e977853747489181227bc251fb3462700b8b912d92a6d826108224280f8105a16cff4291f786f8e2bed63a0bf4d38a5e934020ab052e537c86bbfe953311663c22bb8f3436e1cb2efb8048ea67f3808e272a7e5c92d39a3b9d143fc018d764acd6529a492d9eeac6e810e415d350462bb99fa81f5d76a111ded07eaeec870037475e989e3d8fbd934342b98d31f2b61c81c90928ce854da61732ef10167c9c33a3136b8ce2d32abbe1210a562", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) sendmsg$inet(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) pipe(&(0x7f0000000100)={0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000001040)={0x418, 0x14, 0x400, 0x70bd2c, 0x25dfdbfb, {0x9, 0x5c}, [@INET_DIAG_REQ_BYTECODE={0xcc, 0x1, "f36e03f8e96a1b47263d51732ff67e6b1877eee4bc1a8e9e2ac3a8dec6c4cc6973fda33d7db94afa65189744c4ad363d20b07eec7a9e9f3f2ea2e11824b23aecfcd0332dd03a7f3d8b49e9aaeb63088d3be884f43c71bac3d730a722129a675734bc30881147be533e9b0fb0ac4e239c9b480cbfd6d6129924a5a47a0933312e1df0ee2425d44c67a6380193a2f31cd675374b83c2ed30bf72296f2945c324d67721e5807787b8ca590dfe912c1458d32be7a590f42ee507949f167bda8bfa7b3f778bf2599edd0c"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "e24a84931ba2fb18741027a4f257ce1c930515d5a439085d6bb3772e47743b2d66771255d63e8a5c8df50d8170b866c53797aa00d2d2354819ac1cd2fffb9528064dad9fa89373e98770cbbd20b6e41a9b61411f15a28a36bc6c60212b92f02162b8d3a660bbc03fb5cdf1bd1df93632d739268ec61699dbc4bca9239dc4c148cd0389bbcfaf80999cb928c7901ca59f71e48aa566e887"}, @INET_DIAG_REQ_BYTECODE={0xfb, 0x1, "26bb6bf8d5f0723336dd2b18dd2decd706d2a48888cc6622cecb9bfe674ccf54014cfd201d4d831c9074b14b5293f9ebb0f8cbca92f229b14c42224b8457b79b09da1270cface6130cf79d7dec0ea802abb31fcb2319d2cf8d0f780ee2801382bdb50515cf7aad6b3e7c56e836e4304a4d7a236723e2c1ba142fcf53071d09dbca996cd3e350f1bad953a210b9870cbe36a205912960f170dc3dc458d50b2bdf1b33995890068a3a28b78336f970c4e2af41ef4e6ae4c196f639ee2d521d73f8585d0c12b51a73a4c689d4cb42872b7c96470e8b70a9ab1fe214523b13fd2c3209f487ea774c9e4739a7f5f975be45dd91b11011c1718d"}, @INET_DIAG_REQ_BYTECODE={0xc6, 0x1, "f77a3ac012240a895b798a23031524b3235cc9beeb87d46cd293afb1ef27257df5c4309bb409e1a8384b529c6c6bda2d092de778b487ea1ded80b1eccaf3eed79c7ca4d7140159057b761eeebdfde523b4ffdaada34269a58bdc6f2454b6f1bb881d58aef9d7bc666b2592a66321113288258e8cf0e73332c068d29113c9be8f6fe6c4ed4097fadd5b2d457d01608fc6308d32218dbd434b05367231610c6c6ac6869eeb4afad9bd100681640b22cbed7522a7b9a62e149808927d94c69490e3df86"}, @INET_DIAG_REQ_BYTECODE={0xd7, 0x1, "fd0063920fadff55f70fcac674f112278bbfadad24f4884371cea0b7c4ae859ec580eaa93fa24749946de599ce2c1e94781e707c81c0a21548bd4072b9b85ebe611a2027a2a10cab7f17311fdbae854ba8711b1459bf8285d54fefb9df4e3fa812334f70f0a4f5173b13be67ce8c420837fe61ec7831278450a7f2a8c0818a73d9bd30318567ac179e2d99497685e5e4aae15fa674465d990dac2595189b175a18bf134c506c931ea75f242b53825f88cc8ef45d4162885e01dc26da89110480b6dcf946425f1b52895b96bdb80a2aec060c79"}]}, 0x418}, 0x1, 0x0, 0x0, 0xc0c0}, 0x20000000) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000001c0)='>', 0x1}], 0x1}, 0x8815) sendmsg$inet(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000140)='Z', 0x1}], 0x1}, 0x4040000) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc786b409ac930c90ff90f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d858952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09e3187a10d905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367638cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a2d4f12e8e717eaaa2a6d14fee0c15f36c203dbc7c06128bec84231d43e152ef19ce027436fb4ebb9fce431b913f4817597a6f53d1626f9d1cb7b36fb18ac19547a8b20ede70c81a75686cea85dcd34408128da7cab045541bc6b9a0a79f63f2e7646356e04b977c9f47467537015240b974184be9c54b7c628ae4d97ebdb06070344468994afbaac71e5ffac2c61d9af66f9de2760a38e968a781528531c1c936a02065be48f1eee77be878873206d65bd0b1241fab9139abd7f40febe81fed3684e6b59273da01f1743c6a5df300ec59c65e8174fc2d95a62ca7b937289ad14107333007eab833a5849eb19f18ae41743dfb949377e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000a00)="b9ff03176844268cb89e14f008004b", 0x0, 0xfe, 0x60000000, 0xc1, 0x0, &(0x7f0000000b80)="89006c9e47c96781f9ce55a5784b22cac2291be6c6dff1071b29b092eaa378ec13a3b2a9c449984a3be68d7a37f5e761ad477a01ff7393f345a928acfed2eb3c1e53e86230f5b30cce0f5f905f91cd3af63dfdbe0b157fbac6cc4eff647f11fd012f7905b2c15223a76b91b124ca353ee1a7e13593c2dfeb2a0260cfe1526c81aa59f676ed0c6f0c3fa544477760a9735f6ecf8191083987fc1f69c6238ad0b0ab704f13ab30f1b963b8809d54bc359dbbc06488f01b3cf8e2ddd403ba72b42976", 0x0}, 0x50) 19.749716252s ago: executing program 4 (id=1183): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='qgroup_num_dirty_extents\x00', r0, 0x0, 0x8}, 0x18) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0xca8, 0x10001, 0x514, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, 0x0) nanosleep(&(0x7f0000000080), 0x0) 19.748490524s ago: executing program 4 (id=1184): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xfffffffffffffe9b}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r8, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x2c}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=@expire={0x1e8, 0x18, 0x300, 0x70bd29, 0x25dfdbff, {{{@in6=@private1, @in6=@empty, 0x4e23, 0x22, 0x4e21, 0x8, 0x2, 0x80, 0x20, 0x2e, r4, r10}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x5, 0xa, 0x6, 0x80, 0xb924, 0x2, 0x5d03, 0x81}, {0x1, 0x2, 0x6, 0x2}, {0x80000001, 0x1, 0x3}, 0x70bd25, 0x3505, 0x2, 0x1c017c891ce4ce4c, 0x3, 0x26}, 0x6}, [@algo_auth={0xce, 0x1, {{'wp384-generic\x00'}, 0x430, "39d4545198bdb02c127f6cbe5e6abd15d4cbcec7cad9ba0862767cb941e075695a3992fc772e1f6c4e056ef8879f9d104826863b9faebc9059f413ca14489b440578b94a44d2854c2d4bda8b61d502d75bcb5803f814d0e97bba7dceff750e272ee29a05017b9856b9908d58d970e0a660a0f4140be1b8070caeeb211eb1d67fb4320365f5cf"}}, @offload={0xc, 0x1c, {r4, 0x2}}, @coaddr={0x14, 0xe, @in6=@private1}]}, 0x1e8}}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@local, @in6=@local, 0x4e24, 0x2, 0x4e24, 0x4, 0xa, 0x20, 0x0, 0x3b, 0x0, r10}, {0x800, 0x6, 0xffff, 0x6, 0xea4f, 0xe, 0x9c2, 0x9}, {0x10001, 0x2, 0x1ff, 0x7}, 0x1, 0x6e6bb4, 0x0, 0x1}, {{@in=@loopback, 0x4d2, 0x2b}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x2, 0x2, 0xc81c, 0x9}}, 0xe8) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400000037000b0fd25a806c8c6f94f907000000", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x408e0) r12 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r13}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 10.366281446s ago: executing program 32 (id=1171): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) unshare(0x26020480) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, 0x4f, 0x1, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$inet(0x2, 0x2, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x1, 0x1, 0x1000, 0xfffff800, {{0x5, 0x4, 0x3, 0x9, 0x14, 0x64, 0x0, 0xd6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @multicast1}}}}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 8.032548404s ago: executing program 33 (id=1175): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000500)=0x70, 0x4) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000500)=0x70, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) (async) sendto$inet(r1, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10) (async) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]}) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0x7, 0x4}, {0xfffd, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x10}}, @TCA_RATE={0x6, 0x5, {0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x24000014) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000840)) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) recvmmsg(r3, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) accept4(r2, 0x0, 0x0, 0x0) (async) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000280)="625e4bc431896083fd715a3aff81dfb42f9ba756d3baf3c2929f1bb273fa59db3aed7f332b5c816216ed4310cd1ef491f527f60401b75e4905f4dc5da655fdc315", 0xffffffffffffff3c, 0x24824, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000004c0)=0x9, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f00000004c0)=0x9, 0x4) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) (async) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) write$ppp(r0, &(0x7f0000000300)="4daf8a728e", 0x5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000791079000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000791079000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = accept4$ax25(r4, &(0x7f0000000140)={{0x3, @rose}, [@rose, @default, @bcast, @bcast, @null, @bcast, @default, @netrom]}, &(0x7f0000000200)=0x48, 0x0) ioctl$SIOCAX25OPTRT(r5, 0x89e7, &(0x7f0000000240)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, 0x44}) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000440200180022000dc8a9ed89f75c6d84e8d4b8b194460f9f08002c0000000100040014edffffff"], 0x44}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 2.898510214s ago: executing program 34 (id=1180): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20005}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r3, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040820}, 0x8804) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000130d00"/20, @ANYRES32=0x0, @ANYBLOB="d11101000000000008000500", @ANYRES32=r1, @ANYBLOB="140012800c0001006d6163766c616e"], 0x3c}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd}]}}) 119.104372ms ago: executing program 35 (id=1184): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xfffffffffffffe9b}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r8, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x2c}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=@expire={0x1e8, 0x18, 0x300, 0x70bd29, 0x25dfdbff, {{{@in6=@private1, @in6=@empty, 0x4e23, 0x22, 0x4e21, 0x8, 0x2, 0x80, 0x20, 0x2e, r4, r10}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x5, 0xa, 0x6, 0x80, 0xb924, 0x2, 0x5d03, 0x81}, {0x1, 0x2, 0x6, 0x2}, {0x80000001, 0x1, 0x3}, 0x70bd25, 0x3505, 0x2, 0x1c017c891ce4ce4c, 0x3, 0x26}, 0x6}, [@algo_auth={0xce, 0x1, {{'wp384-generic\x00'}, 0x430, "39d4545198bdb02c127f6cbe5e6abd15d4cbcec7cad9ba0862767cb941e075695a3992fc772e1f6c4e056ef8879f9d104826863b9faebc9059f413ca14489b440578b94a44d2854c2d4bda8b61d502d75bcb5803f814d0e97bba7dceff750e272ee29a05017b9856b9908d58d970e0a660a0f4140be1b8070caeeb211eb1d67fb4320365f5cf"}}, @offload={0xc, 0x1c, {r4, 0x2}}, @coaddr={0x14, 0xe, @in6=@private1}]}, 0x1e8}}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@local, @in6=@local, 0x4e24, 0x2, 0x4e24, 0x4, 0xa, 0x20, 0x0, 0x3b, 0x0, r10}, {0x800, 0x6, 0xffff, 0x6, 0xea4f, 0xe, 0x9c2, 0x9}, {0x10001, 0x2, 0x1ff, 0x7}, 0x1, 0x6e6bb4, 0x0, 0x1}, {{@in=@loopback, 0x4d2, 0x2b}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x2, 0x2, 0xc81c, 0x9}}, 0xe8) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400000037000b0fd25a806c8c6f94f907000000", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x408e0) r12 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r13}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 0s ago: executing program 5 (id=1185): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008500000097000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa4ba, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, r2, 0x200, 0x0, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffd}]}, 0x1c}}, 0x1) kernel console output (not intermixed with test programs): 33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.949138][ T8233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.956620][ T8233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.997979][ T8235] vlan0: entered promiscuous mode [ 144.021402][ T8235] team0: Port device vlan0 added [ 144.057062][ T8245] netlink: 830 bytes leftover after parsing attributes in process `syz.1.633'. [ 144.078490][ T8245] bond_slave_0: entered promiscuous mode [ 144.084923][ T8245] bond_slave_1: entered promiscuous mode [ 144.090774][ T8245] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 144.142199][ T8262] netlink: 252 bytes leftover after parsing attributes in process `syz.3.638'. [ 144.230425][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 144.348110][ T8266] netlink: 'syz.4.639': attribute type 30 has an invalid length. [ 144.387434][ T8266] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.396172][ T8266] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.404542][ T8266] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.412900][ T8266] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.539938][ T8221] chnl_net:caif_netlink_parms(): no params data found [ 144.839025][ T8221] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.846264][ T8221] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.861785][ T8221] bridge_slave_0: entered allmulticast mode [ 144.880783][ T8221] bridge_slave_0: entered promiscuous mode [ 144.889415][ T8221] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.896617][ T8221] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.904114][ T8221] bridge_slave_1: entered allmulticast mode [ 144.911457][ T8221] bridge_slave_1: entered promiscuous mode [ 144.948281][ T55] Bluetooth: hci0: command tx timeout [ 145.085314][ T8221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.111395][ T8221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.122245][ T8311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.163199][ T8221] team0: Port device team_slave_0 added [ 145.191125][ T8221] team0: Port device team_slave_1 added [ 145.206138][ T8310] dummy0: entered allmulticast mode [ 145.261738][ T8221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.268591][ T8317] Bluetooth: MGMT ver 1.23 [ 145.292486][ T8221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.321537][ T8221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.374768][ T8221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.382073][ T8221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.410941][ T8221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.439037][ T8317] vlan2: entered allmulticast mode [ 145.445088][ T8317] batadv0: entered allmulticast mode [ 145.453735][ T8317] batadv0: left allmulticast mode [ 145.457112][ T8319] netlink: 'syz.4.652': attribute type 1 has an invalid length. [ 145.470271][ T8319] __nla_validate_parse: 3 callbacks suppressed [ 145.470290][ T8319] netlink: 224 bytes leftover after parsing attributes in process `syz.4.652'. [ 145.506785][ T8316] vlan2: entered allmulticast mode [ 145.512288][ T8316] batadv0: entered allmulticast mode [ 145.520731][ T8316] batadv0: left allmulticast mode [ 145.752841][ T8221] hsr_slave_0: entered promiscuous mode [ 145.791611][ T8221] hsr_slave_1: entered promiscuous mode [ 145.796000][ T8337] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 145.805471][ T8221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.831750][ T8221] Cannot create hsr debugfs directory [ 146.356245][ T8221] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.482435][ T8221] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.559472][ T8221] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.675644][ T8221] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.917170][ T8374] team_slave_0: left promiscuous mode [ 146.927880][ T8374] team0 (unregistering): Port device team_slave_0 removed [ 146.945593][ T8374] team_slave_1: left promiscuous mode [ 146.967681][ T8374] team0 (unregistering): Port device team_slave_1 removed [ 147.028609][ T55] Bluetooth: hci0: command tx timeout [ 147.189520][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.666'. [ 147.234053][ T8387] netlink: 'syz.1.666': attribute type 30 has an invalid length. [ 147.275250][ T8221] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 147.311551][ T8221] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 147.335522][ T8387] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.344891][ T8387] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.353898][ T8387] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.362854][ T8387] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.377270][ T8221] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 147.392017][ T8221] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 147.641235][ T8221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.682445][ T8221] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.712402][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.720789][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.789041][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.796241][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.852781][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.673'. [ 148.034956][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.675'. [ 148.093410][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'. [ 148.128305][ T8417] netlink: 'syz.2.675': attribute type 6 has an invalid length. [ 148.365966][ T8221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.447313][ T8435] geneve0: entered allmulticast mode [ 148.587878][ T8221] veth0_vlan: entered promiscuous mode [ 148.653479][ T8221] veth1_vlan: entered promiscuous mode [ 148.671512][ T8446] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 148.736762][ T8221] veth0_macvtap: entered promiscuous mode [ 148.796772][ T8446] netlink: 'syz.1.683': attribute type 5 has an invalid length. [ 148.819738][ T8221] veth1_macvtap: entered promiscuous mode [ 148.861883][ T8449] lo speed is unknown, defaulting to 1000 [ 148.933282][ T8458] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 149.018077][ T8221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.096786][ T8221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.108596][ T55] Bluetooth: hci0: command tx timeout [ 149.124487][ T8221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.136128][ T8221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.147736][ T8221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.158841][ T8221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.170247][ T8221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.180983][ T8221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.191967][ T8221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.204625][ T8221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.270468][ T8221] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.295215][ T8221] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.315212][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.689'. [ 149.338891][ T8221] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.349090][ T8468] netlink: 56 bytes leftover after parsing attributes in process `syz.1.689'. [ 149.367832][ T8221] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.576652][ T8473] sock: sock_timestamping_bind_phc: sock not bind to device [ 149.585878][ T8473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.690'. [ 149.596807][ T8473] netlink: 88 bytes leftover after parsing attributes in process `syz.2.690'. [ 149.606175][ T8473] netlink: 16 bytes leftover after parsing attributes in process `syz.2.690'. [ 149.800768][ T8472] syzkaller0: entered promiscuous mode [ 149.807087][ T8472] syzkaller0: entered allmulticast mode [ 150.207990][ T6092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.246362][ T6092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.325149][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.344917][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.361669][ T8494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.989849][ T8525] __nla_validate_parse: 4 callbacks suppressed [ 150.989871][ T8525] netlink: 3 bytes leftover after parsing attributes in process `syz.1.703'. [ 151.121809][ T8532] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 151.139028][ T8532] bridge0: port 3(batadv1) entered disabled state [ 151.145761][ T8532] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.153307][ T8532] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.458829][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.597959][ T12] batman_adv: batadv1: IGMP Querier appeared [ 151.695998][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.929430][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.995004][ T8550] lo speed is unknown, defaulting to 1000 [ 152.203877][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.347912][ T8539] lo speed is unknown, defaulting to 1000 [ 152.503167][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.513269][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.522483][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.530733][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.538593][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.546378][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.828649][ T53] bridge_slave_1: left allmulticast mode [ 152.854113][ T53] bridge_slave_1: left promiscuous mode [ 152.867279][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.891385][ T8550] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 152.906449][ T53] bridge_slave_0: left allmulticast mode [ 152.943109][ T53] bridge_slave_0: left promiscuous mode [ 152.973691][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.659269][ T8567] netlink: 36 bytes leftover after parsing attributes in process `syz.3.713'. [ 153.878572][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.903515][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.924839][ T53] bond0 (unregistering): Released all slaves [ 153.957104][ T8554] lo speed is unknown, defaulting to 1000 [ 153.973537][ T8572] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.628377][ T5841] Bluetooth: hci0: command tx timeout [ 154.735757][ T8585] bridge2: entered promiscuous mode [ 154.754644][ T8585] bridge2: entered allmulticast mode [ 154.904161][ T53] hsr_slave_0: left promiscuous mode [ 154.936140][ T53] hsr_slave_1: left promiscuous mode [ 154.960405][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.977849][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.006215][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.027843][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.075439][ T53] veth1_macvtap: left promiscuous mode [ 155.089183][ T53] veth0_macvtap: left promiscuous mode [ 155.095112][ T53] veth1_vlan: left promiscuous mode [ 155.101044][ T53] veth0_vlan: left promiscuous mode [ 155.342453][ T8624] netlink: 'syz.4.725': attribute type 1 has an invalid length. [ 155.722156][ T53] team0 (unregistering): Port device team_slave_1 removed [ 155.766225][ T53] team0 (unregistering): Port device team_slave_0 removed [ 156.206354][ T8554] chnl_net:caif_netlink_parms(): no params data found [ 156.228850][ T8594] lo speed is unknown, defaulting to 1000 [ 156.568527][ T8554] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.575832][ T8554] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.593832][ T8554] bridge_slave_0: entered allmulticast mode [ 156.604633][ T8554] bridge_slave_0: entered promiscuous mode [ 156.619113][ T8554] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.626290][ T8554] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.643350][ T8554] bridge_slave_1: entered allmulticast mode [ 156.653409][ T8554] bridge_slave_1: entered promiscuous mode [ 156.711374][ T5841] Bluetooth: hci0: command tx timeout [ 156.756381][ T8554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.834819][ T8554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.895652][ T8652] netlink: 'syz.4.732': attribute type 3 has an invalid length. [ 156.968232][ T8554] team0: Port device team_slave_0 added [ 157.011362][ T8554] team0: Port device team_slave_1 added [ 157.228531][ T8554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.236722][ T8554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.308626][ T8554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.462107][ T8554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.472231][ T8554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.500049][ T8554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.986516][ T8554] hsr_slave_0: entered promiscuous mode [ 158.003206][ T8554] hsr_slave_1: entered promiscuous mode [ 158.016283][ T8554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.024165][ T8554] Cannot create hsr debugfs directory [ 158.377338][ T8692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.741'. [ 158.417514][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.744'. [ 158.788801][ T5841] Bluetooth: hci0: command tx timeout [ 158.878922][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.751'. [ 158.966093][ T8725] netlink: 28 bytes leftover after parsing attributes in process `syz.4.753'. [ 159.072178][ T8554] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 159.089055][ T8554] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 159.126112][ T8554] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 159.145889][ T8554] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 159.345770][ T8554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.367421][ T8739] netlink: 144 bytes leftover after parsing attributes in process `syz.3.757'. [ 159.403368][ T8554] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.414041][ T8739] netlink: 'syz.3.757': attribute type 10 has an invalid length. [ 159.425580][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.432958][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.489633][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.498066][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.709185][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.759'. [ 159.780895][ T8762] sctp: [Deprecated]: syz.3.762 (pid 8762) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.780895][ T8762] Use struct sctp_sack_info instead [ 160.005758][ T8554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.175126][ T8554] veth0_vlan: entered promiscuous mode [ 160.262313][ T8778] lo speed is unknown, defaulting to 1000 [ 160.270117][ T8554] veth1_vlan: entered promiscuous mode [ 160.353583][ T8788] netlink: 80 bytes leftover after parsing attributes in process `syz.2.767'. [ 160.513439][ T8554] veth0_macvtap: entered promiscuous mode [ 160.581228][ T8554] veth1_macvtap: entered promiscuous mode [ 160.603993][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.615246][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.625189][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.636605][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.648857][ T8554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.672307][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.683536][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.694227][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.710442][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.739515][ T8554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.765076][ T8554] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.779631][ T8554] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.789187][ T8554] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.798803][ T8554] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.868042][ T5841] Bluetooth: hci0: command tx timeout [ 161.060303][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 161.102678][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.121553][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.256969][ T5899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.298467][ T5899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.617177][ T8832] netlink: 20 bytes leftover after parsing attributes in process `syz.4.781'. [ 161.638504][ T8832] netlink: 'syz.4.781': attribute type 10 has an invalid length. [ 161.659332][ T8832] bridge0: entered promiscuous mode [ 161.669046][ T8832] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 161.684115][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.781'. [ 161.940804][ T8848] lo speed is unknown, defaulting to 1000 [ 162.051056][ T5880] IPVS: starting estimator thread 0... [ 162.158491][ T8851] IPVS: using max 19 ests per chain, 45600 per kthread [ 162.898523][ T6092] IPVS: stop unused estimator thread 0... [ 163.002305][ T8865] lo speed is unknown, defaulting to 1000 [ 163.042666][ T8869] openvswitch: netlink: IPv6 tunnel dst address is zero [ 163.071350][ T8871] openvswitch: netlink: IPv6 tunnel dst address is zero [ 163.112116][ T6092] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.436277][ T8882] tc_dump_action: action bad kind [ 163.679483][ T6092] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.702311][ T8886] FAULT_INJECTION: forcing a failure. [ 163.702311][ T8886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.750305][ T8886] CPU: 0 UID: 0 PID: 8886 Comm: syz.2.795 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 163.750338][ T8886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.750357][ T8886] Call Trace: [ 163.750365][ T8886] [ 163.750373][ T8886] dump_stack_lvl+0x241/0x360 [ 163.750404][ T8886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.750424][ T8886] ? __pfx__printk+0x10/0x10 [ 163.750446][ T8886] ? __pfx_lock_release+0x10/0x10 [ 163.750483][ T8886] should_fail_ex+0x40a/0x550 [ 163.750516][ T8886] _copy_from_user+0x2d/0xb0 [ 163.750542][ T8886] __sys_bpf+0x1be/0x820 [ 163.750570][ T8886] ? __pfx___sys_bpf+0x10/0x10 [ 163.750618][ T8886] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 163.750648][ T8886] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 163.750676][ T8886] ? do_syscall_64+0x100/0x230 [ 163.750706][ T8886] __x64_sys_bpf+0x7c/0x90 [ 163.750730][ T8886] do_syscall_64+0xf3/0x230 [ 163.750753][ T8886] ? clear_bhb_loop+0x35/0x90 [ 163.750779][ T8886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.750802][ T8886] RIP: 0033:0x7fc72258d169 [ 163.750818][ T8886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.750831][ T8886] RSP: 002b:00007fc723382038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 163.750852][ T8886] RAX: ffffffffffffffda RBX: 00007fc7227a5fa0 RCX: 00007fc72258d169 [ 163.750865][ T8886] RDX: 0000000000000028 RSI: 0000400000001c40 RDI: 0000000000000012 [ 163.750876][ T8886] RBP: 00007fc723382090 R08: 0000000000000000 R09: 0000000000000000 [ 163.750888][ T8886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.750899][ T8886] R13: 0000000000000001 R14: 00007fc7227a5fa0 R15: 00007ffc04d600d8 [ 163.750925][ T8886] [ 164.066256][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.075577][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.093183][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.101323][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.109249][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 164.114731][ T6092] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.116615][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.207423][ T8892] __nla_validate_parse: 2 callbacks suppressed [ 164.207443][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.798'. [ 164.259567][ T8897] can: request_module (can-proto-0) failed. [ 164.300786][ T6092] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.360397][ T8890] lo speed is unknown, defaulting to 1000 [ 164.547172][ T6092] bridge_slave_1: left allmulticast mode [ 164.556855][ T6092] bridge_slave_1: left promiscuous mode [ 164.570343][ T6092] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.596689][ T6092] bridge_slave_0: left allmulticast mode [ 164.608247][ T6092] bridge_slave_0: left promiscuous mode [ 164.614085][ T6092] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.050942][ T8930] netlink: 24 bytes leftover after parsing attributes in process `syz.4.806'. [ 165.110990][ T8933] netlink: 28 bytes leftover after parsing attributes in process `syz.4.806'. [ 165.367656][ T6092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.381266][ T6092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.391623][ T6092] bond0 (unregistering): Released all slaves [ 165.406664][ T8903] lo speed is unknown, defaulting to 1000 [ 165.424368][ T8933] hsr0: entered allmulticast mode [ 165.438212][ T8933] hsr_slave_0: entered allmulticast mode [ 165.443912][ T8933] hsr_slave_1: entered allmulticast mode [ 166.054007][ T8959] netlink: 37 bytes leftover after parsing attributes in process `syz.1.812'. [ 166.106395][ T8890] chnl_net:caif_netlink_parms(): no params data found [ 166.158791][ T6092] hsr_slave_0: left promiscuous mode [ 166.177867][ T6092] hsr_slave_1: left promiscuous mode [ 166.186551][ T6092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.201060][ T6092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.223464][ T6092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.227854][ T55] Bluetooth: hci0: command tx timeout [ 166.237182][ T6092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.272462][ T6092] veth1_macvtap: left promiscuous mode [ 166.281309][ T6092] veth0_macvtap: left promiscuous mode [ 166.295277][ T6092] veth1_vlan: left promiscuous mode [ 166.301939][ T6092] veth0_vlan: left promiscuous mode [ 166.625747][ T8977] netlink: 68 bytes leftover after parsing attributes in process `syz.2.819'. [ 167.038707][ T6092] team0 (unregistering): Port device team_slave_1 removed [ 167.084035][ T6092] team0 (unregistering): Port device team_slave_0 removed [ 167.567389][ T8977] lo speed is unknown, defaulting to 1000 [ 167.778170][ T8890] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.808203][ T8890] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.815432][ T8890] bridge_slave_0: entered allmulticast mode [ 167.838609][ T8890] bridge_slave_0: entered promiscuous mode [ 167.852850][ T8890] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.868956][ T8890] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.895183][ T8890] bridge_slave_1: entered allmulticast mode [ 167.908971][ T8890] bridge_slave_1: entered promiscuous mode [ 167.920516][ T8995] netlink: 16 bytes leftover after parsing attributes in process `syz.4.823'. [ 168.013132][ T8890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.054381][ T8890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.110980][ T8890] team0: Port device team_slave_0 added [ 168.144152][ T8890] team0: Port device team_slave_1 added [ 168.152917][ T8999] netlink: 32 bytes leftover after parsing attributes in process `syz.4.823'. [ 168.250612][ T8890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.265255][ T8890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.304612][ T8890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.307902][ T55] Bluetooth: hci0: command tx timeout [ 168.360032][ T8890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.367518][ T8890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.417817][ T8890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.450761][ T9002] tipc: Enabled bearer , priority 22 [ 168.457291][ T9006] batman_adv: batadv0: Interface deactivated: dummy0 [ 168.478176][ T9006] batman_adv: batadv0: Removing interface: dummy0 [ 168.492007][ T9006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.500340][ T9006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.511343][ T9006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.519012][ T9006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.527444][ T9007] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 168.645670][ T8890] hsr_slave_0: entered promiscuous mode [ 168.654177][ T8890] hsr_slave_1: entered promiscuous mode [ 168.690021][ T8890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.691301][ T9010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.827'. [ 168.710511][ T8890] Cannot create hsr debugfs directory [ 168.909495][ T9014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.829'. [ 168.930316][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.829'. [ 169.279464][ T9026] FAULT_INJECTION: forcing a failure. [ 169.279464][ T9026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.307846][ T9026] CPU: 0 UID: 0 PID: 9026 Comm: syz.3.833 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 169.307879][ T9026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 169.307891][ T9026] Call Trace: [ 169.307898][ T9026] [ 169.307907][ T9026] dump_stack_lvl+0x241/0x360 [ 169.307939][ T9026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.307961][ T9026] ? __pfx__printk+0x10/0x10 [ 169.307983][ T9026] ? __pfx_lock_release+0x10/0x10 [ 169.308020][ T9026] should_fail_ex+0x40a/0x550 [ 169.308053][ T9026] _copy_from_user+0x2d/0xb0 [ 169.308079][ T9026] btf_new_fd+0x326/0xca0 [ 169.308099][ T9026] ? apparmor_capable+0x13b/0x1b0 [ 169.308131][ T9026] ? __pfx_btf_new_fd+0x10/0x10 [ 169.308157][ T9026] ? bpf_btf_load+0xcf/0x1a0 [ 169.308187][ T9026] __sys_bpf+0x6f2/0x820 [ 169.308215][ T9026] ? __pfx___sys_bpf+0x10/0x10 [ 169.308255][ T9026] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 169.308295][ T9026] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 169.308324][ T9026] ? do_syscall_64+0x100/0x230 [ 169.308354][ T9026] __x64_sys_bpf+0x7c/0x90 [ 169.308379][ T9026] do_syscall_64+0xf3/0x230 [ 169.308402][ T9026] ? clear_bhb_loop+0x35/0x90 [ 169.308432][ T9026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.308457][ T9026] RIP: 0033:0x7f525a98d169 [ 169.308474][ T9026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.308490][ T9026] RSP: 002b:00007f525b8ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 169.308511][ T9026] RAX: ffffffffffffffda RBX: 00007f525aba5fa0 RCX: 00007f525a98d169 [ 169.308525][ T9026] RDX: 0000000000000028 RSI: 0000400000001c40 RDI: 0000000000000012 [ 169.308537][ T9026] RBP: 00007f525b8ce090 R08: 0000000000000000 R09: 0000000000000000 [ 169.308549][ T9026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.308560][ T9026] R13: 0000000000000001 R14: 00007f525aba5fa0 R15: 00007ffc76df8478 [ 169.308592][ T9026] [ 169.601501][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.834'. [ 169.617040][ T9028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.834'. [ 169.867124][ T9045] netlink: 'syz.4.839': attribute type 4 has an invalid length. [ 169.887328][ T9045] netlink: 3581 bytes leftover after parsing attributes in process `syz.4.839'. [ 170.009534][ T8890] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 170.214726][ T9070] FAULT_INJECTION: forcing a failure. [ 170.214726][ T9070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.234035][ T8890] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 170.242113][ T9070] CPU: 1 UID: 0 PID: 9070 Comm: syz.3.846 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 170.242144][ T9070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 170.242156][ T9070] Call Trace: [ 170.242163][ T9070] [ 170.242172][ T9070] dump_stack_lvl+0x241/0x360 [ 170.242201][ T9070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.242222][ T9070] ? __pfx__printk+0x10/0x10 [ 170.242256][ T9070] should_fail_ex+0x40a/0x550 [ 170.242289][ T9070] _copy_to_user+0x31/0xb0 [ 170.242317][ T9070] bpf_verifier_vlog+0x46d/0x860 [ 170.242350][ T9070] btf_verifier_log+0x110/0x190 [ 170.242379][ T9070] ? btf_parse_hdr+0x63/0x710 [ 170.242398][ T9070] ? __pfx_btf_verifier_log+0x10/0x10 [ 170.242438][ T9070] btf_parse_hdr+0x4a4/0x710 [ 170.242464][ T9070] btf_new_fd+0x38b/0xca0 [ 170.242483][ T9070] ? apparmor_capable+0x13b/0x1b0 [ 170.242514][ T9070] ? __pfx_btf_new_fd+0x10/0x10 [ 170.242539][ T9070] ? bpf_btf_load+0xcf/0x1a0 [ 170.242568][ T9070] __sys_bpf+0x6f2/0x820 [ 170.242594][ T9070] ? __pfx___sys_bpf+0x10/0x10 [ 170.242632][ T9070] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 170.242663][ T9070] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 170.242691][ T9070] ? do_syscall_64+0x100/0x230 [ 170.242721][ T9070] __x64_sys_bpf+0x7c/0x90 [ 170.242746][ T9070] do_syscall_64+0xf3/0x230 [ 170.242768][ T9070] ? clear_bhb_loop+0x35/0x90 [ 170.242797][ T9070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.242821][ T9070] RIP: 0033:0x7f525a98d169 [ 170.242839][ T9070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.242855][ T9070] RSP: 002b:00007f525b8ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.242877][ T9070] RAX: ffffffffffffffda RBX: 00007f525aba5fa0 RCX: 00007f525a98d169 [ 170.242891][ T9070] RDX: 0000000000000028 RSI: 0000400000001c40 RDI: 0000000000000012 [ 170.242903][ T9070] RBP: 00007f525b8ce090 R08: 0000000000000000 R09: 0000000000000000 [ 170.242915][ T9070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.242927][ T9070] R13: 0000000000000001 R14: 00007f525aba5fa0 R15: 00007ffc76df8478 [ 170.242958][ T9070] [ 170.480525][ T55] Bluetooth: hci0: command tx timeout [ 170.543064][ T9057] sch_tbf: peakrate 64 is lower than or equals to rate 9416279242649327955 ! [ 170.571641][ T8890] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 170.601874][ T8890] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 170.855931][ T8890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.934009][ T8890] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.985582][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.992800][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.012640][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.020056][ T1318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.442571][ T9095] netlink: 232 bytes leftover after parsing attributes in process `syz.2.853'. [ 171.565342][ T9102] FAULT_INJECTION: forcing a failure. [ 171.565342][ T9102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.579292][ T9102] CPU: 0 UID: 0 PID: 9102 Comm: syz.3.855 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 171.579322][ T9102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 171.579334][ T9102] Call Trace: [ 171.579341][ T9102] [ 171.579349][ T9102] dump_stack_lvl+0x241/0x360 [ 171.579379][ T9102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.579401][ T9102] ? __pfx__printk+0x10/0x10 [ 171.579423][ T9102] ? __pfx_lock_release+0x10/0x10 [ 171.579461][ T9102] should_fail_ex+0x40a/0x550 [ 171.579496][ T9102] _copy_from_user+0x2d/0xb0 [ 171.579522][ T9102] __sys_bpf+0x1be/0x820 [ 171.579551][ T9102] ? __pfx___sys_bpf+0x10/0x10 [ 171.579591][ T9102] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 171.579622][ T9102] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 171.579652][ T9102] ? do_syscall_64+0x100/0x230 [ 171.579682][ T9102] __x64_sys_bpf+0x7c/0x90 [ 171.579706][ T9102] do_syscall_64+0xf3/0x230 [ 171.579730][ T9102] ? clear_bhb_loop+0x35/0x90 [ 171.579759][ T9102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.579784][ T9102] RIP: 0033:0x7f525a98d169 [ 171.579801][ T9102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.579817][ T9102] RSP: 002b:00007f525b8ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 171.579840][ T9102] RAX: ffffffffffffffda RBX: 00007f525aba5fa0 RCX: 00007f525a98d169 [ 171.579854][ T9102] RDX: 0000000000000028 RSI: 0000400000001c40 RDI: 0000000000000012 [ 171.579867][ T9102] RBP: 00007f525b8ce090 R08: 0000000000000000 R09: 0000000000000000 [ 171.579879][ T9102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.579891][ T9102] R13: 0000000000000001 R14: 00007f525aba5fa0 R15: 00007ffc76df8478 [ 171.579922][ T9102] [ 171.604215][ T8890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.874284][ T8890] veth0_vlan: entered promiscuous mode [ 171.890235][ T8890] veth1_vlan: entered promiscuous mode [ 171.969995][ T8890] veth0_macvtap: entered promiscuous mode [ 172.006850][ T8890] veth1_macvtap: entered promiscuous mode [ 172.092588][ T8890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.127878][ T8890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.159042][ T8890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.219080][ T8890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.234362][ T8890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.245726][ T8890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.286931][ T8890] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.306549][ T8890] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.325939][ T8890] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.328451][ T9122] FAULT_INJECTION: forcing a failure. [ 172.328451][ T9122] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 172.348462][ T8890] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.357766][ T9122] CPU: 0 UID: 0 PID: 9122 Comm: syz.1.862 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 172.357794][ T9122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 172.357805][ T9122] Call Trace: [ 172.357812][ T9122] [ 172.357820][ T9122] dump_stack_lvl+0x241/0x360 [ 172.357848][ T9122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.357869][ T9122] ? __pfx__printk+0x10/0x10 [ 172.357902][ T9122] should_fail_ex+0x40a/0x550 [ 172.357952][ T9122] prepare_alloc_pages+0x1da/0x5b0 [ 172.357983][ T9122] __alloc_frozen_pages_noprof+0x16f/0x710 [ 172.358015][ T9122] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 172.358052][ T9122] ? __pfx_lock_acquire+0x10/0x10 [ 172.358083][ T9122] alloc_pages_mpol+0x311/0x660 [ 172.358110][ T9122] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 172.358144][ T9122] vma_alloc_folio_noprof+0x12b/0x260 [ 172.358177][ T9122] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 172.358204][ T9122] ? ima_match_policy+0x114/0x2100 [ 172.358229][ T9122] folio_prealloc+0x2e/0x170 [ 172.358249][ T9122] __handle_mm_fault+0x3e4b/0x70f0 [ 172.358307][ T9122] ? __pfx___handle_mm_fault+0x10/0x10 [ 172.358348][ T9122] ? mt_find+0x2a9/0x920 [ 172.358372][ T9122] ? __pfx_lock_release+0x10/0x10 [ 172.358411][ T9122] ? mt_find+0x2a9/0x920 [ 172.358435][ T9122] ? mt_find+0x6c8/0x920 [ 172.358467][ T9122] ? __pfx_mt_find+0x10/0x10 [ 172.358509][ T9122] ? find_vma+0xf9/0x170 [ 172.358524][ T9122] ? __pfx_find_vma+0x10/0x10 [ 172.358544][ T9122] handle_mm_fault+0x3e5/0x8d0 [ 172.358581][ T9122] exc_page_fault+0x2b9/0x8b0 [ 172.358602][ T9122] ? __might_fault+0xaa/0x120 [ 172.358624][ T9122] asm_exc_page_fault+0x26/0x30 [ 172.358648][ T9122] RIP: 0010:rep_movs_alternative+0x33/0x70 [ 172.358667][ T9122] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 172.358683][ T9122] RSP: 0018:ffffc9000b6dfa48 EFLAGS: 00050216 [ 172.358700][ T9122] RAX: 206e656c5f726468 RBX: 0000400000000012 RCX: 0000000000000012 [ 172.358713][ T9122] RDX: 0000000000000000 RSI: ffff8881463aa234 RDI: 0000400000000000 [ 172.358726][ T9122] RBP: 0000400000000000 R08: ffff8881463aa245 R09: 1ffff11028c75448 [ 172.358739][ T9122] R10: dffffc0000000000 R11: ffffed1028c75449 R12: 0000000000000012 [ 172.358752][ T9122] R13: 00007ffffffff000 R14: ffff8881463aa234 R15: 0000400000000000 [ 172.358785][ T9122] _copy_to_user+0x8b/0xb0 [ 172.358813][ T9122] bpf_verifier_vlog+0x46d/0x860 [ 172.358845][ T9122] btf_verifier_log+0x110/0x190 [ 172.358873][ T9122] ? btf_parse_hdr+0x63/0x710 [ 172.358891][ T9122] ? __pfx_btf_verifier_log+0x10/0x10 [ 172.358927][ T9122] btf_parse_hdr+0x4a4/0x710 [ 172.358951][ T9122] btf_new_fd+0x38b/0xca0 [ 172.358969][ T9122] ? apparmor_capable+0x13b/0x1b0 [ 172.358999][ T9122] ? __pfx_btf_new_fd+0x10/0x10 [ 172.359039][ T9122] ? bpf_btf_load+0xcf/0x1a0 [ 172.359066][ T9122] __sys_bpf+0x6f2/0x820 [ 172.359092][ T9122] ? __pfx___sys_bpf+0x10/0x10 [ 172.359130][ T9122] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 172.359160][ T9122] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 172.359188][ T9122] ? do_syscall_64+0x100/0x230 [ 172.359216][ T9122] __x64_sys_bpf+0x7c/0x90 [ 172.359238][ T9122] do_syscall_64+0xf3/0x230 [ 172.359259][ T9122] ? clear_bhb_loop+0x35/0x90 [ 172.359286][ T9122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.359309][ T9122] RIP: 0033:0x7f59e218d169 [ 172.359325][ T9122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.359341][ T9122] RSP: 002b:00007f59e2f77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 172.359360][ T9122] RAX: ffffffffffffffda RBX: 00007f59e23a5fa0 RCX: 00007f59e218d169 [ 172.359373][ T9122] RDX: 0000000000000028 RSI: 0000400000001c40 RDI: 0000000000000012 [ 172.359385][ T9122] RBP: 00007f59e2f77090 R08: 0000000000000000 R09: 0000000000000000 [ 172.359397][ T9122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.359408][ T9122] R13: 0000000000000001 R14: 00007f59e23a5fa0 R15: 00007fff81b18d18 [ 172.359439][ T9122] [ 172.778071][ T55] Bluetooth: hci0: command tx timeout [ 173.141107][ T5899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.159465][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.167462][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.195866][ T5899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.267338][ T9147] netlink: 32 bytes leftover after parsing attributes in process `syz.4.868'. [ 173.383698][ T9155] Bluetooth: MGMT ver 1.23 [ 173.404526][ T9146] syz_tun: left promiscuous mode [ 173.891141][ T9146] vlan0: left promiscuous mode [ 174.138256][ T9146] macsec1: left promiscuous mode [ 174.162178][ T9146] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.171152][ T9146] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.180001][ T9146] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.189400][ T9146] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.260376][ T9146] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.277711][ T9146] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.300760][ T9146] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.320839][ T9146] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.357802][ T9165] netlink: 68 bytes leftover after parsing attributes in process `syz.2.872'. [ 174.377053][ T9165] netlink: 68 bytes leftover after parsing attributes in process `syz.2.872'. [ 174.677369][ T9190] netlink: 16 bytes leftover after parsing attributes in process `syz.2.876'. [ 175.125090][ T9203] netlink: 'syz.3.880': attribute type 1 has an invalid length. [ 175.390284][ T9211] FAULT_INJECTION: forcing a failure. [ 175.390284][ T9211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.427728][ T5841] Bluetooth: hci0: command 0x0401 tx timeout [ 175.428203][ T55] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 175.449675][ T9211] CPU: 1 UID: 0 PID: 9211 Comm: syz.1.884 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 175.449706][ T9211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 175.449717][ T9211] Call Trace: [ 175.449724][ T9211] [ 175.449732][ T9211] dump_stack_lvl+0x241/0x360 [ 175.449761][ T9211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.449782][ T9211] ? __pfx__printk+0x10/0x10 [ 175.449814][ T9211] should_fail_ex+0x40a/0x550 [ 175.449846][ T9211] _copy_to_user+0x31/0xb0 [ 175.449872][ T9211] btf_new_fd+0x42e/0xca0 [ 175.449891][ T9211] ? apparmor_capable+0x13b/0x1b0 [ 175.449919][ T9211] ? __pfx_btf_new_fd+0x10/0x10 [ 175.449944][ T9211] ? bpf_btf_load+0xcf/0x1a0 [ 175.449985][ T9211] __sys_bpf+0x6f2/0x820 [ 175.450013][ T9211] ? __pfx___sys_bpf+0x10/0x10 [ 175.450053][ T9211] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 175.450084][ T9211] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 175.450111][ T9211] ? do_syscall_64+0x100/0x230 [ 175.450141][ T9211] __x64_sys_bpf+0x7c/0x90 [ 175.450166][ T9211] do_syscall_64+0xf3/0x230 [ 175.450190][ T9211] ? clear_bhb_loop+0x35/0x90 [ 175.450218][ T9211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.450242][ T9211] RIP: 0033:0x7f59e218d169 [ 175.450260][ T9211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.450276][ T9211] RSP: 002b:00007f59e2f77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 175.450298][ T9211] RAX: ffffffffffffffda RBX: 00007f59e23a5fa0 RCX: 00007f59e218d169 [ 175.450313][ T9211] RDX: 0000000000000028 RSI: 0000400000001c40 RDI: 0000000000000012 [ 175.450325][ T9211] RBP: 00007f59e2f77090 R08: 0000000000000000 R09: 0000000000000000 [ 175.450338][ T9211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.450351][ T9211] R13: 0000000000000001 R14: 00007f59e23a5fa0 R15: 00007fff81b18d18 [ 175.450383][ T9211] [ 175.481236][ T9216] tipc: Can't bind to reserved service type 1 [ 176.041172][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.226793][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.358867][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.456211][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.610053][ T13] bridge_slave_1: left allmulticast mode [ 176.615768][ T13] bridge_slave_1: left promiscuous mode [ 176.621790][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.633501][ T13] bridge_slave_0: left allmulticast mode [ 176.639688][ T13] bridge_slave_0: left promiscuous mode [ 176.645469][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.043551][ T9248] FAULT_INJECTION: forcing a failure. [ 177.043551][ T9248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.095272][ T9248] CPU: 1 UID: 0 PID: 9248 Comm: syz.3.897 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 177.095304][ T9248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 177.095316][ T9248] Call Trace: [ 177.095323][ T9248] [ 177.095332][ T9248] dump_stack_lvl+0x241/0x360 [ 177.095363][ T9248] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.095385][ T9248] ? __pfx__printk+0x10/0x10 [ 177.095411][ T9248] ? snprintf+0xda/0x120 [ 177.095433][ T9248] should_fail_ex+0x40a/0x550 [ 177.095467][ T9248] _copy_to_user+0x31/0xb0 [ 177.095495][ T9248] simple_read_from_buffer+0xca/0x150 [ 177.095526][ T9248] proc_fail_nth_read+0x1e9/0x250 [ 177.095556][ T9248] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.095586][ T9248] ? rw_verify_area+0x243/0x630 [ 177.095606][ T9248] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.095635][ T9248] vfs_read+0x1f8/0xb40 [ 177.095658][ T9248] ? fdget_pos+0x254/0x320 [ 177.095686][ T9248] ? __pfx___mutex_lock+0x10/0x10 [ 177.095711][ T9248] ? __pfx_vfs_read+0x10/0x10 [ 177.095737][ T9248] ? __fget_files+0x2a/0x410 [ 177.095765][ T9248] ? __fget_files+0x395/0x410 [ 177.095790][ T9248] ? __fget_files+0x2a/0x410 [ 177.095828][ T9248] ksys_read+0x18f/0x2b0 [ 177.095852][ T9248] ? __pfx_ksys_read+0x10/0x10 [ 177.095882][ T9248] ? do_syscall_64+0x100/0x230 [ 177.095910][ T9248] ? do_syscall_64+0xb6/0x230 [ 177.095937][ T9248] do_syscall_64+0xf3/0x230 [ 177.095961][ T9248] ? clear_bhb_loop+0x35/0x90 [ 177.095990][ T9248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.096014][ T9248] RIP: 0033:0x7f525a98bb7c [ 177.096031][ T9248] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 177.096047][ T9248] RSP: 002b:00007f525b8ce030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 177.096069][ T9248] RAX: ffffffffffffffda RBX: 00007f525aba5fa0 RCX: 00007f525a98bb7c [ 177.096084][ T9248] RDX: 000000000000000f RSI: 00007f525b8ce0a0 RDI: 0000000000000003 [ 177.096096][ T9248] RBP: 00007f525b8ce090 R08: 0000000000000000 R09: 0000000000000000 [ 177.096107][ T9248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.096118][ T9248] R13: 0000000000000001 R14: 00007f525aba5fa0 R15: 00007ffc76df8478 [ 177.096148][ T9248] [ 177.800670][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.811162][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.819559][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.830957][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.839337][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 177.846664][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.999415][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.017413][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.035386][ T13] bond0 (unregistering): Released all slaves [ 178.117978][ T9240] lo speed is unknown, defaulting to 1000 [ 178.145894][ T9252] lo speed is unknown, defaulting to 1000 [ 178.325260][ T9261] lo speed is unknown, defaulting to 1000 [ 178.550510][ T13] hsr_slave_0: left promiscuous mode [ 178.565357][ T13] hsr_slave_1: left promiscuous mode [ 178.578383][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.585971][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.610954][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.629516][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.669677][ T13] veth1_macvtap: left promiscuous mode [ 178.682534][ T13] veth0_macvtap: left promiscuous mode [ 178.688359][ T13] veth1_vlan: left promiscuous mode [ 178.693733][ T13] veth0_vlan: left promiscuous mode [ 179.354545][ T9286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.905'. [ 179.363744][ T9286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.905'. [ 179.472734][ T13] team0 (unregistering): Port device team_slave_1 removed [ 179.522312][ T13] team0 (unregistering): Port device team_slave_0 removed [ 179.914731][ T55] Bluetooth: hci0: command tx timeout [ 180.233861][ T9261] chnl_net:caif_netlink_parms(): no params data found [ 180.469472][ T9261] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.478597][ T9261] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.486231][ T9261] bridge_slave_0: entered allmulticast mode [ 180.494412][ T9261] bridge_slave_0: entered promiscuous mode [ 180.533619][ T9261] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.543851][ T9261] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.552810][ T9261] bridge_slave_1: entered allmulticast mode [ 180.570473][ T9261] bridge_slave_1: entered promiscuous mode [ 180.625759][ T9304] lo speed is unknown, defaulting to 1000 [ 180.655072][ T9261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.698425][ T9313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.912'. [ 180.709428][ T9261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.794441][ T9261] team0: Port device team_slave_0 added [ 180.829060][ T9261] team0: Port device team_slave_1 added [ 180.921060][ T9261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.928766][ T9261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.982983][ T9261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.055038][ T9261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.098131][ T9261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.124833][ T9261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.151687][ T52] IPVS: starting estimator thread 0... [ 181.204633][ T9261] hsr_slave_0: entered promiscuous mode [ 181.234123][ T9261] hsr_slave_1: entered promiscuous mode [ 181.257857][ T9321] IPVS: using max 19 ests per chain, 45600 per kthread [ 181.265680][ T9261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.279371][ T5881] IPVS: starting estimator thread 0... [ 181.286897][ T9261] Cannot create hsr debugfs directory [ 181.377909][ T9326] IPVS: using max 19 ests per chain, 45600 per kthread [ 181.379016][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 181.806668][ T9346] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 181.976500][ T6092] IPVS: stop unused estimator thread 0... [ 181.988128][ T55] Bluetooth: hci0: command 0x041b tx timeout [ 182.105015][ T9355] netlink: 104 bytes leftover after parsing attributes in process `syz.1.924'. [ 182.471493][ T9355] Bluetooth: MGMT ver 1.23 [ 182.580524][ T9261] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 182.608533][ T9261] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 182.625145][ T9261] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 182.664128][ T9261] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 182.841816][ T9261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.863844][ T9372] netlink: 'syz.4.928': attribute type 1 has an invalid length. [ 182.928912][ T9372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.941206][ T9261] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.982261][ T9375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.929'. [ 183.023219][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.030422][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.098237][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.105447][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.220068][ T9390] netlink: 'syz.2.933': attribute type 1 has an invalid length. [ 183.295749][ T9390] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.313532][ T9397] xt_ecn: cannot match TCP bits for non-tcp packets [ 183.398432][ T9398] netlink: 96 bytes leftover after parsing attributes in process `syz.1.936'. [ 183.399188][ T9400] FAULT_INJECTION: forcing a failure. [ 183.399188][ T9400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.421044][ T9400] CPU: 0 UID: 0 PID: 9400 Comm: syz.4.937 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 183.421072][ T9400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 183.421085][ T9400] Call Trace: [ 183.421092][ T9400] [ 183.421100][ T9400] dump_stack_lvl+0x241/0x360 [ 183.421130][ T9400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.421152][ T9400] ? __pfx__printk+0x10/0x10 [ 183.421185][ T9400] should_fail_ex+0x40a/0x550 [ 183.421219][ T9400] _copy_to_user+0x31/0xb0 [ 183.421247][ T9400] bpf_verifier_vlog+0x46d/0x860 [ 183.421281][ T9400] __btf_verifier_log+0xd5/0x120 [ 183.421309][ T9400] ? bpf_verifier_vlog+0x47a/0x860 [ 183.421331][ T9400] ? __pfx___btf_verifier_log+0x10/0x10 [ 183.421363][ T9400] ? btf_parse_hdr+0x1e3/0x710 [ 183.421388][ T9400] btf_parse_hdr+0x2f9/0x710 [ 183.421413][ T9400] btf_new_fd+0x38b/0xca0 [ 183.421432][ T9400] ? apparmor_capable+0x13b/0x1b0 [ 183.421464][ T9400] ? __pfx_btf_new_fd+0x10/0x10 [ 183.421491][ T9400] ? bpf_btf_load+0xcf/0x1a0 [ 183.421520][ T9400] __sys_bpf+0x6f2/0x820 [ 183.421549][ T9400] ? __pfx___sys_bpf+0x10/0x10 [ 183.421589][ T9400] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 183.421621][ T9400] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 183.421651][ T9400] ? do_syscall_64+0x100/0x230 [ 183.421680][ T9400] __x64_sys_bpf+0x7c/0x90 [ 183.421706][ T9400] do_syscall_64+0xf3/0x230 [ 183.421730][ T9400] ? clear_bhb_loop+0x35/0x90 [ 183.421760][ T9400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.421783][ T9400] RIP: 0033:0x7fe88698d169 [ 183.421801][ T9400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.421818][ T9400] RSP: 002b:00007fe88783b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 183.421840][ T9400] RAX: ffffffffffffffda RBX: 00007fe886ba5fa0 RCX: 00007fe88698d169 [ 183.421854][ T9400] RDX: 0000000000000028 RSI: 0000400000001c40 RDI: 0000000000000012 [ 183.421866][ T9400] RBP: 00007fe88783b090 R08: 0000000000000000 R09: 0000000000000000 [ 183.421878][ T9400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.421890][ T9400] R13: 0000000000000001 R14: 00007fe886ba5fa0 R15: 00007ffe6e0aee68 [ 183.421921][ T9400] [ 183.888663][ T9411] netlink: 28 bytes leftover after parsing attributes in process `syz.3.941'. [ 183.936859][ T9261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.995679][ T9418] netlink: 40 bytes leftover after parsing attributes in process `syz.1.943'. [ 184.044676][ T9261] veth0_vlan: entered promiscuous mode [ 184.069204][ T5841] Bluetooth: hci0: command 0x041b tx timeout [ 184.092093][ T9261] veth1_vlan: entered promiscuous mode [ 184.201424][ T9426] Cannot find del_set index 2416 as target [ 184.213476][ T9261] veth0_macvtap: entered promiscuous mode [ 184.231240][ T9426] netlink: 24 bytes leftover after parsing attributes in process `syz.3.944'. [ 184.258380][ T9261] veth1_macvtap: entered promiscuous mode [ 184.289948][ T9261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.333055][ T9261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.369118][ T9261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.390166][ T9261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.407770][ T9261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.430502][ T9261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.461729][ T9261] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.471350][ T9261] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.480584][ T9261] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.489688][ T9261] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.644583][ T6092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.667149][ T6092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.704481][ T9437] bridge0: port 1(gretap0) entered blocking state [ 184.713412][ T9437] bridge0: port 1(gretap0) entered disabled state [ 184.722981][ T9437] gretap0: entered allmulticast mode [ 184.733263][ T9437] gretap0: left allmulticast mode [ 184.739697][ T9441] FAULT_INJECTION: forcing a failure. [ 184.739697][ T9441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.751463][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.763047][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.772029][ T9441] CPU: 0 UID: 0 PID: 9441 Comm: syz.2.951 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 184.772066][ T9441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 184.772078][ T9441] Call Trace: [ 184.772084][ T9441] [ 184.772091][ T9441] dump_stack_lvl+0x241/0x360 [ 184.772121][ T9441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.772141][ T9441] ? __pfx__printk+0x10/0x10 [ 184.772171][ T9441] should_fail_ex+0x40a/0x550 [ 184.772201][ T9441] _copy_to_user+0x31/0xb0 [ 184.772227][ T9441] bpf_verifier_vlog+0x46d/0x860 [ 184.772258][ T9441] __btf_verifier_log+0xd5/0x120 [ 184.772284][ T9441] ? bpf_verifier_vlog+0x47a/0x860 [ 184.772306][ T9441] ? __pfx___btf_verifier_log+0x10/0x10 [ 184.772336][ T9441] ? btf_parse_hdr+0x1e3/0x710 [ 184.772358][ T9441] btf_parse_hdr+0x323/0x710 [ 184.772380][ T9441] btf_new_fd+0x38b/0xca0 [ 184.772397][ T9441] ? apparmor_capable+0x13b/0x1b0 [ 184.772427][ T9441] ? __pfx_btf_new_fd+0x10/0x10 [ 184.772451][ T9441] ? bpf_btf_load+0xcf/0x1a0 [ 184.772479][ T9441] __sys_bpf+0x6f2/0x820 [ 184.772504][ T9441] ? __pfx___sys_bpf+0x10/0x10 [ 184.772540][ T9441] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 184.772569][ T9441] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 184.772596][ T9441] ? do_syscall_64+0x100/0x230 [ 184.772623][ T9441] __x64_sys_bpf+0x7c/0x90 [ 184.772645][ T9441] do_syscall_64+0xf3/0x230 [ 184.772668][ T9441] ? clear_bhb_loop+0x35/0x90 [ 184.772696][ T9441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.772718][ T9441] RIP: 0033:0x7fc72258d169 [ 184.772734][ T9441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.772749][ T9441] RSP: 002b:00007fc723382038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 184.772769][ T9441] RAX: ffffffffffffffda RBX: 00007fc7227a5fa0 RCX: 00007fc72258d169 [ 184.772783][ T9441] RDX: 0000000000000028 RSI: 0000400000001c40 RDI: 0000000000000012 [ 184.772795][ T9441] RBP: 00007fc723382090 R08: 0000000000000000 R09: 0000000000000000 [ 184.772806][ T9441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.772817][ T9441] R13: 0000000000000001 R14: 00007fc7227a5fa0 R15: 00007ffc04d600d8 [ 184.772846][ T9441] [ 185.152866][ T9449] netlink: 'syz.2.953': attribute type 3 has an invalid length. [ 185.203419][ T9447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.952'. [ 185.236443][ T9447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.952'. [ 185.265510][ T9447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.952'. [ 185.605980][ T9476] netlink: 'syz.2.962': attribute type 10 has an invalid length. [ 185.615496][ T9476] veth0_vlan: left promiscuous mode [ 185.622987][ T9476] veth0_vlan: entered promiscuous mode [ 185.631288][ T9476] team0: Device veth0_vlan failed to register rx_handler [ 185.808813][ T9483] syzkaller0: entered promiscuous mode [ 185.814608][ T9483] syzkaller0: entered allmulticast mode [ 185.912794][ T9489] lo speed is unknown, defaulting to 1000 [ 187.678940][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 187.698834][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 187.717503][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 187.736093][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 187.745671][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 187.753602][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.636915][ T9498] __nla_validate_parse: 64 callbacks suppressed [ 188.636939][ T9498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.967'. [ 188.786166][ T69] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.950292][ T69] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.986555][ T9519] netlink: 'syz.1.971': attribute type 21 has an invalid length. [ 188.999797][ T9519] netlink: 128 bytes leftover after parsing attributes in process `syz.1.971'. [ 189.011401][ T9519] netlink: 'syz.1.971': attribute type 4 has an invalid length. [ 189.019192][ T9519] netlink: 'syz.1.971': attribute type 5 has an invalid length. [ 189.027176][ T9519] netlink: 3 bytes leftover after parsing attributes in process `syz.1.971'. [ 189.102783][ T69] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.136649][ T9509] lo speed is unknown, defaulting to 1000 [ 189.242203][ T69] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.424530][ T9509] chnl_net:caif_netlink_parms(): no params data found [ 189.492622][ T69] bridge_slave_1: left allmulticast mode [ 189.502331][ T69] bridge_slave_1: left promiscuous mode [ 189.512013][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.524824][ T69] bridge_slave_0: left allmulticast mode [ 189.531310][ T69] bridge_slave_0: left promiscuous mode [ 189.537099][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.831551][ T55] Bluetooth: hci0: command tx timeout [ 189.958882][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.972331][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.983035][ T69] bond0 (unregistering): Released all slaves [ 190.239761][ T9509] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.247005][ T9509] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.263452][ T9509] bridge_slave_0: entered allmulticast mode [ 190.272657][ T9509] bridge_slave_0: entered promiscuous mode [ 190.280855][ T9552] netlink: 'syz.1.978': attribute type 1 has an invalid length. [ 190.288913][ T9552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.978'. [ 190.300813][ T9509] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.310597][ T9546] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 190.321313][ T9509] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.331085][ T9509] bridge_slave_1: entered allmulticast mode [ 190.343638][ T9509] bridge_slave_1: entered promiscuous mode [ 190.728468][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'. [ 190.750214][ T9509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.767276][ T9509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.862580][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.983'. [ 190.899633][ T9575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'. [ 190.964284][ T9579] netlink: 'syz.3.987': attribute type 5 has an invalid length. [ 190.985064][ T69] hsr_slave_0: left promiscuous mode [ 191.061922][ T69] hsr_slave_1: left promiscuous mode [ 191.078586][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.086147][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.110263][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.120678][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.170842][ T69] veth1_macvtap: left promiscuous mode [ 191.176525][ T69] veth0_macvtap: left promiscuous mode [ 191.205472][ T69] veth1_vlan: left promiscuous mode [ 191.216281][ T69] veth0_vlan: left promiscuous mode [ 191.333219][ T9595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.991'. [ 191.917954][ T55] Bluetooth: hci0: command tx timeout [ 191.991622][ T69] team0 (unregistering): Port device team_slave_1 removed [ 192.081737][ T69] team0 (unregistering): Port device team_slave_0 removed [ 192.579665][ T9509] team0: Port device team_slave_0 added [ 192.601472][ T9579] : entered promiscuous mode [ 192.693022][ T9597] lo speed is unknown, defaulting to 1000 [ 192.749630][ T9509] team0: Port device team_slave_1 added [ 192.890938][ T9509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.900336][ T9509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.927269][ T9509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.934031][ T9612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.958272][ T9612] netlink: 20 bytes leftover after parsing attributes in process `syz.1.996'. [ 193.007505][ T9509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.014702][ T9509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.077818][ T9509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.226926][ T9509] hsr_slave_0: entered promiscuous mode [ 193.242137][ T9509] hsr_slave_1: entered promiscuous mode [ 193.252257][ T9509] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.265301][ T9509] Cannot create hsr debugfs directory [ 193.545104][ T9635] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1001'. [ 193.564615][ T9635] 8021q: VLANs not supported on vxcan1 [ 193.611743][ T9636] 8021q: VLANs not supported on vxcan1 [ 193.659527][ T9641] __nla_validate_parse: 2 callbacks suppressed [ 193.659529][ T9640] openvswitch: netlink: Flow actions attr not present in new flow. [ 193.659548][ T9641] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1003'. [ 193.659565][ T9641] openvswitch: netlink: Flow actions attr not present in new flow. [ 193.701982][ T9643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1004'. [ 193.744569][ T9640] lo speed is unknown, defaulting to 1000 [ 193.806243][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1004'. [ 193.987871][ T55] Bluetooth: hci0: command tx timeout [ 194.065957][ T9666] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1008'. [ 194.265646][ T9509] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 194.296430][ T9509] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 194.316567][ T9509] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 194.341992][ T9509] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 194.378380][ T9676] netlink: 'syz.2.1010': attribute type 10 has an invalid length. [ 194.429697][ T9677] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.1010'. [ 194.450855][ T9677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.480787][ T9676] batman_adv: batadv0: Adding interface: team0 [ 194.506201][ T9676] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.538984][ T9676] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 194.568408][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.616568][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1012'. [ 194.760659][ T9509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.812406][ T9509] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.836290][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.843544][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.847820][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1015'. [ 194.860970][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.868194][ T1318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.898651][ T9689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1015'. [ 194.959943][ T9689] netlink: 'syz.1.1015': attribute type 18 has an invalid length. [ 194.974488][ T9693] openvswitch: netlink: IPv4 tunnel dst address is zero [ 195.095416][ T9691] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.130772][ T9691] team0: Port device bond2 added [ 195.155970][ T9698] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1017'. [ 195.240495][ T9701] netlink: 'syz.2.1018': attribute type 10 has an invalid length. [ 195.304087][ T9701] syz_tun: entered promiscuous mode [ 195.340964][ T9701] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 195.446715][ T9509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.475694][ T9712] tap0: tun_chr_ioctl cmd 1074025677 [ 195.504942][ T9712] tap0: linktype set to 805 [ 195.511273][ T9714] lo speed is unknown, defaulting to 1000 [ 195.646227][ T9722] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1022'. [ 195.734753][ T9509] veth0_vlan: entered promiscuous mode [ 195.811640][ T9722] syzkaller0: entered promiscuous mode [ 195.817167][ T9722] syzkaller0: entered allmulticast mode [ 195.851469][ T9509] veth1_vlan: entered promiscuous mode [ 195.878407][ T9735] FAULT_INJECTION: forcing a failure. [ 195.878407][ T9735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.894574][ T9735] CPU: 1 UID: 0 PID: 9735 Comm: syz.4.1028 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 195.894604][ T9735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 195.894616][ T9735] Call Trace: [ 195.894622][ T9735] [ 195.894630][ T9735] dump_stack_lvl+0x241/0x360 [ 195.894659][ T9735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.894689][ T9735] ? __pfx__printk+0x10/0x10 [ 195.894721][ T9735] should_fail_ex+0x40a/0x550 [ 195.894755][ T9735] _copy_to_user+0x31/0xb0 [ 195.894784][ T9735] bpf_verifier_vlog+0x46d/0x860 [ 195.894817][ T9735] __btf_verifier_log+0xd5/0x120 [ 195.894845][ T9735] ? bpf_verifier_vlog+0x47a/0x860 [ 195.894867][ T9735] ? __pfx___btf_verifier_log+0x10/0x10 [ 195.894906][ T9735] __btf_verifier_log_type+0x4a8/0x640 [ 195.894940][ T9735] ? btf_datasec_check_meta+0x390/0xa80 [ 195.894966][ T9735] ? sort_r+0x1d0f/0x2960 [ 195.894990][ T9735] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 195.895030][ T9735] btf_datasec_check_meta+0x3ee/0xa80 [ 195.895076][ T9735] btf_parse_type_sec+0x4d5/0x2650 [ 195.895103][ T9735] ? bpf_verifier_vlog+0x47a/0x860 [ 195.895131][ T9735] ? btf_check_sec_info+0x379/0x4f0 [ 195.895154][ T9735] ? __pfx_btf_parse_type_sec+0x10/0x10 [ 195.895179][ T9735] ? btf_parse_str_sec+0x21f/0x2b0 [ 195.895201][ T9735] btf_new_fd+0x7dd/0xca0 [ 195.895220][ T9735] ? apparmor_capable+0x13b/0x1b0 [ 195.895249][ T9735] ? __pfx_btf_new_fd+0x10/0x10 [ 195.895269][ T9735] ? bpf_btf_load+0xcf/0x1a0 [ 195.895294][ T9735] __sys_bpf+0x6f2/0x820 [ 195.895319][ T9735] ? __pfx___sys_bpf+0x10/0x10 [ 195.895353][ T9735] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 195.895381][ T9735] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 195.895408][ T9735] ? do_syscall_64+0x100/0x230 [ 195.895436][ T9735] __x64_sys_bpf+0x7c/0x90 [ 195.895461][ T9735] do_syscall_64+0xf3/0x230 [ 195.895484][ T9735] ? clear_bhb_loop+0x35/0x90 [ 195.895509][ T9735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.895532][ T9735] RIP: 0033:0x7fe88698d169 [ 195.895550][ T9735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.895567][ T9735] RSP: 002b:00007fe88783b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 195.895589][ T9735] RAX: ffffffffffffffda RBX: 00007fe886ba5fa0 RCX: 00007fe88698d169 [ 195.895602][ T9735] RDX: 0000000000000028 RSI: 0000400000001c40 RDI: 0000000000000012 [ 195.895614][ T9735] RBP: 00007fe88783b090 R08: 0000000000000000 R09: 0000000000000000 [ 195.895627][ T9735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.895639][ T9735] R13: 0000000000000001 R14: 00007fe886ba5fa0 R15: 00007ffe6e0aee68 [ 195.895678][ T9735] [ 195.929880][ T9736] bridge0: port 4(vlan2) entered blocking state [ 196.087769][ T5147] Bluetooth: hci0: command tx timeout [ 196.095243][ T9736] bridge0: port 4(vlan2) entered disabled state [ 196.196473][ T9736] vlan2: entered allmulticast mode [ 196.204970][ T9736] vlan2: left allmulticast mode [ 196.215435][ T5881] IPVS: starting estimator thread 0... [ 196.236115][ T9740] bridge0: port 1(gretap0) entered blocking state [ 196.244205][ T9740] bridge0: port 1(gretap0) entered disabled state [ 196.252178][ T9740] gretap0: entered allmulticast mode [ 196.270302][ T9740] gretap0: left allmulticast mode [ 196.309356][ T9744] IPVS: using max 18 ests per chain, 43200 per kthread [ 196.481902][ T9509] veth0_macvtap: entered promiscuous mode [ 196.513915][ T9509] veth1_macvtap: entered promiscuous mode [ 196.582025][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.605971][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.608352][ T9754] netlink: 'syz.3.1032': attribute type 1 has an invalid length. [ 196.628952][ T5147] Bluetooth: hci3: command 0x0406 tx timeout [ 196.630058][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 196.635068][ T5147] Bluetooth: hci1: command 0x0406 tx timeout [ 196.649626][ T9509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.713735][ T9754] netlink: 'syz.3.1032': attribute type 2 has an invalid length. [ 196.741169][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.763886][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.783084][ T9509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.810162][ T9509] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.827067][ T9509] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.836433][ T9509] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.847624][ T9509] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.972736][ T6102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.985327][ T6102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.025210][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.044572][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.457056][ T9790] FAULT_INJECTION: forcing a failure. [ 197.457056][ T9790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.523230][ T9790] CPU: 0 UID: 0 PID: 9790 Comm: syz.4.1040 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 197.523263][ T9790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 197.523276][ T9790] Call Trace: [ 197.523283][ T9790] [ 197.523291][ T9790] dump_stack_lvl+0x241/0x360 [ 197.523322][ T9790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.523344][ T9790] ? __pfx__printk+0x10/0x10 [ 197.523378][ T9790] should_fail_ex+0x40a/0x550 [ 197.523413][ T9790] _copy_to_user+0x31/0xb0 [ 197.523440][ T9790] bpf_verifier_vlog+0x46d/0x860 [ 197.523474][ T9790] __btf_verifier_log+0xd5/0x120 [ 197.523499][ T9790] ? bpf_verifier_vlog+0x47a/0x860 [ 197.523524][ T9790] ? __pfx___btf_verifier_log+0x10/0x10 [ 197.523564][ T9790] btf_verifier_log_vsi+0x219/0x3d0 [ 197.523590][ T9790] ? btf_datasec_check_meta+0x570/0xa80 [ 197.523620][ T9790] ? __pfx_btf_verifier_log_vsi+0x10/0x10 [ 197.523672][ T9790] btf_datasec_check_meta+0x920/0xa80 [ 197.523717][ T9790] btf_parse_type_sec+0x4d5/0x2650 [ 197.523742][ T9790] ? bpf_verifier_vlog+0x47a/0x860 [ 197.523771][ T9790] ? btf_check_sec_info+0x379/0x4f0 [ 197.523793][ T9790] ? __pfx_btf_parse_type_sec+0x10/0x10 [ 197.523815][ T9790] ? btf_parse_str_sec+0x21f/0x2b0 [ 197.523836][ T9790] btf_new_fd+0x7dd/0xca0 [ 197.523854][ T9790] ? apparmor_capable+0x13b/0x1b0 [ 197.523883][ T9790] ? __pfx_btf_new_fd+0x10/0x10 [ 197.523907][ T9790] ? bpf_btf_load+0xcf/0x1a0 [ 197.523935][ T9790] __sys_bpf+0x6f2/0x820 [ 197.523963][ T9790] ? __pfx___sys_bpf+0x10/0x10 [ 197.524001][ T9790] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 197.524032][ T9790] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 197.524060][ T9790] ? do_syscall_64+0x100/0x230 [ 197.524088][ T9790] __x64_sys_bpf+0x7c/0x90 [ 197.524113][ T9790] do_syscall_64+0xf3/0x230 [ 197.524135][ T9790] ? clear_bhb_loop+0x35/0x90 [ 197.524164][ T9790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.524189][ T9790] RIP: 0033:0x7fe88698d169 [ 197.524206][ T9790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.524223][ T9790] RSP: 002b:00007fe88783b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 197.524243][ T9790] RAX: ffffffffffffffda RBX: 00007fe886ba5fa0 RCX: 00007fe88698d169 [ 197.524256][ T9790] RDX: 0000000000000028 RSI: 0000400000001c40 RDI: 0000000000000012 [ 197.524269][ T9790] RBP: 00007fe88783b090 R08: 0000000000000000 R09: 0000000000000000 [ 197.524281][ T9790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.524291][ T9790] R13: 0000000000000001 R14: 00007fe886ba5fa0 R15: 00007ffe6e0aee68 [ 197.524320][ T9790] [ 198.199731][ T6102] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.308833][ T9811] x_tables: duplicate underflow at hook 2 [ 198.351422][ T9813] x_tables: duplicate underflow at hook 2 [ 198.375340][ T9811] lo speed is unknown, defaulting to 1000 [ 198.606664][ T6102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.842826][ T6102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.898605][ T6102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.034651][ T6102] bridge_slave_1: left allmulticast mode [ 199.041627][ T6102] bridge_slave_1: left promiscuous mode [ 199.047368][ T6102] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.056109][ T6102] bridge_slave_0: left allmulticast mode [ 199.062203][ T6102] bridge_slave_0: left promiscuous mode [ 199.068248][ T6102] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.285319][ T9826] FAULT_INJECTION: forcing a failure. [ 199.285319][ T9826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.310473][ T9826] CPU: 1 UID: 0 PID: 9826 Comm: syz.3.1053 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 199.310504][ T9826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 199.310516][ T9826] Call Trace: [ 199.310523][ T9826] [ 199.310532][ T9826] dump_stack_lvl+0x241/0x360 [ 199.310562][ T9826] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.310590][ T9826] ? __pfx__printk+0x10/0x10 [ 199.310622][ T9826] should_fail_ex+0x40a/0x550 [ 199.310655][ T9826] _copy_to_user+0x31/0xb0 [ 199.310683][ T9826] bpf_verifier_vlog+0x46d/0x860 [ 199.310717][ T9826] __btf_verifier_log+0xd5/0x120 [ 199.310741][ T9826] ? bpf_verifier_vlog+0x47a/0x860 [ 199.310763][ T9826] ? btf_verifier_log_vsi+0x245/0x3d0 [ 199.310782][ T9826] ? __pfx___btf_verifier_log+0x10/0x10 [ 199.310822][ T9826] btf_verifier_log_vsi+0x26b/0x3d0 [ 199.310855][ T9826] ? btf_datasec_check_meta+0x570/0xa80 [ 199.310884][ T9826] ? __pfx_btf_verifier_log_vsi+0x10/0x10 [ 199.310929][ T9826] btf_datasec_check_meta+0x920/0xa80 [ 199.310976][ T9826] btf_parse_type_sec+0x4d5/0x2650 [ 199.311003][ T9826] ? bpf_verifier_vlog+0x47a/0x860 [ 199.311032][ T9826] ? btf_check_sec_info+0x379/0x4f0 [ 199.311054][ T9826] ? __pfx_btf_parse_type_sec+0x10/0x10 [ 199.311078][ T9826] ? btf_parse_str_sec+0x21f/0x2b0 [ 199.311101][ T9826] btf_new_fd+0x7dd/0xca0 [ 199.311120][ T9826] ? apparmor_capable+0x13b/0x1b0 [ 199.311151][ T9826] ? __pfx_btf_new_fd+0x10/0x10 [ 199.311177][ T9826] ? bpf_btf_load+0xcf/0x1a0 [ 199.311206][ T9826] __sys_bpf+0x6f2/0x820 [ 199.311235][ T9826] ? __pfx___sys_bpf+0x10/0x10 [ 199.311275][ T9826] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 199.311307][ T9826] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 199.311337][ T9826] ? do_syscall_64+0x100/0x230 [ 199.311367][ T9826] __x64_sys_bpf+0x7c/0x90 [ 199.311391][ T9826] do_syscall_64+0xf3/0x230 [ 199.311415][ T9826] ? clear_bhb_loop+0x35/0x90 [ 199.311443][ T9826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.311468][ T9826] RIP: 0033:0x7f525a98d169 [ 199.311485][ T9826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.311500][ T9826] RSP: 002b:00007f525b8ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.311523][ T9826] RAX: ffffffffffffffda RBX: 00007f525aba5fa0 RCX: 00007f525a98d169 [ 199.311536][ T9826] RDX: 0000000000000028 RSI: 0000400000001c40 RDI: 0000000000000012 [ 199.311549][ T9826] RBP: 00007f525b8ce090 R08: 0000000000000000 R09: 0000000000000000 [ 199.311561][ T9826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.311572][ T9826] R13: 0000000000000001 R14: 00007f525aba5fa0 R15: 00007ffc76df8478 [ 199.311601][ T9826] [ 199.750840][ T9835] netlink: 'syz.4.1054': attribute type 1 has an invalid length. [ 199.797858][ T9835] netlink: 'syz.4.1054': attribute type 3 has an invalid length. [ 199.805731][ T9835] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1054'. [ 199.815242][ T9835] NCSI netlink: No device for ifindex 246 [ 199.825259][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 199.834694][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 199.846700][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 199.858818][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 199.867116][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 199.880767][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.013541][ T9846] sctp: [Deprecated]: syz.3.1057 (pid 9846) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.013541][ T9846] Use struct sctp_sack_info instead [ 200.092072][ T9848] af_packet: tpacket_rcv: packet too big, clamped from 336 to 4294967272. macoff=96 [ 200.223949][ T6102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.235992][ T6102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.247409][ T6102] bond0 (unregistering): Released all slaves [ 200.281888][ T9846] lo speed is unknown, defaulting to 1000 [ 200.331402][ T9846] lo speed is unknown, defaulting to 1000 [ 200.332030][ T9837] lo speed is unknown, defaulting to 1000 [ 200.338554][ T9846] lo speed is unknown, defaulting to 1000 [ 200.405590][ T9846] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 200.513472][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1058'. [ 200.630746][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1061'. [ 200.644360][ T9846] lo speed is unknown, defaulting to 1000 [ 200.653473][ T9846] lo speed is unknown, defaulting to 1000 [ 200.694348][ T9837] chnl_net:caif_netlink_parms(): no params data found [ 200.709617][ T9846] lo speed is unknown, defaulting to 1000 [ 200.755072][ T9865] netlink: 'syz.1.1061': attribute type 10 has an invalid length. [ 200.804557][ T9858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1061'. [ 200.838104][ T9846] lo speed is unknown, defaulting to 1000 [ 200.958839][ T9873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1065'. [ 200.969151][ T9846] lo speed is unknown, defaulting to 1000 [ 200.993041][ T9846] lo speed is unknown, defaulting to 1000 [ 201.030612][ T9846] lo speed is unknown, defaulting to 1000 [ 201.037873][ T9846] lo speed is unknown, defaulting to 1000 [ 201.065751][ T6102] hsr_slave_0: left promiscuous mode [ 201.104612][ T6102] hsr_slave_1: left promiscuous mode [ 201.121338][ T6102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.141041][ T6102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.167095][ T6102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.183804][ T6102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.195255][ T9884] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1069'. [ 201.223370][ T6102] veth1_macvtap: left promiscuous mode [ 201.229150][ T6102] veth0_macvtap: left promiscuous mode [ 201.234909][ T6102] veth1_vlan: left promiscuous mode [ 201.246906][ T6102] veth0_vlan: left promiscuous mode [ 201.312824][ T9887] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1068'. [ 201.340136][ T9887] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1068'. [ 201.883402][ T6102] team0 (unregistering): Port device team_slave_1 removed [ 201.932583][ T6102] team0 (unregistering): Port device team_slave_0 removed [ 201.997758][ T5841] Bluetooth: hci0: command tx timeout [ 202.470836][ T9884] 0ªX¹¦À: renamed from caif0 [ 202.485932][ T9884] 0ªX¹¦À: entered allmulticast mode [ 202.500422][ T9884] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 202.525121][ T9886] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1068'. [ 202.566159][ T9881] lo speed is unknown, defaulting to 1000 [ 202.566930][ T9837] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.588734][ T9837] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.596154][ T9837] bridge_slave_0: entered allmulticast mode [ 202.625745][ T9837] bridge_slave_0: entered promiscuous mode [ 202.644232][ T9881] lo speed is unknown, defaulting to 1000 [ 202.644977][ T9837] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.672755][ T9837] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.690417][ T9837] bridge_slave_1: entered allmulticast mode [ 202.699319][ T9837] bridge_slave_1: entered promiscuous mode [ 202.812648][ T9837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.880374][ T9837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.047319][ T9837] team0: Port device team_slave_0 added [ 203.071162][ T9837] team0: Port device team_slave_1 added [ 203.185394][ T9837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.214718][ T9837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.280489][ T9837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.309065][ T9837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.320048][ T9837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.368656][ T9837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.471684][ T9912] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1077'. [ 203.612637][ T9837] hsr_slave_0: entered promiscuous mode [ 203.638820][ T9837] hsr_slave_1: entered promiscuous mode [ 203.645277][ T9837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.663248][ T9837] Cannot create hsr debugfs directory [ 203.708122][ T9919] lo speed is unknown, defaulting to 1000 [ 203.744647][ T9919] lo speed is unknown, defaulting to 1000 [ 204.067727][ T5841] Bluetooth: hci0: command tx timeout [ 204.283726][ T9941] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 204.880965][ T9837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 204.941350][ T9837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 204.997234][ T9837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 205.070784][ T9837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 205.363888][ T9837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.387765][ T9965] __nla_validate_parse: 7 callbacks suppressed [ 205.387787][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1091'. [ 205.427811][ T9965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1091'. [ 205.459809][ T9837] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.489919][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.497083][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.562871][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.570085][ T1318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.667878][ T9973] netlink: zone id is out of range [ 205.673556][ T9973] netlink: zone id is out of range [ 205.679117][ T9973] netlink: zone id is out of range [ 205.682044][ T9970] ipvlan2: entered allmulticast mode [ 205.703033][ T9973] netlink: zone id is out of range [ 205.724851][ T9970] macsec0: entered allmulticast mode [ 205.727721][ T9973] netlink: zone id is out of range [ 205.745913][ T9970] veth1_macvtap: entered allmulticast mode [ 205.766103][ T9973] netlink: zone id is out of range [ 205.782879][ T9973] netlink: zone id is out of range [ 205.822147][ T9973] netlink: zone id is out of range [ 205.839713][ T9973] netlink: zone id is out of range [ 206.159004][ T5841] Bluetooth: hci0: command tx timeout [ 206.431140][ T9988] 8021q: adding VLAN 0 to HW filter on device bond3 [ 206.450186][ T9988] bond0: (slave bond3): Enslaving as an active interface with an up link [ 206.565778][ T9837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.692195][ T9837] veth0_vlan: entered promiscuous mode [ 206.732298][ T9837] veth1_vlan: entered promiscuous mode [ 206.826531][ T9837] veth0_macvtap: entered promiscuous mode [ 206.860679][ T9837] veth1_macvtap: entered promiscuous mode [ 206.971735][ T9837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.998001][ T9837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.019421][ T9837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.075918][ T9837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.118960][ T9837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.145801][ T9837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.212985][ T9837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.232307][ T9837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.267594][ T9837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.279004][T10009] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1103'. [ 207.305808][ T9837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.526626][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.557137][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.738593][T10013] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.817741][T10013] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.866883][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.867312][T10019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1107'. [ 207.884024][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.955528][T10022] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20000 [ 208.030071][T10013] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.052088][T10013] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.195132][T10026] netlink: 'syz.4.1109': attribute type 1 has an invalid length. [ 208.198971][T10013] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.221622][T10013] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.238576][ T5841] Bluetooth: hci0: command tx timeout [ 208.303584][T10034] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1109'. [ 208.462979][T10031] bond2: (slave gretap1): making interface the new active one [ 208.473963][T10031] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 208.532455][T10013] bond0: (slave netdevsim0): Releasing backup interface [ 208.549345][T10013] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.561382][T10013] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.686373][T10013] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.702706][T10013] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.729069][T10013] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.737501][T10013] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.756726][T10013] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.765936][T10013] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.784465][T10013] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.807497][T10013] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.896852][T10043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1113'. [ 208.906668][T10043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1113'. [ 209.046177][ T69] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.090674][T10048] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 209.109057][T10049] bridge: RTM_NEWNEIGH with invalid ether address [ 209.232404][ T69] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.370522][ T69] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.491398][ T69] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.683338][ T69] bridge_slave_1: left allmulticast mode [ 209.689580][ T69] bridge_slave_1: left promiscuous mode [ 209.695349][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.712382][ T69] bridge_slave_0: left allmulticast mode [ 209.721063][ T69] bridge_slave_0: left promiscuous mode [ 209.726863][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.161788][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.195105][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.240111][ T69] bond0 (unregistering): Released all slaves [ 210.696870][ T69] hsr_slave_0: left promiscuous mode [ 210.715649][ T69] hsr_slave_1: left promiscuous mode [ 210.734679][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.752998][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.768672][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.781147][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.800562][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 210.810538][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 210.819338][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 210.827970][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 210.835961][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 210.843736][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.882979][ T69] veth1_macvtap: left promiscuous mode [ 210.889276][ T69] veth0_macvtap: left promiscuous mode [ 210.895124][ T69] veth1_vlan: left promiscuous mode [ 210.900594][ T69] veth0_vlan: left promiscuous mode [ 210.923707][T10069] netlink: 'syz.3.1116': attribute type 4 has an invalid length. [ 211.496257][ T69] team0 (unregistering): Port device team_slave_1 removed [ 211.559059][ T69] team0 (unregistering): Port device team_slave_0 removed [ 212.132111][T10068] lo speed is unknown, defaulting to 1000 [ 212.159940][T10068] lo speed is unknown, defaulting to 1000 [ 212.301465][T10084] lo speed is unknown, defaulting to 1000 [ 212.396986][T10091] netlink: 'syz.2.1124': attribute type 1 has an invalid length. [ 212.405076][T10091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1124'. [ 212.407740][T10084] lo speed is unknown, defaulting to 1000 [ 212.422727][T10086] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1123'. [ 212.589206][T10095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1125'. [ 212.650822][T10068] chnl_net:caif_netlink_parms(): no params data found [ 212.705764][T10095] 8021q: adding VLAN 0 to HW filter on device bond4 [ 212.867997][ T5841] Bluetooth: hci0: command tx timeout [ 212.874011][T10105] IPv6: sit1: Disabled Multicast RS [ 212.899556][T10068] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.908332][T10068] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.915624][T10068] bridge_slave_0: entered allmulticast mode [ 212.923542][T10068] bridge_slave_0: entered promiscuous mode [ 212.933027][T10068] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.940383][T10068] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.948739][T10068] bridge_slave_1: entered allmulticast mode [ 212.956351][T10068] bridge_slave_1: entered promiscuous mode [ 213.017191][T10068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.031481][T10068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.085751][T10068] team0: Port device team_slave_0 added [ 213.100737][T10068] team0: Port device team_slave_1 added [ 213.228644][T10068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.250335][T10068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.287703][T10068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.305760][T10113] netlink: 'syz.2.1129': attribute type 3 has an invalid length. [ 213.315533][T10113] netlink: 'syz.2.1129': attribute type 3 has an invalid length. [ 213.327357][T10068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.344057][T10068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.383182][T10114] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1130'. [ 213.399065][T10068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.602957][T10068] hsr_slave_0: entered promiscuous mode [ 213.632648][T10068] hsr_slave_1: entered promiscuous mode [ 213.642792][T10068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.651149][T10068] Cannot create hsr debugfs directory [ 214.106345][T10135] bond_slave_0: left promiscuous mode [ 214.128174][T10135] bond_slave_1: left promiscuous mode [ 214.166403][T10139] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 214.306257][T10135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.321742][T10135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.331636][T10143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1137'. [ 214.342551][T10135] bond0 (unregistering): Released all slaves [ 214.380699][T10143] hsr_slave_0: left promiscuous mode [ 214.394338][T10143] hsr_slave_1: left promiscuous mode [ 214.411481][T10143] hsr0 (unregistering): left allmulticast mode [ 214.525928][T10146] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 214.575430][T10146] lo speed is unknown, defaulting to 1000 [ 214.623245][T10146] lo speed is unknown, defaulting to 1000 [ 214.716739][T10149] lo speed is unknown, defaulting to 1000 [ 214.773332][T10149] lo speed is unknown, defaulting to 1000 [ 214.802634][T10068] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 214.922529][T10068] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 214.950835][ T5841] Bluetooth: hci0: command tx timeout [ 214.978911][T10068] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 215.091736][T10068] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 215.255310][T10164] Unsupported ieee802154 address type: 0 [ 215.398104][T10068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.456949][T10068] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.471790][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.478995][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.509222][T10173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1145'. [ 215.545977][ T6092] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.553143][ T6092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.574297][T10173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1145'. [ 215.607818][T10173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1145'. [ 215.630602][T10173] netlink: 'syz.1.1145': attribute type 1 has an invalid length. [ 215.657770][T10173] nbd: error processing sock list [ 215.735058][T10149] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1139'. [ 216.346121][T10068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.459068][T10068] veth0_vlan: entered promiscuous mode [ 216.512673][T10068] veth1_vlan: entered promiscuous mode [ 216.584583][T10068] veth0_macvtap: entered promiscuous mode [ 216.590461][T10219] netlink: 'syz.4.1154': attribute type 21 has an invalid length. [ 216.599612][T10068] veth1_macvtap: entered promiscuous mode [ 216.605549][T10219] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1154'. [ 216.625952][T10218] (unnamed net_device) (uninitialized): option lacp_active: invalid value (7) [ 216.635992][T10219] netlink: 'syz.4.1154': attribute type 5 has an invalid length. [ 216.644108][T10219] netlink: 'syz.4.1154': attribute type 6 has an invalid length. [ 216.687438][T10068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.699114][T10068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.713304][T10068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.724413][T10068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.735381][T10068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.747003][T10068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.789342][T10068] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.818080][T10068] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.830844][T10068] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.841253][T10068] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.991466][ T1318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.014232][ T1318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.028573][ T5841] Bluetooth: hci0: command tx timeout [ 217.103290][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.123821][T10235] xt_recent: Unsupported userspace flags (00000042) [ 217.132603][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.260315][T10245] netlink: 'syz.3.1160': attribute type 1 has an invalid length. [ 217.557393][T10254] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 218.057060][T10273] __nla_validate_parse: 2 callbacks suppressed [ 218.057084][T10273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1168'. [ 218.201202][T10278] netlink: 'syz.2.1169': attribute type 1 has an invalid length. [ 218.222397][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.590333][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.400596][T10290] netlink: 'syz.4.1174': attribute type 1 has an invalid length. [ 219.800557][T10296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1175'. [ 219.905018][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.915391][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.924254][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.932731][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.940763][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 219.948500][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.253793][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1180'. [ 221.987863][ T5833] Bluetooth: hci0: command tx timeout [ 224.067645][ T5833] Bluetooth: hci0: command tx timeout [ 226.148137][ T5833] Bluetooth: hci0: command tx timeout [ 230.018968][ T5833] Bluetooth: hci0: command tx timeout [ 233.624129][T10301] lo speed is unknown, defaulting to 1000 [ 233.639021][T10301] lo speed is unknown, defaulting to 1000 [ 243.032933][T10318] macvlan3: entered promiscuous mode [ 243.049596][T10318] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 250.553550][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 250.561195][ T5841] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 253.062893][T10339] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 253.108536][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.148342][ T5846] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 253.387891][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 253.397079][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 253.406278][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 253.415130][ T5833] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 253.422645][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 253.559580][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.583844][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.594415][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.602625][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 253.613391][ T5846] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 253.621121][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 256.343555][ T5846] Bluetooth: hci6: command tx timeout [ 256.350076][ T5846] Bluetooth: hci5: command tx timeout [ 256.409020][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.418951][T10331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1184'. [ 256.498332][T10341] lo speed is unknown, defaulting to 1000 [ 256.505122][T10341] lo speed is unknown, defaulting to 1000 [ 256.554721][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.567165][ T5841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 256.583806][ T5841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 256.594933][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.607308][ T5147] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 256.618251][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.630862][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 256.642374][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.655082][ T5841] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 256.666443][ T5147] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 256.676813][ T5147] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 256.684476][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 258.828554][ T5846] Bluetooth: hci5: command tx timeout [ 258.834012][ T5846] Bluetooth: hci6: command tx timeout [ 261.261846][ T5833] Bluetooth: hci6: command tx timeout [ 261.267395][ T5833] Bluetooth: hci5: command tx timeout [ 261.272969][ T5833] Bluetooth: hci2: command tx timeout [ 261.279365][ T5833] Bluetooth: hci7: command tx timeout [ 263.348746][ T5833] Bluetooth: hci2: command tx timeout [ 263.354404][ T5833] Bluetooth: hci5: command tx timeout [ 263.359929][ T5841] Bluetooth: hci6: command tx timeout [ 263.365460][ T5147] Bluetooth: hci7: command tx timeout [ 269.257687][ T5147] Bluetooth: hci7: command tx timeout [ 269.263157][ T5147] Bluetooth: hci2: command tx timeout [ 273.964867][ T5833] Bluetooth: hci2: command tx timeout [ 273.970387][ T5833] Bluetooth: hci7: command tx timeout [ 286.424628][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 286.441008][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 286.455767][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 286.464936][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 286.480769][ T5833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 286.493464][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 288.547674][ T5833] Bluetooth: hci3: command tx timeout [ 299.847046][ T5833] Bluetooth: hci3: command tx timeout [ 301.907814][ T5147] Bluetooth: hci3: command tx timeout [ 308.616784][ T5147] Bluetooth: hci3: command tx timeout [ 309.206477][ T5147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 309.222564][ T5147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 309.235026][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 309.246869][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 309.257031][ T5147] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 309.268337][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 312.702837][ T5147] Bluetooth: hci1: command tx timeout [ 313.020625][T10294] bond0: (slave syz_tun): Releasing backup interface [ 314.797661][ T5147] Bluetooth: hci1: command tx timeout [ 318.226835][ T5147] Bluetooth: hci1: command tx timeout [ 318.373483][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.413301][ T5842] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 318.422348][ T5842] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 318.431644][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 318.450418][ T5842] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 318.458680][ T5842] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 318.467146][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 318.481959][ T5842] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 318.489427][ T5842] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 318.498660][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 318.517275][ T5842] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 318.524636][ T5842] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 318.531849][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 318.548996][ T5842] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 318.556147][ T5842] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 318.563412][ T5842] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 318.578352][ T5842] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 318.585597][ T5842] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 318.592916][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 330.614992][ T5842] Bluetooth: hci1: command tx timeout [ 330.620591][ T5842] Bluetooth: hci9: command tx timeout [ 330.626869][ T5842] Bluetooth: hci8: command tx timeout [ 330.632969][ T5842] Bluetooth: hci4: command tx timeout [ 338.878011][ T5833] Bluetooth: hci4: command tx timeout [ 338.883629][ T5833] Bluetooth: hci8: command tx timeout [ 338.889158][ T5833] Bluetooth: hci9: command tx timeout [ 345.130321][ T5833] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 345.145188][ T5833] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 345.154375][ T5833] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 345.162682][ T5833] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 345.171000][ T5833] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 345.178600][ T5833] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 345.299703][ T5833] Bluetooth: hci9: command tx timeout [ 345.365968][ T5833] Bluetooth: hci8: command tx timeout [ 345.371495][ T5833] Bluetooth: hci4: command tx timeout [ 349.084431][ T5147] Bluetooth: hci0: command 0x0406 tx timeout [ 349.090604][ T5147] Bluetooth: hci4: command tx timeout [ 349.096110][ T5147] Bluetooth: hci8: command tx timeout [ 349.101652][ T5147] Bluetooth: hci9: command tx timeout [ 349.228775][ T5833] Bluetooth: hci10: command tx timeout [ 355.227825][ T5833] Bluetooth: hci10: command tx timeout [ 369.119807][ T5833] Bluetooth: hci10: command tx timeout [ 369.460745][ T5147] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 369.470357][ T5147] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 369.480380][ T5147] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 369.489504][ T5147] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 369.497688][ T5147] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 369.505230][ T5147] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 371.837937][ T5147] Bluetooth: hci10: command tx timeout [ 371.843567][ T5147] Bluetooth: hci11: command tx timeout [ 375.588162][ T5833] Bluetooth: hci11: command tx timeout [ 379.238595][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.594267][ T5841] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 387.608905][ T5841] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 387.619998][ T5841] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 387.629413][ T5841] Bluetooth: hci6: command 0x0406 tx timeout [ 393.594263][ T5841] Bluetooth: hci11: command tx timeout [ 393.601183][ T5841] Bluetooth: hci13: command 0x1003 tx timeout [ 393.611324][ T5147] Bluetooth: hci14: Opcode 0x1003 failed: -110 [ 393.618243][ T5841] Bluetooth: hci12: command 0x1003 tx timeout [ 393.624907][ T5841] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 393.632416][ T5842] Bluetooth: hci13: Opcode 0x1003 failed: -110 [ 393.639496][ T5846] Bluetooth: hci12: Opcode 0x1003 failed: -110 [ 393.649847][ T5841] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 393.658494][ T5841] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 393.779060][ T55] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 393.786465][T10387] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 393.794147][ T55] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 393.802040][ T5846] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 393.809591][ T55] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 393.820052][ T5846] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 393.827812][ T55] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 393.835198][ T5846] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 393.843298][T10387] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 393.851729][ T5846] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 393.860435][T10387] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 393.871890][ T5846] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 393.880255][ T55] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 393.887992][ T5846] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 393.895730][ T55] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 393.903836][T10387] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 393.911202][ T5846] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 393.936221][T10387] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 395.668069][T10387] Bluetooth: hci11: command tx timeout [ 398.333738][ T5838] bridge0: port 3(syz_tun) entered disabled state [ 400.642117][ T5838] syz_tun (unregistering): left allmulticast mode [ 400.651798][ T5838] bridge0: port 3(syz_tun) entered disabled state [ 408.994278][ T5833] Bluetooth: hci12: command tx timeout [ 409.000472][ T5833] Bluetooth: hci14: command tx timeout [ 409.006623][ T5833] Bluetooth: hci13: command tx timeout [ 409.634871][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 409.646622][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 409.659259][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 409.667741][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 409.677251][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 409.684923][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 412.867625][ T5833] Bluetooth: hci0: command tx timeout [ 413.040011][ T5842] Bluetooth: hci13: command tx timeout [ 413.045567][ T5842] Bluetooth: hci14: command tx timeout [ 413.051198][ T5842] Bluetooth: hci12: command tx timeout [ 417.401127][ T55] Bluetooth: hci12: command tx timeout [ 417.406696][ T55] Bluetooth: hci14: command tx timeout [ 417.412338][ T55] Bluetooth: hci13: command tx timeout [ 417.418261][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 421.917458][ C1] sched: DL replenish lagged too much [ 422.014185][ T5842] Bluetooth: hci0: command tx timeout [ 422.019760][ T5842] Bluetooth: hci13: command tx timeout [ 422.025605][ T5842] Bluetooth: hci14: command tx timeout [ 422.031179][ T5842] Bluetooth: hci12: command tx timeout [ 424.067630][ T55] Bluetooth: hci0: command tx timeout [ 426.147765][ T55] Bluetooth: hci0: command tx timeout [ 430.109510][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 430.126772][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 430.135433][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 430.150868][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 430.163568][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 430.174684][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 433.904457][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 433.910754][ T5842] Bluetooth: hci2: command tx timeout [ 435.988090][ T55] Bluetooth: hci2: command tx timeout [ 438.337794][ T55] Bluetooth: hci2: command tx timeout [ 438.399111][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 438.424362][ T5846] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 438.434629][ T5846] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 438.443296][ T5846] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 438.452768][ T5846] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 438.460646][ T5846] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 438.468093][ T5846] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 438.534591][ T5846] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 438.558023][ T5846] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 438.566563][ T5846] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 438.578709][ T5846] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 438.587128][ T5846] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 438.595034][ T5846] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 438.628406][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 438.638430][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 438.648491][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 438.656270][ T5846] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 438.664461][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 443.186336][ T31] INFO: task syz.4.1184:10331 blocked for more than 143 seconds. [ 443.201788][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.208342][ T31] Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 443.215995][ T31] Blocked by coredump. [ 443.223466][ T5846] Bluetooth: hci7: command tx timeout [ 443.229884][ T5846] Bluetooth: hci15: command tx timeout [ 443.235939][ T5846] Bluetooth: hci5: command tx timeout [ 443.242162][ T5846] Bluetooth: hci2: command tx timeout [ 443.267859][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 443.276580][ T31] task:syz.4.1184 state:D stack:23568 pid:10331 tgid:10330 ppid:5834 task_flags:0x40054c flags:0x00004006 [ 443.307798][ T31] Call Trace: [ 443.311125][ T31] [ 443.314080][ T31] __schedule+0x190e/0x4c90 [ 443.327837][ T31] ? __pfx___schedule+0x10/0x10 [ 443.332745][ T31] ? __pfx_lock_release+0x10/0x10 [ 443.347819][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 443.353763][ T31] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 443.373850][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 443.380385][ T31] ? schedule+0x90/0x320 [ 443.384657][ T31] schedule+0x14b/0x320 [ 443.389156][ T31] schedule_preempt_disabled+0x13/0x30 [ 443.394639][ T31] __mutex_lock+0x817/0x1010 [ 443.399325][ T31] ? __mutex_lock+0x602/0x1010 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 443.404121][ T31] ? tun_chr_close+0x3b/0x1b0 [ 443.409149][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 443.414231][ T31] ? __pfx_call_rcu+0x10/0x10 [ 443.418989][ T31] tun_chr_close+0x3b/0x1b0 [ 443.423531][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 443.429974][ T31] __fput+0x3e9/0x9f0 [ 443.434040][ T31] task_work_run+0x24f/0x310 [ 443.438822][ T31] ? __pfx_task_work_run+0x10/0x10 [ 443.443993][ T31] ? do_exit+0xa25/0x28e0 [ 443.448629][ T31] ? do_exit+0xa25/0x28e0 [ 443.453777][ T31] do_exit+0xa2a/0x28e0 [ 443.458122][ T31] ? __pfx_do_exit+0x10/0x10 [ 443.463280][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 443.469020][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 443.475049][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 443.481516][ T31] ? _raw_spin_lock_irq+0xdf/0x120 [ 443.486670][ T31] do_group_exit+0x207/0x2c0 [ 443.491597][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 443.496830][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 443.502294][ T31] get_signal+0x168c/0x1720 [ 443.506886][ T31] ? __pfx_get_signal+0x10/0x10 [ 443.512228][ T31] arch_do_signal_or_restart+0x96/0x860 [ 443.517888][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 443.524531][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 443.531320][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 [ 443.537099][ T31] syscall_exit_to_user_mode+0xce/0x340 [ 443.543151][ T31] do_syscall_64+0x100/0x230 [ 443.548123][ T31] ? clear_bhb_loop+0x35/0x90 [ 443.552855][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.558886][ T31] RIP: 0033:0x7fe88698d169 [ 443.563805][ T31] RSP: 002b:00007fe88783b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.572628][ T31] RAX: 00000000000000d8 RBX: 00007fe886ba5fa0 RCX: 00007fe88698d169 [ 443.580661][ T31] RDX: 0000000000000000 RSI: 0000400000000300 RDI: 0000000000000009 [ 443.588956][ T31] RBP: 00007fe886a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 443.596956][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.605108][ T31] R13: 0000000000000000 R14: 00007fe886ba5fa0 R15: 00007ffe6e0aee68 [ 443.613422][ T31] [ 443.616506][ T31] INFO: task syz-executor:10353 blocked for more than 143 seconds. [ 443.624478][ T31] Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 443.632822][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 443.641944][ T31] task:syz-executor state:D stack:25984 pid:10353 tgid:10353 ppid:1 task_flags:0x400140 flags:0x00000004 [ 443.654372][ T31] Call Trace: [ 443.658291][ T31] [ 443.661260][ T31] __schedule+0x190e/0x4c90 [ 443.665834][ T31] ? __pfx___schedule+0x10/0x10 [ 443.671117][ T31] ? __pfx_lock_release+0x10/0x10 [ 443.676182][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 443.682272][ T31] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 443.688518][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 443.694869][ T31] ? schedule+0x90/0x320 [ 443.699190][ T31] schedule+0x14b/0x320 [ 443.703374][ T31] schedule_preempt_disabled+0x13/0x30 [ 443.709416][ T31] __mutex_lock+0x817/0x1010 [ 443.714051][ T31] ? __mutex_lock+0x602/0x1010 [ 443.719102][ T31] ? inet_rtm_newaddr+0x47e/0x1bc0 [ 443.724413][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 443.729776][ T31] ? __lock_acquire+0x1397/0x2100 [ 443.735615][ T31] ? __nla_parse+0x40/0x60 [ 443.740129][ T31] inet_rtm_newaddr+0x47e/0x1bc0 [ 443.745121][ T31] ? rcu_read_unlock+0x87/0xa0 [ 443.750207][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 443.755621][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 443.761076][ T31] rtnetlink_rcv_msg+0x791/0xcf0 [ 443.766049][ T31] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 443.771512][ T31] ? __lock_acquire+0x1397/0x2100 [ 443.776606][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 443.782145][ T31] netlink_rcv_skb+0x206/0x480 [ 443.786936][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 443.792761][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 443.798453][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 443.803694][ T31] netlink_unicast+0x7f6/0x990 [ 443.808794][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 443.814118][ T31] ? __virt_addr_valid+0x45f/0x530 [ 443.819302][ T31] ? __phys_addr_symbol+0x2f/0x70 [ 443.824363][ T31] ? __check_object_size+0x47a/0x730 [ 443.829998][ T31] netlink_sendmsg+0x8de/0xcb0 [ 443.834817][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.840677][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 443.845661][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.851657][ T31] __sock_sendmsg+0x221/0x270 [ 443.856381][ T31] __sys_sendto+0x363/0x4c0 [ 443.861002][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 443.866091][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 443.872503][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 443.878909][ T31] ? exc_page_fault+0x590/0x8b0 [ 443.883799][ T31] __x64_sys_sendto+0xde/0x100 [ 443.888903][ T31] do_syscall_64+0xf3/0x230 [ 443.893438][ T31] ? clear_bhb_loop+0x35/0x90 [ 443.898225][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.904166][ T31] RIP: 0033:0x7fe68a78effc [ 443.909009][ T31] RSP: 002b:00007ffd01b9d3d0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 443.917564][ T31] RAX: ffffffffffffffda RBX: 00007fe68b4d4620 RCX: 00007fe68a78effc [ 443.925574][ T31] RDX: 0000000000000028 RSI: 00007fe68b4d4670 RDI: 0000000000000003 [ 443.933993][ T31] RBP: 0000000000000000 R08: 00007ffd01b9d424 R09: 000000000000000c [ 443.942509][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 443.951216][ T31] R13: 0000000000000000 R14: 00007fe68b4d4670 R15: 0000000000000000 [ 443.959353][ T31] [ 443.962420][ T31] [ 443.962420][ T31] Showing all locks held in the system: [ 443.970585][ T31] 7 locks held by kworker/0:0/9: [ 443.975553][ T31] 6 locks held by kworker/u8:0/12: [ 443.981312][ T31] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 443.992615][ T31] #1: ffffc90000117c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 444.003388][ T31] #2: ffffffff8feca250 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60 [ 444.013176][ T31] #3: ffff8880593880e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 444.023395][ T31] #4: ffff8880126fb250 (&devlink->lock_key#12){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 444.034671][ T31] #5: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xa0/0x620 [ 444.044133][ T31] 3 locks held by kworker/u8:1/13: [ 444.049938][ T31] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 444.061759][ T31] #1: ffffc90000127c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 444.073134][ T31] #2: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 444.082234][ T31] 1 lock held by khungtaskd/31: [ 444.087102][ T31] #0: ffffffff8eb393e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 444.097354][ T31] 2 locks held by kworker/1:2/3076: [ 444.102637][ T31] 2 locks held by getty/5591: [ 444.107333][ T31] #0: ffff88814cc7a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 444.117633][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 [ 444.128104][ T31] 3 locks held by kworker/0:7/5918: [ 444.133323][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 444.144860][ T31] #1: ffffc9000435fc60 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 444.156607][ T31] #2: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 444.167479][ T31] 1 lock held by syz-executor/10301: [ 444.172875][ T31] #0: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 444.182259][ T31] 1 lock held by syz.4.1184/10331: [ 444.187391][ T31] #0: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 444.196553][ T31] 2 locks held by syz-executor/10341: [ 444.202263][ T31] #0: ffffffff8feca250 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 444.211999][ T31] #1: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 444.221778][ T31] 1 lock held by syz-executor/10353: [ 444.227088][ T31] #0: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bc0 [ 444.237111][ T31] 1 lock held by syz-executor/10357: [ 444.242767][ T31] #0: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bc0 [ 444.252713][ T31] 1 lock held by syz-executor/10362: [ 444.258774][ T31] #0: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bc0 [ 444.268333][ T31] 1 lock held by syz-executor/10363: [ 444.273636][ T31] #0: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bc0 [ 444.283436][ T31] 1 lock held by syz-executor/10364: [ 444.288798][ T31] #0: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bc0 [ 444.298679][ T31] 1 lock held by syz-executor/10369: [ 444.303987][ T31] #0: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bc0 [ 444.313493][ T31] 1 lock held by syz-executor/10376: [ 444.319125][ T31] #0: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bc0 [ 444.328634][ T31] 1 lock held by syz-executor/10381: [ 444.333939][ T31] #0: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bc0 [ 444.343808][ T31] 1 lock held by syz-executor/10382: [ 444.349624][ T31] #0: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bc0 [ 444.359786][ T31] 1 lock held by syz-executor/10383: [ 444.365190][ T31] #0: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bc0 [ 444.374751][ T31] 1 lock held by syz-executor/10389: [ 444.380369][ T31] #0: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bc0 [ 444.389901][ T31] 1 lock held by syz-executor/10392: [ 444.395205][ T31] #0: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bc0 [ 444.404985][ T31] 2 locks held by dhcpcd/10394: [ 444.409930][ T31] #0: ffff88807ae13208 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x90/0x240 [ 444.420520][ T31] #1: ffffffff8eb3e8b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x820 [ 444.431538][ T31] 1 lock held by syz-executor/10398: [ 444.436842][ T31] #0: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bc0 [ 444.446636][ T31] 1 lock held by syz-executor/10400: [ 444.452432][ T31] #0: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bc0 [ 444.462580][ T31] 1 lock held by syz-executor/10402: [ 444.467959][ T31] #0: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bc0 [ 444.477877][ T31] [ 444.480251][ T31] ============================================= [ 444.480251][ T31] [ 444.488799][ T31] NMI backtrace for cpu 1 [ 444.488814][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 444.488835][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 444.488847][ T31] Call Trace: [ 444.488857][ T31] [ 444.488867][ T31] dump_stack_lvl+0x241/0x360 [ 444.488897][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.488918][ T31] ? __pfx__printk+0x10/0x10 [ 444.488951][ T31] nmi_cpu_backtrace+0x49c/0x4d0 [ 444.488978][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 444.488996][ T31] ? _printk+0xd5/0x120 [ 444.489012][ T31] ? __pfx__printk+0x10/0x10 [ 444.489031][ T31] ? __wake_up_klogd+0xcc/0x110 [ 444.489057][ T31] ? __pfx__printk+0x10/0x10 [ 444.489077][ T31] ? __rcu_read_unlock+0xa1/0x110 [ 444.489106][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 444.489131][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 444.489154][ T31] watchdog+0x1058/0x10a0 [ 444.489184][ T31] ? watchdog+0x1ea/0x10a0 [ 444.489225][ T31] ? __pfx_watchdog+0x10/0x10 [ 444.489253][ T31] kthread+0x7a9/0x920 [ 444.489269][ T31] ? __pfx_kthread+0x10/0x10 [ 444.489288][ T31] ? __pfx_watchdog+0x10/0x10 [ 444.489315][ T31] ? __pfx_kthread+0x10/0x10 [ 444.489331][ T31] ? __pfx_kthread+0x10/0x10 [ 444.489351][ T31] ? __pfx_kthread+0x10/0x10 [ 444.489366][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 444.489386][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 444.489408][ T31] ? __pfx_kthread+0x10/0x10 [ 444.489428][ T31] ret_from_fork+0x4b/0x80 [ 444.489452][ T31] ? __pfx_kthread+0x10/0x10 [ 444.489469][ T31] ret_from_fork_asm+0x1a/0x30 [ 444.489508][ T31] [ 444.489517][ T31] Sending NMI from CPU 1 to CPUs 0: [ 444.663831][ C0] NMI backtrace for cpu 0 [ 444.663849][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 444.663865][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 444.663876][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 444.663899][ C0] RIP: 0010:lockdep_hardirqs_on_prepare+0x27a/0x780 [ 444.663924][ C0] Code: 89 e0 48 c1 e8 03 0f b6 04 10 84 c0 75 54 8b 43 20 a9 00 00 04 00 74 2c 31 d2 a9 00 00 03 00 0f 94 c2 83 f2 03 48 8b 7c 24 10 <48> 89 de e8 ee b3 00 00 48 ba 00 00 00 00 00 fc ff df 85 c0 0f 84 [ 444.663936][ C0] RSP: 0018:ffffc900000e6d80 EFLAGS: 00000006 [ 444.663957][ C0] RAX: 00000000000607f3 RBX: ffff88801ce90b40 RCX: ffffffff819d5b5a [ 444.663968][ C0] RDX: 0000000000000003 RSI: 0000000000000008 RDI: ffff88801ce90000 [ 444.663978][ C0] RBP: ffffc900000e6e28 R08: ffffffff94554947 R09: 1ffffffff28aa928 [ 444.663988][ C0] R10: dffffc0000000000 R11: fffffbfff28aa929 R12: ffff88801ce90b60 [ 444.663998][ C0] R13: 0000000000000002 R14: ffff88801ce90ae8 R15: 1ffff110039d215d [ 444.664008][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 444.664020][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 444.664031][ C0] CR2: 00005635efa15f50 CR3: 00000000374b0000 CR4: 00000000003526f0 [ 444.664046][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 444.664054][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 444.664064][ C0] Call Trace: [ 444.664070][ C0] [ 444.664077][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 444.664093][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 444.664113][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 444.664133][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 444.664150][ C0] ? nmi_handle+0x14f/0x5a0 [ 444.664170][ C0] ? nmi_handle+0x2a/0x5a0 [ 444.664190][ C0] ? lockdep_hardirqs_on_prepare+0x27a/0x780 [ 444.664208][ C0] ? default_do_nmi+0x63/0x160 [ 444.664229][ C0] ? exc_nmi+0x123/0x1f0 [ 444.664247][ C0] ? end_repeat_nmi+0xf/0x53 [ 444.664268][ C0] ? mark_lock+0x9a/0x360 [ 444.664282][ C0] ? lockdep_hardirqs_on_prepare+0x27a/0x780 [ 444.664301][ C0] ? lockdep_hardirqs_on_prepare+0x27a/0x780 [ 444.664320][ C0] ? lockdep_hardirqs_on_prepare+0x27a/0x780 [ 444.664340][ C0] [ 444.664345][ C0] [ 444.664351][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 444.664372][ C0] ? rcu_is_watching+0x15/0xb0 [ 444.664387][ C0] ? get_random_u16+0x196/0xa80 [ 444.664404][ C0] trace_hardirqs_on+0x28/0x40 [ 444.664422][ C0] get_random_u16+0x4d6/0xa80 [ 444.664438][ C0] ? get_random_u16+0x196/0xa80 [ 444.664455][ C0] ? __pfx_get_random_u16+0x10/0x10 [ 444.664472][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 444.664493][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 444.664513][ C0] cake_get_flow_quantum+0x191/0x290 [ 444.664528][ C0] cake_dequeue+0x2b22/0x4bf0 [ 444.664548][ C0] ? kvm_wait+0x23b/0x2c0 [ 444.664563][ C0] ? __pfx_kvm_wait+0x10/0x10 [ 444.664585][ C0] ? __pfx_cake_dequeue+0x10/0x10 [ 444.664618][ C0] __qdisc_run+0x272/0x2180 [ 444.664643][ C0] __dev_queue_xmit+0x10dd/0x3f40 [ 444.664665][ C0] ? __dev_queue_xmit+0x2f4/0x3f40 [ 444.664683][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 444.664710][ C0] ? __ipv6_neigh_lookup_noref+0x4e1/0x680 [ 444.664731][ C0] ? ip6_finish_output2+0x103a/0x17c0 [ 444.664751][ C0] ip6_finish_output2+0x127d/0x17c0 [ 444.664771][ C0] ? ip6_finish_output2+0x63b/0x17c0 [ 444.664791][ C0] ? __pfx_ip6_finish_output2+0x10/0x10 [ 444.664812][ C0] ? ip6_mtu+0x81/0x3f0 [ 444.664829][ C0] ip6_finish_output+0x41e/0x840 [ 444.664848][ C0] udp_tunnel6_xmit_skb+0x61d/0xa70 [ 444.664870][ C0] send6+0x6da/0xaf0 [ 444.664889][ C0] ? send6+0x2af/0xaf0 [ 444.664906][ C0] ? __pfx_send6+0x10/0x10 [ 444.664921][ C0] ? wg_socket_send_skb_to_peer+0x5a/0x1d0 [ 444.664941][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 444.664964][ C0] ? mod_peer_timer+0x21/0x260 [ 444.664978][ C0] ? wg_socket_send_skb_to_peer+0x5a/0x1d0 [ 444.664996][ C0] wg_socket_send_skb_to_peer+0x115/0x1d0 [ 444.665015][ C0] wg_packet_tx_worker+0x1bf/0x810 [ 444.665032][ C0] ? wg_packet_tx_worker+0x25f/0x810 [ 444.665049][ C0] ? process_scheduled_works+0x9c6/0x18e0 [ 444.665066][ C0] process_scheduled_works+0xabe/0x18e0 [ 444.665093][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 444.665113][ C0] ? assign_work+0x364/0x3d0 [ 444.665131][ C0] worker_thread+0x870/0xd30 [ 444.665153][ C0] ? __kthread_parkme+0x169/0x1d0 [ 444.665171][ C0] ? __pfx_worker_thread+0x10/0x10 [ 444.665189][ C0] kthread+0x7a9/0x920 [ 444.665201][ C0] ? __pfx_kthread+0x10/0x10 [ 444.665214][ C0] ? __pfx_worker_thread+0x10/0x10 [ 444.665231][ C0] ? __pfx_kthread+0x10/0x10 [ 444.665243][ C0] ? __pfx_kthread+0x10/0x10 [ 444.665256][ C0] ? __pfx_kthread+0x10/0x10 [ 444.665267][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 444.665282][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 444.665297][ C0] ? __pfx_kthread+0x10/0x10 [ 444.665310][ C0] ret_from_fork+0x4b/0x80 [ 444.665327][ C0] ? __pfx_kthread+0x10/0x10 [ 444.665340][ C0] ret_from_fork_asm+0x1a/0x30 [ 444.665361][ C0] [ 444.666167][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 445.178874][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 445.189403][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 445.199479][ T31] Call Trace: [ 445.202782][ T31] [ 445.205739][ T31] dump_stack_lvl+0x241/0x360 [ 445.210452][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.215677][ T31] ? __pfx__printk+0x10/0x10 [ 445.220289][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 445.226308][ T31] ? vscnprintf+0x5d/0x90 [ 445.230663][ T31] panic+0x349/0x880 [ 445.234596][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 445.240774][ T31] ? __pfx_panic+0x10/0x10 [ 445.245215][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 445.250614][ T31] ? __irq_work_queue_local+0x137/0x410 [ 445.256200][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 445.261604][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 445.267867][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 445.274053][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 445.280237][ T31] watchdog+0x1097/0x10a0 [ 445.284603][ T31] ? watchdog+0x1ea/0x10a0 [ 445.289057][ T31] ? __pfx_watchdog+0x10/0x10 [ 445.293783][ T31] kthread+0x7a9/0x920 [ 445.297873][ T31] ? __pfx_kthread+0x10/0x10 [ 445.302585][ T31] ? __pfx_watchdog+0x10/0x10 [ 445.307298][ T31] ? __pfx_kthread+0x10/0x10 [ 445.311908][ T31] ? __pfx_kthread+0x10/0x10 [ 445.316525][ T31] ? __pfx_kthread+0x10/0x10 [ 445.321146][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 445.326376][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 445.331606][ T31] ? __pfx_kthread+0x10/0x10 [ 445.336224][ T31] ret_from_fork+0x4b/0x80 [ 445.340667][ T31] ? __pfx_kthread+0x10/0x10 [ 445.345283][ T31] ret_from_fork_asm+0x1a/0x30 [ 445.350091][ T31] [ 445.353273][ T31] Kernel Offset: disabled [ 445.357620][ T31] Rebooting in 86400 seconds..