last executing test programs: 3m19.541217841s ago: executing program 3 (id=1169): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000480)={r1}, &(0x7f00000000c0)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006772653000000000000000000000000034001a80100002800c000180030000000000000020000a80050008"], 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffff7, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3m19.37835037s ago: executing program 3 (id=1171): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socket(0x2a, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000feff000000000000000018030000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000053000000bf0900000000000055090100000000009500000000000000b702000000000000632af0ff0000000026090800000000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000015000000760000e4be980000000000001e080000000000008500000007000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r8, &(0x7f00000003c0), &(0x7f00000004c0)=@tcp6=r6}, 0x20) sendmmsg$inet6(r6, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)="03", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000140)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000026c0)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x7f, 0x101, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x6, 0x80, 0x7f1b, 0x5, 0x5, 0x80000000, 0xfffffffa, 0x6, 0x800, 0xf20d, 0x800, 0x0, 0x1, 0x6, 0x80000000, 0x6, 0x9, 0x3, 0x4000ff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0xfffffffe, 0x5, 0xc, 0x14, 0x2, 0xc, 0x401, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x8, 0x4, 0x9, 0x200, 0x3ff, 0x8000, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0x5, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xffb, 0x2, 0x1, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0x9, 0xfffffffe, 0x1, 0x6, 0x8, 0x6, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x3, 0x4b, 0x9, 0x4, 0x2, 0xfffffffe, 0x4, 0x69, 0x2, 0x4, 0x6c, 0x0, 0x5, 0x3, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb6, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0xd5, 0x0, 0x7, 0x9, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x83, 0xd16d, 0x0, 0xf9, 0x8, 0x401, 0x7, 0xe19b, 0x80000000, 0x3ff, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x4, 0x1d58, 0x401, 0x3, 0x8002, 0x8, 0x36, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0xffffffff, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x9c06, 0x7, 0x0, 0x27b, 0x3, 0x1000, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0x7, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x5, 0x7fffffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x5, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x80000000, 0xc, 0xd, 0x3, 0x9, 0x49, 0x80000000, 0xd35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000001, 0xa, 0x8, 0x6, 0x1, 0xccf1793, 0x2c800000, 0x5d, 0x1, 0x239, 0x5, 0x5a5057fd, 0x5, 0x4, 0x6, 0x8, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x5, 0x8, 0x7, 0x2, 0xfffffeff, 0x9, 0x1, 0x401, 0x1ff, 0x2, 0x0, 0x0, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x8, 0x2, 0x9, 0x3, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x2d, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x5, 0x1, 0x7, 0xffffffff, 0x5, 0xe8, 0x6, 0x8, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffffa, 0x8001, 0x5, 0x9, 0x9, 0x5, 0x6, 0x2, 0x2, 0x7fff, 0x8, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x8, 0xd3a, 0x6000000, 0x1, 0x9, 0x8, 0x5dc, 0x10000, 0x40, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0x9, 0x0, 0x7, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x6, 0xc, 0xb, 0x7, 0x5, 0x0, 0x7fff, 0x2, 0x4, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0xffffffd8, 0x10001, 0xfffffff9, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x8, 0x1200, 0x2, 0x0, 0xef2c, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0x1ff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0xfffffffd, 0x4, 0x5, 0x4, 0x7, 0x0, 0x2, 0x4b, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x8, 0x6, 0x400004, 0x6, 0x5, 0x4, 0x3, 0x7, 0x1, 0x9, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x407, 0x3, 0x8, 0x9, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0x237b, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fdfffff, 0x10, 0x31f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x81, 0x0, {0x6, 0x0, 0x6, 0x7ff, 0x6e6, 0x10000d74}, {0x8, 0x0, 0xffff, 0x8, 0x7f, 0x7fff}, 0x0, 0x8000, 0xbab2}}]}]}}]}, 0x87c}}, 0x8010) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r10, &(0x7f0000000340)="c9", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0}}], 0x1, 0x4000000) ppoll(&(0x7f0000000080)=[{r9, 0xc}, {r4, 0x4002}], 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={[0xb8b]}, 0x8) 3m19.051191686s ago: executing program 3 (id=1174): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0}) r4 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0x418) (async) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0x418) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="7400000010000305000000000004000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800c0001006d6163766c616e003c0002800800010010000000280005800a"], 0x74}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002c00048028000180080001006f7366001c00028005000200020000000800034000000001080001400011"], 0x80}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002c00048028000180080001006f7366001c00028005000200020000000800034000000001080001400011"], 0x80}}, 0x0) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20}) (async) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20}) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fcdbdf254b00000008000300", @ANYRES32=r9, @ANYBLOB="0c00990023000000480000000a0006000802110000000000080077000600000014002c80080000000c00000008000000feffffff0400ec001d009800030000000a0006000802110000000000ac462d9eee80c70d26bd6dace1fc418c50a313a5be7815ba46fea1cbccdcaa1d17e8f47bc0311497af6931a51ba1df086876e6f11261dfa3ca02a57cb9056e434dddf98feaf37bd24120be66b037818b78f83a872d6b9768501813128c6023b22901d9745463d0ddbc75c04bfa74500625425a56a6ed7a7d81d8d0fe734d7f34a7bf7097c0b3304bf6847d1f139f842e638730f9f2f5245921e86ae7b8811d33decdd5"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) 3m18.588407883s ago: executing program 3 (id=1181): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0xffffffff, 0x40, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dc9564eab44f5cc}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}}, 0x0) 3m18.498019091s ago: executing program 3 (id=1182): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200008000000000000000000000008500000028000000850000000700000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000009c0)=@newqdisc={0x78, 0x24, 0xf0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x4, 0x0, 0x6c, 0x0, 0x390, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x40000d0) (async) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff0000000008000700263a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) 3m18.339414229s ago: executing program 3 (id=1185): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@local, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @local, @broadcast, @loopback}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@local, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @local, @broadcast, @loopback}}}}, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@func={0x4, 0x0, 0x0, 0xc, 0x4}, @restrict, @func_proto, @func_proto]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x3a6f5491e0ad3b4f, 0x5f]}}, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10) (async) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x59) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0e00000001000000008000000000000000000000000000000000000088453306adf4453df37f302190ce581ad34a3fe3c3be4f284927607a651e0e67400b6c9c8ec0449bc98c2eaf5cf452a6f28b36f732277cfffffb9b677dd177b0d601d5b49b80936ac8255b656fbd50096dc8be580f09c519576f265cfb3ed97765e962e38b18b23b0ce53d80db31cb48ed851b53a1578bff4c6dc0fa108b917ba861e7f20e98af584d060000002b3d6fe8f4"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000100), &(0x7f0000000080)='%-010d \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000080)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r7}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r7}, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xab) 3m3.127378586s ago: executing program 32 (id=1185): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@local, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @local, @broadcast, @loopback}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@local, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @local, @broadcast, @loopback}}}}, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@func={0x4, 0x0, 0x0, 0xc, 0x4}, @restrict, @func_proto, @func_proto]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x3a6f5491e0ad3b4f, 0x5f]}}, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10) (async) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x59) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0e00000001000000008000000000000000000000000000000000000088453306adf4453df37f302190ce581ad34a3fe3c3be4f284927607a651e0e67400b6c9c8ec0449bc98c2eaf5cf452a6f28b36f732277cfffffb9b677dd177b0d601d5b49b80936ac8255b656fbd50096dc8be580f09c519576f265cfb3ed97765e962e38b18b23b0ce53d80db31cb48ed851b53a1578bff4c6dc0fa108b917ba861e7f20e98af584d060000002b3d6fe8f4"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000100), &(0x7f0000000080)='%-010d \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000080)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r7}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r7}, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xab) 5.037128728s ago: executing program 1 (id=2894): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="fb00008839fe8bc048c0cdafd1811dbf40b3a7da5a9c5ee2632709000000000000008acfee620ad9ca002914000000000c50aa4adf32c1209072ee1cd4", 0x3d}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r1) 4.859678161s ago: executing program 1 (id=2896): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e03"], 0x10) 3.016325795s ago: executing program 1 (id=2899): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0xfffffffffffffe82, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 2.871093037s ago: executing program 0 (id=2902): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001b00)={r2, &(0x7f0000001a40), 0x0}, 0x20) 2.773605572s ago: executing program 1 (id=2903): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x82) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close(r2) sendmsg$tipc(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 2.54430495s ago: executing program 0 (id=2906): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53a1}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={0x0, r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='tlb_flush\x00', r1}, 0x10) 2.543866084s ago: executing program 1 (id=2907): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000faffffff18110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e6d0c6664e8d74e23f18336d41a3e38c2cda49050cb32ca7040a388c75741ac07d3befc714df35dc92ff70ad041cf17b70a971c142bb89ecfe25290750e989c8666560a61b62fdc4fadef7f30b6269a669ef99be7e7ba7ddddf99949fedc0c331796988c6eedb5c66cbe2870a2affce0b550c3411a2aaf302481ee93398c0fbc0c815cfe1e78bf8fed7f19f2c2dae17a4533aa85f6b787f8072adda379118d76dbba3cebfc4c8aacbb1f79a28ec3a0ec99816e3c8721ddcde1ce73b0704063474", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 2.236295263s ago: executing program 0 (id=2910): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1, 0x0, 0x0, 0x10}, 0x4008001) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r2) 2.233431863s ago: executing program 1 (id=2911): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000ff0f0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000ff0000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000540)='task_rename\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r2}, &(0x7f0000000d80), &(0x7f0000000dc0)=r3}, 0x20) 2.132168791s ago: executing program 0 (id=2912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000094}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x1b, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff0000}, {}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x31}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='syzkaller\x00', 0x800, 0x0, &(0x7f0000000600), 0x41100, 0x3, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x0, 0x7, 0x2, 0x5}, 0x10, 0x25be8, r1, 0x0, &(0x7f0000000ac0)=[r1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x78) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000003c0)={'nat\x00', 0x0, 0x3, 0x0, [0x7096, 0x0, 0x102, 0x1000000000000006, 0x10000, 0x8001], 0x0, 0x0, 0x0}, &(0x7f0000000440)=0x78) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003880)={0x24, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x4}, [@nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x131, 0x0, 0x1, [@typed={0x8, 0x78, 0x0, 0x0, @pid}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f0000000480)=""/148, 0x0, 0x94, 0x0, 0x4, 0x0, @void, @value}, 0x28) write$tun(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000a0"], 0x1e) r8 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x4, &(0x7f0000000140)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x380000, @dev, 0xfffffff7}, 0x1c) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000380)) ioctl$PPPIOCSACTIVE(r9, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) readv(r9, &(0x7f0000000040), 0x10) 2.057600498s ago: executing program 2 (id=2914): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) 1.855807373s ago: executing program 2 (id=2919): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES8=r0, @ANYRES16, @ANYRESHEX=r0], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0xed32500831e9a074) 1.711535252s ago: executing program 2 (id=2921): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xf, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002220207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006000000850000000400000085000000d0000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='tlb_flush\x00', r0}, 0x10) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000003400)={0xa, 0x0, 0x0, @remote}, &(0x7f0000003440)=0x1c, 0x800) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000003480), 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003300)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="8032a3736fa51076887f0ca1fe7680371dbc35ba79342bc85aff47a3bd2ce243e5d53e9c73ce8fd7d88c317cd57042d2fe3c9ef5c93d1ed554a14ba0a82215a2d757b9991cf8d5d26d015b056d0960e871ee69789f793423fb656ec53a55a37c4543ee829436879b0532fd7d42b09b3d91737fc6b11b8d89582773a4784183b2743c868e", 0x84}, {&(0x7f0000000380)="9b3625c793d2f9449ee574c8a28b94a1a0d5e0be28ef63662f6147ee0cb55a4c048e81ac72d4a430846b22098ea0cf01cf8492f8b71ea9b82397dab64465b6451a35defb067bb9913b388e94e1bef01891017595651020914be0353a7d1506f4ba866951101a325bc422fe21c66ca83b929bd07200bb018e5e103d1c041fa7ac7b5f7f7e83b3fda5bd44862adcfffe2348a4297a5b512e11a7e186f7bc6fdd9788fa4c3abbb51c91556c1bfdcbea683274501f4244d8ff38c9f04e69dd027828705ae53668e190ccedebffa3f0e41e415365e34f1e895783cd99dbcaa1584535fd8a6141367b78ba3a0a2f05900b85e75fb3c564", 0xf4}, {&(0x7f0000000000)="61c1d4b2651f9a1450de9f3f68d48f2e00e0724dd3a3f8f8fc40ff64ec09e6533ed38cb2a2cfbdd4259e766c4b4387988c60ae", 0x33}, {&(0x7f0000000180)="b11e88fa199629fe644aeff03a", 0xd}, {&(0x7f00000001c0)="f67d67a72b977ec7d2b5cc136e8e6e92ae", 0x11}], 0x5, &(0x7f0000000500)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x10001}, @op={0x18}, @iv={0xb0, 0x117, 0x2, 0x97, "7a874c679561b85dce10d06eb3ba8f204f5c3570a1817c8e952a7dac133685efc87de3346fbbbdf187c364f07c926b47560c26b3473568bcd4c35206861636aef4af9957f73af4baf8eaa84d6233c4f05aa71b590da7f62a4c2147215a0d1de3a3a944227f7cc6621ec1b7154d208e731295f494c9d371854e940a8fa089cf9544d6830e8ffcd205ff635dbc9f1048cb785f9b5cc0ece5"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x140, 0x1}, {0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="d7372ce6f09ccdcb69415b695a13463cafc1f52b4248f1f72004e53185982b15d2a39d848d4439b98d2c17136caf00878163b90c5a2d8307c0ce9f3bf60855684150f51da830a28e1dcce852feb6223ee54453218a83783fd70bd516f1948734509a39354dd4d350f5170d2b31734054dad5c41dc01f5e05f5337933ac3ee3a144ededca557ec3fe694db7c46d40549f280b264d064625b8b4bdcacecdf4549de6bb50b3c4fba453dd608c05d42b466c7061548a5c02e3aef4dd19f6e54db0a532982921034a55bf82fffa4a161b677559", 0xd1}, {&(0x7f0000000740)="7210b83d39f34dcdd67ca6b27027818b05216e0c08db378eba1bf4b328ba0e14b5e1910faddf2e291a395afdf5ae6750a9a8842a4489b654c1a1c492bcd7db1ccb0ede20304d9179f3b19713d58b8c9784887eee8282461bacfe52652001a92d90122c996d5291c8049f10", 0x6b}, {&(0x7f00000007c0)="c9d9a76f7d61a6ff3773cb250936db8e249915a12ce38d81b9f23952f5f6cb98e722de5ea817b64356189e8921e7e3539347e7", 0x33}, {&(0x7f0000000800)="6a8c400c907b63308e1f7ed5143e8706318cb24106620bf610d25c807848666a1f297a74a20d40252aa6091524a54750d0a2bffbeed2e4a7e80f53cb3a106339b496be5a15a49af9270082a3e792738530716cae2163fac4dcb887f19fe77fc57b40f1820e7a0ce307c51ca17799c40072a1b0219128822cc8a6d6753b9e796547fc962f79626857e6edaa68bcd13a9eb7a3097b4b615bb40a13920afaeecb04a70bebd41578b612b34b4bedb2c0a3a8f3a2d2df0dfd40389da421d06d08970deb5588457f09baf27668cd218c2c", 0xce}], 0x4, &(0x7f0000000940)=[@iv={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8001}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18}], 0x90}, {0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000a00)="a4b7c0c32a6bcf55c91b9b74dcb1c99ff38b80d8218b2025e9fb81a0acbb9003e493482cd902974547d5d0c8a94a5cca4c4605f005b01bd68337087c782bc54c266a7ec793989de51e5ba6b9b18f750735412145a09f0e615950c2c1f0ce55f974cfeb1d43c2459768b8aaa519ed04043eb2c982dd7063e6e91332045fc2631a34ee2e1222e79c5178be3c707d15", 0x8e}, {&(0x7f0000000ac0)="e719599a71dff256c6d3026a5abfcfd8b93b78076b9f802f7cd099efc8fb078e4c3335965450ae4d04a25602f07ced10e7fdb6bdfe6bfddd9b416fa85cb4b0b15f1e3026f2db15a0e822e3426073bce3ac857d83031e3b1ccbb37bae0544359b1f262085a1bb8b9eaa", 0x69}, {&(0x7f0000000b40)="ea3003b3b94923402314039de3b662dfc49d92642f445848b3e9bdd84c61b720da042fbff434ae6834b8b9923c8d4aa54ccc525f185c21d3497ff9eb460d4493ce5392a5db6a9f05a6ddfe6405f0fab5cb20bb17be51a1a5f141b59b62b2bf573ab15deb88d5682d0bfcddcbe691cf516c318688944ec032814a4cc9f56bebab7bf8fb14110e4afa25d6cd05128da6a76c038845dbf74337c82fec221b7d38", 0x9f}, {&(0x7f0000000c00)="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", 0xfa}], 0x4, &(0x7f0000000d40)=[@assoc={0x18, 0x117, 0x4, 0xffff0000}, @iv={0xc8, 0x117, 0x2, 0xad, "4e48c8d52ec8d4572fcfcfbfda84a30c2e6a6aae74fc6c096989e1f67fa2a53147dd5b45016dbf570272adc8b2953864bc295b9254e7c797314f23e82686caa83a29adeeca78e79648c792b1cf054ab8c2072f9fe9ac1d74a185df495e59d9d56c39c359c5f7c317ef4572e448856c21bac4d5ff985d7906b12ab4b5c13441fea45838af5df2238db6354e397707a165eae0ca111706aae778a42aa5445859d0c070f260805e79128e5c385078"}, @iv={0xd8, 0x117, 0x2, 0xc0, "404b7364c540e00779ee49d091a2e9ebb056d9aed0c89ec7bef5b730cb2ff6331f5731eef769754f98991d1ac92bad07c32266972c8b5735ce2e76f2947143c3b2d82ede51e38a99eb20acb907bad714605ff50843d1f227d1e94465487c1c8a49b0fa872c69793243b8a438ece68081d714fb3900e02ef391fdd7a22800ecf1fb3d4946f07d65ba6b1381f7c2d76b0569cfb60239c1eb50dd0c47661feeb6b7ca56a7e54d1a727444c20276467ada635faf8b5eb6f9a1d66a79c1bea8f838fe"}], 0x1b8, 0x4008840}, {0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000000f00)="2ed104060e6ae2a53d72e2c1875f1c6ebcce768b48fb18de999616c38046212790bf72523c0e696cec63d3f3eae1e060dee123bd78f280a79269a6e3f00b701eadce74f7c845ccf61b7aeddb4d2cd72521fe6cf5c05b73555ecf5146a8f4bfcc097e9547fe22cc4ac913e49e31fd848e56a8bf9a98712c8fefcd4a37ad50f809782bb89ba96cc071bec3275a80878af84d431e1aae199b2d3a17665a249b3ac5e250440d61bd0066f2c77d1394fb5d7d", 0xb0}, {&(0x7f0000000fc0)="fc851594f2d8d4c50a775dbcd5a67b1542a1afd242f59c04ff922bd5ad2172a2441482dcfae98609cdc95e005b23020a604c7040604e2a80dce15223b1d46ebdf5a9fdcc2df12a16aca6db0ee02bad8b291f6f54d9aec132d61b116f1298c41acb98bf3ae7eff534e9f12649c98b306ffb6a925a71b86f034f87d90b18eaa8aeb8c42056efd90d1d97c8ea7a3edae4924d712eb4b5e8900efe1ba06962423a84a94501bdd4978164cda65e", 0xab}, {&(0x7f0000001080)="0876112066a0ccaf2f8fc23909741d461c0cf1804e9bc35e8954301295c3c56e5d21aee36903ce79db7da1115c21c1a840eaad52da37f068f1e37f8c6f7ef36d9ddcb737c9e3c6da42da89c1bcc7c51d171f7283545171a9b57a5542734d400791aecba93f1d4ec9ec3425ff80a18dc7ce4cfe8706f84f5e7fe5b4fa1a583f2753b55ae84c6ec37b6a5e1ec9035ee18916940838ef99414c4025bd252843a1168fdad177a1c0a498f694e562a914d0cb7c8a9870868f4290658b887e015f89850d09ddce0f05b5c25355e47550dd426a629ae9bc283b53a9b6f51071cbee23d36ea3e4d35cd91c485b586651c24e8f98b4e0197bc412cdac95ff31a3b55198344641921427a7fa467a42ec2dc3cdffad4593bf0c38443a62c5f210095a3004dcb96e4800e9bb8726317d3f12f2f6a1a6911b9aa0631095381fbf6eac817bce8f1d37b2f31fd0526a55cd30ab64949ff2da939d12ab1f41962c89827d8088d143b25f1d95509e1b858e53ab53c701a3e9c62b473dd5ce0d1c1424e176f88a1ab98069f66a4878b61386da653b8412a682456e64748479a9dae1c583b903c94131cd23f5c638558b08ca54bab982a53b64c18b60e70b9398785e010c431e7eba4be1bf2b4743c885df94651eb454ae81fc27511d5fab0aef3ccc211f4275ab004575c2e75afc89897d2a93d763957cc29291644ce29f89cb475e07ff4160a37a3c24dd0089cf9ec08ede6c1b4312c8e95d4e12d9524f0f97f07b643413768c582f1d41fe5166aafda966147aea15731bac8b71336956d8949544c946298c30d08539de8cc85518f926461eda0e16e4bd0914c77db4b0f368d3cf23748fef4264a869ebb303b377ce7125eec28bf19dceed4fa4df6c3013fca4dabe6541168c6f010b740fb040a447e999b5353d97b9335aa42dbcd0a138e0a8f60566d4ba787f435efca62d574b53ebb56b863f81c9e6585040a74a18aafe418320962d06c3adcc138d359f045a5d85ac83008de5ac468998df46313f922704c4495f380c93d6d5b1823a69ce6e85599beaeb23a0563416d97efad6f33ed6caa3e7b800a63693516c62dbeda24422c1db446aa955306ff6c7bc4e8619122e261a66eb1ca29c4df6662be0e95705d2ea455fd984f0b9f7bbca06fd268cba54b39f768645d838478a506f4590437321f0eeaa1b08771cc98566535a51da22c48f2678c29060ae18044aa6dba55bab3ae216bb50375ceff0a93c28f8ec48edd9936336f81dbcf67a875c98a4c927b73a2e2219d05837b833011ca51573c1d6dd67a80862b7b8664850925720dca0f4a3357527b0cb69596a5ad7fb0f514d99e1807437e807c8520c99b86ed6f8e8332f8d952f745d2faaad74f85acb0b6e117771a98efaf817ff66c6f28e4a8faaf6a5addf2a85e34ab2151b4416f7bee37749671f1ea4eeece288023acf44332b7f47a01e5ea03ba6e19a55ddcd49e7813bbc81c3e8878928107c50b5f203914f9ef1c38b381a3fcb23987547838b8cf346419e0c64a24f2ff0ff6d7db161fab016377e4676d91bc29bcbd8ee9d51e51a0eba7ff8edeb7bacf258ed6266dc29ef9bb0a3fb41bbd558490b661724f82bb4f39cb6464bcec6c4b51e0deb3a7a5f9745963fa8de200d90d8a305f99002fba2bb4d7ff868425d89083d6ce0a86d6b8bbbfd24858216799b766f5c170f0cd1d008c87259e9b6a00ecd02d3468bfec3c81b0a076f37c3daa496405c3d97da060be5d80a4bfb708aea9eabb8e9070b0bb0b6fa1027decc91b24a590bf4ae5eecc78a9e9cb346ff3f5bcaf67318ea444f0a3763fed3a65d25b7d23ad843e1195cdd2ac0cac1b48ca7fe53aeade2126c4d42dec06905c3756c366e9a1430fc24432377a3b50cea7127d2a1f94af882ed59fa79a0dc89f78743a56406d9eb7888543886e0db66ff76805155ec383bc98af4293cd096c3629741ac1be81fa9b0edf63b1ec1ca09e65e5d71a63f7292f80d503086dee11620cfbe80bc70e914e8610719ecf935b62f24f846d762f4743f20466ec3ac3b291371ba79538da4bf3afa488d504a239c48127628b37bba03f3b4687d0bebdf2eaa21128ffe773efc3f7846b0a2af6e3d67547fd11f1e9cf5e26002be4614fa231c53a8431da0c75eff7bcde28d1da219899685f7fb9bec63158bffe06bc014c364116899c625ce6f283c91e9ecb7d835bbad2577c46bf34619d9028f0cb755f93512bb51abc7a708ad1edb5fb9506af7ffbc8c6c9c358ca37a8bce39c92582e092cebcdae7bd3d60ef41d1d043e1bffa2de674252d6741a82fabb4d48027fe3a073a1c62ecaaca0584b10c2fe5bd947e4bebbf52286b9e12ad423d942de14c03242629810a1c87f61d8401967125ea46b86fffaf7f29ed9b75e3111e516a40ac904ae69311b05191c5243a552942a429158e1dadd240f00a9c63e9e33ef34665581d6bc0341a92defc1e695b19c1322afc71e6c7ae0b6279769e0f8b47e2584d5d75e4587524182cf7dd02be0bc50c626679ddb080898070cb6a0688dfb2a325300331fb6757b2fb6fe65b07a9dd19fd7a041f369b996c596deb05acf3f3260ff99652bcb821a98a211fe5e8681703516ac0fc5afc64b1af13b9ce9159ca7749c3906fd7c5a8293b02675358d865d8c9dfd12a86d15bd528a53e4b093441b46558529e466006aa22c28c88de954ae8b3c6ae3970109a8ddd72d2f3eaf04ec258f3b7212eec3d9c9a37f065b437e3ee37754bf8cb7a551409e4777e7b374eaee2cefc1564b558146523ca1c98fe2cd13f23109c3c8049eb1a1cb94d7726bf0606c0563b3895f1eaa0f8939f08a409fd2dc3b58f1100a6ad8aec4c4ef039fbd852fabbf1a238971f4bda7eb7fb857d98877156bbbcbb6999574c3d4cc56a46ef20d421f2303e2549ba6a14f857d2034feb37a72be576215ba5b0d86366f3880cc31f8c931eadda96abd1b49ca85b62318e63786871db54168beb23de2cfc623a1fa412031afac4c2b02ae09b5caefce301df48886a72b10b3ec60148be19ec293cdb486bf0ac9fcafe65362737c10c7770137eca63b2534cc4fcc51c9596eb441ec68100e538b7a23bfb4d31ac3a5a46c2148023be6479e01725062a2fdabac380063126df88b8b5034bb548c25cf648dcc9422142cbf7014310d89e9cbffd67d8793f7289e74a4f6fcb28e93334ba3e51f280a964a4330497e23527cce9f10d2253ec37992d879cca0eeee3c015244191c1f96a70cb2533952eec9c0966c52a29d258e9cd6c0cfa5e7b879275080e6f04aff1cec5712e30e61e54f7374b1869a708a2675fff080057c419347c2725b208340654422910540d49e040e48ab3b08e0348d1dd95f3810d69ede1e9f209c5a19882c284a37a358e1a31687b0e522113041044efc125ad7b252109f19c32eaa341fa7e078a18f838ea6ae31b2be81c7007653b83845cdd6de3e2ad84ac993caedec2dbfd49e967b5f4cadf8b76b2a30a538458e9678eb4e27e785e0295b283a35230b8f73b5ee05a4296bf7c03115ca12f67898149761ac4cf98b633e7a8b12d87b3b083237428c142bf13da82f712310914af95a140ce3b8748ea5fb0d729826e4bb8b2ee429181418d691a0ec406108dd65e20c9df8b575f4a849b3637044d396f956a1758261618c8feb9350f15305bea2a64b75bcf2879bd5c9c4149452c5d97b46706ac93eda412096d780078acc426a88cda495b2e8b01dcc561233b22e4bf058c472e4ace4bb6b34b30e12999c38bb300a9ed349fa213883a7f5e3d59ba30f6bb101dcb5d548988fc7aa8f60a30d5192ce220c3c9ed86133e7e5c7680e96fd616d79ae8c991c10eaae6e7b8e0c0e2dcd5c10c99919690268e885ab38352dbeeca9b73cd7be4c63678efbeef5eebbd216496055c45916ace80887b817020facb3cd4963a1689eb2e4c1e2bc677af8898e83bc5af230f746b4d34c8ba27b22dd3130e8257f341b178c41a73582fb3942b406aa446dc368a4fc61157a0d053ae192a17ca239b2ffee644999d107e8dacf87cb566c7f23f02fc3373736107b1044ecf98bbf2b25da18a468e4e6b98199431e2efa377a1db87d21e92b99139a62e9674b20dde8a1b280a428a8b4d0d7ace8c7298418dc555de2cbc5a9fe5d88b9250242fd9d453f49a4ad453e80545fc228ff5c411748f768806af222cb12b108517423c362d0daa2d6a9ef22eeb7ac9ba4d6c0959a851b772ab01b3ab88516383668050f69bb4c2fe0c35e0aa6db89397cab0f049eff29dedb8d2abd962305969c4ac7d8f3e47b07486f968a5eb88d55b7d4f98b2041ef93770dae65bdaa53a8b85e2d1a27ba4edef00e200d8d20dab0a173aa1c365d66ba0b40d769e16aa5f6b8b669f4bff8873f60653d76ef8cf37dd2f63a1318ef334e632cdec4bca97313d2f1cf0dd280ab252dc7e2b86a56a1c6099ef0f66f77afa47003a1eb7d1d9e3d1461f248124b92f45a1e0e399ca1e10054f5f543d643ed4a0c4407a8fd8867c1038a3cabf58a68e539761cc6fd041c2b6f60780fe014d1151378b1d981562ddb18996a257fe18a280f67eaf9ad97551b911f18c9865b90f87f3ccc12e50d039ce46949b5327f3076abedbe2dd454cdd1684106e85963dc74a398c931d0428e88a52dbcdbba6437b25ea327ba1e392057396a6cc41592bcdc4b30456de25d5f8ab7154e9807b95e008e256c19e3b9b87176147ef6b331134147d883db45b25e899d5b3ae6e3e499da218a3cc66fd016781d0226bfc9190f342768fce59de18c9021a04f9db4818df633351f9b3c27920ca256ae2a001387e1d9f1147e5ad5898ef73a872675a392c730c1bae76e7846d0e12b1c46a5e5b437e0cb23783691ecc2a2f662a78d9943cbbe45ddd8a0d6633758cee0a92b297a98a870bd52d77814511858fc372b05fef9b97c5d988312ff70e93793919f9daa0749e893841d480a4e82ec4fe6b2280e219ca7e570f3bcb9ec641dfd529197cd13327197bc8b5d0de2e3ab3e942d88ad8121f8d749963014a787f16ec424a1dcc81d50c5f2ccdf4181db5d3ddfa4e03593862a6334259ee8f45187aad91d232088b0996024af09f1eed98b13d8a1ff50f41495d33aa6cefbcb349c5fc9d61db365675c47d2e97576b2c2d4db1a9434205793cde34bae1b3734652b3b7fdfa41504f3d19acd358fd04a5adf70c5d44ef277e00a0ea19f25962af2a146bd73ec5dae08083b9c52046f0f975b1fcc3f3d2514ad2e4213052a1fbfc8dd098b96c0e7a6e89d1a8a8223fa363917dcb339c64e98509b2917a9893e1df0095f5bbedaba7efd6b67dab6215003d2db8fb5ed3282041558222025fe485f348820163a9f720a65a440d3096b8dbd76a0b9e2dcfa8d06995f3884b097886d436bab2eb8fe9dc0f9d3c258afc40b2d40e226deb5bec9dc30085a639a21fae290e426b42b45e8b4c0424d4831292bcd6d9b3ced585da9dc767eb734796cdb5a2fd0636d4c7e74049cddd7b37d355790e8f1780a3e1dc002088f06561c19dca01d3fa8f0ad51006b87d92bd598fd95fe59b3c333292db4932a6ffb8e86ee01466ec9c62406e7903a4073d54453fdbf33863d883aa20db68f3844ce9b6c688c7c11be0ad8d54e714c7d9a13dff491ca3150186ace0d24b71adc083846b214309c9cd731dcd6b1a82899750973ed23082548773fd4ff4191eb30b852d642fcf2413eff12359b917a72cf48d058b202c0fb55a73fadbf8e6b3050437cf1a97c92d67c5749d50c5783257746a2000cd4e890c64f92d624b", 0x1000}, {&(0x7f0000002080)="d577c557b9f34e464e483c66c5fb613c4c38c67aba4708dcee0dad8ec2967755ca5c33104fb159fdb6aedce851560ec5e0e2b4291875fcf056e7480f5fa0f95fd64276de391ecdf9247b59cbc0ad5ed62ce81d3355d9ba80d4b0f5de0e2e49685fb1d416481f1f786049ce06659a6653c8a849", 0x73}, {&(0x7f0000002100)="ceac172a2682357ebb4d023be8c035fb8e3dfd5f76e4855731ddb7017b800d32b5f50fcc8af0d0596050a50e5b1fb2bd63f6c9b883a622229baec76c57dd6826e8b7c1dad162bc92998229816a8a9835e0ac69f34a3b15cefa9f36c44a4eab20c999c5ebb5172b0b61791116bd582c1c299c86f32c67e972553dd6acdff25a3a2cbfe491a73ab5aefe3c0905e5", 0x8d}, {&(0x7f00000021c0)="2e8aa159b41b0ef26e5c2a5322286cba317cff49a70f8fe53db7be6e3a255f3f3a505eef715686e33dd19ad88dc9c82a89c30954dcac9022bfa3b8692ebda19e4a32aa08d3d8f93bb0979cfccd721eebf3dc1b9167b4b75e715e5bd322bf520303c8c240f3a93c997b4d8c3334e7a904f6f82b2f1e53e00362ce3f3befe0763c30ccb34efeee6a75c8882a7d73bc15af091d547e0257c08677bace1d623d1dd73489ef9ed76001d612dee26368eb", 0xae}, {&(0x7f0000002280)="fe32fceb16816c5441ae7f54c6bd7d8dd553241a3fdcbf37a1c07dc7a9658b6d4385ec9d6a177dc27eec207b11d673e2e47a72790afe3fd33a1a4e150774d0322a2332d4feb25b2015c05b1801356404fa33025e13553738958ca144b7e91603b6fd9ea9a9342da67ae157b752f791ce206e22a3602636123244c4f95b526ef595c359cb693c39e941096af32493f6924f38a7a5a225c37a340ed969fc0c2baaae2bd86b1e577eaf850e625486666d31412557f82db0199abd97214edc065adff1d66fcfb540b4ef46aabf4384980202aca708176faaefc842b1f3650756722c86b3fb5d5e8e63d59ecba15cacdae3a82e99ad49c3051f5ca4a3eb50b717d758093ae47de58e4b3e718fb779b00b188a0347000351b1e8bf1de9f728db538c2aa4ff79a750be970c3adca93efca4f4c86aa3fbd023c1485b797f67a089438c68f1b1046349635f907949766ec8c4d7c6fbe3a6d9f6214e0ae781173980281e1bc6d504641aa6eeba6117f62bdceccac36da947d9bf782eccdd3e2ba56373c12a930c233acf6c87b02348021c26777b0a7b89f0c0b4db9176c0eee95d4d5fbfb677e0e0e15a5024ff8439f392fdaa3ab64c08e0f37a11c6dbd9d8318ac04197e9318acc678812edd0592bd147ad1c41ab3ee147c655997d858a1e37890cae22c60c0183b5a7926a9281acdfb107a6a0a5d78f86d457993efa719b98147b97cdc0c4c001620122767eb778c5aba3bb1aa01a492d8eb97f0a98cba5c49f22b50110b6326554e45413b7fe59d9d89f188358ddf3fe6811c5861f37b8506554acae111ce9a65391aa39032996e1a5bd617815589088646520763d72dcb16168db67d6f9f8cebd5b63768fb866d6ddf7feb5f36eeaef4440dadd907bdfdea091675a0d485947b2f03c3aacb8fdba3c7cd655a5a405852d390f3fc2ca725d0991f6aaa62dae5def7310fca7371b06eb93b163bae97a3ff3369289ba8c257daa7c13aef0b3eab18a28a7b740bc30908382510fb857542e2d8dbe251f141d252d991b12d76f98acb0028f82be8ff5125b1c034171feb3a726da6a0c9ea15b15dbbd32514ed1b0faa52cd548c409d3ef1f7ae8c90fe51cb92e121abd3415d9c6a2b2fd9b0c768919e3cf6d6f50438be9483824b7aeb8be49d5fed31d5668f2bee12e12450a0bd9515cf7759b25ebd814fc403755ddabca326959b006dea614e699bc95b981503c0d6ef3b05ee7cc2a55616d80656a1df9fb206e44239379af8fb23083285af3e8913f02d8e7176d241edb45852fc5b1442a6a743997b32b1f9e4380083f4757a969cf91989fb80b41e026ce69bda589d4875410c11ae3284e558714b2cd298feedf5a99244cead18351599746d61b9afbc471025673957fe8d6f3f7437ca2c47b8efd99156f4868173a4ba515268d605f59618c940642ad79525fbadbb9b952df940176fe6990d794ed1286f8e89d56b1a475b6f2b1229c3a5db06012d2fb9ab183414100eb165fe72173bff4a9daeebe506e7c4cf3f96f7a14f5f75aebc4af3b73f06768669f0248a3c588cfb71d9992ada8f6356f0dc083ed90940ef7199dad2d348cd02fbe566cc08955d636d3cb7dcbc6eefd492a8d90c977166f911c9c834de07582fb21ec53882ecbb4db054df250a30588f81ed0bd8a7287f4974cae5798bb14ad3dc14a0dc55ca4f81e97d7df0dceef07d51295bca24801353fb69e5892e2b78651d24aff2c4c85caa53b147e32203477b5c7cab023e2c0f2541e75e1aeb5ad3c032b933a2552ca4de820a84aa9c70dd9d739bbc621cb424fbb543bbe4ecc72883c3d5eb364e6111e95a33391d2ca9400b8f5b6553f6a2635e99c88083ccc1c6e336d532dbedf026fca294fc8df1100662000348514ba8fd1cc18729b6e53feff0b83ee81d630f938cbe97756624e5a740707fa182361f8da1d88ce9437d97e3efa79e0b0a267785e1ddd3556db3f4f490444981c0f7387f0e3ac5de4609a345d4e8cb576d8029cce1d49dae5594cb392d86314ab35b74010bee7de9f4e4718a1ade3f7e4b9caa9dcd14216e0c1f16c1b8be4d631a681f15d7a6fd4e54e017e4eefa23dea1e0fc9679f5db09a780126da1acb82d9b15dd0ad249924a5be34f81c8f22ece88b6867f0b705639f4c22ee45f02f4b317da55b09943fc911193a60ac92e37a9cecef3400f54529c2125f8e8c6c658cb43a7998de47259212ec6cefe1eb8a7807aed6b0fc5183974c793e239003b3562920b5237e128ea5ddc679276faf88176ed1b9d0b55e2d77ccfdfbe70542b8fc41e1900cb3f11dc80b58d84dc404df9be82baa59e177743a7209eecc2f6097b33e60037a4a59b78fb9971c403a5f632bb990ce6730cbd16bad53dde72757bd06c96cd05c8792cd854ed5c1b51a31dbabb771bd86f72e587a8c47457d87ae6e67e5744dd8a1f66ff043154dc19bdae25096bbfb58283146ec9fac3cffc7787c320662347f5b833be0fe7aee8322fc071f0a087c11acb2728b7548c4bdf03b5fdf765a135dfe3c655cfb5b61d02b073a3c108e229e7aa06c1fd7df094235bf27a01de4ee2473b7939ebba5cae6e05eb664b801bf433e1a5ca3c43220e4a4a8b53a9ce96fc9041bc6654601277b26bb96ee7b7beb020b9fbad84ea5d352ffa96a4e383913098c0a9aebc6996f832442a16c6128f3afa25725af9bd6edd905baba34db5251df437d007c763e255c009db3c4721e62734474a87f6eca9782603a94e940741f9f34493e6cda0052ddf3aa463fddfa650827710924e79d3035bc212cf3cf186a97a480fcecb266c58377018f1e0a4dedacf57e2bc5cb836496c5e072ff600a42ec3bd58e2a4d3ae09a4d532ef30b08ff039ca45e20394a2d805c8610b254c2488dd0949111dabc60656ad33344994004ef2e4153461dedc87d5c0fdd6ce392808018e974516dd95e5832d7fc12be2dae55c3d1672d17bccca500ace0901615d16d68d83f0162f92b3d74c7959ec505506080097e66b268f06d6b5607c86b21d7f4974b69ccf2890680e5e224063b286e14fed2335dfe2628fbf089cf55a6dac0d2f7c7e9379b08c5cec49033c2e3b2034e31c7154df6b562b55fb4f3dde52841e185d31a8646e7f10732e85202baf944d5fe61c10a69d5e85720aca688216e0719fa4539157cc0eaf53a9bbd141e7a724b0f18ba6ef5a033f5e40eb4cd7f0dc73805ac0de55de7c49ef6290c2c8f2e7273b70c403c7e2b2107f10b5af75fdb658695692aacf6fb0047b23732c824114840bb280e1d591f3ae814d93b18b9e719a6e69d31975b6aae64583e607427dfeaa8b15ed614feaad826d0af0a0374f3ac09d8feb265a70540eea107cbeb9992277e1fda63b44a27b61b78d3a60bf9d9624f9ce6657ac213381c74a69318568ebf5194046b41acfbcb3c3f0c8241eb294ce1cb9270ef02c80c0859a6ed8756661dffed536bae6abcec6a7779cacfab527b0769f82c5b4f1d308871f6a26f59d02b4d8040ab682c193af0b09c378b3bcd02d1e0984c87a3d8590c9ac11808b0141da9701ff4d5eb6a99f0b0f4cf98677059b5c90f9531ad1bfc339298d327ece1800badad2c7cb0f56a24d98a124da0afcea6bcf5791a3cd00915b2374b37f2c5e48cf89f8d124a2730bc69de2b01e18ea9edc1b815c0831fa3b2e9a3f74565a6930e251263fc1abf017444ca3dc07e6acc257d4089234fde44257affa2160b73f649ae361fecb0d5869c75b2ba1fade120f712b1ec3e71ab8c21efab183f4cfec89191f02c83678a91952c511276aad60fd83b0956d91a0a54fe143b1f416f997f0fb332bf87accf6d0db53a37039d28d385d72c55cea795f960310c1790d4fcb3fb11e85fdec43f8b9cdf79bf0e9030c4c299e90c9ef1329a1fd3d4a373b3aae201a314f54aaecbd349956916bee271e714715a578fddb1385d80e3b6b34a6abe8b7cdf5c8be60fd15ce88676b84f2dc206dec7337263a2fc9c0d2b8ccd46e584cc077d00e3ef252829c159c06ca5f9dfdfd132b40ad2341d6a5827f34a7b53dab8057c270b61b61488c19e7077532cdf98bb33f7c0e4de5ef79e51f7cceff0dd8332bd7d084f71e63630d4f602f271fa8cb3d9e315e7b01d38d4a77bdf31f622dc2020ce465dab94a1fa2ac3d12665a4af2ec28788ee16eee9d38dc63a55947ec137111e5484f23025ad1e3e93341ca3570e6598678decbe0f158025d096c4a6f3603be09ff55eb07134d8171169374c4fe1776221f2fd5cff437291169c508259c6042ab899bd6ed92c56158f9d008bad931403f813bbd42df083f16d250070d467dc08c24bc91bafd74ab36205c5722883a93baca9169843538af5cf897a7a42468a2f608c9d92ac3944b7c89b49b664655405a3bb4832c2eada617081c3a34fffc607a0746c25cd5f28c05abad509a3c89badd5275deaa62194c55c58d3388c45e7afa7b54e033781b19e977cbd979a79acd7bad95886996d7c0ce8c8d7fdf32b40eb2d3d176d8717ffa95c6ddae4e39435e15265015e7e44f2702978b974c9c192bfa248ef8b33b4114e44a422bafb01c1346d32c818aa2450354a072b65528e2e51483d138833c2cfa0d3b2b6bcb8a44d79514b8280a01d4c17630f32c8dd3f0efacaac8392895156e83cecab28bd631dde44c2edbb82154b9785291c103fdf539cafc781c8896728878e96f8864800bdaab057452a4dbcefda875fb9c18310e288ffeb35b378bd139886004e3c142c5228219226bd6680ddb86a727d4b5a795a9fb46f8f92c72b019844e168d714a95755e551adcaa5b016db0ac579618583252794e4f9bad22d974d148a1bda1753795a1349b1eb10630e7ee57c008a9e18798fc7df018148f22ee8b2e2a7b6cf25e04bbe625a82c5ae0a4925af4893e95fbc40420979891f1db46ac35557512ffcb852a481a6e62a85abde3d3582a5edb97eca84df19fe497f1a5228bb02b7182b724438f95b4b5dda3daed2c9d593dcd97394d7fde0237bcae11e3ec9b3e1f6a0c796e9e19a6d661617903ed16b6d60ce82716237f31269a154dfcca1cc741ea478bb299b8590dd098cf81d533cebe783e15da00f08b75e25d30044beab09a3fa73037bfd4834f6ea4f2935d682a80319560bc2df0100e9bc966c556afe2ade6e7c53b26f43bd824b1d6fbe44523c3ff1b219a1ae6d5da1f06378e1d037a1e42fbed1d1ab7d3c0e5c2266d78e055e20a283dae6b1dc5d25551ad7192f3365eff31e1d4b0f11c36c22549e697685f7b5962d81c02b8727e1ed6e6504fab9eb5b850d9167a0f320aab4e311c3978ee39717ac5f08f384dd68db23435afbcc1c1f999039a3dc65b26cc58c031bffb9f5e35916a0815066e2635c83991cacadb92812bac6f9d85b5e676e3a0a96f83d7da2885f69ded86cce2177645c34608b676e2203f0a42b4f9e37b9d79fe7f7071e034cf5c1f83c24b952adaa60abd40ff59035fc33a8228fa8d4ab3d370f76868849b1f43eaffe8fd1864cd38b16e1ff3f0b20f79bceb09b841535541b95727b3d0a310a2b1a3437cd24aad2ab05b6cb9a3dfd9c6271e6d9ba1991cbebd79a92bab1c6b7bebd065ef5fa21f5a86625cb198b73caa56d0c6e42de020d8549967a8dde4a92d28ddaa2d9ef6dbb9880d14e99a10deb12d26ef52dd8f8c9792b7d5c3f6f81aca175615ac64d4201f79bde71a5371171bfa9b9de9541765a09c05b866b3599285718a45eada59aad3fe6c2b5891bc4a5d502dbd22b916ea6a84964409719e452fccf73617b7c1cd8fe60ed4a6c7a5adb03", 0x1000}], 0x7, 0x0, 0x0, 0x4}], 0x4, 0x40408c0) 1.640458077s ago: executing program 4 (id=2922): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000500ff69105b000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) (async) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000240)="04ec1a7ac18e4fd7517eeee256990224a0461d95bfb784ccaad12b3a459acfb7ffe48b4ae0c588363fa95b4dc0a0f0bddb", 0x31, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) shutdown(r2, 0x1) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x20, 0x10, 0x2, 0x94, {{0xe, 0x4, 0x3, 0x3, 0x38, 0x67, 0x20, 0x8, 0x29, 0x0, @private=0xa010102, @loopback, {[@noop, @rr={0x7, 0x1b, 0x4d, [@local, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1]}, @ssrr={0x89, 0x7, 0xf, [@multicast2]}]}}}}}) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r5) (async) bpf$LINK_DETACH(0x22, &(0x7f0000001ac0)=r5, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r4, 0x4, r4}, 0x10) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000f820bf0826edeb9e0000000040e365b7b4fdc853b8ad060ff8c6130e6896aef1ea3706781988371f2cc2451b4281a06bd7c2a6ca915ee12220", @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="03000000030000000300"/28], 0x50) 1.584191276s ago: executing program 5 (id=2923): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100040000002c000480050003ff800000000500030080ff2dbe15910000000000000500030080ff00000500030080ffffff0800020003"], 0x50}}, 0x0) (async) setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f0000000080), 0x4) (async) listen(r0, 0x3) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000140)=0x6, 0x4) (rerun: 32) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYRES8=r4, @ANYRES16=r8, @ANYBLOB="554b000000000000160008000180060001"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x1) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r5, r6, 0x0, 0x4, &(0x7f00000000c0)='.:#\x00'}, 0x30) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x3, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000140), 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64) syz_emit_ethernet(0x8a, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x7, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @fastopen={0x22, 0xa, "575f32171b4690b8"}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @fastopen={0x22, 0xe, "95f1b9dd10a2d551d8fda842"}, @generic={0x2, 0x7, "c01999eb45"}, @mptcp=@mp_fclose={0x1e, 0xc, 0x7f, 0x0, 0x5}]}}}}}}}}, 0x0) (rerun: 64) 1.461044755s ago: executing program 4 (id=2924): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000222803001c0012800c0001006d616376", @ANYRES32, @ANYBLOB], 0xe4}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth1_to_team\x00', 0x0}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d80000001c0081044e81f782db44b9040a1d080214000000020009a118000c000300000000000e1208000f0100810401a8001600200001400300000203600cfab94dcf5c0461c1d67f6f94007134cf6ee08017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1", 0x6c}], 0x1, 0x0, 0x0, 0x7400}, 0x2000a890) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001a00000058fa320926812186"], &(0x7f0000001f80)=""/237, 0x1a, 0xed, 0x2, 0x0, 0x0, @void, @value}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) unshare(0x8040480) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r3, &(0x7f0000000f80), &(0x7f0000000800)=""/210}, 0x20) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB='1\x00'], 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x2, 0xb, 0xf4, 0x0, 0x3, 0x0, 0x70bd2c, 0x25dfdafc, [@sadb_key={0x1, 0x8}]}, 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x20000000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@multicast1, @dev={0xac, 0x14, 0x14, 0x14}, r1}, 0xc) 1.295736912s ago: executing program 5 (id=2925): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000000000000000000070000000144181210000000800000005100005d1300000005000000c800005c00000000"], 0x30}, 0x0) socket$kcm(0x2, 0x3, 0x2) (async) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000000000000000000070000000144181210000000800000005100005d1300000005000000c800005c00000000"], 0x30}, 0x0) (async) 1.171368696s ago: executing program 5 (id=2926): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000dea5165c7edea23c000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000001500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000004b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000ebff0095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='signal_generate\x00', r2}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @random="015a37cb9737", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x0, 0x1ff0000aa}, @private1}}}}}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000080)={0x30002000}) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x70, @mcast2, 0x3}, 0x1c) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40501}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfff, 0x4}}]}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x4004014) 1.1656964s ago: executing program 4 (id=2927): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x83, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x20001100}, &(0x7f0000000100)=0x108) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x9b69}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000001a40)={0x0, 0x10000}, &(0x7f0000001a80)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_int(r6, 0x0, 0x93301030b76bf0eb, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, r4, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x30) 892.293885ms ago: executing program 2 (id=2928): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) 891.764218ms ago: executing program 4 (id=2929): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40501}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfff, 0x4}}]}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x4004014) (fail_nth: 4) 845.052057ms ago: executing program 5 (id=2930): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="110226bd7000fcdbdf251700000008000300", @ANYRES32=r6, @ANYBLOB="0a001a00ffffffffffff00000a00060008021100000100000a001a00ffffffffffff00000a001a000802110000000000ba74c13088a82c0df1138d6464f57bd28de26f777c36"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40010) (async) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x60, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xf30286f, 0x7}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x9}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x76}, @NL80211_ATTR_BSS_HT_OPMODE={0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x1) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x200}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x18, r8, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}]}, 0x18}}, 0x0) (async) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r8, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r8, 0x1, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 352.631031ms ago: executing program 0 (id=2931): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf2508004f000000000008000100000000000800133e3449f5430be42818f82ffd25985814efb1"], 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r3]) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000000000007110650000000000c6000000000000009500000000000000de650eead2ae58c55614f9a3b8519ca78cd7352ca0d45f51acb0bfb6a199af051697ee7bf44f2cd54d31b21d24408e"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x74, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'l2tp\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, '](:*\x90:\'$-\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x48050}, 0x4) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x64, r7, 0x917, 0xffffffff, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x10}]}, 0x64}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r1) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x54, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x10) 308.296765ms ago: executing program 2 (id=2932): r0 = socket$netlink(0x10, 0x3, 0x1d) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x90, 0x30, 0xb, 0x5, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x78, 0x1, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x40}, @TCA_CT_LABELS={0x16, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xfffffe22, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000004200010600020007000d96000800f9"], 0x18}], 0x1}, 0x0) 307.796365ms ago: executing program 5 (id=2933): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f", @ANYRES32=r2, @ANYRES16, @ANYRES16=r0], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 307.303709ms ago: executing program 4 (id=2934): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11044}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_GROUP={0x8, 0x1b, 0x2}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ed3d}]}, 0x44}, 0x1, 0x0, 0x0, 0x8084}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 135.248734ms ago: executing program 5 (id=2935): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x4, 0x1d}]}, 0x18}], 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x4, 0x1d}]}, 0x18}], 0x1}, 0x0) r1 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r1, &(0x7f0000000400)={0x2, 0xe20, @empty}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'gretap0\x00'}, 0x18) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) (async) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r4, 0x0, 0xdc0, 0x4000, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) 100.308011ms ago: executing program 4 (id=2936): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300)=0x4, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xe}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x5c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="d41ecd373074179b0ef739ca5055816b3c0ff2dfa854aa73a837e39fd2a873b6c6d08f906a2473df688cc3a9259c40f63011e84f118fc60f48d809344474158332333de9bfd19ff530a1a47735451b92690850c7c23852f5bac801eac05acaf9075658c8c8c936697df6884a31addea84c364a9bde0656", 0x77}, {&(0x7f0000000180)="953d3b0d8df0eddd4d51cb3f8d6ceff78f6e6709218b3b2c59286674914b7c304eb7245ca0cc1bac0f87ec049dab7a09f4d4bb75a334d530c67d417f5112e06400d6dca961057de31db2ac1503ca376c14fd9daf65f45ea515f53ce85106d2501b0b0ca628280aa19903839d0fd0200a534b25bcffa98c86f58b8623d322315282f0319de36688b6580ab441e741ce97bdade44ebfcd874aef51855cbac01794227baab93b2d3c5085393a03768ea47bffde7e8acca5b9864a52ce77777e94d335ea7444eb2110fc51", 0xc9}], 0x2}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)="dfaaf1062ddae3767a9f130f0e3bef77c73d89395146", 0x16}, {&(0x7f00000003c0)="1554ee3d839d49168ed6cae7d3cb93080edf3c839e6620c55f6de80d67cbbde9857ca4f91b6e3e3320a109c684e0f8b375227cf4e8fe85dc21da3c8dadde0031bd5b32e013cbdf0774481dbd6abef20bad7e2f30ce2e2807f4473df39b932b25707662c065", 0x65}, {&(0x7f0000000440)="dce249b36755d1399a3093802d7b63f5b87e9f8579fde587a9c9ba1fe3f58f14995b2f93271e6acda266c4ee6b205861", 0x30}, {&(0x7f0000000480)="925d540269723653913ca93115e50e3f6d9d12cd932733db83d5d1470bb9061169e78191509dac4b5a5a7826b69c131f5dfa6a3e4330ce1ecf68aec0c81bf5abc01373f408b7c640b41fce098dff46c9da546f50265e65bfdde4", 0x5a}, {&(0x7f0000000500)="d28a995bd84d8cad5d3fe5b781f1b54756cef45dc4256b3d29bf7a8b7e7acd5afedee85aaee2", 0x26}], 0x5}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000600)="83e8634118799ac0b560e3d6bee205dc34e9a205c4165bf7b9088ce0bebb171652102723130e17bfa1ebba3cbdbf1b0615de538a4566d2b891606ef22fccff39bc170ea2dbcdca", 0x47}, {&(0x7f0000000680)="60e13852d803c2d42aaf0c6502823324d3aef49e6a3249", 0x17}, {&(0x7f00000006c0)="11689dbcdf83cac4c548c9baa2f19b78440a690634a9a2678fd959970a43b35463dafb1f99fa84f68ee2786f33c3a8ab6d6a1ea120beb79ea57f3425602837dfe9808d11656120a0c09a4ca42ea3ab03cac7b5db4a865efe61041cc85a8790b82cdacc0ae675f9e2588fc61f530edb1e941251033c02bbe596ff7c82ec0f543eaf939de2bbbd92af75f2bab97b0edb39a0fe3309da4e1e7be50854a7ed688601fadb8297ce156052912b8d82388a153d258ff43ad4c46e1ec535a942656d3be808757c714ca846107d08d2a6ed1df7faeea716269edd6e59a2de847b74feebbb56024f5735365989616eff20dac5de9282d3813f8502", 0xf6}, {&(0x7f00000007c0)="be2ef9ddfe62d88d0d96c0de6505e679d3a6df7b662bf6b403734b3b0eb399f2ee50be01df", 0x25}], 0x4}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b00)="c4", 0x1}], 0x1}}], 0x4, 0x40040) 88.619996ms ago: executing program 2 (id=2937): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000222803001c0012800c0001006d616376", @ANYRES32, @ANYBLOB], 0xe4}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth1_to_team\x00', 0x0}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d80000001c0081044e81f782db44b9040a1d080214000000020009a118000c000300000000000e1208000f0100810401a8001600200001400300000203600cfab94dcf5c0461c1d67f6f94007134cf6ee08017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68765730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000000000000800800d809d5e1cace81ed0bffec03b5", 0xa2}], 0x1, 0x0, 0x0, 0x7400}, 0x2000a890) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001a00000058fa320926812186"], &(0x7f0000001f80)=""/237, 0x1a, 0xed, 0x2, 0x0, 0x0, @void, @value}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) unshare(0x8040480) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r3, &(0x7f0000000f80), &(0x7f0000000800)=""/210}, 0x20) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB='1\x00'], 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x2, 0xb, 0xf4, 0x0, 0x3, 0x0, 0x70bd2c, 0x25dfdafc, [@sadb_key={0x1, 0x8}]}, 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x20000000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@multicast1, @dev={0xac, 0x14, 0x14, 0x14}, r1}, 0xc) 0s ago: executing program 0 (id=2938): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x40004) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000d80)=ANY=[@ANYBLOB="f4010000", @ANYRES16=r3, @ANYRES8=r1], 0x1f4}}, 0x20044000) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040)={'syz_tun', 0x32, 0x35}, 0xa) kernel console output (not intermixed with test programs): 6] ? __pfx_lock_release+0x10/0x10 [ 173.790871][T10316] ? __pfx___sys_sendmsg+0x10/0x10 [ 173.796021][T10316] ? __pfx_vfs_write+0x10/0x10 [ 173.800828][T10316] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 173.807182][T10316] ? do_syscall_64+0x100/0x230 [ 173.811978][T10316] ? do_syscall_64+0xb6/0x230 [ 173.816685][T10316] do_syscall_64+0xf3/0x230 [ 173.821216][T10316] ? clear_bhb_loop+0x35/0x90 [ 173.825919][T10316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.831845][T10316] RIP: 0033:0x7fcc7f385d29 [ 173.836276][T10316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.855908][T10316] RSP: 002b:00007fcc80168038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.864365][T10316] RAX: ffffffffffffffda RBX: 00007fcc7f575fa0 RCX: 00007fcc7f385d29 [ 173.872367][T10316] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 173.880364][T10316] RBP: 00007fcc80168090 R08: 0000000000000000 R09: 0000000000000000 [ 173.888360][T10316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.896350][T10316] R13: 0000000000000000 R14: 00007fcc7f575fa0 R15: 00007ffdca22e358 [ 173.904426][T10316] [ 174.264088][T10339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1251'. [ 174.311211][T10349] netlink: 'syz.1.1252': attribute type 12 has an invalid length. [ 174.324997][T10339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1251'. [ 174.337522][T10339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1251'. [ 174.346586][T10349] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1252'. [ 174.358196][T10339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1251'. [ 174.381721][T10339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1251'. [ 174.400476][T10350] 0ªX¹¦D: left allmulticast mode [ 174.423795][T10339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1251'. [ 174.454183][T10339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1251'. [ 174.503041][T10339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1251'. [ 174.915844][T10350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.003123][T10350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.423720][T10350] veth1_vlan: left allmulticast mode [ 175.542773][T10350] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.576744][T10350] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.586768][T10350] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.595832][T10350] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.703070][T10350] gretap2: left promiscuous mode [ 175.719708][T10350] gretap2: left allmulticast mode [ 175.743874][T10350] bond2: left allmulticast mode [ 175.751693][T10350] macvlan1: left allmulticast mode [ 175.761784][T10350] vlan3: left allmulticast mode [ 175.770293][T10350] ip6gretap1: left promiscuous mode [ 175.775540][T10350] ip6gretap1: left allmulticast mode [ 175.806902][T10350] macvtap0: left promiscuous mode [ 175.814618][T10350] vlan4: left promiscuous mode [ 175.826990][T10350] bond4: left promiscuous mode [ 175.831800][T10350] bond4: left allmulticast mode [ 175.958978][T10366] openvswitch: netlink: Flow actions attr not present in new flow. [ 176.122262][T10374] SET target dimension over the limit! [ 176.248124][T10377] FAULT_INJECTION: forcing a failure. [ 176.248124][T10377] name failslab, interval 1, probability 0, space 0, times 0 [ 176.285657][T10377] CPU: 0 UID: 0 PID: 10377 Comm: syz.2.1260 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 176.296470][T10377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 176.306544][T10377] Call Trace: [ 176.309837][T10377] [ 176.312780][T10377] dump_stack_lvl+0x241/0x360 [ 176.317484][T10377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.322702][T10377] ? __pfx__printk+0x10/0x10 [ 176.327310][T10377] ? __kmalloc_noprof+0xb5/0x4c0 [ 176.332269][T10377] ? __pfx___might_resched+0x10/0x10 [ 176.337574][T10377] should_fail_ex+0x3b0/0x4e0 [ 176.342268][T10377] should_failslab+0xac/0x100 [ 176.346961][T10377] __kmalloc_noprof+0xdd/0x4c0 [ 176.351740][T10377] ? fib_nl2rule+0x371/0x1b50 [ 176.356448][T10377] fib_nl2rule+0x371/0x1b50 [ 176.360978][T10377] ? __pfx_fib_nl2rule+0x10/0x10 [ 176.365935][T10377] ? __nla_parse+0x40/0x60 [ 176.370373][T10377] fib_nl_newrule+0x396/0x1d30 [ 176.375186][T10377] ? __pfx___might_resched+0x10/0x10 [ 176.380487][T10377] ? __pfx___mutex_trylock_common+0x10/0x10 [ 176.386399][T10377] ? __pfx_fib_nl_newrule+0x10/0x10 [ 176.391628][T10377] ? rcu_is_watching+0x15/0xb0 [ 176.396415][T10377] ? trace_contention_end+0x3c/0x120 [ 176.401729][T10377] ? __mutex_lock+0x37f/0xee0 [ 176.406467][T10377] ? __pfx_fib_nl_newrule+0x10/0x10 [ 176.411695][T10377] rtnetlink_rcv_msg+0x73f/0xcf0 [ 176.416670][T10377] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 176.421822][T10377] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 176.427307][T10377] ? ref_tracker_free+0x643/0x7e0 [ 176.432354][T10377] netlink_rcv_skb+0x1e3/0x430 [ 176.437166][T10377] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 176.442652][T10377] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 176.447977][T10377] ? netlink_deliver_tap+0x2e/0x1b0 [ 176.453197][T10377] netlink_unicast+0x7f6/0x990 [ 176.457993][T10377] ? __pfx_netlink_unicast+0x10/0x10 [ 176.463290][T10377] ? __virt_addr_valid+0x45f/0x530 [ 176.468423][T10377] ? __phys_addr_symbol+0x2f/0x70 [ 176.473461][T10377] ? __check_object_size+0x47a/0x730 [ 176.478767][T10377] netlink_sendmsg+0x8e4/0xcb0 [ 176.483559][T10377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.488863][T10377] ? aa_sock_msg_perm+0x91/0x160 [ 176.493820][T10377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.499119][T10377] __sock_sendmsg+0x221/0x270 [ 176.503811][T10377] ____sys_sendmsg+0x52a/0x7e0 [ 176.508600][T10377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.513900][T10377] ? __fget_files+0x2a/0x410 [ 176.518511][T10377] ? __fget_files+0x2a/0x410 [ 176.523128][T10377] __sys_sendmsg+0x269/0x350 [ 176.527738][T10377] ? __pfx_lock_release+0x10/0x10 [ 176.532782][T10377] ? __pfx___sys_sendmsg+0x10/0x10 [ 176.537927][T10377] ? __pfx_vfs_write+0x10/0x10 [ 176.542734][T10377] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 176.549080][T10377] ? do_syscall_64+0x100/0x230 [ 176.553863][T10377] ? do_syscall_64+0xb6/0x230 [ 176.558562][T10377] do_syscall_64+0xf3/0x230 [ 176.563084][T10377] ? clear_bhb_loop+0x35/0x90 [ 176.567775][T10377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.573681][T10377] RIP: 0033:0x7f08a6b85d29 [ 176.578120][T10377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.597752][T10377] RSP: 002b:00007f08a79ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.606191][T10377] RAX: ffffffffffffffda RBX: 00007f08a6d75fa0 RCX: 00007f08a6b85d29 [ 176.614176][T10377] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 176.622164][T10377] RBP: 00007f08a79ef090 R08: 0000000000000000 R09: 0000000000000000 [ 176.630147][T10377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.638133][T10377] R13: 0000000000000000 R14: 00007f08a6d75fa0 R15: 00007ffcfbe99fd8 [ 176.646137][T10377] [ 176.868982][T10385] batadv_slave_0: entered promiscuous mode [ 176.875564][T10370] @ÿÿÿ: renamed from bond_slave_0 [ 176.895840][T10384] batadv_slave_1: entered promiscuous mode [ 176.999133][T10386] batadv_slave_1: left promiscuous mode [ 177.004878][T10386] batadv_slave_0: left promiscuous mode [ 177.078160][T10393] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.218280][T10404] netlink: 'syz.1.1263': attribute type 6 has an invalid length. [ 177.829456][T10427] FAULT_INJECTION: forcing a failure. [ 177.829456][T10427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.852118][T10427] CPU: 0 UID: 0 PID: 10427 Comm: syz.4.1274 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 177.862924][T10427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 177.873022][T10427] Call Trace: [ 177.876301][T10427] [ 177.879233][T10427] dump_stack_lvl+0x241/0x360 [ 177.883917][T10427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.889130][T10427] ? __pfx__printk+0x10/0x10 [ 177.893722][T10427] ? snprintf+0xda/0x120 [ 177.897966][T10427] should_fail_ex+0x3b0/0x4e0 [ 177.902647][T10427] _copy_to_user+0x31/0xb0 [ 177.907064][T10427] simple_read_from_buffer+0xca/0x150 [ 177.912444][T10427] proc_fail_nth_read+0x1e9/0x250 [ 177.917470][T10427] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.923014][T10427] ? rw_verify_area+0x55e/0x6f0 [ 177.927857][T10427] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.933401][T10427] vfs_read+0x1fc/0xb70 [ 177.937575][T10427] ? __pfx___mutex_lock+0x10/0x10 [ 177.942612][T10427] ? __pfx_vfs_read+0x10/0x10 [ 177.947317][T10427] ? __fget_files+0x2a/0x410 [ 177.951918][T10427] ? __fget_files+0x395/0x410 [ 177.956694][T10427] ? __fget_files+0x2a/0x410 [ 177.961324][T10427] ksys_read+0x18f/0x2b0 [ 177.965569][T10427] ? __pfx_ksys_read+0x10/0x10 [ 177.970330][T10427] ? do_syscall_64+0x100/0x230 [ 177.975095][T10427] ? do_syscall_64+0xb6/0x230 [ 177.979771][T10427] do_syscall_64+0xf3/0x230 [ 177.984270][T10427] ? clear_bhb_loop+0x35/0x90 [ 177.988944][T10427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.994833][T10427] RIP: 0033:0x7fa0f5f8473c [ 177.999247][T10427] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 178.018863][T10427] RSP: 002b:00007fa0f6e48030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 178.027279][T10427] RAX: ffffffffffffffda RBX: 00007fa0f6175fa0 RCX: 00007fa0f5f8473c [ 178.035244][T10427] RDX: 000000000000000f RSI: 00007fa0f6e480a0 RDI: 0000000000000004 [ 178.043209][T10427] RBP: 00007fa0f6e48090 R08: 0000000000000000 R09: 0000000000000000 [ 178.051177][T10427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.059150][T10427] R13: 0000000000000000 R14: 00007fa0f6175fa0 R15: 00007ffc4c4add18 [ 178.067129][T10427] [ 178.304117][T10432] Cannot find del_set index 0 as target [ 178.419535][T10439] __nla_validate_parse: 27 callbacks suppressed [ 178.419554][T10439] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1277'. [ 180.403186][T10487] netlink: 'syz.0.1290': attribute type 12 has an invalid length. [ 180.898691][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1294'. [ 180.949922][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1294'. [ 181.218971][T10520] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1298'. [ 181.303348][T10526] netlink: 'syz.1.1299': attribute type 9 has an invalid length. [ 181.500930][T10535] netlink: 'syz.2.1303': attribute type 12 has an invalid length. [ 181.523544][T10535] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1303'. [ 181.611416][T10523] lo speed is unknown, defaulting to 1000 [ 181.712223][T10546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1307'. [ 181.745701][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1307'. [ 181.773710][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1307'. [ 181.804518][T10546] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1307'. [ 182.113046][T10557] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1310'. [ 182.156895][T10557] netlink: 'syz.4.1310': attribute type 1 has an invalid length. [ 182.305534][T10557] ebt_among: wrong size: 2080 against expected 2280, rounded to 2280 [ 182.968203][T10575] netlink: 'syz.1.1317': attribute type 12 has an invalid length. [ 186.436817][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 186.442884][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 186.451547][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 194.539745][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.561034][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 194.578372][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 194.594681][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 194.624448][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 194.632367][ T5836] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 194.641766][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 194.947141][T10625] __nla_validate_parse: 1 callbacks suppressed [ 194.947160][T10625] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1333'. [ 195.435315][T10632] syzkaller0: entered promiscuous mode [ 195.464443][T10632] syzkaller0: entered allmulticast mode [ 195.507018][T10615] lo speed is unknown, defaulting to 1000 [ 196.708021][ T5839] Bluetooth: hci5: command tx timeout [ 198.131850][T10610] lo speed is unknown, defaulting to 1000 [ 198.301721][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1337'. [ 198.366282][T10640] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1338'. [ 198.401369][T10637] syzkaller0: entered promiscuous mode [ 198.407358][T10637] syzkaller0: entered allmulticast mode [ 198.434200][T10644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1338'. [ 198.511164][T10630] lo speed is unknown, defaulting to 1000 [ 198.799642][ T5839] Bluetooth: hci5: command tx timeout [ 200.506116][T10634] lo speed is unknown, defaulting to 1000 [ 200.856932][ T5839] Bluetooth: hci5: command tx timeout [ 200.866144][T10666] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 200.901419][T10666] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 200.930408][T10668] Cannot find add_set index 32768 as target [ 200.940224][T10666] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 200.955724][T10610] chnl_net:caif_netlink_parms(): no params data found [ 201.132107][T10677] netlink: 'syz.1.1344': attribute type 28 has an invalid length. [ 201.142587][T10677] netlink: 'syz.1.1344': attribute type 28 has an invalid length. [ 201.163163][T10680] syzkaller0: create flow: hash 4033201364 index 1 [ 201.175984][T10677] delete_channel: no stack [ 201.308531][T10610] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.317271][T10610] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.335065][T10610] bridge_slave_0: entered allmulticast mode [ 201.344632][T10610] bridge_slave_0: entered promiscuous mode [ 201.360874][ T8678] syzkaller0: tun_net_xmit 76 [ 201.366488][ T8678] syzkaller0: tun_net_xmit 48 [ 201.379077][T10610] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.386978][ T5881] syzkaller0: tun_net_xmit 76 [ 201.401011][T10610] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.412061][T10610] bridge_slave_1: entered allmulticast mode [ 201.420969][T10610] bridge_slave_1: entered promiscuous mode [ 201.499968][T10610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.509256][ T5883] syzkaller0: tun_net_xmit 76 [ 201.514093][T10667] syzkaller0: delete flow: hash 4033201364 index 1 [ 201.693074][T10688] xt_CT: No such helper "snmp" [ 202.937262][ T5839] Bluetooth: hci5: command tx timeout [ 203.320334][T10610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.462246][T10610] team0: Port device team_slave_0 added [ 203.479778][T10610] team0: Port device team_slave_1 added [ 203.492712][T10698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1349'. [ 203.511862][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'. [ 203.521928][T10700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1348'. [ 203.527165][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'. [ 203.546257][T10704] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1348'. [ 203.595783][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'. [ 203.635903][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'. [ 203.655184][T10610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.691276][T10709] openvswitch: netlink: Key type 29 is not supported [ 203.693308][T10610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.746793][T10610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.818192][T10610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.825160][T10610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.919676][T10610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.987153][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'. [ 204.026877][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'. [ 204.220356][T10610] hsr_slave_0: entered promiscuous mode [ 204.245390][T10610] hsr_slave_1: entered promiscuous mode [ 204.268723][T10610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.316969][T10610] Cannot create hsr debugfs directory [ 204.448964][T10741] tipc: Enabling of bearer rejected, failed to enable media [ 204.584498][T10750] netlink: 'syz.4.1360': attribute type 12 has an invalid length. [ 204.613572][T10750] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1360'. [ 205.050354][T10610] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 205.132794][T10610] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 205.179033][T10610] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 205.210308][T10610] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 205.238038][T10754] lo speed is unknown, defaulting to 1000 [ 205.392262][T10610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.455066][T10610] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.500364][ T8690] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.507609][ T8690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.551417][ T8690] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.558621][ T8690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.863685][T10797] netlink: 'syz.4.1371': attribute type 1 has an invalid length. [ 206.044053][T10806] netlink: 'syz.1.1372': attribute type 12 has an invalid length. [ 206.147212][T10610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.661769][T10834] tipc: Enabling of bearer rejected, failed to enable media [ 206.914819][T10610] veth0_vlan: entered promiscuous mode [ 206.964838][T10610] veth1_vlan: entered promiscuous mode [ 207.062844][T10610] veth0_macvtap: entered promiscuous mode [ 207.093066][T10610] veth1_macvtap: entered promiscuous mode [ 207.140331][T10610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.175235][T10610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.188809][T10864] FAULT_INJECTION: forcing a failure. [ 207.188809][T10864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.224736][T10864] CPU: 1 UID: 0 PID: 10864 Comm: syz.2.1383 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 207.228868][T10610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.235525][T10864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 207.252783][T10864] Call Trace: [ 207.256080][T10864] [ 207.259023][T10864] dump_stack_lvl+0x241/0x360 [ 207.263729][T10864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.268955][T10864] ? __pfx__printk+0x10/0x10 [ 207.273576][T10864] ? __pfx_lock_release+0x10/0x10 [ 207.278636][T10864] should_fail_ex+0x3b0/0x4e0 [ 207.283594][T10864] _copy_from_user+0x2f/0xc0 [ 207.288211][T10864] copy_msghdr_from_user+0xae/0x680 [ 207.288929][T10610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.293410][T10864] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 207.309613][T10864] ? __fget_files+0x2a/0x410 [ 207.314232][T10864] ? __fget_files+0x2a/0x410 [ 207.318860][T10864] __sys_sendmsg+0x209/0x350 [ 207.323481][T10864] ? __pfx_lock_release+0x10/0x10 [ 207.328528][T10864] ? __pfx___sys_sendmsg+0x10/0x10 [ 207.333670][T10864] ? __pfx_vfs_write+0x10/0x10 [ 207.336945][T10610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.338450][T10864] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 207.354558][T10864] ? do_syscall_64+0x100/0x230 [ 207.357838][T10610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.359331][T10864] ? do_syscall_64+0xb6/0x230 [ 207.371194][T10864] do_syscall_64+0xf3/0x230 [ 207.375726][T10864] ? clear_bhb_loop+0x35/0x90 [ 207.377813][T10610] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.380404][T10864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.389250][T10610] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.394914][T10864] RIP: 0033:0x7f08a6b85d29 [ 207.404488][T10610] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.407950][T10864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.407968][T10864] RSP: 002b:00007f08a79ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.407991][T10864] RAX: ffffffffffffffda RBX: 00007f08a6d75fa0 RCX: 00007f08a6b85d29 [ 207.408005][T10864] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 207.408016][T10864] RBP: 00007f08a79ef090 R08: 0000000000000000 R09: 0000000000000000 [ 207.408028][T10864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.408038][T10864] R13: 0000000000000000 R14: 00007f08a6d75fa0 R15: 00007ffcfbe99fd8 [ 207.408064][T10864] [ 207.646765][T10610] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.812774][T10878] netlink: 'syz.2.1386': attribute type 13 has an invalid length. [ 207.938062][ T8696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.956186][ T8696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.098176][ T8690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.127184][ T8690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.550101][T10912] netlink: 'syz.4.1390': attribute type 10 has an invalid length. [ 208.580230][T10912] __nla_validate_parse: 25 callbacks suppressed [ 208.580251][T10912] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1390'. [ 208.651507][T10910] delete_channel: no stack [ 208.881796][T10932] : entered promiscuous mode [ 209.204597][T10942] FAULT_INJECTION: forcing a failure. [ 209.204597][T10942] name failslab, interval 1, probability 0, space 0, times 0 [ 209.339859][T10942] CPU: 1 UID: 0 PID: 10942 Comm: syz.5.1395 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 209.350683][T10942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 209.360766][T10942] Call Trace: [ 209.364065][T10942] [ 209.367095][T10942] dump_stack_lvl+0x241/0x360 [ 209.371812][T10942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.377049][T10942] ? __pfx__printk+0x10/0x10 [ 209.381664][T10942] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 209.387671][T10942] ? __pfx___might_resched+0x10/0x10 [ 209.392973][T10942] should_fail_ex+0x3b0/0x4e0 [ 209.397660][T10942] should_failslab+0xac/0x100 [ 209.402348][T10942] kmem_cache_alloc_node_noprof+0x77/0x380 [ 209.408158][T10942] ? __alloc_skb+0x1c3/0x440 [ 209.412748][T10942] __alloc_skb+0x1c3/0x440 [ 209.417175][T10942] ? __pfx___alloc_skb+0x10/0x10 [ 209.422128][T10942] ? netlink_autobind+0xd6/0x2f0 [ 209.427074][T10942] ? netlink_autobind+0x2b0/0x2f0 [ 209.432124][T10942] netlink_sendmsg+0x638/0xcb0 [ 209.436914][T10942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.442222][T10942] ? aa_sock_msg_perm+0x91/0x160 [ 209.447173][T10942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.452466][T10942] __sock_sendmsg+0x221/0x270 [ 209.457149][T10942] ____sys_sendmsg+0x52a/0x7e0 [ 209.461929][T10942] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.467217][T10942] ? __fget_files+0x2a/0x410 [ 209.471841][T10942] ? __fget_files+0x2a/0x410 [ 209.476434][T10942] __sys_sendmsg+0x269/0x350 [ 209.481027][T10942] ? __pfx_lock_release+0x10/0x10 [ 209.486048][T10942] ? __pfx___sys_sendmsg+0x10/0x10 [ 209.491161][T10942] ? __pfx_vfs_write+0x10/0x10 [ 209.495935][T10942] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 209.502258][T10942] ? do_syscall_64+0x100/0x230 [ 209.507035][T10942] ? do_syscall_64+0xb6/0x230 [ 209.511722][T10942] do_syscall_64+0xf3/0x230 [ 209.516229][T10942] ? clear_bhb_loop+0x35/0x90 [ 209.520900][T10942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.526818][T10942] RIP: 0033:0x7f470dd85d29 [ 209.531239][T10942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.550841][T10942] RSP: 002b:00007f470ebe3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.559255][T10942] RAX: ffffffffffffffda RBX: 00007f470df75fa0 RCX: 00007f470dd85d29 [ 209.567227][T10942] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 209.575200][T10942] RBP: 00007f470ebe3090 R08: 0000000000000000 R09: 0000000000000000 [ 209.583166][T10942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.591131][T10942] R13: 0000000000000000 R14: 00007f470df75fa0 R15: 00007ffdf02f3d38 [ 209.599107][T10942] [ 209.827629][T10951] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1399'. [ 209.872970][T10948] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 210.532725][T10976] netlink: 'syz.4.1406': attribute type 1 has an invalid length. [ 210.570509][T10976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1406'. [ 210.718292][T10980] openvswitch: netlink: Message has 2 unknown bytes. [ 210.736931][T10980] openvswitch: netlink: Actions may not be safe on all matching packets [ 211.019746][T10979] lo speed is unknown, defaulting to 1000 [ 211.268739][T10989] ip6tnl1: entered allmulticast mode [ 211.605344][T11000] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1412'. [ 211.912482][T11009] netdevsim netdevsim4: Direct firmware load for / [ 211.912482][T11009] failed with error -2 [ 211.935618][T10999] lo speed is unknown, defaulting to 1000 [ 211.948436][T11009] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 211.948436][T11009] [ 212.146456][T11011] sctp: [Deprecated]: syz.0.1414 (pid 11011) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.146456][T11011] Use struct sctp_sack_info instead [ 212.400453][T11018] netlink: 'syz.2.1416': attribute type 2 has an invalid length. [ 212.412723][T11019] netlink: 'syz.5.1417': attribute type 29 has an invalid length. [ 212.514260][T11023] netlink: 'syz.5.1417': attribute type 29 has an invalid length. [ 212.537001][T11018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1416'. [ 212.550469][T11019] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 212.559749][T11024] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1416'. [ 212.571408][T11019] netlink: 604 bytes leftover after parsing attributes in process `syz.5.1417'. [ 213.058575][T11035] netlink: 'syz.0.1421': attribute type 1 has an invalid length. [ 213.080128][T11035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1421'. [ 213.184303][T11039] openvswitch: netlink: Message has 2 unknown bytes. [ 213.191628][T11039] openvswitch: netlink: Actions may not be safe on all matching packets [ 213.375842][T11042] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 213.907757][T11046] tipc: Started in network mode [ 213.914351][T11046] tipc: Node identity ac14142f, cluster identity 4711 [ 213.948127][T11046] tipc: New replicast peer: 0.0.0.0 [ 213.957615][T11046] tipc: Enabled bearer , priority 10 [ 213.994579][T11047] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 214.232104][T11061] netlink: 'syz.0.1430': attribute type 12 has an invalid length. [ 214.240776][T11061] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1430'. [ 214.255980][T11059] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1429'. [ 214.267991][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1429'. [ 214.388491][T11069] ip6tnl3: entered allmulticast mode [ 214.410726][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1429'. [ 214.435987][T11057] ip6gre2: entered promiscuous mode [ 214.476422][T11074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1431'. [ 214.483442][T11075] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 214.494196][T11073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1429'. [ 214.577183][T11076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1429'. [ 214.598257][T11080] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1431'. [ 214.642620][T11074] 8021q: adding VLAN 0 to HW filter on device bond2 [ 214.730343][T11078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1434'. [ 215.087857][ T5880] tipc: Node number set to 2886997039 [ 215.124996][T11093] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1438'. [ 215.198454][T11070] delete_channel: no stack [ 215.919625][T11115] sctp: [Deprecated]: syz.4.1443 (pid 11115) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.919625][T11115] Use struct sctp_sack_info instead [ 216.069819][T11118] netlink: 'syz.0.1444': attribute type 13 has an invalid length. [ 216.726831][T11121] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 217.615438][T11097] lo speed is unknown, defaulting to 1000 [ 217.616496][T11118] macvtap0: entered promiscuous mode [ 217.630214][T11118] macvtap0: refused to change device tx_queue_len [ 217.785226][T11132] netlink: 'syz.2.1449': attribute type 30 has an invalid length. [ 218.084730][T11145] netlink: 'syz.1.1452': attribute type 12 has an invalid length. [ 218.146863][T11148] bond4: entered promiscuous mode [ 218.151947][T11148] bond4: entered allmulticast mode [ 218.174534][T11148] 8021q: adding VLAN 0 to HW filter on device bond4 [ 218.384113][T11148] bond4 (unregistering): Released all slaves [ 218.407281][T11139] lo speed is unknown, defaulting to 1000 [ 218.636499][T11177] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 218.959599][T11185] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 219.134660][T11194] sctp: [Deprecated]: syz.2.1463 (pid 11194) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.134660][T11194] Use struct sctp_sack_info instead [ 219.161952][T11195] sctp: [Deprecated]: syz.2.1463 (pid 11195) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.161952][T11195] Use struct sctp_sack_info instead [ 219.335887][T11201] netlink: 'syz.5.1465': attribute type 12 has an invalid length. [ 219.345460][T11201] __nla_validate_parse: 8 callbacks suppressed [ 219.345476][T11201] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1465'. [ 219.374497][T11202] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1464'. [ 219.529289][T11206] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1467'. [ 219.752354][T11221] netlink: 'syz.4.1471': attribute type 29 has an invalid length. [ 219.761818][T11221] netlink: 'syz.4.1471': attribute type 29 has an invalid length. [ 219.771365][T11221] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 219.781064][T11221] netlink: 604 bytes leftover after parsing attributes in process `syz.4.1471'. [ 220.004923][T11229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1474'. [ 220.015690][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1475'. [ 220.027507][T11232] netlink: 'syz.4.1473': attribute type 1 has an invalid length. [ 220.035362][T11232] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1473'. [ 220.525684][T11249] xt_cgroup: xt_cgroup: no path or classid specified [ 220.535366][T11246] vlan2: entered allmulticast mode [ 220.541171][T11246] hsr0: entered allmulticast mode [ 220.563588][T11246] hsr_slave_0: entered allmulticast mode [ 220.584193][T11246] hsr_slave_1: entered allmulticast mode [ 220.608961][T11256] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1483'. [ 220.621161][T11260] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1481'. [ 220.622502][T11256] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 220.657654][T11260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1481'. [ 220.824944][T11272] netlink: 'syz.1.1487': attribute type 11 has an invalid length. [ 221.802297][T11303] siw: device registration error -23 [ 222.040502][T11318] bridge0: port 3(gretap0) entered blocking state [ 222.102324][T11318] bridge0: port 3(gretap0) entered disabled state [ 222.147278][T11318] gretap0: entered allmulticast mode [ 222.169408][T11318] gretap0: entered promiscuous mode [ 222.180225][T11318] bridge0: port 3(gretap0) entered blocking state [ 222.187307][T11318] bridge0: port 3(gretap0) entered forwarding state [ 222.307205][T11323] gretap0: left allmulticast mode [ 222.312629][T11323] gretap0: left promiscuous mode [ 222.336757][T11323] bridge0: port 3(gretap0) entered disabled state [ 222.391170][T11336] netlink: 'syz.5.1506': attribute type 12 has an invalid length. [ 222.892550][T11371] netlink: 'syz.4.1515': attribute type 1 has an invalid length. [ 223.342104][T11377] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.509926][T11377] bridge_slave_0: left promiscuous mode [ 223.644069][T11377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.678384][T11377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.856712][T11377] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.881061][T11377] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.890705][T11377] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.901258][T11377] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.027024][T11380] netlink: 'syz.5.1519': attribute type 12 has an invalid length. [ 224.245105][T11385] bond0 (unregistering): Released all slaves [ 224.367172][T11405] openvswitch: netlink: IP tunnel dst address not specified [ 224.375227][T11406] openvswitch: netlink: IP tunnel dst address not specified [ 224.582088][T11413] __nla_validate_parse: 8 callbacks suppressed [ 224.582108][T11413] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1530'. [ 224.702913][T11402] lo speed is unknown, defaulting to 1000 [ 225.073303][T11437] netlink: 'syz.2.1536': attribute type 5 has an invalid length. [ 225.086023][T11437] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1536'. [ 225.968083][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1551'. [ 226.184698][T11504] ieee802154 phy0 wpan0: encryption failed: -22 [ 226.196996][T11505] ieee802154 phy0 wpan0: encryption failed: -22 [ 226.248772][T11508] batadv2: entered promiscuous mode [ 226.268393][T11508] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 226.312587][T11515] netlink: 'syz.4.1562': attribute type 1 has an invalid length. [ 226.321071][T11515] netlink: 'syz.4.1562': attribute type 1 has an invalid length. [ 226.332501][T11511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1560'. [ 226.342385][T11511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1560'. [ 226.351982][T11515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1562'. [ 226.360646][T11511] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1560'. [ 226.588938][T11526] ieee802154 phy0 wpan0: encryption failed: -22 [ 226.617805][ T5836] Bluetooth: hci5: command 0x0405 tx timeout [ 226.679744][T11528] netlink: 'syz.4.1566': attribute type 1 has an invalid length. [ 226.697088][T11528] netlink: 'syz.4.1566': attribute type 11 has an invalid length. [ 226.709565][T11528] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1566'. [ 226.781885][T11528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1566'. [ 226.836057][T11543] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1569'. [ 227.914567][T11577] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 227.974988][T11589] netlink: 'syz.0.1580': attribute type 1 has an invalid length. [ 228.173341][T11597] syzkaller1: entered promiscuous mode [ 228.194910][T11597] syzkaller1: entered allmulticast mode [ 228.275270][T11608] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 228.776119][T11652] netlink: 'syz.5.1596': attribute type 10 has an invalid length. [ 228.867360][T11652] veth0_vlan: left promiscuous mode [ 228.890464][T11652] veth0_vlan: entered promiscuous mode [ 228.905848][T11652] team0: Device veth0_vlan failed to register rx_handler [ 229.536936][T11669] macsec1: entered allmulticast mode [ 229.549401][T11669] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 229.563930][T11669] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 229.877149][T11710] __nla_validate_parse: 76 callbacks suppressed [ 229.877170][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1607'. [ 230.060448][T11720] netlink: 428 bytes leftover after parsing attributes in process `syz.1.1611'. [ 230.072930][T11723] Bluetooth: MGMT ver 1.23 [ 230.103980][T11720] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1611'. [ 230.108124][T11722] netlink: 'syz.5.1612': attribute type 10 has an invalid length. [ 230.147799][T11722] syz_tun: entered promiscuous mode [ 230.154213][T11728] netlink: 'syz.2.1614': attribute type 9 has an invalid length. [ 230.177668][T11722] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 230.817130][T11716] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 231.062671][T11770] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 231.104232][T11770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1627'. [ 231.139929][T11771] xt_TPROXY: Can be used only with -p tcp or -p udp [ 231.155196][T11770] hsr0: entered allmulticast mode [ 231.180901][T11770] hsr_slave_0: entered allmulticast mode [ 231.206908][T11770] hsr_slave_1: entered allmulticast mode [ 231.245112][T11773] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1628'. [ 231.287557][T11773] unsupported nlmsg_type 40 [ 231.494602][T11780] sctp: [Deprecated]: syz.4.1630 (pid 11780) Use of int in max_burst socket option deprecated. [ 231.494602][T11780] Use struct sctp_assoc_value instead [ 231.618604][T11788] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1633'. [ 231.653554][T11788] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1633'. [ 231.726133][T11793] pimreg: entered allmulticast mode [ 231.733371][T11793] pimreg: left allmulticast mode [ 231.861550][T11795] xt_CT: You must specify a L4 protocol and not use inversions on it [ 231.961869][T11803] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 2, id = 0 [ 232.161989][T11818] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 232.250939][T11819] netlink: 'syz.0.1644': attribute type 10 has an invalid length. [ 232.289573][T11819] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.313882][T11819] bond0: (slave team0): Enslaving as an active interface with an up link [ 232.548813][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1648'. [ 232.571133][T11836] netlink: 'syz.0.1648': attribute type 21 has an invalid length. [ 232.601283][T11836] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1648'. [ 232.924291][T11858] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1654'. [ 233.127615][T11879] ip6tnl3: entered allmulticast mode [ 233.394510][T11892] netlink: 'syz.0.1658': attribute type 10 has an invalid length. [ 233.463188][T11892] veth0_vlan: left promiscuous mode [ 233.491102][T11892] veth0_vlan: entered promiscuous mode [ 233.533359][T11892] veth0_vlan: entered allmulticast mode [ 233.610353][T11892] bridge0: port 3(veth0_vlan) entered blocking state [ 233.669650][T11892] bridge0: port 3(veth0_vlan) entered disabled state [ 233.742172][T11892] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 234.264668][T11900] lo speed is unknown, defaulting to 1000 [ 234.465141][T11920] netlink: 'syz.0.1672': attribute type 2 has an invalid length. [ 234.651193][T11926] netlink: 'syz.0.1674': attribute type 1 has an invalid length. [ 234.691801][T11926] 8021q: adding VLAN 0 to HW filter on device bond5 [ 234.980730][T11945] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 4, id = 0 [ 235.046606][T11946] __nla_validate_parse: 8 callbacks suppressed [ 235.096519][T11946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1678'. [ 235.152866][T11946] IPVS: stopping backup sync thread 11945 ... [ 235.162670][T11950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1679'. [ 235.790526][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1681'. [ 235.842327][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1681'. [ 236.026594][T11967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1681'. [ 236.374903][T11980] IPVS: length: 1595993743 != 8 [ 236.444673][T11984] Cannot find map_set index 0 as target [ 236.596049][T11990] netlink: zone id is out of range [ 236.616090][T11990] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1686'. [ 236.888801][T11994] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1691'. [ 237.101996][T11986] lo speed is unknown, defaulting to 1000 [ 237.181956][T11998] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1693'. [ 237.303250][T12000] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 237.654169][T12004] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1692'. [ 238.162699][T12022] RDS: rds_bind could not find a transport for ::4000:20:0:0, load rds_tcp or rds_rdma? [ 238.294604][T12033] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1704'. [ 238.597002][T12037] lo speed is unknown, defaulting to 1000 [ 238.672915][T12051] syz.2.1709[12051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.673014][T12051] syz.2.1709[12051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.695360][T12051] syz.2.1709[12051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.890318][T12057] netlink: 'syz.2.1710': attribute type 13 has an invalid length. [ 238.920639][T12057] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 239.154875][T12038] lo speed is unknown, defaulting to 1000 [ 240.287150][T12101] RDS: rds_bind could not find a transport for ::ffff:172.20.20.0, load rds_tcp or rds_rdma? [ 240.674526][T12121] netlink: 'syz.4.1725': attribute type 2 has an invalid length. [ 241.009039][T12131] xt_connbytes: Forcing CT accounting to be enabled [ 241.016210][T12131] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 241.050127][T12133] xt_l2tp: unknown flags: 10 [ 241.106529][T12136] batman_adv: batadv0: Adding interface: dummy0 [ 241.126947][T12136] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.201086][T12136] batman_adv: batadv0: Interface activated: dummy0 [ 241.246025][T12140] batadv0: mtu less than device minimum [ 241.287411][T12140] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.300362][T12140] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.312831][T12140] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.325322][T12140] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.337732][T12140] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.350124][T12140] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.362518][T12140] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.374902][T12140] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.387388][T12140] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.486069][T12156] __nla_validate_parse: 14 callbacks suppressed [ 241.486089][T12156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1731'. [ 241.507480][T12156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1731'. [ 241.661579][T12161] dvmrp0: entered allmulticast mode [ 241.759997][T12164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1733'. [ 241.894240][T12170] netlink: 'syz.2.1735': attribute type 5 has an invalid length. [ 241.907371][T12132] delete_channel: no stack [ 241.963938][T12173] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1737'. [ 241.974765][T12174] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1736'. [ 242.009457][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1735'. [ 242.239908][T12190] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 242.355779][T12201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1741'. [ 242.368889][T12190] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 242.392591][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1746'. [ 242.470839][T12190] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 242.543976][T12204] lo speed is unknown, defaulting to 1000 [ 242.580536][T12190] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 242.631100][T12209] gretap1: entered promiscuous mode [ 242.689688][T12169] delete_channel: no stack [ 242.730086][T12190] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 242.795182][T12190] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 242.862647][T12190] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 242.923004][T12190] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 243.056262][T12226] tap0: tun_chr_ioctl cmd 1074025677 [ 243.065001][T12226] tap0: linktype set to 0 [ 243.073710][T12229] netlink: 'syz.2.1752': attribute type 21 has an invalid length. [ 243.335707][T12241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1756'. [ 243.727474][T12255] netlink: 'syz.4.1762': attribute type 1 has an invalid length. [ 243.834709][T12255] bond0: entered promiscuous mode [ 243.857170][T12255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.959977][T12262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.978115][T12262] bond0: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 244.007311][T12262] bond0: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 244.031112][T12262] bond0: (slave ip6gre3): making interface the new active one [ 244.038970][T12262] ip6gre3: entered promiscuous mode [ 244.045745][T12262] bond0: (slave ip6gre3): Enslaving as an active interface with an up link [ 244.156301][T12277] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1768'. [ 244.195925][T12277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 244.207046][T12277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 244.219984][T12277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 244.239184][T12277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 245.360554][T12351] netlink: 'syz.4.1787': attribute type 12 has an invalid length. [ 245.534876][T12354] vlan0: entered promiscuous mode [ 245.541072][T12354] macvtap0: entered promiscuous mode [ 245.553348][T12354] team0: Device vlan0 is up. Set it down before adding it as a team port [ 245.564699][T12354] macvtap0: left promiscuous mode [ 245.942794][T12372] ip6gre4: entered allmulticast mode [ 246.149335][T12383] netlink: 'syz.1.1799': attribute type 12 has an invalid length. [ 246.296892][ T5836] Bluetooth: hci5: command 0x0405 tx timeout [ 246.373175][T12394] hsr0: entered promiscuous mode [ 246.379264][T12394] mac80211_hwsim hwsim7 Ú€þ]6Ñ: renamed from wlan0 [ 246.400872][T12394] hsr_slave_0: left promiscuous mode [ 246.410970][T12394] hsr_slave_1: left promiscuous mode [ 246.443730][T12394] hsr0 (unregistering): left allmulticast mode [ 246.452028][T12394] hsr0 (unregistering): left promiscuous mode [ 246.474441][T12396] delete_channel: no stack [ 246.998502][T12417] netlink: 'syz.4.1810': attribute type 12 has an invalid length. [ 247.017542][T12417] __nla_validate_parse: 7 callbacks suppressed [ 247.017560][T12417] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1810'. [ 247.067915][T12421] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1811'. [ 247.185463][T12425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1812'. [ 247.510048][T12450] netlink: 'syz.2.1820': attribute type 1 has an invalid length. [ 247.605209][T12459] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1821'. [ 247.716093][T12467] xt_TCPMSS: Only works on TCP SYN packets [ 247.844301][T12472] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1824'. [ 247.917470][T12475] netlink: 'syz.0.1825': attribute type 9 has an invalid length. [ 248.208289][T12488] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1828'. [ 248.720498][T12477] lo speed is unknown, defaulting to 1000 [ 248.737702][T12517] netlink: 'syz.5.1836': attribute type 10 has an invalid length. [ 248.757185][T12517] veth0_vlan: left promiscuous mode [ 248.778378][T12517] veth0_vlan: entered promiscuous mode [ 248.811632][T12517] team0: Device veth0_vlan failed to register rx_handler [ 249.129434][T12524] dvmrp1: entered allmulticast mode [ 249.142465][T12492] lo speed is unknown, defaulting to 1000 [ 249.386351][T12493] lo speed is unknown, defaulting to 1000 [ 250.041136][T12551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1846'. [ 250.091840][T12552] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1845'. [ 250.596388][T12565] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1850'. [ 250.794276][T12572] batadv1: entered promiscuous mode [ 250.804334][T12572] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 251.202117][T12598] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1863'. [ 251.606277][T12612] syzkaller1: entered promiscuous mode [ 251.617849][T12612] syzkaller1: entered allmulticast mode [ 251.977486][T12617] lo speed is unknown, defaulting to 1000 [ 252.096586][T12634] net_ratelimit: 10 callbacks suppressed [ 252.121343][T12634] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 252.499352][T12628] lo speed is unknown, defaulting to 1000 [ 252.995934][T12661] syzkaller0: entered allmulticast mode [ 253.156052][T12673] __nla_validate_parse: 6 callbacks suppressed [ 253.156071][T12673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1883'. [ 253.218075][T12673] netlink: 'syz.2.1883': attribute type 9 has an invalid length. [ 253.420764][T12676] syzkaller0 (unregistering): left allmulticast mode [ 253.531013][T12630] lo speed is unknown, defaulting to 1000 [ 253.706188][T12689] netlink: 'syz.2.1890': attribute type 1 has an invalid length. [ 254.094914][T12709] netlink: 'syz.2.1897': attribute type 10 has an invalid length. [ 254.131241][T12709] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1897'. [ 254.349764][T12709] team0: entered promiscuous mode [ 254.354947][T12709] team_slave_0: entered promiscuous mode [ 254.385047][T12709] team_slave_1: entered promiscuous mode [ 254.409911][T12709] bond0: (slave team0): Releasing backup interface [ 254.460256][T12709] bridge0: port 3(team0) entered blocking state [ 254.472140][T12709] bridge0: port 3(team0) entered disabled state [ 254.481133][T12709] team0: entered allmulticast mode [ 254.486488][T12709] team_slave_0: entered allmulticast mode [ 254.492843][T12709] team_slave_1: entered allmulticast mode [ 254.800870][T12740] netlink: 'syz.1.1903': attribute type 1 has an invalid length. [ 254.954760][T12740] bond3: entered promiscuous mode [ 254.961099][T12740] 8021q: adding VLAN 0 to HW filter on device bond3 [ 255.029141][T12738] bond3: (slave veth7): making interface the new active one [ 255.055225][T12738] veth7: entered promiscuous mode [ 255.066202][T12738] bond3: (slave veth7): Enslaving as an active interface with an up link [ 255.133625][T12749] netlink: 'syz.2.1905': attribute type 10 has an invalid length. [ 255.195693][T12749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.239174][T12749] batadv0: entered promiscuous mode [ 255.265348][T12749] batadv0: entered allmulticast mode [ 255.278889][T12749] team0: Port device batadv0 added [ 255.380600][ T8676] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 255.390801][ T8676] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 255.439340][T12760] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1909'. [ 255.639097][T12762] netlink: 'syz.2.1909': attribute type 1 has an invalid length. [ 255.673073][T12762] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1909'. [ 255.707370][T12762] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1909'. [ 255.980185][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.012799][T12781] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 256.934837][T12830] openvswitch: netlink: Message has 1 unknown bytes. [ 256.970659][T12837] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 257.002854][T12832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1921'. [ 257.347133][T12856] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1927'. [ 257.391741][T12860] netlink: 'syz.4.1927': attribute type 1 has an invalid length. [ 257.457912][T12860] netlink: 'syz.4.1927': attribute type 3 has an invalid length. [ 257.486836][T12862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1928'. [ 257.523060][T12860] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1927'. [ 257.562616][T12864] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1929'. [ 257.806359][T12852] lo speed is unknown, defaulting to 1000 [ 257.845589][T12883] netlink: 'syz.5.1932': attribute type 2 has an invalid length. [ 257.912526][T12886] netlink: 'syz.5.1932': attribute type 2 has an invalid length. [ 257.938226][T12883] fþ: entered promiscuous mode [ 258.117921][ T46] hid-generic 0005:046D:1010.0002: item fetching failed at offset 0/1 [ 258.147397][ T46] hid-generic 0005:046D:1010.0002: probe with driver hid-generic failed with error -22 [ 258.355931][T12910] netlink: 'syz.5.1939': attribute type 3 has an invalid length. [ 258.382371][T12914] __nla_validate_parse: 4 callbacks suppressed [ 258.382391][T12914] netlink: 4092 bytes leftover after parsing attributes in process `syz.2.1935'. [ 258.399872][T12917] ax25_connect(): syz.1.1937 uses autobind, please contact jreuter@yaina.de [ 258.418860][T12910] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1939'. [ 258.589341][T12905] ebtables: ebtables: counters copy to user failed while replacing table [ 258.830806][T12936] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1944'. [ 258.921763][T12938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1944'. [ 259.000481][T12942] FAULT_INJECTION: forcing a failure. [ 259.000481][T12942] name failslab, interval 1, probability 0, space 0, times 0 [ 259.056896][T12942] CPU: 0 UID: 0 PID: 12942 Comm: syz.5.1943 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 259.067720][T12942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 259.077797][T12942] Call Trace: [ 259.081092][T12942] [ 259.084033][T12942] dump_stack_lvl+0x241/0x360 [ 259.088745][T12942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.093969][T12942] ? __pfx__printk+0x10/0x10 [ 259.098582][T12942] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 259.104675][T12942] ? __pfx___might_resched+0x10/0x10 [ 259.109982][T12942] should_fail_ex+0x3b0/0x4e0 [ 259.114683][T12942] should_failslab+0xac/0x100 [ 259.119384][T12942] kmem_cache_alloc_node_noprof+0x77/0x380 [ 259.125215][T12942] ? __alloc_skb+0x1c3/0x440 [ 259.129829][T12942] __alloc_skb+0x1c3/0x440 [ 259.134269][T12942] ? __pfx___alloc_skb+0x10/0x10 [ 259.139224][T12942] ? netlink_autobind+0xd6/0x2f0 [ 259.144179][T12942] ? netlink_autobind+0x2b0/0x2f0 [ 259.149222][T12942] netlink_sendmsg+0x638/0xcb0 [ 259.154015][T12942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.159325][T12942] ? aa_sock_msg_perm+0x91/0x160 [ 259.164285][T12942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.169590][T12942] __sock_sendmsg+0x221/0x270 [ 259.174286][T12942] ____sys_sendmsg+0x52a/0x7e0 [ 259.179079][T12942] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.184382][T12942] ? __fget_files+0x2a/0x410 [ 259.188996][T12942] ? __fget_files+0x2a/0x410 [ 259.193627][T12942] __sys_sendmsg+0x269/0x350 [ 259.198243][T12942] ? __pfx_lock_release+0x10/0x10 [ 259.203303][T12942] ? __pfx___sys_sendmsg+0x10/0x10 [ 259.208460][T12942] ? __pfx_vfs_write+0x10/0x10 [ 259.213272][T12942] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 259.219636][T12942] ? do_syscall_64+0x100/0x230 [ 259.224439][T12942] ? do_syscall_64+0xb6/0x230 [ 259.229147][T12942] do_syscall_64+0xf3/0x230 [ 259.233674][T12942] ? clear_bhb_loop+0x35/0x90 [ 259.238381][T12942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.244313][T12942] RIP: 0033:0x7f470dd85d29 [ 259.248758][T12942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.268390][T12942] RSP: 002b:00007f470ebe3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.276844][T12942] RAX: ffffffffffffffda RBX: 00007f470df75fa0 RCX: 00007f470dd85d29 [ 259.284853][T12942] RDX: 0000000020000800 RSI: 0000000020000300 RDI: 0000000000000004 [ 259.292862][T12942] RBP: 00007f470ebe3090 R08: 0000000000000000 R09: 0000000000000000 [ 259.300859][T12942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.308855][T12942] R13: 0000000000000000 R14: 00007f470df75fa0 R15: 00007ffdf02f3d38 [ 259.316954][T12942] [ 259.413196][T12944] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1946'. [ 259.450280][T12944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1946'. [ 259.564692][ T9] IPVS: starting estimator thread 0... [ 259.672961][T12954] IPVS: using max 20 ests per chain, 48000 per kthread [ 260.128062][T12993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1961'. [ 260.205495][T12997] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1963'. [ 260.218700][T12993] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.252227][T12997] netlink: 'syz.5.1963': attribute type 1 has an invalid length. [ 260.291342][T12997] netlink: 'syz.5.1963': attribute type 8 has an invalid length. [ 260.316241][T12997] netlink: 109544 bytes leftover after parsing attributes in process `syz.5.1963'. [ 260.354449][T13004] nbd: must specify at least one socket [ 260.363220][T13004] block nbd0: not configured, cannot reconfigure [ 260.381966][T13004] netlink: 'syz.0.1964': attribute type 1 has an invalid length. [ 260.823681][T13038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1976'. [ 260.843728][T13038] netlink: 'syz.1.1976': attribute type 7 has an invalid length. [ 260.906021][T13043] netlink: 'syz.2.1977': attribute type 12 has an invalid length. [ 261.108010][T13051] macsec0: entered allmulticast mode [ 261.113356][T13051] hsr0: entered allmulticast mode [ 261.142634][T13051] hsr_slave_0: entered allmulticast mode [ 261.155104][T13051] hsr_slave_1: entered allmulticast mode [ 261.499492][T13073] netlink: 'syz.5.1987': attribute type 5 has an invalid length. [ 261.682990][ T5836] Bluetooth: hci5: command 0x0405 tx timeout [ 261.948114][T13059] bond0: (slave team0): Releasing backup interface [ 261.964750][T13059] team0 (unregistering): Port device team_slave_0 removed [ 261.978940][T13059] team0 (unregistering): Port device team_slave_1 removed [ 262.076040][T13095] netlink: 'syz.2.1991': attribute type 29 has an invalid length. [ 262.087407][T13095] netlink: 'syz.2.1991': attribute type 29 has an invalid length. [ 262.135104][T13099] netlink: 'syz.5.1993': attribute type 12 has an invalid length. [ 262.270555][T13103] macsec1: entered allmulticast mode [ 262.291668][T13103] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 262.310337][T13103] mac80211_hwsim hwsim16 wlan0: left allmulticast mode [ 262.356923][T13078] lo speed is unknown, defaulting to 1000 [ 263.366100][T13138] validate_nla: 1 callbacks suppressed [ 263.366120][T13138] netlink: 'syz.1.2006': attribute type 12 has an invalid length. [ 263.404806][T13138] __nla_validate_parse: 12 callbacks suppressed [ 263.404826][T13138] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2006'. [ 263.420220][T13143] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2007'. [ 263.433899][T13141] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2008'. [ 263.932905][T13171] ip6tnl4: entered promiscuous mode [ 263.964061][T13168] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2014'. [ 263.971144][T13173] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 263.979418][T13173] syzkaller0: linktype set to 6 [ 263.988571][T13173] netlink: 'syz.5.2015': attribute type 1 has an invalid length. [ 264.031828][T13173] 8021q: adding VLAN 0 to HW filter on device bond2 [ 264.040136][T13173] bond1: (slave bond2): making interface the new active one [ 264.048019][T13173] bond1: (slave bond2): Enslaving as an active interface with an up link [ 264.364699][T13190] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2017'. [ 264.370409][T13188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2020'. [ 264.393684][T13192] netlink: 'syz.5.2021': attribute type 12 has an invalid length. [ 264.401923][T13192] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2021'. [ 264.594723][T13202] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2023'. [ 264.618928][T13202] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2023'. [ 264.671907][T13202] ip6gretap0: entered promiscuous mode [ 264.705868][T13202] ip6gretap0: left promiscuous mode [ 264.745452][T13207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2025'. [ 265.073768][T13223] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 265.128617][T13225] x_tables: duplicate underflow at hook 3 [ 265.256010][T13236] netlink: 'syz.0.2035': attribute type 12 has an invalid length. [ 265.307277][T13239] syzkaller1: entered promiscuous mode [ 265.327657][T13239] syzkaller1: entered allmulticast mode [ 265.643492][T13263] IPVS: Unknown mcast interface: veth°ñ [ 265.656889][ T5839] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 265.697085][T13259] 8021q: adding VLAN 0 to HW filter on device bond6 [ 265.786245][T13276] netlink: 'syz.4.2044': attribute type 1 has an invalid length. [ 265.894765][T13282] 8021q: adding VLAN 0 to HW filter on device bond6 [ 265.903373][T13282] bond5: (slave bond6): making interface the new active one [ 265.913963][T13282] bond5: (slave bond6): Enslaving as an active interface with an up link [ 266.022013][T13290] set match dimension is over the limit! [ 266.119036][T13298] netlink: 'syz.5.2049': attribute type 12 has an invalid length. [ 266.857086][T13343] syzkaller1: entered promiscuous mode [ 266.863928][T13343] syzkaller1: entered allmulticast mode [ 266.872907][T13342] netlink: 'syz.0.2062': attribute type 12 has an invalid length. [ 267.181149][T13359] netlink: 'syz.1.2066': attribute type 11 has an invalid length. [ 267.225731][T13347] lo speed is unknown, defaulting to 1000 [ 267.643814][T13383] netlink: 'syz.4.2074': attribute type 12 has an invalid length. [ 267.683004][T13385] sctp: [Deprecated]: syz.2.2071 (pid 13385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.683004][T13385] Use struct sctp_sack_info instead [ 267.739650][T13385] netlink: 'syz.2.2071': attribute type 10 has an invalid length. [ 267.997557][T13380] netlink: 'syz.2.2071': attribute type 11 has an invalid length. [ 268.295901][T13406] SET target dimension over the limit! [ 268.523596][T13415] netlink: 'syz.2.2082': attribute type 5 has an invalid length. [ 268.747276][T13421] netlink: 'syz.2.2085': attribute type 12 has an invalid length. [ 268.775754][T13421] __nla_validate_parse: 12 callbacks suppressed [ 268.775773][T13421] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2085'. [ 268.814147][T13398] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2076'. [ 268.834189][T13398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2076'. [ 269.398603][T13449] netlink: zone id is out of range [ 269.459270][T13460] tipc: Enabling of bearer rejected, failed to enable media [ 269.499924][T13460] atomic_op ffff888034b1a198 conn xmit_atomic 0000000000000000 [ 269.552605][T13449] netlink: set zone limit has 4 unknown bytes [ 269.746163][T13481] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2100'. [ 269.840571][T13488] gretap1: left promiscuous mode [ 269.867163][T13488] ip6tnl2: left promiscuous mode [ 269.894436][T13488] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 269.917855][T13488] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 269.936036][T13488] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 269.950391][T13488] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 269.995074][T13488] bond0: left promiscuous mode [ 270.000146][T13488] ip6gre3: left promiscuous mode [ 270.213826][T13507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2109'. [ 270.453765][T13514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.633381][T13519] batadv_slave_1: entered promiscuous mode [ 270.890088][T13516] batadv_slave_1: left promiscuous mode [ 271.196105][T13531] lo speed is unknown, defaulting to 1000 [ 271.806813][T13543] lo speed is unknown, defaulting to 1000 [ 272.231320][T13563] veth0_vlan: left allmulticast mode [ 272.273388][T13563] macvtap0: left promiscuous mode [ 272.285379][T13563] ip6tnl3: left allmulticast mode [ 272.305849][T13563] macsec0: left allmulticast mode [ 272.326251][T13563] hsr0: left allmulticast mode [ 272.331872][T13563] hsr_slave_0: left allmulticast mode [ 272.337810][T13563] hsr_slave_1: left allmulticast mode [ 272.344056][T13563] ip6tnl4: left promiscuous mode [ 272.361089][T13571] netlink: 'syz.4.2127': attribute type 12 has an invalid length. [ 272.369864][T13571] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2127'. [ 272.574660][T13563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2125'. [ 272.697284][ T5836] Bluetooth: hci5: command 0x0405 tx timeout [ 273.378122][T13604] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 273.404931][ T9] IPVS: starting estimator thread 0... [ 273.459014][T13604] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2131'. [ 273.506794][T13606] IPVS: using max 28 ests per chain, 67200 per kthread [ 273.722454][T13623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2137'. [ 273.793505][T13623] macvtap1: entered promiscuous mode [ 273.800085][T13623] dummy0: entered promiscuous mode [ 273.833916][T13628] netlink: 'syz.4.2138': attribute type 12 has an invalid length. [ 273.870238][T13628] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2138'. [ 273.941078][T13630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2139'. [ 274.165830][T13652] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2143'. [ 274.201991][T13652] netlink: 'syz.5.2143': attribute type 27 has an invalid length. [ 274.256025][T13660] netlink: 'syz.4.2146': attribute type 30 has an invalid length. [ 274.274162][T13656] netlink: 'syz.1.2144': attribute type 9 has an invalid length. [ 274.392459][T13665] netlink: 'syz.2.2147': attribute type 21 has an invalid length. [ 274.546529][T13673] netlink: 'syz.2.2151': attribute type 12 has an invalid length. [ 274.565026][T13673] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2151'. [ 274.783445][T13684] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 274.820962][T13686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2156'. [ 274.830826][T13686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2156'. [ 274.856522][T13687] netlink: 'syz.0.2154': attribute type 2 has an invalid length. [ 274.967926][T13689] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 275.077074][T13700] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 275.236439][T13716] batman_adv: batadv0: Interface deactivated: dummy0 [ 275.297800][T13716] batman_adv: batadv0: Removing interface: dummy0 [ 275.315587][T13715] netlink: 'syz.0.2165': attribute type 12 has an invalid length. [ 275.324132][T13715] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2165'. [ 275.361030][T13726] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2169'. [ 275.372035][T13726] netlink: 'syz.1.2169': attribute type 10 has an invalid length. [ 275.398774][T13726] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.410660][T13726] bond0: (slave team0): Enslaving as an active interface with an up link [ 275.484451][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2173'. [ 275.493727][T13729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2173'. [ 275.504889][T13729] netlink: 'syz.1.2173': attribute type 14 has an invalid length. [ 275.805254][T13742] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 275.992255][T13753] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 276.094202][T13760] tipc: Started in network mode [ 276.108751][T13760] tipc: Node identity , cluster identity 8 [ 277.230418][T13811] 8021q: adding VLAN 0 to HW filter on device bond3 [ 277.303699][T13816] 8021q: adding VLAN 0 to HW filter on device bond3 [ 277.337774][T13816] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 277.363303][T13816] bond3: (slave vcan1): Error -95 calling set_mac_address [ 277.559031][T13820] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 277.575550][T13820] ip6tnl1: left allmulticast mode [ 277.580744][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 277.590622][T13820] ip6gre2: left promiscuous mode [ 277.606536][T13820] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 277.616100][T13820] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 277.630984][T13820] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 277.641121][T13820] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 278.315778][T13863] bond5: entered promiscuous mode [ 278.326388][T13863] 8021q: adding VLAN 0 to HW filter on device bond5 [ 278.359855][T13870] 8021q: adding VLAN 0 to HW filter on device bond5 [ 278.372977][T13870] bond5: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 278.392665][T13870] bond5: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 278.405867][T13870] bond5: (slave ip6gre3): making interface the new active one [ 278.418345][T13870] ip6gre3: entered promiscuous mode [ 278.424523][T13870] bond5: (slave ip6gre3): Enslaving as an active interface with an up link [ 278.607811][T13863] bond5 (unregistering): (slave ip6gre3): Releasing backup interface [ 278.616291][T13863] ip6gre3: left promiscuous mode [ 278.627826][T13863] bond5 (unregistering): Released all slaves [ 279.085939][T13902] __nla_validate_parse: 13 callbacks suppressed [ 279.085960][T13902] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2218'. [ 279.105656][T13902] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2218'. [ 279.234217][T13911] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2220'. [ 279.367479][T13918] bridge0: port 3(30ªX¹¦D) entered blocking state [ 279.374340][T13918] bridge0: port 3(30ªX¹¦D) entered disabled state [ 279.408561][T13918] 0ªX¹¦D: entered allmulticast mode [ 279.420007][T13918] 0ªX¹¦D: entered promiscuous mode [ 279.438938][T13927] 0ªX¹¦D: left allmulticast mode [ 279.446035][T13927] 0ªX¹¦D: left promiscuous mode [ 279.451629][T13927] bridge0: port 3(30ªX¹¦D) entered disabled state [ 279.704758][T13941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2228'. [ 279.738363][T13944] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2230'. [ 279.771268][T13944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2230'. [ 279.979152][T13956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2235'. [ 280.164370][T13946] lo speed is unknown, defaulting to 1000 [ 280.722077][T13985] ip6erspan0: entered promiscuous mode [ 280.739261][T13991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2243'. [ 280.754727][T13991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2243'. [ 280.797565][T13946] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2232'. [ 280.823381][T13946] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 281.197628][T14014] validate_nla: 6 callbacks suppressed [ 281.197649][T14014] netlink: 'syz.2.2248': attribute type 4 has an invalid length. [ 281.271659][T14019] netlink: 'syz.5.2251': attribute type 2 has an invalid length. [ 281.296478][T14019] Tq€: entered promiscuous mode [ 281.380326][T14009] lo speed is unknown, defaulting to 1000 [ 281.418093][T14023] netlink: 'syz.4.2252': attribute type 1 has an invalid length. [ 281.453581][T14023] 8021q: adding VLAN 0 to HW filter on device bond8 [ 281.676855][T14023] bond8: (slave ip6gretap2): making interface the new active one [ 281.739090][T14023] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 281.759615][T14023] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 281.776537][T14023] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 281.837056][ T5881] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 281.930832][ T6287] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 281.976999][T13464] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 282.126182][T14050] openvswitch: netlink: EtherType 0 is less than min 600 [ 282.158794][T14050] x_tables: duplicate underflow at hook 2 [ 282.236957][ T5881] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 282.260594][T14054] tap0: tun_chr_ioctl cmd 1074025677 [ 282.269888][T14054] tap0: linktype set to 804 [ 282.318330][T14059] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 282.583338][T14074] sctp: [Deprecated]: syz.5.2265 (pid 14074) Use of struct sctp_assoc_value in delayed_ack socket option. [ 282.583338][T14074] Use struct sctp_sack_info instead [ 282.727252][ T6287] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 283.005938][T14088] vlan1: entered promiscuous mode [ 283.019434][T14088] vlan1: entered allmulticast mode [ 283.050587][ T6287] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 283.080605][ T6287] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 283.118663][ T5917] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 283.182912][T14098] 8021q: adding VLAN 0 to HW filter on device bond5 [ 283.265915][T14103] 8021q: adding VLAN 0 to HW filter on device bond5 [ 283.293039][T14103] bond5: (slave vcan0): The slave device specified does not support setting the MAC address [ 283.324659][T14103] bond5: (slave vcan0): Error -95 calling set_mac_address [ 283.378839][T14102] 0·: renamed from hsr_slave_1 [ 283.407234][T14102] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 283.446162][T14098] bond5: (slave ipip0): The slave device specified does not support setting the MAC address [ 283.479941][T14098] bond5: (slave ipip0): Error -95 calling set_mac_address [ 283.576860][ T54] Bluetooth: hci5: command 0x0405 tx timeout [ 283.664623][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 283.763248][T14125] netlink: 'syz.4.2281': attribute type 10 has an invalid length. [ 284.105438][T14156] __nla_validate_parse: 12 callbacks suppressed [ 284.105460][T14156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2292'. [ 284.305991][T14160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2295'. [ 284.364872][T14142] lo speed is unknown, defaulting to 1000 [ 284.394683][T14162] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2296'. [ 284.506411][T14164] netlink: 'syz.4.2297': attribute type 39 has an invalid length. [ 284.578639][T14166] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2297'. [ 285.009943][T14142] lo speed is unknown, defaulting to 1000 [ 285.122664][T14189] FAULT_INJECTION: forcing a failure. [ 285.122664][T14189] name failslab, interval 1, probability 0, space 0, times 0 [ 285.157065][T14189] CPU: 0 UID: 0 PID: 14189 Comm: syz.2.2305 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 285.167906][T14189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 285.178007][T14189] Call Trace: [ 285.181310][T14189] [ 285.184261][T14189] dump_stack_lvl+0x241/0x360 [ 285.188970][T14189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.194195][T14189] ? __pfx__printk+0x10/0x10 [ 285.198814][T14189] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 285.204827][T14189] ? __pfx___might_resched+0x10/0x10 [ 285.210150][T14189] should_fail_ex+0x3b0/0x4e0 [ 285.214852][T14189] should_failslab+0xac/0x100 [ 285.219558][T14189] kmem_cache_alloc_node_noprof+0x77/0x380 [ 285.225390][T14189] ? __alloc_skb+0x1c3/0x440 [ 285.230013][T14189] __alloc_skb+0x1c3/0x440 [ 285.234464][T14189] ? __pfx___alloc_skb+0x10/0x10 [ 285.239433][T14189] ? netlink_autobind+0xd6/0x2f0 [ 285.244401][T14189] ? netlink_autobind+0x2b0/0x2f0 [ 285.249547][T14189] netlink_sendmsg+0x638/0xcb0 [ 285.254366][T14189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.259690][T14189] ? aa_sock_msg_perm+0x91/0x160 [ 285.264653][T14189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.269963][T14189] __sock_sendmsg+0x221/0x270 [ 285.274665][T14189] ____sys_sendmsg+0x52a/0x7e0 [ 285.279465][T14189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.284776][T14189] ? __fget_files+0x2a/0x410 [ 285.289399][T14189] ? __fget_files+0x2a/0x410 [ 285.294022][T14189] __sys_sendmsg+0x269/0x350 [ 285.298635][T14189] ? __pfx_lock_release+0x10/0x10 [ 285.303696][T14189] ? __pfx___sys_sendmsg+0x10/0x10 [ 285.308845][T14189] ? __pfx_vfs_write+0x10/0x10 [ 285.313652][T14189] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 285.320006][T14189] ? do_syscall_64+0x100/0x230 [ 285.324808][T14189] ? do_syscall_64+0xb6/0x230 [ 285.329519][T14189] do_syscall_64+0xf3/0x230 [ 285.334057][T14189] ? clear_bhb_loop+0x35/0x90 [ 285.338765][T14189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.344689][T14189] RIP: 0033:0x7f08a6b85d29 [ 285.349133][T14189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.368772][T14189] RSP: 002b:00007f08a79ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.377224][T14189] RAX: ffffffffffffffda RBX: 00007f08a6d75fa0 RCX: 00007f08a6b85d29 [ 285.385233][T14189] RDX: 0000000000000800 RSI: 0000000020000000 RDI: 0000000000000003 [ 285.393320][T14189] RBP: 00007f08a79ef090 R08: 0000000000000000 R09: 0000000000000000 [ 285.401412][T14189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.409417][T14189] R13: 0000000000000000 R14: 00007f08a6d75fa0 R15: 00007ffcfbe99fd8 [ 285.417432][T14189] [ 285.624538][T14214] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2312'. [ 285.800265][T14220] ebt_among: dst integrity fail: 200 [ 286.209398][T14231] netlink: 'syz.1.2319': attribute type 1 has an invalid length. [ 286.246842][T14231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2319'. [ 286.398012][T14241] netlink: 'syz.4.2323': attribute type 7 has an invalid length. [ 286.421186][T14241] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2323'. [ 286.472907][T14246] netlink: 'syz.0.2325': attribute type 1 has an invalid length. [ 286.767067][T14260] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2328'. [ 286.936779][ C0] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 286.936803][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 287.265062][T14292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2339'. [ 287.282664][T14292] netlink: 'syz.0.2339': attribute type 3 has an invalid length. [ 287.467747][T13464] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 287.915280][T14328] FAULT_INJECTION: forcing a failure. [ 287.915280][T14328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.954925][T14328] CPU: 0 UID: 0 PID: 14328 Comm: syz.1.2351 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 287.965738][T14328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 287.975896][T14328] Call Trace: [ 287.979196][T14328] [ 287.982157][T14328] dump_stack_lvl+0x241/0x360 [ 287.986878][T14328] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.992110][T14328] ? __pfx__printk+0x10/0x10 [ 287.996734][T14328] ? __pfx_lock_release+0x10/0x10 [ 288.001797][T14328] should_fail_ex+0x3b0/0x4e0 [ 288.006520][T14328] _copy_from_iter+0x1e9/0x1c20 [ 288.011412][T14328] ? __virt_addr_valid+0x183/0x530 [ 288.016560][T14328] ? __alloc_skb+0x28f/0x440 [ 288.021181][T14328] ? __pfx__copy_from_iter+0x10/0x10 [ 288.026505][T14328] ? __virt_addr_valid+0x183/0x530 [ 288.031653][T14328] ? __virt_addr_valid+0x183/0x530 [ 288.036798][T14328] ? __virt_addr_valid+0x45f/0x530 [ 288.041994][T14328] ? __phys_addr_symbol+0x2f/0x70 [ 288.047059][T14328] ? __check_object_size+0x47a/0x730 [ 288.052544][T14328] netlink_sendmsg+0x73d/0xcb0 [ 288.057324][T14328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.062612][T14328] ? aa_sock_msg_perm+0x91/0x160 [ 288.067549][T14328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.072836][T14328] __sock_sendmsg+0x221/0x270 [ 288.077517][T14328] ____sys_sendmsg+0x52a/0x7e0 [ 288.082282][T14328] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.087569][T14328] ? __fget_files+0x2a/0x410 [ 288.092157][T14328] ? __fget_files+0x2a/0x410 [ 288.096757][T14328] __sys_sendmsg+0x269/0x350 [ 288.101356][T14328] ? __pfx_lock_release+0x10/0x10 [ 288.106386][T14328] ? __pfx___sys_sendmsg+0x10/0x10 [ 288.111592][T14328] ? __pfx_vfs_write+0x10/0x10 [ 288.116366][T14328] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 288.122693][T14328] ? do_syscall_64+0x100/0x230 [ 288.127469][T14328] ? do_syscall_64+0xb6/0x230 [ 288.132146][T14328] do_syscall_64+0xf3/0x230 [ 288.136655][T14328] ? clear_bhb_loop+0x35/0x90 [ 288.141334][T14328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.147227][T14328] RIP: 0033:0x7f3d73b85d29 [ 288.151642][T14328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.171769][T14328] RSP: 002b:00007f3d7497f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.180181][T14328] RAX: ffffffffffffffda RBX: 00007f3d73d75fa0 RCX: 00007f3d73b85d29 [ 288.188145][T14328] RDX: 0000000000000800 RSI: 0000000020000000 RDI: 0000000000000003 [ 288.196203][T14328] RBP: 00007f3d7497f090 R08: 0000000000000000 R09: 0000000000000000 [ 288.204166][T14328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.212476][T14328] R13: 0000000000000000 R14: 00007f3d73d75fa0 R15: 00007fff57cf2d78 [ 288.220452][T14328] [ 288.231208][T14334] rose2: entered promiscuous mode [ 288.416341][T14341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2357'. [ 288.477879][T14344] team0: Device is already in use. [ 288.519578][T14348] netlink: 'syz.0.2360': attribute type 2 has an invalid length. [ 288.769100][T14365] sctp: [Deprecated]: syz.0.2366 (pid 14365) Use of int in max_burst socket option. [ 288.769100][T14365] Use struct sctp_assoc_value instead [ 288.826643][ T8693] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 288.843459][T14370] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 288.953712][T14378] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 289.001487][T14378] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 289.020357][ T8693] tipc: Subscription rejected, illegal request [ 289.128146][T14390] tipc: Started in network mode [ 289.153399][T14390] tipc: Node identity 0eeda2657871, cluster identity 4711 [ 289.162356][T14390] tipc: Enabled bearer , priority 0 [ 289.312553][T14390] syzkaller0: entered promiscuous mode [ 289.337327][T14390] syzkaller0: entered allmulticast mode [ 289.343600][T14390] tipc: Resetting bearer [ 289.424614][T14412] netlink: 'syz.0.2378': attribute type 16 has an invalid length. [ 289.447514][T14412] __nla_validate_parse: 5 callbacks suppressed [ 289.447531][T14412] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2378'. [ 289.513897][ T8676] tipc: Resetting bearer [ 289.522680][T14389] tipc: Resetting bearer [ 289.749798][T14424] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2381'. [ 289.962588][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 290.230319][ T5882] tipc: Node number set to 1989976677 [ 291.089218][ T8676] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 291.588248][T14389] tipc: Disabling bearer [ 291.597490][T14420] batadv_slave_0: entered promiscuous mode [ 291.606380][T14420] batadv_slave_0: left promiscuous mode [ 291.778847][T14425] lo speed is unknown, defaulting to 1000 [ 291.870549][T14437] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.891704][T14435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2382'. [ 291.898962][T14438] x_tables: unsorted underflow at hook 3 [ 291.937360][T14438] netlink: 'syz.5.2384': attribute type 4 has an invalid length. [ 291.939650][T14435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2382'. [ 292.206852][T13464] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 292.241182][T14449] netlink: 504 bytes leftover after parsing attributes in process `syz.0.2389'. [ 292.468597][T14459] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2392'. [ 292.478504][T14460] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2393'. [ 292.507944][T14461] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2390'. [ 292.570765][T14464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2394'. [ 292.612985][T14464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2394'. [ 293.346986][T13464] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 293.756570][T14486] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 293.802730][T14522] lo speed is unknown, defaulting to 1000 [ 294.059124][T14536] netlink: 'syz.0.2412': attribute type 1 has an invalid length. [ 294.135873][T14536] bond7: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 294.376954][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 294.457846][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 295.593217][ T8676] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 295.826526][ T5836] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 296.718826][ T8676] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 297.422379][T14558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.642092][T14565] __nla_validate_parse: 2 callbacks suppressed [ 297.642111][T14565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2422'. [ 297.750367][T14566] erspan1: entered promiscuous mode [ 297.765257][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2425'. [ 297.795775][T14572] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2425'. [ 297.802847][T14566] erspan1: entered allmulticast mode [ 297.827188][ T6287] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 297.899887][T14575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2424'. [ 297.917839][T14567] netlink: 'syz.4.2423': attribute type 21 has an invalid length. [ 297.984612][T14567] netlink: 'syz.4.2423': attribute type 6 has an invalid length. [ 298.042926][T14567] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2423'. [ 298.086523][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2426'. [ 298.128802][T14585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2426'. [ 298.178250][T14584] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2428'. [ 298.218619][T14584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2428'. [ 298.420089][T14599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.468399][T14601] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2430'. [ 298.503860][T14606] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.674441][T14613] Cannot find set identified by id 0 to match [ 298.957931][T13466] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 299.070901][T14632] netlink: 'syz.2.2443': attribute type 3 has an invalid length. [ 299.162848][T14626] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 299.367894][T14646] netlink: 'syz.1.2446': attribute type 1 has an invalid length. [ 299.393992][T14647] netlink: 'syz.4.2444': attribute type 46 has an invalid length. [ 299.503743][T14651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.657753][ T5839] Bluetooth: hci5: command 0x0405 tx timeout [ 299.759551][T14663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.932043][T14669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.970429][T14678] netlink: 'syz.5.2458': attribute type 2 has an invalid length. [ 299.990531][T14676] netlink: 'syz.5.2458': attribute type 2 has an invalid length. [ 300.137947][T13466] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 300.196505][T14683] syzkaller0: entered promiscuous mode [ 300.220519][T14683] syzkaller0: entered allmulticast mode [ 300.801379][T14717] netlink: 'syz.0.2469': attribute type 13 has an invalid length. [ 301.357916][ T6287] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 302.477029][ T8693] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 302.680129][T14717] macvtap0: entered promiscuous mode [ 302.696772][T14717] macvtap0: refused to change device tx_queue_len [ 302.703415][T14722] __nla_validate_parse: 13 callbacks suppressed [ 302.703432][T14722] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2470'. [ 302.907101][T14729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.018003][T14733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2474'. [ 303.044930][T14733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2474'. [ 303.149075][T14740] vlan3: entered promiscuous mode [ 303.186299][T14740] vlan3: entered allmulticast mode [ 303.214875][T14740] vlan0: entered allmulticast mode [ 303.242632][T14740] vlan0: entered promiscuous mode [ 303.269838][T14740] team0: Port device vlan3 added [ 303.300144][T14752] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.460652][T14757] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2479'. [ 303.480374][T14757] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2479'. [ 303.503775][T14757] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2479'. [ 303.583953][T14762] pim6reg1: entered promiscuous mode [ 303.597295][T14762] pim6reg1: entered allmulticast mode [ 303.717311][ T8693] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 304.094071][T14743] syz.1.2475: vmalloc error: size 3653632, failed to allocated page array size 7136, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 304.111960][T14743] CPU: 0 UID: 0 PID: 14743 Comm: syz.1.2475 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 304.122757][T14743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 304.132841][T14743] Call Trace: [ 304.136146][T14743] [ 304.139188][T14743] dump_stack_lvl+0x241/0x360 [ 304.143898][T14743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.149122][T14743] ? __pfx__printk+0x10/0x10 [ 304.153742][T14743] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 304.160187][T14743] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 304.166721][T14743] warn_alloc+0x278/0x410 [ 304.171078][T14743] ? __pfx_warn_alloc+0x10/0x10 [ 304.175957][T14743] ? ip_set_sockfn_get+0x1bb/0xd90 [ 304.181092][T14743] ? __get_vm_area_node+0x1c8/0x2d0 [ 304.186322][T14743] ? __get_vm_area_node+0x25c/0x2d0 [ 304.191548][T14743] __vmalloc_node_range_noprof+0x62f/0x1380 [ 304.197488][T14743] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 304.203837][T14743] ? ip_set_sockfn_get+0x1bb/0xd90 [ 304.208960][T14743] ? __get_vm_area_node+0x1c8/0x2d0 [ 304.214168][T14743] ? __get_vm_area_node+0x25c/0x2d0 [ 304.219380][T14743] __vmalloc_node_range_noprof+0x53a/0x1380 [ 304.225274][T14743] ? ip_set_sockfn_get+0x1bb/0xd90 [ 304.230402][T14743] ? __pfx_lock_acquire+0x10/0x10 [ 304.235433][T14743] ? trace_contention_end+0x3c/0x120 [ 304.240717][T14743] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 304.247042][T14743] ? bpf_lsm_capable+0x9/0x10 [ 304.251714][T14743] ? ip_set_sockfn_get+0x1bb/0xd90 [ 304.256828][T14743] vmalloc_noprof+0x79/0x90 [ 304.261329][T14743] ? ip_set_sockfn_get+0x1bb/0xd90 [ 304.266437][T14743] ip_set_sockfn_get+0x1bb/0xd90 [ 304.271376][T14743] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 304.277357][T14743] ? __pfx_ip_set_sockfn_get+0x10/0x10 [ 304.282813][T14743] ? __pfx_lock_release+0x10/0x10 [ 304.287842][T14743] nf_getsockopt+0x299/0x2c0 [ 304.292433][T14743] ip_getsockopt+0x222/0x2e0 [ 304.297016][T14743] ? __pfx_ip_getsockopt+0x10/0x10 [ 304.302133][T14743] ? __pfx___might_resched+0x10/0x10 [ 304.307415][T14743] dccp_getsockopt+0x163/0x1910 [ 304.312285][T14743] ? __pfx_dccp_getsockopt+0x10/0x10 [ 304.317574][T14743] ? __might_fault+0xc6/0x120 [ 304.322250][T14743] ? sock_common_getsockopt+0x2e/0xb0 [ 304.327794][T14743] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 304.333853][T14743] do_sock_getsockopt+0x3c4/0x7e0 [ 304.338878][T14743] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 304.344613][T14743] ? __fget_files+0x2a/0x410 [ 304.349204][T14743] ? __fget_files+0x395/0x410 [ 304.353879][T14743] ? __fget_files+0x2a/0x410 [ 304.358471][T14743] __x64_sys_getsockopt+0x2a1/0x370 [ 304.363671][T14743] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 304.369394][T14743] ? do_syscall_64+0x100/0x230 [ 304.374160][T14743] ? do_syscall_64+0xb6/0x230 [ 304.378837][T14743] do_syscall_64+0xf3/0x230 [ 304.383345][T14743] ? clear_bhb_loop+0x35/0x90 [ 304.388015][T14743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.393923][T14743] RIP: 0033:0x7f3d73b85d29 [ 304.398333][T14743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.417938][T14743] RSP: 002b:00007f3d7495e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 304.426350][T14743] RAX: ffffffffffffffda RBX: 00007f3d73d76080 RCX: 00007f3d73b85d29 [ 304.434315][T14743] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000008 [ 304.442284][T14743] RBP: 00007f3d73c01b08 R08: 00000000200000c0 R09: 0000000000000000 [ 304.450249][T14743] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.458225][T14743] R13: 0000000000000000 R14: 00007f3d73d76080 R15: 00007fff57cf2d78 [ 304.466206][T14743] [ 304.469842][T14743] Mem-Info: [ 304.473147][T14743] active_anon:5718 inactive_anon:0 isolated_anon:0 [ 304.473147][T14743] active_file:1490 inactive_file:38349 isolated_file:0 [ 304.473147][T14743] unevictable:768 dirty:68 writeback:0 [ 304.473147][T14743] slab_reclaimable:11529 slab_unreclaimable:115919 [ 304.473147][T14743] mapped:28552 shmem:1497 pagetables:686 [ 304.473147][T14743] sec_pagetables:0 bounce:0 [ 304.473147][T14743] kernel_misc_reclaimable:0 [ 304.473147][T14743] free:1265076 free_pcp:1784 free_cma:0 [ 304.519905][T14743] Node 0 active_anon:22772kB inactive_anon:0kB active_file:5960kB inactive_file:153320kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114208kB dirty:272kB writeback:0kB shmem:4452kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12416kB pagetables:2644kB sec_pagetables:0kB all_unreclaimable? no [ 304.552524][T14743] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 304.583723][T14743] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 304.611126][T14743] lowmem_reserve[]: 0 2465 2466 0 0 [ 304.616454][T14743] Node 0 DMA32 free:1132944kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:22828kB inactive_anon:0kB active_file:5960kB inactive_file:152488kB unevictable:1536kB writepending:272kB present:3129332kB managed:2552752kB mlocked:0kB bounce:0kB free_pcp:6708kB local_pcp:6436kB free_cma:0kB [ 304.647099][T14743] lowmem_reserve[]: 0 0 0 0 0 [ 304.651865][T14743] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 304.678857][T14743] lowmem_reserve[]: 0 0 0 0 0 [ 304.683757][T14743] Node 1 Normal free:3912000kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 304.712649][T14743] lowmem_reserve[]: 0 0 0 0 0 [ 304.717479][T14743] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 304.730670][T14743] Node 0 DMA32: 88*4kB (M) 122*8kB (ME) 92*16kB (ME) 172*32kB (UME) 107*64kB (UME) 47*128kB (UME) 18*256kB (UME) 12*512kB (ME) 5*1024kB (ME) 3*2048kB (UME) 266*4096kB (UM) = 1132720kB [ 304.749265][T14743] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 304.762687][T14743] Node 1 Normal: 205*4kB (UE) 50*8kB (UME) 52*16kB (UME) 208*32kB (UME) 97*64kB (UME) 38*128kB (UME) 16*256kB (UME) 14*512kB (UME) 6*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3912004kB [ 304.781490][T14743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 304.791167][T14743] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 304.800632][T14743] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 304.810311][T14743] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 304.819803][T14743] 41336 total pagecache pages [ 304.825006][T14743] 0 pages in swap cache [ 304.829295][T14743] Free swap = 124752kB [ 304.833912][T14743] Total swap = 124996kB [ 304.838297][T14743] 2097051 pages RAM [ 304.842127][T14743] 0 pages HighMem/MovableOnly [ 304.846896][T14743] 427013 pages reserved [ 304.851065][T14743] 0 pages cma reserved [ 305.167182][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 307.027755][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 308.177499][ T8676] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 309.277360][ T8676] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 309.494134][T14840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2514'. [ 309.588521][T14842] FAULT_INJECTION: forcing a failure. [ 309.588521][T14842] name failslab, interval 1, probability 0, space 0, times 0 [ 309.655910][T14842] CPU: 0 UID: 0 PID: 14842 Comm: syz.2.2515 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 309.666748][T14842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 309.676834][T14842] Call Trace: [ 309.680146][T14842] [ 309.683102][T14842] dump_stack_lvl+0x241/0x360 [ 309.687818][T14842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.693051][T14842] ? __pfx__printk+0x10/0x10 [ 309.697707][T14842] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 309.703754][T14842] ? __pfx___might_resched+0x10/0x10 [ 309.709071][T14842] should_fail_ex+0x3b0/0x4e0 [ 309.713778][T14842] should_failslab+0xac/0x100 [ 309.718483][T14842] kmem_cache_alloc_node_noprof+0x77/0x380 [ 309.724325][T14842] ? __alloc_skb+0x1c3/0x440 [ 309.728944][T14842] __alloc_skb+0x1c3/0x440 [ 309.733390][T14842] ? __pfx___alloc_skb+0x10/0x10 [ 309.738356][T14842] ? netlink_autobind+0xd6/0x2f0 [ 309.743320][T14842] ? netlink_autobind+0x2b0/0x2f0 [ 309.748378][T14842] netlink_sendmsg+0x638/0xcb0 [ 309.753182][T14842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.758499][T14842] ? aa_sock_msg_perm+0x91/0x160 [ 309.763474][T14842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.768794][T14842] __sock_sendmsg+0x221/0x270 [ 309.773495][T14842] ____sys_sendmsg+0x52a/0x7e0 [ 309.778286][T14842] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.783596][T14842] ? __fget_files+0x2a/0x410 [ 309.788227][T14842] ? __fget_files+0x2a/0x410 [ 309.792857][T14842] __sys_sendmsg+0x269/0x350 [ 309.797472][T14842] ? __pfx_lock_release+0x10/0x10 [ 309.802524][T14842] ? __pfx___sys_sendmsg+0x10/0x10 [ 309.807676][T14842] ? __pfx_vfs_write+0x10/0x10 [ 309.812489][T14842] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 309.818851][T14842] ? do_syscall_64+0x100/0x230 [ 309.823653][T14842] ? do_syscall_64+0xb6/0x230 [ 309.828442][T14842] do_syscall_64+0xf3/0x230 [ 309.832969][T14842] ? clear_bhb_loop+0x35/0x90 [ 309.837756][T14842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.843679][T14842] RIP: 0033:0x7f08a6b85d29 [ 309.848127][T14842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.867767][T14842] RSP: 002b:00007f08a79ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.876219][T14842] RAX: ffffffffffffffda RBX: 00007f08a6d75fa0 RCX: 00007f08a6b85d29 [ 309.884229][T14842] RDX: 0000000004004014 RSI: 0000000020000040 RDI: 0000000000000003 [ 309.892320][T14842] RBP: 00007f08a79ef090 R08: 0000000000000000 R09: 0000000000000000 [ 309.900318][T14842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.908322][T14842] R13: 0000000000000000 R14: 00007f08a6d75fa0 R15: 00007ffcfbe99fd8 [ 309.916344][T14842] [ 309.920508][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 310.252759][T14848] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 310.620263][T14858] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2521'. [ 310.636870][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 310.739799][T14866] netlink: 'syz.0.2523': attribute type 11 has an invalid length. [ 311.762047][T13464] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 311.843315][T14922] sit0: entered allmulticast mode [ 312.898034][T13464] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 313.980535][T14952] veth1_macvtap: left promiscuous mode [ 313.997125][T14952] macsec0: entered promiscuous mode [ 314.014471][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 315.176919][T13466] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 316.275951][T14972] bridge0: entered allmulticast mode [ 316.291063][T14975] bridge0: entered promiscuous mode [ 316.319198][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 316.635521][T14992] syzkaller0: entered promiscuous mode [ 316.641958][T14992] syzkaller0: entered allmulticast mode [ 317.424878][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.467023][T13464] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 318.569593][T13466] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 319.479260][T15028] syz.5.2584[15028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.479354][T15028] syz.5.2584[15028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.494640][T15028] syz.5.2584[15028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.676854][T13467] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 319.832154][T15037] syz.5.2588[15037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.832254][T15037] syz.5.2588[15037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.865190][T15037] syz.5.2588[15037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.831125][T13464] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 321.273553][T15016] wg2: entered promiscuous mode [ 321.278787][T15016] wg2: entered allmulticast mode [ 322.237001][T13467] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 323.391515][T13467] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 324.507280][T13467] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 325.067571][T15082] syz.4.2608[15082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.067672][T15082] syz.4.2608[15082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.080775][T15082] syz.4.2608[15082] is installing a program with bpf_probe_write_user helper that may corrupt user memory!Â: renamed from pim6reg1 [ 325.681280][T13467] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 326.818089][ T8676] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 327.832247][T15126] syz.2.2623[15126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.832349][T15126] syz.2.2623[15126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.861925][T15126] syz.2.2623[15126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.957252][T13464] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 328.256240][T15149] veth0_vlan: entered allmulticast mode [ 328.265070][T15149] ÿÿÿÿÿÿ: renamed from vlan1 [ 329.097189][ T8693] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 330.219671][ T6287] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 331.358423][T13466] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 332.476940][T13464] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 333.588195][T13466] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 334.761305][ T6287] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 335.887043][T13466] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 336.433875][T15285] bridge0: entered allmulticast mode [ 336.481545][T15285] bridge_slave_1: left allmulticast mode [ 336.504603][T15285] bridge_slave_1: left promiscuous mode [ 336.520230][T15285] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.579928][T15285] bridge_slave_0: left allmulticast mode [ 336.585811][T15285] bridge_slave_0: left promiscuous mode [ 336.601389][T15285] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.001463][ T8676] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 338.119631][ T8676] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 339.176783][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 339.247853][T13466] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 339.401920][T15342] syz.1.2714[15342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 339.402020][T15342] syz.1.2714[15342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 339.436198][T15342] syz.1.2714[15342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 340.399644][T13466] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 341.567160][ T6287] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 342.689028][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 343.818278][ T6287] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 344.927058][ T6287] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 346.057133][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 347.181372][ T8693] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 347.284680][T15493] pim6reg1: entered promiscuous mode [ 347.300603][T15493] pim6reg1: entered allmulticast mode [ 347.377052][T15497] syz.5.2777[15497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.377150][T15497] syz.5.2777[15497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.413907][T15497] syz.5.2777[15497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 348.321401][ T6287] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 349.438222][T13466] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 350.272481][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 350.289706][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 350.302462][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 350.320785][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 350.328677][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 350.339401][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 350.606918][T13465] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 351.717017][T13465] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 351.795429][T15594] lo speed is unknown, defaulting to 1000 [ 352.066200][T15594] chnl_net:caif_netlink_parms(): no params data found [ 352.457597][ T5839] Bluetooth: hci1: command tx timeout [ 352.495367][T15594] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.504435][T15594] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.512790][T15594] bridge_slave_0: entered allmulticast mode [ 352.520762][T15594] bridge_slave_0: entered promiscuous mode [ 352.530964][T15594] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.538301][T15594] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.558303][T15594] bridge_slave_1: entered allmulticast mode [ 352.569366][T15594] bridge_slave_1: entered promiscuous mode [ 352.799334][T15594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.845251][T15594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.928447][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 353.020856][T15594] team0: Port device team_slave_0 added [ 353.031018][T15594] team0: Port device team_slave_1 added [ 353.159368][T15594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.176986][T15594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.223653][T15594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.253800][T15594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.273797][T15594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.302219][T15594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.331428][T15647] pim6reg1: entered promiscuous mode [ 353.345249][T15647] pim6reg1: entered allmulticast mode [ 354.087476][T13465] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 354.537087][ T5839] Bluetooth: hci1: command tx timeout [ 355.187086][T13465] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 356.199582][T15594] hsr_slave_0: entered promiscuous mode [ 356.206012][T15594] hsr_slave_1: entered promiscuous mode [ 356.213212][T15594] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.222129][T15594] Cannot create hsr debugfs directory [ 356.286986][T13465] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 356.616911][ T5839] Bluetooth: hci1: command tx timeout [ 356.721176][T15689] macsec0: entered promiscuous mode [ 357.034527][T15703] syz.0.2860[15703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 357.034627][T15703] syz.0.2860[15703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 357.049650][T15703] syz.0.2860[15703] is installing a program with bpf_probe_write_user helper that may corrupt user memory!Â: renamed from pim6reg1 [ 357.159511][T15594] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 357.181953][T15594] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 357.214386][T15594] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 357.229728][T15594] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 357.409918][T15594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.427319][ T8693] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 357.532296][T15594] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.574164][T13464] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 358.700851][ T5839] Bluetooth: hci1: command tx timeout [ 359.686913][T13466] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 360.120092][ T6287] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.127257][ T6287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.162712][ T6287] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.169905][ T6287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.599440][T15594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.788007][ T8693] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 361.958070][ T8693] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 363.096955][T13464] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 363.115419][T15783] sit0: entered allmulticast mode [ 363.197785][T15594] veth0_vlan: entered promiscuous mode [ 363.237645][T15594] veth1_vlan: entered promiscuous mode [ 363.287153][T15594] veth0_macvtap: entered promiscuous mode [ 363.296047][T15594] veth1_macvtap: entered promiscuous mode [ 363.313944][T15594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.324764][T15594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.337242][T15594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.420767][T15594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.447360][T15594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.458598][T15594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.469477][T15594] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.478375][T15594] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.487212][T15594] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.495922][T15594] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.790699][ T8693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.822995][ T8693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.961653][T15818] syz.1.2907[15818] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 363.961758][T15818] syz.1.2907[15818] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 363.989738][T15818] syz.1.2907[15818] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 364.030833][ T6287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.085243][ T6287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.217521][T13467] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 364.395108][T15838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2914'. [ 364.776279][T15856] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2923'. [ 364.997315][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.023874][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.046145][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.059563][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.067987][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 365.075375][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.342218][T15873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 365.386801][T15864] lo speed is unknown, defaulting to 1000 [ 365.387565][T13464] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 365.537814][T15881] FAULT_INJECTION: forcing a failure. [ 365.537814][T15881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.538193][T15878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2928'. [ 365.578361][T15881] CPU: 1 UID: 0 PID: 15881 Comm: syz.4.2929 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 365.589181][T15881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 365.599269][T15881] Call Trace: [ 365.602560][T15881] [ 365.605501][T15881] dump_stack_lvl+0x241/0x360 [ 365.610208][T15881] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.615441][T15881] ? __pfx__printk+0x10/0x10 [ 365.620074][T15881] ? __pfx_lock_release+0x10/0x10 [ 365.625141][T15881] should_fail_ex+0x3b0/0x4e0 [ 365.629839][T15881] _copy_from_iter+0x1e9/0x1c20 [ 365.634702][T15881] ? __virt_addr_valid+0x183/0x530 [ 365.639822][T15881] ? __alloc_skb+0x28f/0x440 [ 365.644416][T15881] ? __pfx__copy_from_iter+0x10/0x10 [ 365.649706][T15881] ? __virt_addr_valid+0x183/0x530 [ 365.654822][T15881] ? __virt_addr_valid+0x183/0x530 [ 365.659935][T15881] ? __virt_addr_valid+0x45f/0x530 [ 365.665050][T15881] ? __phys_addr_symbol+0x2f/0x70 [ 365.670071][T15881] ? __check_object_size+0x47a/0x730 [ 365.675364][T15881] netlink_sendmsg+0x73d/0xcb0 [ 365.680138][T15881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.685422][T15881] ? aa_sock_msg_perm+0x91/0x160 [ 365.690358][T15881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.695640][T15881] __sock_sendmsg+0x221/0x270 [ 365.700317][T15881] ____sys_sendmsg+0x52a/0x7e0 [ 365.705112][T15881] ? __pfx_____sys_sendmsg+0x10/0x10 [ 365.710418][T15881] ? __fget_files+0x2a/0x410 [ 365.715032][T15881] ? __fget_files+0x2a/0x410 [ 365.719631][T15881] __sys_sendmsg+0x269/0x350 [ 365.724228][T15881] ? __pfx_lock_release+0x10/0x10 [ 365.729254][T15881] ? __pfx___sys_sendmsg+0x10/0x10 [ 365.734376][T15881] ? __pfx_vfs_write+0x10/0x10 [ 365.739178][T15881] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 365.745522][T15881] ? do_syscall_64+0x100/0x230 [ 365.750309][T15881] ? do_syscall_64+0xb6/0x230 [ 365.754992][T15881] do_syscall_64+0xf3/0x230 [ 365.759508][T15881] ? clear_bhb_loop+0x35/0x90 [ 365.764185][T15881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.770081][T15881] RIP: 0033:0x7f2d36185d29 [ 365.774494][T15881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.794102][T15881] RSP: 002b:00007f2d36f81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.802517][T15881] RAX: ffffffffffffffda RBX: 00007f2d36375fa0 RCX: 00007f2d36185d29 [ 365.810504][T15881] RDX: 0000000004004014 RSI: 0000000020000040 RDI: 0000000000000003 [ 365.818484][T15881] RBP: 00007f2d36f81090 R08: 0000000000000000 R09: 0000000000000000 [ 365.826461][T15881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.834450][T15881] R13: 0000000000000000 R14: 00007f2d36375fa0 R15: 00007ffc05eadbb8 [ 365.842454][T15881] [ 366.171793][T15897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2932'. [ 366.182398][T15897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2932'. [ 366.308362][T15901] IPVS: stopping backup sync thread 11803 ... [ 366.338722][T15901] [ 366.341099][T15901] ====================================================== [ 366.348126][T15901] WARNING: possible circular locking dependency detected SYZFAIL: failed to send rpc fd=3 want=312 sent=0 n=-1 (errno 104: Connection reset by peer) [ 366.355157][T15901] 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 Not tainted [ 366.362275][T15901] ------------------------------------------------------ [ 366.369307][T15901] syz.5.2935/15901 is trying to acquire lock: [ 366.375379][T15901] ffffffff8fcb4bc8 (rtnl_mutex){+.+.}-{4:4}, at: ip_mc_drop_socket+0x81/0x280 [ 366.384289][T15901] [ 366.384289][T15901] but task is already holding lock: [ 366.391760][T15901] ffff888030eafda8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1c3/0xe50 [ 366.401895][T15901] [ 366.401895][T15901] which lock already depends on the new lock. [ 366.401895][T15901] [ 366.412314][T15901] [ 366.412314][T15901] the existing dependency chain (in reverse order) is: [ 366.421341][T15901] [ 366.421341][T15901] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 366.429977][T15901] lock_acquire+0x1ed/0x550 [ 366.435021][T15901] __mutex_lock+0x1ac/0xee0 [ 366.440064][T15901] smc_switch_to_fallback+0x35/0xd90 [ 366.445888][T15901] smc_sendmsg+0x11f/0x530 [ 366.450849][T15901] __sock_sendmsg+0x221/0x270 [ 366.456069][T15901] __sys_sendto+0x363/0x4c0 [ 366.461106][T15901] __x64_sys_sendto+0xde/0x100 [ 366.466410][T15901] do_syscall_64+0xf3/0x230 [ 366.471453][T15901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.475707][T15864] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 366.477871][T15901] [ 366.477871][T15901] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 366.477902][T15901] lock_acquire+0x1ed/0x550 [ 366.477923][T15901] lock_sock_nested+0x48/0x100 [ 366.477938][T15901] do_ip_setsockopt+0x1a2d/0x3cd0 [ 366.477965][T15901] ip_setsockopt+0x63/0x100 [ 366.514629][T15901] do_sock_setsockopt+0x3af/0x720 [ 366.520194][T15901] __x64_sys_setsockopt+0x1ee/0x280 [ 366.525929][T15901] do_syscall_64+0xf3/0x230 [ 366.530978][T15901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.537411][T15901] [ 366.537411][T15901] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 366.544647][T15901] validate_chain+0x18ef/0x5920 [ 366.550035][T15901] __lock_acquire+0x1397/0x2100 [ 366.555424][T15901] lock_acquire+0x1ed/0x550 [ 366.560465][T15901] __mutex_lock+0x1ac/0xee0 [ 366.565504][T15901] ip_mc_drop_socket+0x81/0x280 [ 366.570885][T15901] inet_release+0x96/0x200 [ 366.575847][T15901] sock_release+0x82/0x150 [ 366.580801][T15901] stop_sync_thread+0x4e6/0x5e0 [ 366.586183][T15901] do_ip_vs_set_ctl+0x47b/0x13d0 [ 366.591655][T15901] nf_setsockopt+0x295/0x2c0 [ 366.596820][T15901] smc_setsockopt+0x275/0xe50 [ 366.602033][T15901] do_sock_setsockopt+0x3af/0x720 [ 366.607593][T15901] __x64_sys_setsockopt+0x1ee/0x280 [ 366.613325][T15901] do_syscall_64+0xf3/0x230 [ 366.618366][T15901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.624795][T15901] [ 366.624795][T15901] other info that might help us debug this: [ 366.624795][T15901] [ 366.635024][T15901] Chain exists of: [ 366.635024][T15901] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 366.635024][T15901] [ 366.648617][T15901] Possible unsafe locking scenario: [ 366.648617][T15901] [ 366.656084][T15901] CPU0 CPU1 [ 366.661465][T15901] ---- ---- [ 366.666838][T15901] lock(&smc->clcsock_release_lock); [ 366.672229][T15901] lock(sk_lock-AF_INET); [ 366.679183][T15901] lock(&smc->clcsock_release_lock); [ 366.687094][T15901] lock(rtnl_mutex); [ 366.691096][T15901] [ 366.691096][T15901] *** DEADLOCK *** [ 366.691096][T15901] [ 366.699235][T15901] 1 lock held by syz.5.2935/15901: [ 366.704350][T15901] #0: ffff888030eafda8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1c3/0xe50 [ 366.714882][T15901] [ 366.714882][T15901] stack backtrace: [ 366.720759][T15901] CPU: 1 UID: 0 PID: 15901 Comm: syz.5.2935 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 366.731505][T15901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 366.741545][T15901] Call Trace: [ 366.744809][T15901] [ 366.747726][T15901] dump_stack_lvl+0x241/0x360 [ 366.752419][T15901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.757613][T15901] ? __pfx__printk+0x10/0x10 [ 366.762190][T15901] print_circular_bug+0x13a/0x1b0 [ 366.767226][T15901] check_noncircular+0x36a/0x4a0 [ 366.772197][T15901] ? mark_lock+0x9a/0x360 [ 366.776532][T15901] ? __pfx_check_noncircular+0x10/0x10 [ 366.782005][T15901] ? lockdep_lock+0x123/0x2b0 [ 366.786681][T15901] validate_chain+0x18ef/0x5920 [ 366.791545][T15901] ? __pfx_validate_chain+0x10/0x10 [ 366.796740][T15901] ? mark_lock+0x9a/0x360 [ 366.801055][T15901] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 366.807024][T15901] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 366.813333][T15901] ? do_raw_spin_unlock+0x13c/0x8b0 [ 366.818513][T15901] ? finish_task_switch+0x1e5/0x870 [ 366.823696][T15901] ? lockdep_hardirqs_on+0x99/0x150 [ 366.828882][T15901] ? finish_task_switch+0x1e5/0x870 [ 366.834070][T15901] ? mark_lock+0x9a/0x360 [ 366.838388][T15901] __lock_acquire+0x1397/0x2100 [ 366.843254][T15901] lock_acquire+0x1ed/0x550 [ 366.847742][T15901] ? ip_mc_drop_socket+0x81/0x280 [ 366.852753][T15901] ? __pfx_lock_acquire+0x10/0x10 [ 366.857764][T15901] ? __pfx___might_resched+0x10/0x10 [ 366.863032][T15901] ? mark_lock+0x9a/0x360 [ 366.867353][T15901] __mutex_lock+0x1ac/0xee0 [ 366.871847][T15901] ? ip_mc_drop_socket+0x81/0x280 [ 366.876857][T15901] ? stop_sync_thread+0x49b/0x5e0 [ 366.881879][T15901] ? __pfx_lock_release+0x10/0x10 [ 366.886942][T15901] ? ip_mc_drop_socket+0x81/0x280 [ 366.891954][T15901] ? __pfx___mutex_lock+0x10/0x10 [ 366.896981][T15901] ? __mutex_unlock_slowpath+0x21e/0x790 [ 366.902710][T15901] ? __pfx_wait_for_completion+0x10/0x10 [ 366.908340][T15901] ip_mc_drop_socket+0x81/0x280 [ 366.913183][T15901] inet_release+0x96/0x200 [ 366.917588][T15901] sock_release+0x82/0x150 [ 366.921994][T15901] stop_sync_thread+0x4e6/0x5e0 [ 366.926849][T15901] do_ip_vs_set_ctl+0x47b/0x13d0 [ 366.931802][T15901] ? __pfx___mutex_trylock_common+0x10/0x10 [ 366.937688][T15901] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 366.943052][T15901] ? __mutex_lock+0x37f/0xee0 [ 366.947806][T15901] ? __mutex_unlock_slowpath+0x21e/0x790 [ 366.953427][T15901] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 366.959393][T15901] ? smc_setsockopt+0x1c3/0xe50 [ 366.964231][T15901] ? __pfx___mutex_lock+0x10/0x10 [ 366.969245][T15901] nf_setsockopt+0x295/0x2c0 [ 366.973842][T15901] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 366.979719][T15901] smc_setsockopt+0x275/0xe50 [ 366.984391][T15901] ? __pfx_smc_setsockopt+0x10/0x10 [ 366.989579][T15901] ? aa_sock_opt_perm+0x79/0x120 [ 366.994504][T15901] ? __pfx_smc_setsockopt+0x10/0x10 [ 366.999690][T15901] do_sock_setsockopt+0x3af/0x720 [ 367.004698][T15901] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 367.010230][T15901] ? __fget_files+0x395/0x410 [ 367.014907][T15901] ? __fget_files+0x2a/0x410 [ 367.019502][T15901] __x64_sys_setsockopt+0x1ee/0x280 [ 367.024689][T15901] do_syscall_64+0xf3/0x230 [ 367.029180][T15901] ? clear_bhb_loop+0x35/0x90 [ 367.033845][T15901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.039723][T15901] RIP: 0033:0x7f470dd85d29 [ 367.044119][T15901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.063717][T15901] RSP: 002b:00007f470ebe3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 367.072142][T15901] RAX: ffffffffffffffda RBX: 00007f470df75fa0 RCX: 00007f470dd85d29 [ 367.080124][T15901] RDX: 000000000000048c RSI: 0000000000000000 RDI: 0000000000000003 [ 367.088087][T15901] RBP: 00007f470de01b08 R08: 0000000000000018 R09: 0000000000000000 [ 367.096043][T15901] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.104005][T15901] R13: 0000000000000000 R14: 00007f470df75fa0 R15: 00007ffdf02f3d38 [ 367.111971][T15901] [ 367.167182][ T6287] bridge_slave_1: left allmulticast mode [ 367.173060][ T6287] bridge_slave_1: left promiscuous mode [ 367.208721][ T6287] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.249181][ T5839] Bluetooth: hci3: command tx timeout [ 367.450356][ T8693] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 367.511458][ T6287] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 367.818609][T15901] bond0: (slave syz_tun): Releasing backup interface [ 367.830829][ T6287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.841374][ T6287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.851953][ T6287] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 367.861353][ T6287] bond0 (unregistering): (slave team0): Releasing backup interface [ 367.871365][ T6287] bond0 (unregistering): Released all slaves [ 367.979672][ T6287] bond1 (unregistering): Released all slaves [ 368.085056][ T6287] bond2 (unregistering): Released all slaves [ 368.097074][ T6287] bond3 (unregistering): (slave veth7): Releasing backup interface [ 368.104998][ T6287] veth7: left promiscuous mode [ 368.112480][ T6287] bond3 (unregistering): Released all slaves [ 368.181208][ T6287] : left promiscuous mode [ 368.378007][ T6287] hsr_slave_0: left promiscuous mode [ 368.383797][ T6287] hsr_slave_1: left promiscuous mode [ 368.392142][ T6287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.400453][ T6287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.409228][ T6287] dummy0: left promiscuous mode [ 368.445673][ T6287] pim6reg (unregistering): left allmulticast mode [ 368.492238][ T6287] team0 (unregistering): Port device veth1_macvtap removed [ 368.540401][ T6287] hsr0 (unregistering): left allmulticast mode [ 368.577465][T13464] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 368.673554][ T6287] team0 (unregistering): Port device team_slave_1 removed [ 368.708319][ T6287] team0 (unregistering): Port device team_slave_0 removed [ 369.288273][ T6287] IPVS: stop unused estimator thread 0... [ 369.351897][ T6287] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.390614][ T6287] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.450641][ T6287] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.500035][ T6287] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.569363][ T6287] bridge_slave_1: left allmulticast mode [ 369.575047][ T6287] bridge_slave_1: left promiscuous mode [ 369.582737][ T6287] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.591698][ T6287] bridge_slave_0: left allmulticast mode [ 369.598662][ T6287] bridge_slave_0: left promiscuous mode [ 369.604316][ T6287] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.686887][T13464] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 369.752969][ T6287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.762728][ T6287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.772453][ T6287] bond0 (unregistering): Released all slaves [ 370.046414][ T6287] hsr_slave_0: left promiscuous mode [ 370.052500][ T6287] hsr_slave_1: left promiscuous mode [ 370.060720][ T6287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.068881][ T6287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.079762][ T6287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.087248][ T6287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.095875][ T6287] veth1_macvtap: left promiscuous mode [ 370.101575][ T6287] veth0_macvtap: left promiscuous mode [ 370.107200][ T6287] veth1_vlan: left promiscuous mode [ 370.112426][ T6287] veth0_vlan: left promiscuous mode [ 370.241621][ T6287] team0 (unregistering): Port device team_slave_1 removed [ 370.263595][ T6287] team0 (unregistering): Port device team_slave_0 removed [ 370.817183][T13467] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 371.917020][T13464] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 373.017122][ T8693] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 374.126893][ T6287] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 375.236827][ T8693] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!