last executing test programs: 53.211166837s ago: executing program 1 (id=770): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xe0}}}, 0x84) 53.194893166s ago: executing program 1 (id=772): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x6}, 0x7c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$unix(r2, &(0x7f0000001b80)=[{{&(0x7f0000001c40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4000040}}], 0x1, 0x4003ec0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000200)="0000e172122d3bf50a75dac5354902158138b8ba38247b66220f59086479d934d99e5329c5851a095bf00db1ba5246926ec21f62ce0db70000", 0x39}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="7349b402ed", 0x5}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="9c83ba777dbd15213fd791d601e23450e90a45e315919eb872799e0600b533abc448b944da298d7285fdf2c3610052a7ee9f233fedd4558f4efa97705e47c88e6741166e289d85694a9a4754cb0646d686c8e9284242b38ad98c656139a5b66847c57d906477aba250a22bdd86073ed815df33bc9509874d3d5d3f0af234414e4f85f4feff19af19485c1e8c031da493c81122d6b264", 0x96}, {&(0x7f00000005c0)="e2cc1f4715808e4a4a41fe5d82f9198de68811a5ba59c87f4948c5ceb95d203440435888a9e8304a2d676e3be5dcae5f246c78a01f20deed32a319902a02787d89d04dd89fab5c7669c977f7367d1a4ced92a6ad5af335c00b36f698ad2a64136cab61e86913556aa830bda588f5cf43379a58832d0261a14795ff0e93372b7e459fa9f50a368a", 0x87}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r5, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) 53.194738318s ago: executing program 2 (id=773): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 53.185669009s ago: executing program 2 (id=776): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x10001, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500100000201030000000000000000000a0000010800084000000002140019800800020010000000080002000800000078000e800c000280050001003a00000006000340000400000c0002800500010088000000060003400003000006000340000100000600034000040000060003400004000006000340000100002c00018014000300fc02000000000000000000000000000014000400200100000000000000000000000000003c0002800c0002"], 0x150}, 0x1, 0x0, 0x0, 0x8040891}, 0x4080) sendto$inet(r0, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6e2, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000940)="1111", 0x6, 0x0, 0x43db}, 0x50) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 52.993189501s ago: executing program 2 (id=778): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage\x00', 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000140)={0x1, 0x7, 0xff, &(0x7f0000000040)=""/255}) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r1, 0x7, 0x0, 0x10, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40020}, 0x40040) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x12c, 0x0, 0x300, 0xffff, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x108, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x315a17e6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a9d75f9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54fc26c1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62b9eb98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52dc298}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x687e46b2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b07a06e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x85faa38}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55bc6ad3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38394b41}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f8147d1}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6950283a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47044186}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f5ed359}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8b7cfe6}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79c80c6a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ef4e25b}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x10000, '\x00', 0x0, r3, 0x5, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f00000007c0)={'gretap0\x00', 0x0, 0x80, 0x710, 0xb38, 0x81, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x64, 0x0, 0x2, 0x29, 0x0, @loopback, @empty, {[@ssrr={0x89, 0x13, 0x97, [@multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x28}, @multicast2]}]}}}}}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x14, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, r5}, @ldst={0x0, 0x0, 0x2, 0x0, 0x5, 0xffffffffffffffe0, 0x1}, @jmp={0x5, 0x0, 0x0, 0x3, 0x2, 0x30, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0xb, 0x1, 0xfffffffffffffffe, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xc32bdad8fb7e82e}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x0, 0x6, 0x101, 0x3}, 0x10, 0x10a36, r3, 0x3, 0x0, &(0x7f00000008c0)=[{0x5, 0x3, 0x9, 0x6}, {0x0, 0x2, 0x5, 0xd}, {0x0, 0x3, 0x6, 0xa}], 0x10, 0x7, @void, @value}, 0x94) write$cgroup_subtree(r3, &(0x7f00000009c0)={[{0x2b, 'net_prio'}, {0x2b, 'devices'}, {0x2d, 'freezer'}, {0x2d, 'net_cls'}, {0x2d, 'blkio'}, {0x2b, 'blkio'}, {0x2b, 'net_prio'}, {0x2b, 'pids'}, {0x2d, 'freezer'}, {0x5a, 'memory'}]}, 0x54) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r3, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)=r3}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000b00)={r3, r8}, 0xc) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r3) sendmsg$NL80211_CMD_ABORT_SCAN(r7, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x20, r9, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xb763, 0x2d}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40840}, 0x20004014) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000d80), 0x10100, 0x0) bind$xdp(r3, &(0x7f0000000dc0)={0x2c, 0x6, r6, 0x3d, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000e00)='alarmtimer_suspend\x00', r3, 0x0, 0x7000000000000000}, 0x18) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x5c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x22}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x24}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x15}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x22}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x814}, 0x24000000) socket$netlink(0x10, 0x3, 0xc) r10 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000fc0), &(0x7f0000001000)=0x14) socket$inet_udplite(0x2, 0x2, 0x88) pselect6(0x40, &(0x7f0000001040)={0x100000001, 0x3b9, 0x2, 0x6, 0x9, 0x777, 0x401, 0xffffffff}, &(0x7f0000001080)={0x6, 0x7, 0x2, 0xa8, 0x1, 0x5, 0x7f, 0x1}, &(0x7f00000010c0)={0x6, 0x8, 0x81, 0x1, 0x2, 0x9, 0x6, 0x1}, &(0x7f0000001100)={0x77359400}, &(0x7f0000001180)={&(0x7f0000001140)={[0x9]}, 0x8}) setsockopt$inet6_IPV6_ADDRFORM(r10, 0x29, 0x1, &(0x7f00000011c0), 0x4) recvfrom(r3, &(0x7f0000001200)=""/27, 0x1b, 0x40000140, &(0x7f0000001240)=@phonet={0x23, 0xff, 0xb, 0x10}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x4, 0x0, r3, 0x10001, '\x00', r6, 0xffffffffffffffff, 0x2, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) socket$kcm(0x29, 0x2, 0x0) 52.960239174s ago: executing program 3 (id=780): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@getneigh={0x14, 0x1e, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 52.864375574s ago: executing program 2 (id=781): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x70, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0xd108}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xc}}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4b7b}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x70}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_OIF={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmmsg$inet(r5, &(0x7f0000000240)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000000140), 0x0, &(0x7f0000000580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x50, [@local, @dev={0xac, 0x14, 0x14, 0x13}]}, @rr={0x7, 0x2b, 0xb0, [@loopback, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast, @rand_addr=0x64010101]}, @timestamp={0x44, 0xc, 0x39, 0x0, 0x3, [0x400, 0x4]}, @rr={0x7, 0xb, 0x2c, [@loopback, @remote]}, @ssrr={0x89, 0x17, 0x6c, [@private=0xa010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x39}, @local, @remote]}, @timestamp_addr={0x44, 0x3c, 0xee, 0x1, 0x2, [{@multicast1, 0x1ff}, {@local, 0xbcb}, {@empty, 0x8000}, {@multicast1, 0x7}, {@multicast2, 0x1000}, {@multicast2, 0x9}, {@loopback, 0x5}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb9}}], 0xe0}}], 0x2, 0x0) bind$can_raw(r2, &(0x7f0000000080)={0x1d, r4}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0xfff) poll(&(0x7f00000000c0), 0x0, 0x27f) recvmmsg(r3, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}, 0xd619}, {{0x0, 0x0, 0x0}, 0x7ff}], 0x2, 0x40000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@can={{0x4, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "a7a278571758745d"}, 0x10}}, 0x0) write$cgroup_int(r2, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0xa, &(0x7f0000000000), 0x4) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010001060001004ed70b0076fd99bd11000000000000000000000000000028d9b4fc0226fb143a4626447a836546522b676d252858792e52dff60485cdfb509768874bbd9624a6e73be277a60a22a2d15306399deafaea034863d7d86bf3e539b994c5db7b91e31abc4a0bcbbd6dfc821e30656508c5a1d755ebf462ae7721e64a05feae5d12c6593e94ed29560a66eba9a5b172c0789cbb64ac5fdfb8d95893907951a98342feed861fb6a1f9815c3f7d9205c246297ca480f1b20800000062421bada44b3bea572bd47c024f25ed3399d2cb847b7720a31a81"], 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x4814) 52.863213866s ago: executing program 1 (id=782): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYRES32=r2, @ANYBLOB="030064060a0002"], 0x28}, 0x1, 0x0, 0x0, 0x20040051}, 0x4048080) 52.746148609s ago: executing program 3 (id=785): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r0, 0x1, 0x49, 0x0, &(0x7f0000003080)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x40800, &(0x7f0000000040)={0xa, 0x0, 0xfffffff5, @private1={0xfc, 0x1, '\x00', 0x23}, 0x8, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r4, 0x8b2c, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5}]}, 0x10) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00'/14, @ANYRES32=r6, @ANYBLOB="01980000000000001800128008000100677265000c00028008000700ac141400"], 0x38}}, 0x0) sendto$packet(r1, &(0x7f0000000000)='1', 0x1, 0x40, &(0x7f0000000200)={0x11, 0x8100, r6, 0x1, 0x0, 0x6, @local}, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x22020400) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x800000003, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'veth0_virt_wifi\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r9 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e3, &(0x7f0000000000)) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x28, 0x3e, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x10, 0x145, 0x0, 0x1, [@nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x24, 0x0, 0x0, @fd}]}]}, @typed={0x4, 0x2}]}, 0x28}}, 0x4040040) 52.639518253s ago: executing program 3 (id=788): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000100"}) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) openat$tun(0xffffffffffffff9c, 0x0, 0xa1e382, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000016c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaafe8100270008004519"], 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000100)={0x0, 'netdevsim0\x00', {0x1}, 0xfffb}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000001000030400000000fcdbdf2500000400", @ANYRES32=r4, @ANYBLOB="08130000800000003000128009000100766c616e0000000020000280100004"], 0x50}, 0x1, 0x0, 0x0, 0x3040}, 0x0) 52.620728272s ago: executing program 1 (id=789): socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x1e, 0x100000005, 0x0, &(0x7f0000000000)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x7, &(0x7f00000002c0)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7c}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f00000003c0)='syzkaller\x00', 0x749, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x4, 0x7b5}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)=[{0x5, 0x3, 0x8, 0x8}], 0x10, 0x3ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000240)='btrfs_failed_cluster_setup\x00', r1, 0x0, 0x1}, 0x18) socket$pppl2tp(0x18, 0x1, 0x1) pipe(&(0x7f0000000300)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$inet6(r3, &(0x7f0000001600)={&(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000001580)=[{&(0x7f00000010c0)="bf", 0x1}], 0x1}, 0x0) sendto$inet6(r3, &(0x7f00000001c0)='nN', 0x2, 0x4, &(0x7f0000000040)={0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x401}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001100)={0x0, @in6={{0xa, 0x0, 0x80000000, @rand_addr=' \x01\x00'}}, 0x0, 0x4}, &(0x7f0000000080)=0x9c) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 52.457876057s ago: executing program 3 (id=792): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000080)="e349ad", 0x3}], 0x2}, 0x4048841) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200004600000000000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0xe, 0x0, &(0x7f0000000540)="6d57737ebc0cc8f6242836b48557", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 52.420280822s ago: executing program 3 (id=793): socket$inet6(0xa, 0x2, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x6, 0x0, 0x3}, 0x1c) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) 52.080561619s ago: executing program 3 (id=794): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x209d, 0x3, 0x0, 0x7ffffff9}, 0x10) write(r0, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) (fail_nth: 4) 51.922951967s ago: executing program 32 (id=794): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x209d, 0x3, 0x0, 0x7ffffff9}, 0x10) write(r0, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) (fail_nth: 4) 51.918382618s ago: executing program 2 (id=796): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_MASTER={0x8, 0xa, r0}]}, 0x44}}, 0x0) 51.468649779s ago: executing program 1 (id=797): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x21000000, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0xba01, 0x0, 0x4000000}, 0x0) 50.232508023s ago: executing program 2 (id=801): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x0) 49.870930251s ago: executing program 33 (id=801): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x0) 49.820906941s ago: executing program 1 (id=805): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000006240)=[{{0x0, 0x6000, &(0x7f0000003b40)=[{&(0x7f0000003a40)="faa431748eba68a9", 0x8}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003e80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x18}}], 0x2, 0x0) 49.820060832s ago: executing program 34 (id=805): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000006240)=[{{0x0, 0x6000, &(0x7f0000003b40)=[{&(0x7f0000003a40)="faa431748eba68a9", 0x8}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003e80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x18}}], 0x2, 0x0) 2.262157263s ago: executing program 6 (id=1265): r0 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r2 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x1, 0x9, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x8, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000100)=0x82) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x280, 0x4) (async, rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) close(r8) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xe4, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x24c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x20}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x110, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x5, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x378}}, 0x0) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r10, 0x6b, 0x2, 0x0, 0x0) (async, rerun: 64) connect$pppl2tp(r9, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r10, {0x2, 0x4e20, @local}, 0x1, 0x4, 0x1, 0x2}}, 0x26) (rerun: 64) 2.104548057s ago: executing program 5 (id=1268): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000045eae9452901d5e7aa75ac4a93312598713d86b00ed58892efbc9cfc3b7208a40357da0d1ef15e35bd6c801283fbcd8d2900984cb0614535f634f35ad85af5b9d6a21d65044289676742fa39e0fd06adca7af4fe7300a91649c0a0bad933541a3b44ca9255e71159534a821f4665d0c0748672d794a6c0e90f69705a1d230e7ad85d7e0ec1878965b93ebfbd9eff9e06801b24714d9eac882f917d57e68e90a5c277dba83bde18a982a7b960839e7b4fc0027a13765db2f0883c397bb7544268b7ae316df71aeb068b66b4c7e1376126c86e5ff9690df14776136c8c3ce2e4f4ffeb1e0bffd779cbe3956a1040c6f4", @ANYRES16=r1, @ANYRES64=r0], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x24040001) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffe, @void, @value}, 0x94) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) r4 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000400)={{}, [@default, @bcast, @rose, @default, @remote, @remote, @default, @bcast]}, &(0x7f0000000000)=0x48, 0x80000) accept$ax25(r4, &(0x7f0000000480)={{0x3, @null}, [@default, @rose, @null, @null, @bcast, @bcast, @bcast, @null]}, &(0x7f0000000080)=0x48) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000200), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 2.104006861s ago: executing program 4 (id=1269): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)=ANY=[@ANYBLOB="500100001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000000000000004e2100020a00a0003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"/278], 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c000180060006008848"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r3, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000100), 0x12) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000000709007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000000c0), 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x4}, {0xfff1, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xf}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}, 0x1, 0xfdff}, 0x84) readv(r8, &(0x7f0000000180)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000600000000000000000000020300000002000000000000120000000004000000000000120200000000005f0061"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000001200)={{}, 0x6, 0x7fffffffffffffff, 0x7}) 1.778613395s ago: executing program 6 (id=1274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd2b, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18fc00000000000000000400"/24], &(0x7f0000000b00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.641153815s ago: executing program 6 (id=1277): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000b00)=@ethtool_sset_info={0x48, 0x3, 0x10000}}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) write(r4, &(0x7f0000000240)="94", 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000040000000300000000000010000000000030610014a764025030fd66af7b0c01396e92432facf6ff63d9c620994409ef7357a9e0e11d4cee2d3b5ce609cbec6fb73b6b28dc783b7bf6fbab69b46cfae8c04d0cce39ab82323553"], 0x0, 0x28, 0x0, 0x1, 0x8, 0x0, @void, @value}, 0x28) vmsplice(r7, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r3, r7, 0x8f5, 0x100000000000000) bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r4}, 0x8) write(r5, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x48, r8, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x400c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x20}}, @int={0x8000000, 0x0, 0x0, 0x1, 0x5, 0x21}, @fwd={0xc}]}, {0x0, [0x61, 0x5f, 0x5f]}}, 0x0, 0x51, 0x0, 0x0, 0x7fff, 0x0, @void, @value}, 0x28) unshare(0x40030000) r9 = socket$packet(0x11, 0x3, 0x300) read(r9, &(0x7f0000000000)=""/26, 0x1a) setsockopt$packet_int(r9, 0x107, 0x14, 0x0, 0x0) 1.566360734s ago: executing program 0 (id=1280): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8000, 0x80, 0x1000, 0x80002e4, {{0x6, 0x4, 0x0, 0x12, 0x18, 0x65, 0x0, 0x10, 0x4, 0x0, @multicast1, @multicast2, {[@timestamp_prespec={0x44, 0x4, 0x3c, 0x3, 0x4}]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0xa}]}}, 0x0, 0x26, 0x0, 0xfffffffd, 0x7, 0x0, @void, @value}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r5, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/83, 0x53}, {&(0x7f0000000140)=""/46, 0x2e}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000001000000", @ANYRES32=0x0, @ANYBLOB="0000000100000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8, @ANYBLOB="0a000100bbbb"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 1.548500888s ago: executing program 7 (id=1281): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x6}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x11, 0x4, 0x4, 0xfffffff9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000200)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c000001c190001000000000000000000e00000020000370cc5e6000000000000000000000000000000000000000010000000000000000000000000000a000020efffffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000"], 0xc0}}, 0x20004800) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000000", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)="8b5e295eeee2874c0f47fac1620b6fba0bc907bffdcbd01db82c5535f3cdc9d9cdf4b864a8e84bd2458cf9d6d686fe5bd43c72b5041bcbed4cd32eb5d269d4ba131fefbaba7371147c7ea306177d048810aa2392064189", 0x57}, {&(0x7f00000003c0)="ff68fbf96b371ede53fcf1", 0xb}], 0x2}, 0x4008010) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a40)=@newtfilter={0x1000, 0x2c, 0x800, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfffc, 0xfff2}, {0xffe0, 0xe}, {0xe, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_u32={{0x8}, {0x384, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x1000}, @TCA_U32_DIVISOR={0x8, 0x4, 0x67}, @TCA_U32_INDEV={0x14, 0x8, 'xfrm0\x00'}, @TCA_U32_FLAGS={0x8, 0xb, 0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0x99}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_SEL={0x344, 0x5, {0x5, 0x2, 0xe, 0xd9b0, 0x100, 0x6, 0x1000, 0x8, [{0x3, 0x7, 0x10, 0x1000}, {0x7, 0x1, 0x2}, {0x6, 0xbe23, 0xb, 0x8}, {0x7, 0x0, 0x8, 0xcec}, {0x8, 0x5943, 0x4, 0x5}, {0x4, 0x6, 0x8, 0xc}, {0x8893, 0x5, 0x944, 0xffffff0d}, {0xb, 0x8e, 0xa6d3, 0x6}, {0x5, 0xfffffffd, 0x8f2, 0x9c9}, {0xfe, 0x2, 0xea, 0x5}, {0x9fb, 0x6, 0x2, 0x5}, {0x4, 0x7, 0xfffffffb, 0x4}, {0x8, 0x8, 0x0, 0x3}, {0xfffffff8, 0x7, 0x9d, 0x1}, {0x7045, 0x8, 0x0, 0x30000000}, {0xfffffff7, 0x6, 0x3, 0x1}, {0x2, 0x8, 0x7f, 0xfffffffd}, {0x2, 0xa, 0x10, 0x2}, {0x7, 0x100, 0xd, 0x721b}, {0x4, 0x22e4, 0x5, 0xb}, {0x0, 0x1, 0xb, 0x6}, {0x5912, 0x2, 0x5, 0xff}, {0xa44, 0x7637007b, 0x9, 0x1}, {0x4, 0xff, 0x2}, {0x6, 0x9, 0x100, 0x43f302bc}, {0x5, 0x3, 0x40, 0x2}, {0x6, 0xb623, 0x9, 0x7fff}, {0x4, 0x5b1, 0x9de, 0x500000}, {0xe7, 0x8b, 0xe0, 0x9}, {0x6, 0x3, 0xcf7c, 0x5}, {0x3, 0x3, 0xc, 0x1000}, {0x54a5, 0x1, 0xff, 0x3}, {0x50, 0x2, 0x4, 0x1}, {0x9, 0x8, 0x80000000, 0x534}, {0x1, 0x0, 0x8, 0x4}, {0x4, 0xe, 0x8001, 0x6}, {0x8, 0x5, 0x10000, 0xbb}, {0x6f8, 0x0, 0x2, 0x2}, {0x8, 0x8ac, 0x3ff, 0x6}, {0x80000001, 0x3, 0x3cc0bd17, 0x1}, {0x7, 0xffff, 0x0, 0x4}, {0x9, 0x143, 0x9a9, 0x7}, {0x2, 0x614a, 0x1, 0x400}, {0x7, 0x7, 0x0, 0x401}, {0x1, 0x9, 0x6, 0x1}, {0x200, 0x200, 0xfffffbff, 0xfffffffe}, {0x8, 0x1000, 0xa527, 0xffffffff}, {0x3, 0x8, 0x4, 0xde58}, {0x3, 0x4, 0x8, 0x5}, {0x3, 0x9, 0x8, 0xc7}, {0x9, 0x8, 0x40, 0x2}]}}]}}, @filter_kind_options=@f_basic={{0xa}, {0x82c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0xe}}, @TCA_BASIC_POLICE={0x820, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0xc8f6}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x7, 0x75515233, 0xffffffff, 0x0, 0x0, 0x1e, 0x1, 0x10, 0xd, 0x8001, 0xc, 0x9, 0xfffffe00, 0x6, 0x5, 0x0, 0xa6, 0x0, 0x4, 0xf, 0x8, 0x5, 0x1, 0x1, 0x3, 0x200, 0xaa, 0x80000000, 0x3, 0x7ceacc87, 0x7, 0x7f, 0x8, 0x4, 0x59, 0x40, 0x7, 0x400, 0x8000, 0x0, 0xffff, 0x5, 0x5, 0x60f90ff4, 0x81, 0x80000001, 0x38eb7ff6, 0x6e32c4a, 0xffffffff, 0x7, 0x8, 0x7ff, 0x0, 0x3, 0x3893ad1a, 0x1, 0x5, 0x8, 0x2, 0x800, 0x6, 0x8, 0x8001, 0x0, 0x8, 0x3, 0xffffffff, 0x4, 0x5, 0x1, 0x7, 0x5, 0x800, 0xffffffff, 0x7, 0xfff, 0x3, 0x26b299c8, 0x2, 0xd779, 0x83, 0x2, 0x59, 0x1000, 0x8000, 0x8001, 0x47, 0x401, 0x0, 0x7fffffff, 0x8000, 0x800, 0x4b, 0x3ff, 0x8, 0x9, 0x8, 0x1, 0x7, 0x8, 0x8f, 0x6, 0x9, 0x10000, 0xc13, 0xfffffffd, 0x4, 0x100, 0x9f9, 0x9, 0xffff, 0x0, 0x6, 0x9, 0x7, 0x0, 0x2, 0xcbec, 0x4, 0x6, 0xfffffff8, 0x7f, 0x800, 0x80000000, 0x1, 0x5, 0x2, 0x3519, 0x9, 0x5, 0x1, 0x8001, 0x9, 0x2, 0xfff, 0x3, 0x4, 0x0, 0x1ff, 0x50000, 0x2, 0xdeb, 0xfffffff1, 0x1, 0xc3f5, 0x9, 0x5, 0x81, 0x7fb, 0x2, 0x4, 0x6, 0x7, 0x1, 0x7, 0x1000, 0x5, 0xb, 0x5, 0x7, 0x9, 0x9, 0x5, 0x5, 0x7, 0x100, 0x3, 0xd819, 0x8, 0x6, 0x6ed7, 0x4, 0x3, 0x7, 0xa39, 0x1, 0x5, 0x2, 0x6055, 0x7f, 0x1, 0x7, 0x2, 0xb45, 0xc0b5, 0x232987e9, 0x9, 0x3, 0x0, 0x100000, 0x80000000, 0x3, 0x400, 0x8, 0x1, 0xce1, 0x48, 0x0, 0x4, 0x4, 0x4, 0x2, 0x3, 0x400, 0x27, 0xf1eb, 0x3, 0x7, 0xfffffffd, 0x7f, 0x7, 0x2, 0x42, 0x9, 0x6, 0x9, 0x0, 0x3ff, 0xc30, 0x9, 0x66, 0x1, 0x5, 0x80000000, 0xd, 0x91, 0x81, 0xee, 0x7, 0x1, 0x9, 0x3, 0x3, 0x9, 0x5, 0x1, 0x1, 0x0, 0x4, 0x3, 0x9, 0x1, 0x6, 0x1, 0x3, 0x7, 0x5783, 0x80000000, 0x9, 0x80, 0x6, 0x6, 0x8, 0x6, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x4, 0x9, 0x4, 0x5efe, 0x8, 0x1000, 0x7, 0xffff8000, 0x9, 0xf, 0x8000, 0x1, 0xa, 0x4, 0xcc3, 0x8, 0x1, 0xc718, 0x1, 0x8, 0xfffffeff, 0x9, 0x2, 0x3, 0x5, 0x10000, 0x3, 0x9, 0x9, 0x4, 0x5, 0x9f, 0x7, 0xffff, 0x6, 0x3, 0x100, 0xffff0000, 0x8, 0x0, 0x0, 0x10, 0x76d, 0x3, 0x7f, 0x9, 0x1, 0x7, 0x5, 0xe4, 0x6, 0x0, 0x7ff, 0x7f, 0xfffffffe, 0x4, 0x7, 0x30a, 0x2, 0x8001, 0xfffffffe, 0x6, 0x2, 0x0, 0x1, 0x8, 0x7, 0x8, 0x9, 0x8, 0x8, 0x7, 0x8e3a, 0x2, 0x2, 0x7, 0x7, 0x4, 0x8, 0xfffffd93, 0x2, 0x10000, 0x0, 0x7, 0x81, 0x4, 0x0, 0x401, 0x8, 0x0, 0x9, 0x6, 0x5, 0x1ff, 0x0, 0x9, 0x5, 0x3, 0x0, 0x7f, 0x3d, 0x7, 0xfffffffa, 0x8, 0x80000001, 0x4, 0x6, 0x1, 0x1e000000, 0xffff, 0x1, 0xb, 0x7fffffff, 0x81, 0x50e, 0xbd, 0x0, 0x400, 0x400, 0x3, 0x82d3, 0x800, 0x3175, 0x63d, 0xffff, 0x3, 0x3, 0x2, 0x10, 0x7, 0x1, 0x0, 0x0, 0x2, 0x1, 0xfffffff9, 0x5, 0x2, 0x1ff, 0x8, 0x93, 0x2, 0x1ff, 0x3, 0x2, 0xa, 0x1, 0xfffffffa, 0x2, 0x3, 0x9, 0x2, 0x2, 0x3ff, 0x3, 0x2, 0x800, 0x8000, 0xf33, 0x8001, 0x2, 0x4, 0x9, 0x0, 0xe5, 0x2, 0xd, 0x4, 0xac, 0x1e57, 0x7, 0xfffffffe, 0x6, 0x300, 0x0, 0x3, 0x9, 0x6, 0xe3, 0x80000000, 0xfffffff3, 0x5, 0xc677, 0x8000, 0x9, 0xb, 0x85d, 0x7fff, 0x0, 0x8, 0x2, 0x6, 0x9, 0xd, 0x10, 0x7, 0x1, 0x8, 0x180c, 0x6, 0x5, 0xfff, 0x8, 0x4, 0x7f, 0x1, 0x6, 0xc745, 0x7f, 0xb32, 0x5, 0x8001, 0x7, 0x1, 0xaab, 0x1, 0x6, 0x9, 0x0, 0x1, 0x98000000, 0x63, 0x4, 0x2, 0x5, 0x3, 0x8, 0x53a, 0x6f, 0x9, 0x3, 0xc, 0x800, 0x5, 0xf0, 0x6, 0x6, 0x401, 0x2, 0x9, 0x7, 0x10, 0x4, 0x5, 0xd0, 0x3f, 0x0, 0x3, 0x4000000, 0x0, 0x3, 0x0, 0x2, 0x2, 0x86aa]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x800}, @TCA_RATE={0x6, 0x5, {0x0, 0xee}}, @filter_kind_options=@f_cgroup={{0xb}, {0x3f4, 0x2, [@TCA_CGROUP_ACT={0xc8, 0x1, [@m_ife={0xc4, 0xb, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0x7, 0x0, 0xe, 0x8}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @random="4cecc2effa0c"}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0xff}]}, {0x55, 0x6, "ba103d0e9611847f096b23f0276792a38f8616633a2967e66c17722583b391d73970c96f4f96823927dc48d44c2fb3b20e441bc673508a91df339310240783fd04377104c8c2f5f87ce71b7b8719c27c34"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_CGROUP_EMATCHES={0x328, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x324, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x18, 0x3, 0x0, 0x0, {{0x9, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x793, 0x1, 0xb2}, {0xac3, 0x8, 0xe4, 0x3, 0x0, 0x2, 0x1}}}, @TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x100, 0x4, 0x101}, [@TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="683341ace4", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x81, 0x1}, {0xa7, 0x7, 0x2}}}]}}, @TCF_EM_CONTAINER={0x2c8, 0x2, 0x0, 0x0, {{0x4}, "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"}}]}]}]}}]}, 0x1000}}, 0x80) recvmmsg$unix(r6, &(0x7f00000000c0)=[{{0x0, 0xfec6, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x3b, 0x10000, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x6}, @IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}]}, 0x40}}, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="009ed36c2b05c1ad78402e2795a8cdea5cc3a13dcc1314ca306ef5ee182280970b5c692a21e8693cfebb111486dca0b452a403c6f7f6faf0e7401e59cfa073674e7248efdae1e66d32556f269fbc069170a720fda1792f52015cd1ad599a190c6f648b3eb34f1c3f4b5809233dd609e0f4a678bdddda", 0x76}, {&(0x7f0000000140)="b32a854239cff6aaf83533d99385a6992e3800468f4ccaae7cfda7099d", 0x1d}, {&(0x7f00000001c0)="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", 0xfb}, {&(0x7f00000002c0)="7a6089ee739f3195639d8d75eb8c9bfc375976129b2c8f218468", 0x1a}, {&(0x7f0000000300)="f8c068459070fd434330544253c7", 0xe}, {&(0x7f0000000340)="0c31a3cdd647cfc8bd83a67adfaa3cc9a978625524ba0d4cf847dc1e1dc026ce570f11a9e6e719166e2020771eb9bcb8f6bed700bd3652a580056ed57c2272106aa47f58350bb47cf5348b18ca35416dde39077b9fad953e93057ec89025b2bdc49eb2bb917fd92f9475af3ce83f3c4fa9b8cc68a37e729eba4d097de6a14eea5b9d47b9af56e2c997161a0ebaa88973c8c5afb96635e069992a4bb1fa6db2988dd896f21610dc94d5952b14f3940c3ae07970eeb8677a544f30906bd227804ad51aa4b2d406d830159685fdb3bf7332f5e87052f0d04efac3929b223c93c40cc5f14cd0cfb08e30a5c2060bbd8a1764bceefe932a24", 0xf6}, {&(0x7f0000000440)="9c91e8f3d8705e15ffb39e99943b1a4d1148e9cb857ffe9b124e57f85c890997b32d9fb01383cf4e5012918e25019d98c3f5581bc5cac37d7b0abd49fe73bc032e41c44d35", 0x45}], 0x7) 1.405927779s ago: executing program 7 (id=1282): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0xfffffffe, 0x0, {0x30, 0x32, 0x2, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x2000000, @in6=@private2={0xfc, 0x2, '\x00', 0x4}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x3e, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delchain={0x30, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x5, 0x2}, {0x0, 0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x40) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000a5000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7400fcdbdf250700000024000180060005004e240000080003007f00000108000700", @ANYRES32=0x0, @ANYBLOB="0600010002000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x441c0) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000002f00)='+%{^\x00', 0x5) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x10000000}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2300000002a50000280012800900010076657468000000001800028014"], 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x270}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) 1.402367981s ago: executing program 0 (id=1283): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000150001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 1.304778218s ago: executing program 0 (id=1284): syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[], 0x0) 1.304371531s ago: executing program 7 (id=1285): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r1, @ANYBLOB="310300000000000000000800000008000300", @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRES64], 0x24}}, 0x40001) 1.293650335s ago: executing program 0 (id=1286): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x300, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x5c}}, 0x0) 1.26422417s ago: executing program 7 (id=1287): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=@ipv4_delrule={0x24, 0x21, 0x403, 0x80000200, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e26}}]}, 0x24}}, 0x80) unshare(0x22020400) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) 1.212622212s ago: executing program 4 (id=1288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000007300)=[{{&(0x7f0000000740)={0xa, 0x4e24, 0x586, @empty, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000076c0)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x11, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x10}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}], 0x38}}], 0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x164, r1, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4a, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x8000, @void, @void, @val={0x3, 0x1, 0xb8}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x80, 0x1, 0x6, 0x0, {0x7, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0xb, 0x4}}, @void, @void, @void}}, @NL80211_ATTR_PROBE_RESP={0xe3, 0x91, "2ed4b2429322712b546707b11526ded75fdef1152c4e92c6938c466ed4759474194bbcb619411ede3acb2c3577a2b784eddf2550bf9e348e30e6bd5ee0b3435dddcaa49e95bb731bba67c72a7f226337321da77ed7b2c03e34cfe90a89a310423678b8a84e5f7353c5be3c2579fd4d328b26746a323216e6297b535370fce4133e52ef1645ce998c397cf9b1522e301e5002b8d91631269d92dbe38491930ce4e8faa6aed6400efd7a7d7ab561eaf20ed303769bec7e9534deb439d92d92e9785cdd3cc73615839a57d864e6f39a0e030466069af54e2422692a69e69d9fa2"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x164}}, 0x0) 1.201242149s ago: executing program 5 (id=1289): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001001d00000000005200"/34, @ANYRES32=0x0], 0x30}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@delchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xa}, {}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x804d}, 0x20004804) 1.178558108s ago: executing program 0 (id=1290): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x9}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55a8a89b60317cd78ea1dc8e0f77f2c1e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3f8f26283bcd93e80cacc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac6ed77718098b2f722bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d47685404cc540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1522ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7b544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff310601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7affffffff7177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f0a00000000000000159596ac570c4b889106f937d56b2346c818917b727bf5e2741068ec000000000000000000ec84"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0xffffffffffffff37}}]}, 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000060000000060a010400000000000000000100000008000b4000000000300004802c00018008000100636d7000200002800c0003800500020000000000080001400000000008000240000000020900010073797a30"], 0xd4}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}]}, &(0x7f0000000180)=0x10) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000680)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e3031d32944bf20590000a2bc5603ca00000f7f8907000020008d42188fedc22eedc6d100000101ff0000000309", 0xff10}], 0x1) 1.044662008s ago: executing program 7 (id=1291): socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x3, 0x300) socket(0x22, 0x2, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x15) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet_icmp(0x2, 0x2, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESOCT=r0], 0x20) 1.044211648s ago: executing program 4 (id=1292): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000001000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000100000000140012800b000100626174616476000004000280", @ANYRES32=r2, @ANYBLOB="0a0001"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 1.022140648s ago: executing program 5 (id=1293): unshare(0x24020400) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$tipc(r0, 0x0, 0x0) 969.903983ms ago: executing program 7 (id=1294): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff0d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000280)=[{0x20}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB='/\x00\x00\x00\x00>\x00\x00\x00', @ANYRES32, @ANYBLOB], 0x20) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={0x0}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 931.825994ms ago: executing program 5 (id=1295): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8}]}, 0x34}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c000240000000008000000108000440000000010c0001400071"], 0xf0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="f6c769ae5446340d386d7e67533a7ac1c5630ff6289c2221860d6d6771283dc10134a0388eece97552c5dc216b58f5fd26f82a95c5fd4493af64b5b7aee737cc0068d59a8fd47274411bfabb67002464785254c2dc4b6dc3ed2c9b49949800c43abeeafccf6103dce59d1b9020e9f70a84b0bd93c69e241307e41ca4734762a70f61161aa89f1045245bf11726a6141c3d5427dcd3f476e22e0dda1b400a88315a3d", @ANYRES16=r2, @ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRES8=0x0, @ANYRESDEC=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x5314, 0x4) 873.411909ms ago: executing program 4 (id=1296): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@delchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x804d}, 0x20004804) (fail_nth: 4) 569.386733ms ago: executing program 5 (id=1297): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb41a}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000a00)="07c674a81313dc7a442f7b970a80", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (fail_nth: 7) 482.414997ms ago: executing program 6 (id=1298): r0 = socket(0x2b, 0x80801, 0x1) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) 440.793063ms ago: executing program 4 (id=1299): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x7, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc4, 0x8}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xffe0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 219.59199ms ago: executing program 6 (id=1300): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x400c0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x2004, 0x6, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x7f, 0x221, 0x203, 0xa5, 0x45ae, 0x4, 0xfffffffd, 0xa2f}, 0x20) sendto$inet(r2, &(0x7f0000000100)="ab", 0xffe0, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000140)="3038871f", 0x4, 0xc0, 0x0, 0x0) 133.760833ms ago: executing program 6 (id=1301): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1004e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r2, 0x8104}], 0x1, 0x0, 0x0, 0x0) bind$unix(r2, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x10, 0x4, &(0x7f0000000100)=ANY=[], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) connect$netrom(0xffffffffffffffff, &(0x7f0000001580)={{0x3, @null, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'macvlan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xffffff00], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev, @private1, [0x0, 0x0, 0xff], [], [], 0x843}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000002940)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0) ioctl$PPPIOCGNPMODE(r4, 0x4008744b, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe5e, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 58.506155ms ago: executing program 0 (id=1302): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000400000009"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000340)={@loopback, 0x0}, &(0x7f00000003c0)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000440)={@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x5, 0x4, 0xfff8, 0x500, 0xfffffffffffffeff, 0x40000000, r4}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280060012"], 0x44}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@private, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private1}}, &(0x7f0000000300)=0xe8) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003e00040000000800fedbdf254100000008000000", @ANYRES32=r6, @ANYBLOB="040001800c0002f3ff00010000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4040094) 330.815µs ago: executing program 5 (id=1303): r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000340)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, {{@in6=@mcast1, 0x0, 0x6c}, 0x0, @in=@dev, 0x0, 0x4, 0x0, 0x0, 0x0, 0x93}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x12, 0x1, 0x5, 0x22, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x3, 0x3, 0x0, 0x0, 0x1, {0x6, 0x33, 0x3, 0x6, 0x0, 0x8, 0x0, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x13}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x6e6bb3, 0x8000, {0x6, 0x33, 0xfb, 0xe, 0x0, 0xd1b2, 0x0, @in=@empty, @in6=@private2}}, @sadb_key={0x10, 0x9, 0x390, 0x0, "815607fd954042114b98414f2b7f65cdeeb20ed6d0ec4024816b947e2707f894d6a01b303f560273a9407261415e369de46c2b764f6a94affaffca75d6981cbcc70802736842a57ed5b8927babf415359a6a1d98ebb1eb64afa516d9b8f9719d5cff6d37cf2495f13bd116dbd90ab9e58ad4"}]}, 0x110}}, 0x4090) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa4}}, 0x200000d4) socket$inet_mptcp(0x2, 0x1, 0x106) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r10, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000200030000000800010003000000340004800500030005"], 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 0s ago: executing program 4 (id=1304): socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x2, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x15) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet_icmp(0x2, 0x2, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESOCT=r0], 0x20) kernel console output (not intermixed with test programs): entered allmulticast mode [ 147.901596][ T8334] bridge0: entered allmulticast mode [ 147.917209][ T8334] bridge0: port 2(macsec2) entered blocking state [ 147.926736][ T8334] bridge0: port 2(macsec2) entered disabled state [ 147.947148][ T8334] bridge0: left allmulticast mode [ 147.952417][ T8334] bridge0: left promiscuous mode [ 147.957696][ T8334] vlan3: left promiscuous mode [ 147.962491][ T8334] bond0: left promiscuous mode [ 148.151757][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.693'. [ 148.206021][ T8350] xt_CT: You must specify a L4 protocol and not use inversions on it [ 148.365507][ T8365] netlink: 124 bytes leftover after parsing attributes in process `syz.1.696'. [ 148.386388][ T8366] netlink: 'syz.2.698': attribute type 1 has an invalid length. [ 148.461586][ T8370] netlink: 'syz.2.698': attribute type 21 has an invalid length. [ 148.488555][ T8370] netlink: 132 bytes leftover after parsing attributes in process `syz.2.698'. [ 148.647236][ T8376] lo speed is unknown, defaulting to 1000 [ 149.120220][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.709'. [ 149.141030][ T8393] netlink: 124 bytes leftover after parsing attributes in process `syz.0.707'. [ 149.238498][ T8398] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.710122][ T8443] netlink: 17 bytes leftover after parsing attributes in process `syz.2.721'. [ 150.719948][ T8443] netlink: zone id is out of range [ 150.725214][ T8443] netlink: zone id is out of range [ 150.730444][ T8443] netlink: zone id is out of range [ 150.737247][ T8443] netlink: zone id is out of range [ 150.750078][ T8443] netlink: zone id is out of range [ 150.770928][ T8443] netlink: zone id is out of range [ 150.781718][ T8443] netlink: zone id is out of range [ 150.787842][ T8443] netlink: zone id is out of range [ 150.793840][ T8443] netlink: zone id is out of range [ 150.818301][ T8443] netlink: zone id is out of range [ 150.909870][ T8456] netlink: 16 bytes leftover after parsing attributes in process `syz.3.724'. [ 151.179412][ T8461] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.200382][ T8461] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.354674][ T8480] netlink: 32 bytes leftover after parsing attributes in process `syz.4.735'. [ 151.383795][ T8484] netlink: 'syz.0.736': attribute type 5 has an invalid length. [ 151.384536][ T8480] netlink: 20 bytes leftover after parsing attributes in process `syz.4.735'. [ 151.668075][ T8495] lo speed is unknown, defaulting to 1000 [ 152.181493][ T8520] ieee802154 phy0 wpan0: encryption failed: -22 [ 152.198114][ T8520] ieee802154 phy0 wpan0: encryption failed: -22 [ 152.323528][ T8531] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.827101][ T8567] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.861149][ T8570] netlink: 'syz.2.762': attribute type 10 has an invalid length. [ 153.331851][ T8581] __nla_validate_parse: 9 callbacks suppressed [ 153.331869][ T8581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.768'. [ 153.778630][ T8592] syzkaller0: entered promiscuous mode [ 153.784901][ T8592] syzkaller0: entered allmulticast mode [ 153.792929][ T8592] SET target dimension over the limit! [ 153.866778][ T8601] netlink: 108 bytes leftover after parsing attributes in process `syz.2.776'. [ 153.882905][ T8601] netlink: 44 bytes leftover after parsing attributes in process `syz.2.776'. [ 153.905937][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'. [ 153.987641][ T8594] ieee802154 phy0 wpan0: encryption failed: -22 [ 154.042011][ T8594] ieee802154 phy0 wpan0: encryption failed: -22 [ 154.417092][ T8638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.788'. [ 154.427787][ T8638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.788'. [ 154.843624][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.856094][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.931704][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.945752][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.028142][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.049305][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.084962][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.095635][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.200547][ T12] dummy0: left allmulticast mode [ 155.206412][ T12] dummy0: left promiscuous mode [ 155.212413][ T12] bridge0: port 3(dummy0) entered disabled state [ 155.227027][ T12] bridge_slave_1: left allmulticast mode [ 155.232928][ T12] bridge_slave_1: left promiscuous mode [ 155.239389][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.256223][ T12] bridge_slave_0: left allmulticast mode [ 155.264228][ T12] bridge_slave_0: left promiscuous mode [ 155.270077][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.832044][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.857109][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.879425][ T12] bond0 (unregistering): Released all slaves [ 155.915181][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.928867][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.942043][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.956526][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.972337][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.079037][ T12] bond1 (unregistering): (slave veth3): Releasing active interface [ 156.103209][ T12] vlan2: entered promiscuous mode [ 156.110984][ T12] bond1 (unregistering): (slave vlan2): Releasing active interface [ 156.138331][ T12] bond1 (unregistering): Released all slaves [ 156.304982][ T12] bond2 (unregistering): Released all slaves [ 156.410237][ T12] bond3 (unregistering): (slave veth5): Releasing active interface [ 156.419457][ T12] bond3 (unregistering): Released all slaves [ 156.494974][ T12] bond4 (unregistering): (slave veth7): Releasing active interface [ 156.504994][ T12] bond4 (unregistering): Released all slaves [ 156.551852][ T8661] C: renamed from team_slave_0 [ 156.579994][ T8661] netlink: 'syz.4.798': attribute type 1 has an invalid length. [ 156.615945][ T8661] netlink: 152 bytes leftover after parsing attributes in process `syz.4.798'. [ 156.627200][ T8661] net_ratelimit: 78 callbacks suppressed [ 156.627215][ T8661] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 156.654347][ T12] IPVS: stopping master sync thread 7752 ... [ 156.862192][ T8662] lo speed is unknown, defaulting to 1000 [ 157.102677][ T12] hsr_slave_0: left promiscuous mode [ 157.143304][ T12] hsr_slave_1: left promiscuous mode [ 157.162775][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.170720][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.226227][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.246499][ T8679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.806'. [ 157.255858][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.305260][ T12] veth1_macvtap: left promiscuous mode [ 157.311091][ T12] veth0_macvtap: left promiscuous mode [ 157.338146][ T12] veth1_vlan: left promiscuous mode [ 157.593175][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.601936][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.613569][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.628789][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.640915][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.755347][ T5824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.771700][ T5824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.782474][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.798337][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.806463][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 158.066160][ T5824] Bluetooth: hci2: command tx timeout [ 158.358875][ T8688] lo speed is unknown, defaulting to 1000 [ 158.412010][ T8686] lo speed is unknown, defaulting to 1000 [ 158.453421][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.808'. [ 158.509573][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.808'. [ 158.606820][ T8662] chnl_net:caif_netlink_parms(): no params data found [ 158.847994][ T8662] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.861802][ T8662] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.870100][ T8662] bridge_slave_0: entered allmulticast mode [ 158.880860][ T8662] bridge_slave_0: entered promiscuous mode [ 158.890454][ T8662] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.897792][ T8662] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.905571][ T8662] bridge_slave_1: entered allmulticast mode [ 158.913452][ T8662] bridge_slave_1: entered promiscuous mode [ 159.059526][ T8688] chnl_net:caif_netlink_parms(): no params data found [ 159.098664][ T8662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.147539][ T8662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.335456][ T8686] chnl_net:caif_netlink_parms(): no params data found [ 159.378743][ T8662] team0: Port device team_slave_0 added [ 159.430303][ T8662] team0: Port device team_slave_1 added [ 159.482444][ T8688] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.491628][ T8688] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.499410][ T8688] bridge_slave_0: entered allmulticast mode [ 159.507820][ T8688] bridge_slave_0: entered promiscuous mode [ 159.529355][ T8723] xt_hashlimit: invalid rate [ 159.591752][ T8688] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.600325][ T8688] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.608261][ T8688] bridge_slave_1: entered allmulticast mode [ 159.609769][ T8728] sctp: [Deprecated]: syz.4.815 (pid 8728) Use of int in max_burst socket option. [ 159.609769][ T8728] Use struct sctp_assoc_value instead [ 159.618132][ T8688] bridge_slave_1: entered promiscuous mode [ 159.666777][ T8726] netlink: 'syz.0.814': attribute type 29 has an invalid length. [ 159.676669][ T8729] netlink: 'syz.0.814': attribute type 29 has an invalid length. [ 159.685816][ T8726] netlink: 824 bytes leftover after parsing attributes in process `syz.0.814'. [ 159.696854][ T8662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.710063][ T8662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.737891][ T8662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.752320][ T8662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.752766][ T5824] Bluetooth: hci3: command tx timeout [ 159.759555][ T8662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.791524][ T8662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.804138][ T8733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.815'. [ 159.887229][ T8688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.906581][ T5824] Bluetooth: hci4: command tx timeout [ 159.938821][ T8688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.996027][ T8686] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.006502][ T8686] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.019036][ T8686] bridge_slave_0: entered allmulticast mode [ 160.028142][ T8686] bridge_slave_0: entered promiscuous mode [ 160.062146][ T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.079212][ T8686] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.086695][ T8686] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.094643][ T8686] bridge_slave_1: entered allmulticast mode [ 160.102045][ T8686] bridge_slave_1: entered promiscuous mode [ 160.142848][ T5824] Bluetooth: hci2: command tx timeout [ 160.163239][ T8688] team0: Port device team_slave_0 added [ 160.210217][ T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.239847][ T8688] team0: Port device team_slave_1 added [ 160.281843][ T8686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.314150][ T8688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.321130][ T8688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.348270][ T8688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.366739][ T8662] hsr_slave_0: entered promiscuous mode [ 160.377433][ T8662] hsr_slave_1: entered promiscuous mode [ 160.384329][ T8662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.391955][ T8662] Cannot create hsr debugfs directory [ 160.399614][ T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.416921][ T8686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.436483][ T8688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.444842][ T8688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.471324][ T8688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.499923][ T12] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.547727][ T8686] team0: Port device team_slave_0 added [ 160.561519][ T8686] team0: Port device team_slave_1 added [ 160.649562][ T8688] hsr_slave_0: entered promiscuous mode [ 160.656458][ T8688] hsr_slave_1: entered promiscuous mode [ 160.663236][ T8688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.672635][ T8688] Cannot create hsr debugfs directory [ 160.695936][ T8686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.703419][ T8686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.736655][ T8686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.763129][ T8686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.770239][ T8686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.797148][ T8686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.088490][ T8686] hsr_slave_0: entered promiscuous mode [ 161.097922][ T8686] hsr_slave_1: entered promiscuous mode [ 161.104359][ T8686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.113160][ T8686] Cannot create hsr debugfs directory [ 161.143498][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.277840][ T8764] netlink: 'syz.0.824': attribute type 1 has an invalid length. [ 161.290184][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.339014][ T8764] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.384977][ T8767] bond3: (slave veth7): Enslaving as an active interface with a down link [ 161.395978][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.436006][ T8662] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 161.466260][ T8662] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 161.531140][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.560557][ T8662] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 161.608465][ T8662] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 161.721025][ T8688] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 161.751380][ T8688] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 161.786104][ T8688] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 161.797466][ T8688] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 161.823651][ T5824] Bluetooth: hci3: command tx timeout [ 161.880470][ T12] dummy0: left allmulticast mode [ 161.886306][ T12] dummy0: left promiscuous mode [ 161.891347][ T12] bridge0: port 3(dummy0) entered disabled state [ 161.901215][ T12] bridge_slave_1: left allmulticast mode [ 161.907976][ T12] bridge_slave_1: left promiscuous mode [ 161.914583][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.925870][ T12] ¾x9ÿ: left allmulticast mode [ 161.930653][ T12] ¾x9ÿ: left promiscuous mode [ 161.936592][ T12] bridge0: port 1(1¾x9ÿ) entered disabled state [ 161.951519][ T12] bridge_slave_1: left allmulticast mode [ 161.958889][ T12] bridge_slave_1: left promiscuous mode [ 161.965988][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.978143][ T12] bridge_slave_0: left allmulticast mode [ 161.984194][ T5824] Bluetooth: hci4: command tx timeout [ 161.989746][ T12] bridge_slave_0: left promiscuous mode [ 161.995761][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.178584][ T12] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 162.224963][ T5824] Bluetooth: hci2: command tx timeout [ 162.495539][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.506368][ T12] bond_slave_0: left allmulticast mode [ 162.513797][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.523092][ T12] bond_slave_1: left allmulticast mode [ 162.530105][ T12] bond0 (unregistering): Released all slaves [ 162.615769][ T12] bond1 (unregistering): Released all slaves [ 162.698929][ T12] bond2 (unregistering): (slave veth5): Releasing active interface [ 162.707244][ T12] vlan2: entered promiscuous mode [ 162.715788][ T12] bond2 (unregistering): (slave vlan2): Releasing active interface [ 162.727321][ T12] bond2 (unregistering): Released all slaves [ 162.740195][ T12] bond3 (unregistering): Released all slaves [ 163.138210][ T12]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.148578][ T12]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.160205][ T12]  (unregistering): (slave wlan1): Releasing backup interface [ 163.171909][ T12]  (unregistering): Released all slaves [ 163.264100][ T12] bond1 (unregistering): (slave veth3): Releasing active interface [ 163.272123][ T12] vlan2: entered promiscuous mode [ 163.279566][ T12] bond1 (unregistering): (slave vlan2): Releasing active interface [ 163.289277][ T12] bond1 (unregistering): Released all slaves [ 163.370970][ T12] bond0 (unregistering): (slave veth5): Releasing active interface [ 163.383118][ T12] bond0 (unregistering): Released all slaves [ 163.470181][ T12] bond2 (unregistering): (slave veth7): Releasing active interface [ 163.481973][ T12] bond2 (unregistering): Released all slaves [ 163.522461][ T8781] vlan4: entered promiscuous mode [ 163.527706][ T8781] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 163.535749][ T8781] vlan4: entered allmulticast mode [ 163.541333][ T8781] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 163.675662][ T8686] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 163.696566][ T8686] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 163.721205][ T8792] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 163.798156][ T8686] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 163.817906][ T8792] netlink: 64 bytes leftover after parsing attributes in process `syz.0.830'. [ 163.820951][ T8794] netlink: 'syz.0.830': attribute type 11 has an invalid length. [ 163.831049][ T8686] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 163.851718][ T8794] netlink: 224 bytes leftover after parsing attributes in process `syz.0.830'. [ 163.903325][ T5824] Bluetooth: hci3: command tx timeout [ 163.908787][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054d9d400: rx timeout, send abort [ 163.999965][ T8662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.065356][ T5824] Bluetooth: hci4: command tx timeout [ 164.107938][ T8688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.131968][ T8662] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.174696][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.181872][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.189546][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.832'. [ 164.206170][ T8688] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.217340][ T2138] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.224521][ T2138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.241505][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.832'. [ 164.257180][ T8787] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.264360][ T8787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.289188][ T12] hsr_slave_0: left promiscuous mode [ 164.295140][ T12] hsr_slave_1: left promiscuous mode [ 164.300921][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.308736][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.309828][ T5824] Bluetooth: hci2: command tx timeout [ 164.324085][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.331784][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.345972][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.353514][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.361271][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.368992][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.398635][ T12] veth1_macvtap: left allmulticast mode [ 164.404465][ T12] veth1_macvtap: left promiscuous mode [ 164.410033][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054d9d400: abort rx timeout. Force session deactivation [ 164.421609][ T12] veth0_macvtap: left promiscuous mode [ 164.427912][ T12] veth1_vlan: left promiscuous mode [ 164.435125][ T12] veth1_macvtap: left promiscuous mode [ 164.440680][ T12] veth0_macvtap: left promiscuous mode [ 164.446995][ T12] veth1_vlan: left promiscuous mode [ 165.958143][ T8787] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.965378][ T8787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.986115][ T5824] Bluetooth: hci3: command tx timeout [ 166.148076][ T5824] Bluetooth: hci4: command tx timeout [ 166.229543][ T8686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.345630][ T8686] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.448058][ T8662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.464038][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.472094][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.540841][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.548094][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.624911][ T8688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.704539][ T8686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.759562][ T12] IPVS: stop unused estimator thread 0... [ 166.998666][ T8686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.097125][ T8662] veth0_vlan: entered promiscuous mode [ 167.145616][ T8662] veth1_vlan: entered promiscuous mode [ 167.245294][ T8688] veth0_vlan: entered promiscuous mode [ 167.271698][ T8662] veth0_macvtap: entered promiscuous mode [ 167.290185][ T8688] veth1_vlan: entered promiscuous mode [ 167.316193][ T8662] veth1_macvtap: entered promiscuous mode [ 167.361509][ T8662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.387741][ T8662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.408991][ T8688] veth0_macvtap: entered promiscuous mode [ 167.417143][ T8662] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.428161][ T8662] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.437299][ T8662] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.446321][ T8662] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.468063][ T8688] veth1_macvtap: entered promiscuous mode [ 167.530117][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.549562][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.561983][ T8688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.574736][ T8686] veth0_vlan: entered promiscuous mode [ 167.599285][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.613488][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.613605][ T8856] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.634534][ T8856] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.640994][ T8688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.671112][ T8686] veth1_vlan: entered promiscuous mode [ 167.693453][ T8688] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.702287][ T8688] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.719681][ T8688] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.728905][ T8688] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.752213][ T8858] netlink: 20 bytes leftover after parsing attributes in process `syz.0.839'. [ 167.780305][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.796312][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.023580][ T2138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.033265][ T8686] veth0_macvtap: entered promiscuous mode [ 168.039927][ T2138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.052424][ T8787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.074828][ T8787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.095660][ T8686] veth1_macvtap: entered promiscuous mode [ 168.147865][ T4915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.158087][ T4915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.167015][ T8872] netlink: 20 bytes leftover after parsing attributes in process `syz.0.842'. [ 168.169200][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.178354][ T8872] netlink: 'syz.0.842': attribute type 21 has an invalid length. [ 168.221564][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.234983][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.246183][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.259842][ T8686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.278756][ T8872] netlink: 156 bytes leftover after parsing attributes in process `syz.0.842'. [ 168.311945][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.341229][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.366345][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.378248][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.410951][ T8686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.450543][ T8686] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.470735][ T8686] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.509730][ T8686] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.519870][ T8686] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.559087][ T8892] netlink: 'syz.4.845': attribute type 32 has an invalid length. [ 168.574979][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.845'. [ 168.608337][ T8895] netlink: 20 bytes leftover after parsing attributes in process `syz.6.847'. [ 168.627675][ T8892] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 168.813593][ T2138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.821514][ T2138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.885416][ T2138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.903961][ T2138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.005378][ T8914] netlink: 'syz.0.854': attribute type 1 has an invalid length. [ 169.054029][ T8914] bond4: entered promiscuous mode [ 169.059131][ T8914] bond4: entered allmulticast mode [ 169.065403][ T8914] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.085768][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.7.812'. [ 169.106714][ T8918] xt_CT: You must specify a L4 protocol and not use inversions on it [ 169.157448][ T8921] netlink: 'syz.5.855': attribute type 1 has an invalid length. [ 169.277185][ T8928] FAULT_INJECTION: forcing a failure. [ 169.277185][ T8928] name failslab, interval 1, probability 0, space 0, times 0 [ 169.314826][ T8928] CPU: 0 UID: 0 PID: 8928 Comm: syz.5.857 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 169.314851][ T8928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 169.314861][ T8928] Call Trace: [ 169.314868][ T8928] [ 169.314875][ T8928] dump_stack_lvl+0x189/0x250 [ 169.314905][ T8928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.314926][ T8928] ? __pfx__printk+0x10/0x10 [ 169.314950][ T8928] ? ref_tracker_alloc+0x318/0x460 [ 169.314981][ T8928] should_fail_ex+0x414/0x560 [ 169.315009][ T8928] should_failslab+0xa8/0x100 [ 169.315028][ T8928] kmem_cache_alloc_noprof+0x73/0x3c0 [ 169.315045][ T8928] ? skb_clone+0x212/0x3a0 [ 169.315070][ T8928] skb_clone+0x212/0x3a0 [ 169.315093][ T8928] __netlink_deliver_tap+0x404/0x850 [ 169.315122][ T8928] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.315141][ T8928] netlink_deliver_tap+0x19c/0x1b0 [ 169.315159][ T8928] netlink_unicast+0x72f/0x8d0 [ 169.315187][ T8928] netlink_sendmsg+0x805/0xb30 [ 169.315213][ T8928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.315234][ T8928] ? aa_sock_msg_perm+0x94/0x160 [ 169.315254][ T8928] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 169.315271][ T8928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.315289][ T8928] __sock_sendmsg+0x219/0x270 [ 169.315315][ T8928] ____sys_sendmsg+0x505/0x830 [ 169.315342][ T8928] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.315373][ T8928] ? import_iovec+0x74/0xa0 [ 169.315398][ T8928] ___sys_sendmsg+0x21f/0x2a0 [ 169.315420][ T8928] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.315474][ T8928] ? __fget_files+0x2a/0x420 [ 169.315494][ T8928] ? __fget_files+0x3a0/0x420 [ 169.315524][ T8928] __x64_sys_sendmsg+0x19b/0x260 [ 169.315547][ T8928] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 169.315585][ T8928] ? do_syscall_64+0xba/0x210 [ 169.315611][ T8928] do_syscall_64+0xf6/0x210 [ 169.315633][ T8928] ? clear_bhb_loop+0x45/0xa0 [ 169.315654][ T8928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.315669][ T8928] RIP: 0033:0x7f449b98e969 [ 169.315684][ T8928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.315696][ T8928] RSP: 002b:00007f449c88d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.315714][ T8928] RAX: ffffffffffffffda RBX: 00007f449bbb5fa0 RCX: 00007f449b98e969 [ 169.315726][ T8928] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 169.315735][ T8928] RBP: 00007f449c88d090 R08: 0000000000000000 R09: 0000000000000000 [ 169.315745][ T8928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.315755][ T8928] R13: 0000000000000000 R14: 00007f449bbb5fa0 R15: 00007ffdd700eda8 [ 169.315783][ T8928] [ 169.726257][ T8938] FAULT_INJECTION: forcing a failure. [ 169.726257][ T8938] name failslab, interval 1, probability 0, space 0, times 0 [ 169.765040][ T8938] CPU: 1 UID: 0 PID: 8938 Comm: syz.7.862 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 169.765065][ T8938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 169.765075][ T8938] Call Trace: [ 169.765082][ T8938] [ 169.765090][ T8938] dump_stack_lvl+0x189/0x250 [ 169.765120][ T8938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.765147][ T8938] ? __pfx__printk+0x10/0x10 [ 169.765171][ T8938] ? __pfx___might_resched+0x10/0x10 [ 169.765185][ T8938] ? fs_reclaim_acquire+0x7d/0x100 [ 169.765212][ T8938] should_fail_ex+0x414/0x560 [ 169.765241][ T8938] should_failslab+0xa8/0x100 [ 169.765263][ T8938] __kmalloc_noprof+0xcb/0x4f0 [ 169.765280][ T8938] ? kfree+0x4d/0x440 [ 169.765295][ T8938] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 169.765319][ T8938] tomoyo_realpath_from_path+0xe3/0x5d0 [ 169.765339][ T8938] ? tomoyo_domain+0xda/0x130 [ 169.765364][ T8938] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 169.765386][ T8938] tomoyo_path_number_perm+0x1e8/0x5a0 [ 169.765412][ T8938] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 169.765452][ T8938] ? __lock_acquire+0xaac/0xd20 [ 169.765489][ T8938] ? __fget_files+0x2a/0x420 [ 169.765512][ T8938] ? __fget_files+0x3a0/0x420 [ 169.765530][ T8938] ? __fget_files+0x2a/0x420 [ 169.765552][ T8938] security_file_ioctl+0xcb/0x2d0 [ 169.765576][ T8938] __se_sys_ioctl+0x47/0x170 [ 169.765596][ T8938] do_syscall_64+0xf6/0x210 [ 169.765618][ T8938] ? clear_bhb_loop+0x45/0xa0 [ 169.765639][ T8938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.765654][ T8938] RIP: 0033:0x7f792d18e969 [ 169.765669][ T8938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.765682][ T8938] RSP: 002b:00007f792df39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.765700][ T8938] RAX: ffffffffffffffda RBX: 00007f792d3b5fa0 RCX: 00007f792d18e969 [ 169.765713][ T8938] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000007 [ 169.765723][ T8938] RBP: 00007f792df39090 R08: 0000000000000000 R09: 0000000000000000 [ 169.765733][ T8938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.765743][ T8938] R13: 0000000000000000 R14: 00007f792d3b5fa0 R15: 00007ffc96e51b28 [ 169.765769][ T8938] [ 169.765777][ T8938] ERROR: Out of memory at tomoyo_realpath_from_path. [ 170.113036][ T8945] dvmrp8: entered allmulticast mode [ 170.255761][ T8943] dvmrp8: left allmulticast mode [ 170.314392][ T8955] FAULT_INJECTION: forcing a failure. [ 170.314392][ T8955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.333475][ T8955] CPU: 1 UID: 0 PID: 8955 Comm: syz.6.867 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 170.333499][ T8955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 170.333510][ T8955] Call Trace: [ 170.333517][ T8955] [ 170.333524][ T8955] dump_stack_lvl+0x189/0x250 [ 170.333548][ T8955] ? __lock_acquire+0xaac/0xd20 [ 170.333571][ T8955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.333592][ T8955] ? __pfx__printk+0x10/0x10 [ 170.333609][ T8955] ? __might_fault+0xb0/0x130 [ 170.333639][ T8955] should_fail_ex+0x414/0x560 [ 170.333667][ T8955] _copy_from_user+0x2d/0xb0 [ 170.333688][ T8955] ___sys_sendmsg+0x158/0x2a0 [ 170.333710][ T8955] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.333765][ T8955] ? __fget_files+0x2a/0x420 [ 170.333783][ T8955] ? __fget_files+0x3a0/0x420 [ 170.333811][ T8955] __x64_sys_sendmsg+0x19b/0x260 [ 170.333833][ T8955] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 170.333868][ T8955] ? do_syscall_64+0xba/0x210 [ 170.333893][ T8955] do_syscall_64+0xf6/0x210 [ 170.333915][ T8955] ? clear_bhb_loop+0x45/0xa0 [ 170.333934][ T8955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.333949][ T8955] RIP: 0033:0x7f2e7998e969 [ 170.333964][ T8955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.333977][ T8955] RSP: 002b:00007f2e7a7ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.333995][ T8955] RAX: ffffffffffffffda RBX: 00007f2e79bb5fa0 RCX: 00007f2e7998e969 [ 170.334008][ T8955] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 170.334018][ T8955] RBP: 00007f2e7a7ec090 R08: 0000000000000000 R09: 0000000000000000 [ 170.334029][ T8955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.334039][ T8955] R13: 0000000000000000 R14: 00007f2e79bb5fa0 R15: 00007ffd8f9f5fa8 [ 170.334073][ T8955] [ 170.782251][ T8961] netlink: 'syz.7.870': attribute type 2 has an invalid length. [ 170.907985][ T8973] ieee802154 phy0 wpan0: encryption failed: -22 [ 170.938867][ T8971] vlan0: entered promiscuous mode [ 171.080331][ T8982] netlink: 16 bytes leftover after parsing attributes in process `syz.5.877'. [ 171.234109][ T8996] netlink: 20 bytes leftover after parsing attributes in process `syz.6.881'. [ 171.415945][ T9007] netlink: 12 bytes leftover after parsing attributes in process `syz.6.886'. [ 171.559708][ T9012] FAULT_INJECTION: forcing a failure. [ 171.559708][ T9012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.574237][ T9012] CPU: 0 UID: 0 PID: 9012 Comm: syz.6.888 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 171.574260][ T9012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 171.574269][ T9012] Call Trace: [ 171.574276][ T9012] [ 171.574283][ T9012] dump_stack_lvl+0x189/0x250 [ 171.574312][ T9012] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.574333][ T9012] ? __pfx__printk+0x10/0x10 [ 171.574361][ T9012] should_fail_ex+0x414/0x560 [ 171.574395][ T9012] _copy_to_user+0x31/0xb0 [ 171.574418][ T9012] bpf_verifier_vlog+0x48c/0x900 [ 171.574445][ T9012] __btf_verifier_log+0xd4/0x120 [ 171.574470][ T9012] ? __pfx___btf_verifier_log+0x10/0x10 [ 171.574500][ T9012] __btf_verifier_log_type+0x360/0x630 [ 171.574531][ T9012] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 171.574550][ T9012] ? rcu_is_watching+0x15/0xb0 [ 171.574571][ T9012] ? btf_parse_type_sec+0x9ef/0x24a0 [ 171.574591][ T9012] ? trace_kmalloc+0x1f/0xd0 [ 171.574608][ T9012] ? __kvmalloc_node_noprof+0x338/0x5e0 [ 171.574627][ T9012] ? btf_parse_type_sec+0x9ef/0x24a0 [ 171.574653][ T9012] btf_parse_type_sec+0x22e6/0x24a0 [ 171.574696][ T9012] btf_new_fd+0x40e/0xc90 [ 171.574710][ T9012] ? apparmor_capable+0x137/0x1b0 [ 171.574737][ T9012] ? __pfx_btf_new_fd+0x10/0x10 [ 171.574753][ T9012] ? bpf_token_put+0x143/0x160 [ 171.574771][ T9012] ? bpf_btf_load+0x126/0x190 [ 171.574794][ T9012] __sys_bpf+0x635/0x860 [ 171.574815][ T9012] ? __pfx___sys_bpf+0x10/0x10 [ 171.574846][ T9012] ? ksys_write+0x1f0/0x250 [ 171.574876][ T9012] __x64_sys_bpf+0x7c/0x90 [ 171.574895][ T9012] do_syscall_64+0xf6/0x210 [ 171.574918][ T9012] ? clear_bhb_loop+0x45/0xa0 [ 171.574938][ T9012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.574953][ T9012] RIP: 0033:0x7f2e7998e969 [ 171.574967][ T9012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.574990][ T9012] RSP: 002b:00007f2e7a7ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 171.575008][ T9012] RAX: ffffffffffffffda RBX: 00007f2e79bb5fa0 RCX: 00007f2e7998e969 [ 171.575020][ T9012] RDX: 0000000000000028 RSI: 0000200000000200 RDI: 0000000000000012 [ 171.575031][ T9012] RBP: 00007f2e7a7ec090 R08: 0000000000000000 R09: 0000000000000000 [ 171.575040][ T9012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.575050][ T9012] R13: 0000000000000001 R14: 00007f2e79bb5fa0 R15: 00007ffd8f9f5fa8 [ 171.575075][ T9012] [ 172.009879][ T9018] netlink: 'syz.0.891': attribute type 10 has an invalid length. [ 172.017875][ T9018] netlink: 40 bytes leftover after parsing attributes in process `syz.0.891'. [ 172.019680][ T9014] lo speed is unknown, defaulting to 1000 [ 172.189760][ T9025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.893'. [ 172.262671][ T9028] netlink: 24 bytes leftover after parsing attributes in process `syz.4.895'. [ 172.387000][ T9032] lo speed is unknown, defaulting to 1000 [ 172.388596][ T9031] netlink: 24 bytes leftover after parsing attributes in process `syz.4.895'. [ 172.421687][ T9031] nbd: device at index 64 is going down [ 172.642824][ T9044] netlink: 'syz.7.899': attribute type 1 has an invalid length. [ 172.665310][ T9047] netlink: 'syz.4.901': attribute type 10 has an invalid length. [ 173.098397][ T9047] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 173.168077][ T9044] bond1 (unregistering): Released all slaves [ 173.229340][ T13] bridge0: port 1(vlan3) entered blocking state [ 173.235823][ T13] bridge0: port 1(vlan3) entered forwarding state [ 173.328320][ T9032] netlink: 16 bytes leftover after parsing attributes in process `syz.5.897'. [ 173.428971][ T9063] netlink: 'syz.0.904': attribute type 10 has an invalid length. [ 173.458288][ T9063] netlink: 40 bytes leftover after parsing attributes in process `syz.0.904'. [ 173.591191][ T9068] sctp: [Deprecated]: syz.7.905 (pid 9068) Use of int in max_burst socket option. [ 173.591191][ T9068] Use struct sctp_assoc_value instead [ 175.098078][ T9123] ieee802154 phy0 wpan0: encryption failed: -22 [ 175.109227][ T9121] __nla_validate_parse: 3 callbacks suppressed [ 175.109243][ T9121] netlink: 20 bytes leftover after parsing attributes in process `syz.7.920'. [ 175.129499][ T9123] ieee802154 phy0 wpan0: encryption failed: -22 [ 175.537695][ T9137] lo speed is unknown, defaulting to 1000 [ 175.551583][ T9147] netlink: 'syz.7.930': attribute type 1 has an invalid length. [ 175.670951][ T9152] netlink: 28 bytes leftover after parsing attributes in process `syz.7.930'. [ 175.746886][ T9152] vlan2: entered allmulticast mode [ 175.752165][ T9152] veth1: entered allmulticast mode [ 176.104892][ T9162] RDS: rds_bind could not find a transport for ::ffff:172.30.0.8, load rds_tcp or rds_rdma? [ 176.382933][ T9171] netlink: 20 bytes leftover after parsing attributes in process `syz.7.935'. [ 176.416567][ T9175] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 176.706877][ T9190] netlink: del zone limit has 4 unknown bytes [ 176.800408][ T9197] netlink: 'syz.7.944': attribute type 1 has an invalid length. [ 176.930877][ T9200] netlink: 232 bytes leftover after parsing attributes in process `syz.4.942'. [ 176.941073][ T9206] netlink: 28 bytes leftover after parsing attributes in process `syz.7.944'. [ 176.960453][ T9205] netlink: 124 bytes leftover after parsing attributes in process `syz.6.945'. [ 176.986096][ T9206] vlan2: entered allmulticast mode [ 177.300325][ T9218] syz.4.950 uses old SIOCAX25GETINFO [ 177.656424][ T9222] IPv6: Can't replace route, no match found [ 177.787257][ T9224] vlan5: entered promiscuous mode [ 177.792433][ T9224] bond0: entered promiscuous mode [ 177.800460][ T9224] vlan5: entered allmulticast mode [ 177.890739][ T9227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.954'. [ 177.950236][ T9227] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.179755][ T9237] netlink: 5612 bytes leftover after parsing attributes in process `syz.7.958'. [ 178.224378][ T9237] openvswitch: netlink: Flow key attr not present in new flow. [ 178.370209][ T9244] FAULT_INJECTION: forcing a failure. [ 178.370209][ T9244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.384297][ T9245] netlink: 20 bytes leftover after parsing attributes in process `syz.6.960'. [ 178.387755][ T9244] CPU: 1 UID: 0 PID: 9244 Comm: syz.7.961 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 178.387777][ T9244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 178.387787][ T9244] Call Trace: [ 178.387793][ T9244] [ 178.387800][ T9244] dump_stack_lvl+0x189/0x250 [ 178.387830][ T9244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.387851][ T9244] ? __pfx__printk+0x10/0x10 [ 178.387879][ T9244] should_fail_ex+0x414/0x560 [ 178.387906][ T9244] _copy_to_user+0x31/0xb0 [ 178.387928][ T9244] simple_read_from_buffer+0xe1/0x170 [ 178.387952][ T9244] proc_fail_nth_read+0x1df/0x250 [ 178.387975][ T9244] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.387997][ T9244] ? rw_verify_area+0x258/0x650 [ 178.388013][ T9244] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.388034][ T9244] vfs_read+0x1fd/0x980 [ 178.388056][ T9244] ? __pfx___mutex_lock+0x10/0x10 [ 178.388078][ T9244] ? __pfx_vfs_read+0x10/0x10 [ 178.388096][ T9244] ? __fget_files+0x2a/0x420 [ 178.388120][ T9244] ? __fget_files+0x3a0/0x420 [ 178.388137][ T9244] ? __fget_files+0x2a/0x420 [ 178.388164][ T9244] ksys_read+0x145/0x250 [ 178.388179][ T9244] ? rcu_is_watching+0x15/0xb0 [ 178.388202][ T9244] ? __pfx_ksys_read+0x10/0x10 [ 178.388223][ T9244] ? do_syscall_64+0xba/0x210 [ 178.388248][ T9244] do_syscall_64+0xf6/0x210 [ 178.388275][ T9244] ? clear_bhb_loop+0x45/0xa0 [ 178.388294][ T9244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.388309][ T9244] RIP: 0033:0x7f792d18d37c [ 178.388324][ T9244] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 178.388337][ T9244] RSP: 002b:00007f792df39030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 178.388355][ T9244] RAX: ffffffffffffffda RBX: 00007f792d3b5fa0 RCX: 00007f792d18d37c [ 178.388366][ T9244] RDX: 000000000000000f RSI: 00007f792df390a0 RDI: 0000000000000004 [ 178.388376][ T9244] RBP: 00007f792df39090 R08: 0000000000000000 R09: 0000000000000000 [ 178.388385][ T9244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.388395][ T9244] R13: 0000000000000000 R14: 00007f792d3b5fa0 R15: 00007ffc96e51b28 [ 178.388422][ T9244] [ 178.616371][ T9247] FAULT_INJECTION: forcing a failure. [ 178.616371][ T9247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.654242][ T9247] CPU: 1 UID: 0 PID: 9247 Comm: syz.7.962 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 178.654268][ T9247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 178.654279][ T9247] Call Trace: [ 178.654285][ T9247] [ 178.654293][ T9247] dump_stack_lvl+0x189/0x250 [ 178.654322][ T9247] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.654343][ T9247] ? __pfx__printk+0x10/0x10 [ 178.654374][ T9247] should_fail_ex+0x414/0x560 [ 178.654406][ T9247] _copy_from_user+0x2d/0xb0 [ 178.654428][ T9247] __copy_msghdr+0x3c5/0x5b0 [ 178.654452][ T9247] ___sys_sendmsg+0x1a5/0x2a0 [ 178.654474][ T9247] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.654529][ T9247] ? __fget_files+0x2a/0x420 [ 178.654548][ T9247] ? __fget_files+0x3a0/0x420 [ 178.654577][ T9247] __x64_sys_sendmsg+0x19b/0x260 [ 178.654599][ T9247] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 178.654635][ T9247] ? do_syscall_64+0xba/0x210 [ 178.654659][ T9247] do_syscall_64+0xf6/0x210 [ 178.654680][ T9247] ? clear_bhb_loop+0x45/0xa0 [ 178.654700][ T9247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.654715][ T9247] RIP: 0033:0x7f792d18e969 [ 178.654730][ T9247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.654744][ T9247] RSP: 002b:00007f792df39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.654762][ T9247] RAX: ffffffffffffffda RBX: 00007f792d3b5fa0 RCX: 00007f792d18e969 [ 178.654775][ T9247] RDX: 0000000000000014 RSI: 0000200000000380 RDI: 0000000000000003 [ 178.654785][ T9247] RBP: 00007f792df39090 R08: 0000000000000000 R09: 0000000000000000 [ 178.654795][ T9247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.654805][ T9247] R13: 0000000000000000 R14: 00007f792d3b5fa0 R15: 00007ffc96e51b28 [ 178.654832][ T9247] [ 179.068313][ T9249] Bluetooth: MGMT ver 1.23 [ 179.126258][ T9253] netlink: 'syz.6.964': attribute type 10 has an invalid length. [ 179.145422][ T9253] netlink: 40 bytes leftover after parsing attributes in process `syz.6.964'. [ 179.194062][ T9253] bridge0: port 3(dummy0) entered blocking state [ 179.203174][ T9253] bridge0: port 3(dummy0) entered disabled state [ 179.209718][ T9253] dummy0: entered allmulticast mode [ 179.256756][ T9253] dummy0: entered promiscuous mode [ 179.262567][ T9253] bridge0: port 3(dummy0) entered blocking state [ 179.269014][ T9253] bridge0: port 3(dummy0) entered forwarding state [ 179.306364][ T9260] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.251030][ T9292] FAULT_INJECTION: forcing a failure. [ 180.251030][ T9292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.273202][ T9292] CPU: 1 UID: 0 PID: 9292 Comm: syz.6.978 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 180.273228][ T9292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 180.273239][ T9292] Call Trace: [ 180.273245][ T9292] [ 180.273253][ T9292] dump_stack_lvl+0x189/0x250 [ 180.273291][ T9292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.273312][ T9292] ? __pfx__printk+0x10/0x10 [ 180.273340][ T9292] should_fail_ex+0x414/0x560 [ 180.273369][ T9292] _copy_from_user+0x2d/0xb0 [ 180.273390][ T9292] bpf_test_init+0xf8/0x170 [ 180.273412][ T9292] bpf_prog_test_run_xdp+0x37c/0xf90 [ 180.273445][ T9292] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 180.273467][ T9292] ? __fget_files+0x2a/0x420 [ 180.273493][ T9292] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 180.273511][ T9292] bpf_prog_test_run+0x2a9/0x340 [ 180.273534][ T9292] __sys_bpf+0x4a4/0x860 [ 180.273554][ T9292] ? __pfx___sys_bpf+0x10/0x10 [ 180.273584][ T9292] ? ksys_write+0x1f0/0x250 [ 180.273599][ T9292] ? rcu_is_watching+0x15/0xb0 [ 180.273630][ T9292] __x64_sys_bpf+0x7c/0x90 [ 180.273649][ T9292] do_syscall_64+0xf6/0x210 [ 180.273670][ T9292] ? clear_bhb_loop+0x45/0xa0 [ 180.273690][ T9292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.273705][ T9292] RIP: 0033:0x7f2e7998e969 [ 180.273720][ T9292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.273734][ T9292] RSP: 002b:00007f2e7a7ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 180.273751][ T9292] RAX: ffffffffffffffda RBX: 00007f2e79bb5fa0 RCX: 00007f2e7998e969 [ 180.273763][ T9292] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 180.273773][ T9292] RBP: 00007f2e7a7ec090 R08: 0000000000000000 R09: 0000000000000000 [ 180.273783][ T9292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.273793][ T9292] R13: 0000000000000000 R14: 00007f2e79bb5fa0 R15: 00007ffd8f9f5fa8 [ 180.273820][ T9292] [ 180.477662][ T9296] FAULT_INJECTION: forcing a failure. [ 180.477662][ T9296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.492649][ T9296] CPU: 0 UID: 0 PID: 9296 Comm: syz.7.977 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 180.492674][ T9296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 180.492683][ T9296] Call Trace: [ 180.492690][ T9296] [ 180.492697][ T9296] dump_stack_lvl+0x189/0x250 [ 180.492726][ T9296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.492747][ T9296] ? __pfx__printk+0x10/0x10 [ 180.492776][ T9296] should_fail_ex+0x414/0x560 [ 180.492805][ T9296] _copy_from_user+0x2d/0xb0 [ 180.492826][ T9296] bpf_test_init+0xf8/0x170 [ 180.492847][ T9296] bpf_prog_test_run_xdp+0x37c/0xf90 [ 180.492879][ T9296] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 180.492902][ T9296] ? __fget_files+0x2a/0x420 [ 180.492927][ T9296] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 180.492945][ T9296] bpf_prog_test_run+0x2a9/0x340 [ 180.492968][ T9296] __sys_bpf+0x4a4/0x860 [ 180.492988][ T9296] ? __pfx___sys_bpf+0x10/0x10 [ 180.493019][ T9296] ? ksys_write+0x1f0/0x250 [ 180.493035][ T9296] ? rcu_is_watching+0x15/0xb0 [ 180.493067][ T9296] __x64_sys_bpf+0x7c/0x90 [ 180.493091][ T9296] do_syscall_64+0xf6/0x210 [ 180.493113][ T9296] ? clear_bhb_loop+0x45/0xa0 [ 180.493133][ T9296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.493148][ T9296] RIP: 0033:0x7f792d18e969 [ 180.493164][ T9296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.493177][ T9296] RSP: 002b:00007f792df18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 180.493195][ T9296] RAX: ffffffffffffffda RBX: 00007f792d3b6080 RCX: 00007f792d18e969 [ 180.493207][ T9296] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 180.493218][ T9296] RBP: 00007f792df18090 R08: 0000000000000000 R09: 0000000000000000 [ 180.493229][ T9296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.493238][ T9296] R13: 0000000000000000 R14: 00007f792d3b6080 R15: 00007ffc96e51b28 [ 180.493266][ T9296] [ 180.770159][ T9300] __nla_validate_parse: 3 callbacks suppressed [ 180.770176][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.981'. [ 180.791463][ T9302] vlan0: entered promiscuous mode [ 180.820922][ T9300] xt_CT: You must specify a L4 protocol and not use inversions on it [ 181.028392][ T9319] netlink: 24 bytes leftover after parsing attributes in process `syz.0.987'. [ 181.055202][ T9319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.987'. [ 181.077973][ T9319] netlink: 'syz.0.987': attribute type 4 has an invalid length. [ 181.169682][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.5.985'. [ 181.415646][ T9335] netlink: 124 bytes leftover after parsing attributes in process `syz.7.991'. [ 181.548860][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.994'. [ 181.564140][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.994'. [ 181.612276][ T9340] netlink: 'syz.0.994': attribute type 5 has an invalid length. [ 181.630752][ T9340] netlink: 'syz.0.994': attribute type 6 has an invalid length. [ 181.883746][ T9346] ieee802154 phy0 wpan0: encryption failed: -22 [ 182.249529][ T9358] nbd: must specify at least one socket [ 182.342823][ T9364] veth0: entered promiscuous mode [ 182.348953][ T9364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1004'. [ 182.627447][ T9372] unknown channel width for channel at 909000KHz? [ 182.639265][ T9372] unknown channel width for channel at 909000KHz? [ 182.646590][ T9372] unknown channel width for channel at 909000KHz? [ 182.671339][ T9374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1009'. [ 182.692404][ T9376] FAULT_INJECTION: forcing a failure. [ 182.692404][ T9376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.710200][ T9376] CPU: 0 UID: 0 PID: 9376 Comm: syz.5.1010 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 182.710224][ T9376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 182.710234][ T9376] Call Trace: [ 182.710241][ T9376] [ 182.710249][ T9376] dump_stack_lvl+0x189/0x250 [ 182.710273][ T9376] ? __lock_acquire+0xaac/0xd20 [ 182.710296][ T9376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.710316][ T9376] ? __pfx__printk+0x10/0x10 [ 182.710333][ T9376] ? __might_fault+0xb0/0x130 [ 182.710364][ T9376] should_fail_ex+0x414/0x560 [ 182.710392][ T9376] _copy_from_user+0x2d/0xb0 [ 182.710413][ T9376] ___sys_sendmsg+0x158/0x2a0 [ 182.710435][ T9376] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.710490][ T9376] ? __fget_files+0x2a/0x420 [ 182.710509][ T9376] ? __fget_files+0x3a0/0x420 [ 182.710538][ T9376] __x64_sys_sendmsg+0x19b/0x260 [ 182.710560][ T9376] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 182.710596][ T9376] ? do_syscall_64+0xba/0x210 [ 182.710621][ T9376] do_syscall_64+0xf6/0x210 [ 182.710641][ T9376] ? clear_bhb_loop+0x45/0xa0 [ 182.710661][ T9376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.710676][ T9376] RIP: 0033:0x7f449b98e969 [ 182.710691][ T9376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.710705][ T9376] RSP: 002b:00007f449c88d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.710723][ T9376] RAX: ffffffffffffffda RBX: 00007f449bbb5fa0 RCX: 00007f449b98e969 [ 182.710735][ T9376] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000004 [ 182.710746][ T9376] RBP: 00007f449c88d090 R08: 0000000000000000 R09: 0000000000000000 [ 182.710756][ T9376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.710766][ T9376] R13: 0000000000000000 R14: 00007f449bbb5fa0 R15: 00007ffdd700eda8 [ 182.710793][ T9376] [ 182.940982][ T9378] netlink: 'syz.7.1011': attribute type 1 has an invalid length. [ 182.982257][ T9378] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.051326][ T9383] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1011'. [ 183.210346][ T9378] bond1: (slave veth3): Enslaving as an active interface with a down link [ 183.262210][ T9388] vlan2: entered allmulticast mode [ 183.272894][ T9388] veth1: entered promiscuous mode [ 183.278909][ T9388] veth1: left promiscuous mode [ 183.285883][ T9396] IPVS: length: 209 != 24 [ 183.293142][ T9388] bond1: (slave vlan2): making interface the new active one [ 183.301286][ T9388] veth1: entered promiscuous mode [ 183.346144][ T9388] vlan2: entered promiscuous mode [ 183.351878][ T9388] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 183.361575][ T9394] netlink: 'syz.0.1018': attribute type 4 has an invalid length. [ 183.478288][ T9406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.728329][ T9426] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 183.768365][ T9426] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 183.786689][ T9429] vlan0: entered promiscuous mode [ 183.922210][ T9439] netlink: 'syz.6.1035': attribute type 1 has an invalid length. [ 183.937961][ T9439] netlink: 'syz.6.1035': attribute type 2 has an invalid length. [ 183.951843][ T9439] ipt_ECN: cannot use operation on non-tcp rule [ 183.998594][ T9444] FAULT_INJECTION: forcing a failure. [ 183.998594][ T9444] name failslab, interval 1, probability 0, space 0, times 0 [ 184.011899][ T9444] CPU: 1 UID: 0 PID: 9444 Comm: syz.6.1038 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 184.011920][ T9444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 184.011930][ T9444] Call Trace: [ 184.011937][ T9444] [ 184.011944][ T9444] dump_stack_lvl+0x189/0x250 [ 184.011973][ T9444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.011987][ T9444] ? __pfx__printk+0x10/0x10 [ 184.011999][ T9444] ? __pfx___might_resched+0x10/0x10 [ 184.012010][ T9444] should_fail_ex+0x414/0x560 [ 184.012027][ T9444] should_failslab+0xa8/0x100 [ 184.012040][ T9444] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 184.012052][ T9444] ? __alloc_skb+0x112/0x2d0 [ 184.012065][ T9444] __alloc_skb+0x112/0x2d0 [ 184.012077][ T9444] netlink_sendmsg+0x5c6/0xb30 [ 184.012093][ T9444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.012105][ T9444] ? aa_sock_msg_perm+0x94/0x160 [ 184.012116][ T9444] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 184.012127][ T9444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.012137][ T9444] __sock_sendmsg+0x219/0x270 [ 184.012154][ T9444] ____sys_sendmsg+0x505/0x830 [ 184.012168][ T9444] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.012187][ T9444] ? import_iovec+0x74/0xa0 [ 184.012211][ T9444] ___sys_sendmsg+0x21f/0x2a0 [ 184.012231][ T9444] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.012281][ T9444] ? __fget_files+0x2a/0x420 [ 184.012299][ T9444] ? __fget_files+0x3a0/0x420 [ 184.012326][ T9444] __x64_sys_sendmsg+0x19b/0x260 [ 184.012339][ T9444] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 184.012359][ T9444] ? do_syscall_64+0xba/0x210 [ 184.012374][ T9444] do_syscall_64+0xf6/0x210 [ 184.012387][ T9444] ? clear_bhb_loop+0x45/0xa0 [ 184.012399][ T9444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.012407][ T9444] RIP: 0033:0x7f2e7998e969 [ 184.012417][ T9444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.012425][ T9444] RSP: 002b:00007f2e7a7ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.012436][ T9444] RAX: ffffffffffffffda RBX: 00007f2e79bb5fa0 RCX: 00007f2e7998e969 [ 184.012442][ T9444] RDX: 0000000000004800 RSI: 0000200000000300 RDI: 0000000000000003 [ 184.012448][ T9444] RBP: 00007f2e7a7ec090 R08: 0000000000000000 R09: 0000000000000000 [ 184.012454][ T9444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.012459][ T9444] R13: 0000000000000000 R14: 00007f2e79bb5fa0 R15: 00007ffd8f9f5fa8 [ 184.012474][ T9444] [ 184.310074][ T9449] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 184.359344][ T9449] CPU: 0 UID: 0 PID: 9449 Comm: syz.4.1040 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 184.359369][ T9449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 184.359380][ T9449] Call Trace: [ 184.359387][ T9449] [ 184.359396][ T9449] dump_stack_lvl+0x189/0x250 [ 184.359424][ T9449] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.359447][ T9449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.359468][ T9449] ? __pfx__printk+0x10/0x10 [ 184.359486][ T9449] ? kernfs_path_from_node+0x2b/0x260 [ 184.359511][ T9449] ? kernfs_path_from_node+0x216/0x260 [ 184.359535][ T9449] sysfs_warn_dup+0x8e/0xa0 [ 184.359556][ T9449] sysfs_do_create_link_sd+0xc0/0x110 [ 184.359579][ T9449] device_add_class_symlinks+0x1cf/0x240 [ 184.359602][ T9449] device_add+0x475/0xb50 [ 184.359627][ T9449] wiphy_register+0x199a/0x26b0 [ 184.359661][ T9449] ? __pfx_wiphy_register+0x10/0x10 [ 184.359676][ T9449] ? minstrel_ht_alloc+0x893/0x990 [ 184.359703][ T9449] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 184.359736][ T9449] ieee80211_register_hw+0x334b/0x4060 [ 184.359772][ T9449] ? ieee80211_register_hw+0x14b1/0x4060 [ 184.359804][ T9449] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 184.359828][ T9449] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 184.359857][ T9449] ? __hrtimer_setup+0x187/0x210 [ 184.359877][ T9449] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 184.359898][ T9449] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 184.359950][ T9449] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 184.359969][ T9449] ? trace_kmalloc+0x1f/0xd0 [ 184.359984][ T9449] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 184.360003][ T9449] ? kstrndup+0xbf/0x160 [ 184.360028][ T9449] hwsim_new_radio_nl+0xea4/0x1b10 [ 184.360053][ T9449] ? __pfx___nla_validate_parse+0x10/0x10 [ 184.360086][ T9449] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 184.360123][ T9449] ? __nla_parse+0x40/0x60 [ 184.360147][ T9449] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 184.360180][ T9449] genl_family_rcv_msg_doit+0x212/0x300 [ 184.360209][ T9449] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 184.360245][ T9449] ? bpf_lsm_capable+0x9/0x20 [ 184.360265][ T9449] ? security_capable+0x7e/0x2e0 [ 184.360289][ T9449] genl_rcv_msg+0x60e/0x790 [ 184.360314][ T9449] ? __pfx_genl_rcv_msg+0x10/0x10 [ 184.360333][ T9449] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 184.360376][ T9449] netlink_rcv_skb+0x219/0x490 [ 184.360395][ T9449] ? __pfx_genl_rcv_msg+0x10/0x10 [ 184.360419][ T9449] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 184.360465][ T9449] ? down_read+0x1ad/0x2e0 [ 184.360483][ T9449] genl_rcv+0x28/0x40 [ 184.360502][ T9449] netlink_unicast+0x758/0x8d0 [ 184.360533][ T9449] netlink_sendmsg+0x805/0xb30 [ 184.360562][ T9449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.360585][ T9449] ? aa_sock_msg_perm+0x94/0x160 [ 184.360605][ T9449] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 184.360623][ T9449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.360640][ T9449] __sock_sendmsg+0x219/0x270 [ 184.360668][ T9449] ____sys_sendmsg+0x505/0x830 [ 184.360693][ T9449] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.360729][ T9449] ? import_iovec+0x74/0xa0 [ 184.360756][ T9449] ___sys_sendmsg+0x21f/0x2a0 [ 184.360780][ T9449] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.360842][ T9449] ? __fget_files+0x2a/0x420 [ 184.360862][ T9449] ? __fget_files+0x3a0/0x420 [ 184.360895][ T9449] __x64_sys_sendmsg+0x19b/0x260 [ 184.360919][ T9449] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 184.360959][ T9449] ? do_syscall_64+0xba/0x210 [ 184.360985][ T9449] do_syscall_64+0xf6/0x210 [ 184.361007][ T9449] ? clear_bhb_loop+0x45/0xa0 [ 184.361026][ T9449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.361041][ T9449] RIP: 0033:0x7f1ef738e969 [ 184.361055][ T9449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.361070][ T9449] RSP: 002b:00007f1ef82c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.361088][ T9449] RAX: ffffffffffffffda RBX: 00007f1ef75b5fa0 RCX: 00007f1ef738e969 [ 184.361101][ T9449] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 184.361111][ T9449] RBP: 00007f1ef7410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 184.361120][ T9449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.361130][ T9449] R13: 0000000000000000 R14: 00007f1ef75b5fa0 R15: 00007ffe020027b8 [ 184.361158][ T9449] [ 184.941715][ T9465] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 185.273308][ T9480] FAULT_INJECTION: forcing a failure. [ 185.273308][ T9480] name failslab, interval 1, probability 0, space 0, times 0 [ 185.292695][ T9480] CPU: 0 UID: 0 PID: 9480 Comm: syz.5.1048 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 185.292718][ T9480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 185.292727][ T9480] Call Trace: [ 185.292733][ T9480] [ 185.292741][ T9480] dump_stack_lvl+0x189/0x250 [ 185.292769][ T9480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.292789][ T9480] ? __pfx__printk+0x10/0x10 [ 185.292818][ T9480] should_fail_ex+0x414/0x560 [ 185.292844][ T9480] should_failslab+0xa8/0x100 [ 185.292865][ T9480] __kmalloc_cache_noprof+0x70/0x3d0 [ 185.292883][ T9480] ? sctp_add_bind_addr+0x8c/0x370 [ 185.292908][ T9480] sctp_add_bind_addr+0x8c/0x370 [ 185.292935][ T9480] sctp_copy_local_addr_list+0x30b/0x4e0 [ 185.292961][ T9480] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 185.292983][ T9480] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 185.293007][ T9480] ? sctp_v6_is_any+0x64/0x80 [ 185.293026][ T9480] ? sctp_copy_one_addr+0x93/0x360 [ 185.293050][ T9480] sctp_bind_addr_copy+0xb3/0x3c0 [ 185.293073][ T9480] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 185.293096][ T9480] sctp_connect_new_asoc+0x2e0/0x690 [ 185.293117][ T9480] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 185.293132][ T9480] ? __local_bh_enable_ip+0x12d/0x1c0 [ 185.293161][ T9480] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 185.293179][ T9480] ? security_sctp_bind_connect+0x7e/0x2e0 [ 185.293205][ T9480] sctp_sendmsg+0x155c/0x2810 [ 185.293237][ T9480] ? __pfx_sctp_sendmsg+0x10/0x10 [ 185.293259][ T9480] ? aa_sk_perm+0x81e/0x950 [ 185.293280][ T9480] ? __pfx_aa_sk_perm+0x10/0x10 [ 185.293298][ T9480] ? sock_rps_record_flow+0x19/0x410 [ 185.293324][ T9480] ? inet_sendmsg+0x2f4/0x370 [ 185.293347][ T9480] __sock_sendmsg+0x19c/0x270 [ 185.293372][ T9480] __sys_sendto+0x3bd/0x520 [ 185.293391][ T9480] ? __pfx___sys_sendto+0x10/0x10 [ 185.293406][ T9480] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 185.293441][ T9480] ? __fget_files+0x3a0/0x420 [ 185.293470][ T9480] ? ksys_write+0x1f0/0x250 [ 185.293486][ T9480] ? rcu_is_watching+0x15/0xb0 [ 185.293515][ T9480] __x64_sys_sendto+0xde/0x100 [ 185.293537][ T9480] do_syscall_64+0xf6/0x210 [ 185.293559][ T9480] ? clear_bhb_loop+0x45/0xa0 [ 185.293579][ T9480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.293594][ T9480] RIP: 0033:0x7f449b98e969 [ 185.293609][ T9480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.293629][ T9480] RSP: 002b:00007f449c88d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 185.293646][ T9480] RAX: ffffffffffffffda RBX: 00007f449bbb5fa0 RCX: 00007f449b98e969 [ 185.293658][ T9480] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 185.293668][ T9480] RBP: 00007f449c88d090 R08: 0000200000000080 R09: 000000000000001c [ 185.293678][ T9480] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 185.293687][ T9480] R13: 0000000000000000 R14: 00007f449bbb5fa0 R15: 00007ffdd700eda8 [ 185.293713][ T9480] [ 185.860913][ T9498] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 185.878198][ T9498] team0: Port device batadv1 added [ 185.884129][ T9499] __nla_validate_parse: 6 callbacks suppressed [ 185.884145][ T9499] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1052'. [ 185.958336][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1058'. [ 186.013026][ T9507] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.032370][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1058'. [ 186.159215][ T9507] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.198052][ T9518] netlink: 'syz.5.1061': attribute type 10 has an invalid length. [ 186.242670][ T9518] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1061'. [ 186.258072][ T9518] bridge0: port 3(dummy0) entered blocking state [ 186.282242][ T9518] bridge0: port 3(dummy0) entered disabled state [ 186.292953][ T9518] dummy0: entered allmulticast mode [ 186.300162][ T9518] dummy0: entered promiscuous mode [ 186.306719][ T9518] bridge0: port 3(dummy0) entered blocking state [ 186.313238][ T9518] bridge0: port 3(dummy0) entered forwarding state [ 186.366681][ T9524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1063'. [ 186.465192][ T9507] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.547532][ T9530] netlink: 'syz.0.1065': attribute type 5 has an invalid length. [ 186.593691][ T9507] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.627466][ T9530] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1065'. [ 186.652771][ T9530] 0·: renamed from hsr0 [ 186.660449][ T9530] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 186.693432][ T9530] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.695824][ T9534] sctp: [Deprecated]: syz.5.1067 (pid 9534) Use of int in max_burst socket option. [ 186.695824][ T9534] Use struct sctp_assoc_value instead [ 186.713358][ T9530] 0·: entered allmulticast mode [ 186.746065][ T9530] hsr_slave_0: entered allmulticast mode [ 186.752034][ T9530] hsr_slave_1: entered allmulticast mode [ 186.760078][ T9530] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 186.878185][ T9507] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.947507][ T9507] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.982239][ T9507] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.002984][ T13] tipc: Subscription rejected, illegal request [ 187.024321][ T9507] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.051316][ T9544] batadv_slave_1: entered promiscuous mode [ 187.090046][ T9551] batadv0: entered promiscuous mode [ 187.132040][ T9542] batadv0: left promiscuous mode [ 187.153888][ T9554] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1073'. [ 187.170309][ T9542] batadv_slave_1: left promiscuous mode [ 187.194287][ T9554] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.229151][ T9558] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1074'. [ 187.270812][ T9560] netlink: 'syz.5.1076': attribute type 8 has an invalid length. [ 187.307347][ T9560] geneve0: entered allmulticast mode [ 187.449452][ T9571] sctp: [Deprecated]: syz.4.1081 (pid 9571) Use of int in max_burst socket option. [ 187.449452][ T9571] Use struct sctp_assoc_value instead [ 187.646170][ T9589] FAULT_INJECTION: forcing a failure. [ 187.646170][ T9589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.668537][ T9589] CPU: 1 UID: 0 PID: 9589 Comm: syz.6.1086 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 187.668561][ T9589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 187.668571][ T9589] Call Trace: [ 187.668578][ T9589] [ 187.668589][ T9589] dump_stack_lvl+0x189/0x250 [ 187.668612][ T9589] ? __lock_acquire+0xaac/0xd20 [ 187.668635][ T9589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.668655][ T9589] ? __pfx__printk+0x10/0x10 [ 187.668672][ T9589] ? __might_fault+0xb0/0x130 [ 187.668700][ T9589] should_fail_ex+0x414/0x560 [ 187.668728][ T9589] _copy_from_user+0x2d/0xb0 [ 187.668749][ T9589] ___sys_sendmsg+0x158/0x2a0 [ 187.668770][ T9589] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.668823][ T9589] ? __fget_files+0x2a/0x420 [ 187.668843][ T9589] ? __fget_files+0x3a0/0x420 [ 187.668872][ T9589] __x64_sys_sendmsg+0x19b/0x260 [ 187.668893][ T9589] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.668922][ T9589] ? rcu_is_watching+0x15/0xb0 [ 187.668952][ T9589] do_syscall_64+0xf6/0x210 [ 187.668975][ T9589] ? clear_bhb_loop+0x45/0xa0 [ 187.668994][ T9589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.669010][ T9589] RIP: 0033:0x7f2e7998e969 [ 187.669024][ T9589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.669037][ T9589] RSP: 002b:00007f2e7a7ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.669055][ T9589] RAX: ffffffffffffffda RBX: 00007f2e79bb5fa0 RCX: 00007f2e7998e969 [ 187.669067][ T9589] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000004 [ 187.669078][ T9589] RBP: 00007f2e7a7ec090 R08: 0000000000000000 R09: 0000000000000000 [ 187.669088][ T9589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.669097][ T9589] R13: 0000000000000000 R14: 00007f2e79bb5fa0 R15: 00007ffd8f9f5fa8 [ 187.669125][ T9589] [ 187.997614][ T9603] FAULT_INJECTION: forcing a failure. [ 187.997614][ T9603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.011135][ T9603] CPU: 0 UID: 0 PID: 9603 Comm: syz.7.1089 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 188.011165][ T9603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 188.011175][ T9603] Call Trace: [ 188.011182][ T9603] [ 188.011189][ T9603] dump_stack_lvl+0x189/0x250 [ 188.011218][ T9603] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.011240][ T9603] ? __pfx__printk+0x10/0x10 [ 188.011269][ T9603] should_fail_ex+0x414/0x560 [ 188.011297][ T9603] _copy_to_user+0x31/0xb0 [ 188.011320][ T9603] simple_read_from_buffer+0xe1/0x170 [ 188.011344][ T9603] proc_fail_nth_read+0x1df/0x250 [ 188.011366][ T9603] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 188.011386][ T9603] ? rw_verify_area+0x258/0x650 [ 188.011399][ T9603] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 188.011417][ T9603] vfs_read+0x1fd/0x980 [ 188.011434][ T9603] ? __pfx___mutex_lock+0x10/0x10 [ 188.011452][ T9603] ? __pfx_vfs_read+0x10/0x10 [ 188.011466][ T9603] ? __fget_files+0x2a/0x420 [ 188.011485][ T9603] ? __fget_files+0x3a0/0x420 [ 188.011498][ T9603] ? __fget_files+0x2a/0x420 [ 188.011520][ T9603] ksys_read+0x145/0x250 [ 188.011535][ T9603] ? __pfx_ksys_read+0x10/0x10 [ 188.011551][ T9603] ? do_syscall_64+0xba/0x210 [ 188.011571][ T9603] do_syscall_64+0xf6/0x210 [ 188.011588][ T9603] ? clear_bhb_loop+0x45/0xa0 [ 188.011603][ T9603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.011614][ T9603] RIP: 0033:0x7f792d18d37c [ 188.011627][ T9603] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 188.011637][ T9603] RSP: 002b:00007f792df39030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 188.011650][ T9603] RAX: ffffffffffffffda RBX: 00007f792d3b5fa0 RCX: 00007f792d18d37c [ 188.011659][ T9603] RDX: 000000000000000f RSI: 00007f792df390a0 RDI: 0000000000000004 [ 188.011667][ T9603] RBP: 00007f792df39090 R08: 0000000000000000 R09: 0000000000000000 [ 188.011674][ T9603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.011680][ T9603] R13: 0000000000000000 R14: 00007f792d3b5fa0 R15: 00007ffc96e51b28 [ 188.011702][ T9603] [ 188.341479][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1087'. [ 188.365773][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1087'. [ 188.690666][ T9633] netlink: 'syz.5.1097': attribute type 10 has an invalid length. [ 188.713829][ T9630] bridge0: port 3(dummy0) entered disabled state [ 188.720366][ T9630] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.727839][ T9630] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.760613][ T9630] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 188.788173][ T9633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.996385][ T9640] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.184381][ T9651] FAULT_INJECTION: forcing a failure. [ 189.184381][ T9651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.205290][ T9651] CPU: 0 UID: 0 PID: 9651 Comm: syz.5.1104 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 189.205315][ T9651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 189.205324][ T9651] Call Trace: [ 189.205331][ T9651] [ 189.205338][ T9651] dump_stack_lvl+0x189/0x250 [ 189.205366][ T9651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.205387][ T9651] ? __pfx__printk+0x10/0x10 [ 189.205415][ T9651] should_fail_ex+0x414/0x560 [ 189.205443][ T9651] _copy_to_user+0x31/0xb0 [ 189.205466][ T9651] simple_read_from_buffer+0xe1/0x170 [ 189.205487][ T9651] proc_fail_nth_read+0x1df/0x250 [ 189.205511][ T9651] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.205533][ T9651] ? rw_verify_area+0x258/0x650 [ 189.205550][ T9651] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.205570][ T9651] vfs_read+0x1fd/0x980 [ 189.205593][ T9651] ? __pfx___mutex_lock+0x10/0x10 [ 189.205615][ T9651] ? __pfx_vfs_read+0x10/0x10 [ 189.205634][ T9651] ? __fget_files+0x2a/0x420 [ 189.205658][ T9651] ? __fget_files+0x3a0/0x420 [ 189.205675][ T9651] ? __fget_files+0x2a/0x420 [ 189.205703][ T9651] ksys_read+0x145/0x250 [ 189.205718][ T9651] ? __fget_files+0x2a/0x420 [ 189.205738][ T9651] ? __pfx_ksys_read+0x10/0x10 [ 189.205769][ T9651] ? do_syscall_64+0xba/0x210 [ 189.205794][ T9651] do_syscall_64+0xf6/0x210 [ 189.205815][ T9651] ? clear_bhb_loop+0x45/0xa0 [ 189.205835][ T9651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.205849][ T9651] RIP: 0033:0x7f449b98d37c [ 189.205864][ T9651] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 189.205878][ T9651] RSP: 002b:00007f449c88d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 189.205895][ T9651] RAX: ffffffffffffffda RBX: 00007f449bbb5fa0 RCX: 00007f449b98d37c [ 189.205907][ T9651] RDX: 000000000000000f RSI: 00007f449c88d0a0 RDI: 0000000000000007 [ 189.205917][ T9651] RBP: 00007f449c88d090 R08: 0000000000000000 R09: 0000000000000000 [ 189.205927][ T9651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.205937][ T9651] R13: 0000000000000000 R14: 00007f449bbb5fa0 R15: 00007ffdd700eda8 [ 189.205966][ T9651] [ 189.502006][ T9655] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.502743][ T973] IPVS: starting estimator thread 0... [ 189.602770][ T9658] IPVS: using max 37 ests per chain, 88800 per kthread [ 189.695391][ T9655] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.748403][ T9657] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 42773 - 0 [ 189.765143][ T9657] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 34437 - 0 [ 189.777662][ T9657] netdevsim netdevsim4 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 189.820914][ T9655] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.857114][ T9657] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 42773 - 0 [ 189.873826][ T9657] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 34437 - 0 [ 189.897861][ T9657] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 189.940964][ T9655] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.965881][ T9664] tipc: Started in network mode [ 189.970809][ T9664] tipc: Node identity ac1414aa, cluster identity 4711 [ 189.979030][ T9664] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 189.988015][ T9664] tipc: Enabled bearer , priority 10 [ 189.999517][ T9657] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 42773 - 0 [ 190.018252][ T9657] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 34437 - 0 [ 190.028543][ T9657] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 190.105550][ T9657] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 42773 - 0 [ 190.117209][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 190.124660][ T9657] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 34437 - 0 [ 190.135645][ T9657] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 190.189062][ T9655] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.241172][ T9655] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.252841][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 190.312240][ T9655] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.370738][ T9655] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.392673][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 190.426001][ T9657] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 42773 - 0 [ 190.434578][ T9657] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 34437 - 0 [ 190.448957][ T9657] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 190.498719][ T9657] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 42773 - 0 [ 190.532718][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 190.543671][ T9657] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 34437 - 0 [ 190.568284][ T9657] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 190.625488][ T9657] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 42773 - 0 [ 190.663206][ T9657] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 34437 - 0 [ 190.672761][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 190.686460][ T9657] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 190.712224][ T9657] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 42773 - 0 [ 190.722164][ T9657] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 34437 - 0 [ 190.736171][ T9657] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 190.812880][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 190.883570][ T9692] netlink: 'syz.7.1116': attribute type 10 has an invalid length. [ 190.908471][ T9692] __nla_validate_parse: 12 callbacks suppressed [ 190.908903][ T9692] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1116'. [ 190.943596][ T9692] bridge0: port 3(dummy0) entered blocking state [ 190.952891][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 190.964060][ T9692] bridge0: port 3(dummy0) entered disabled state [ 190.970783][ T9692] dummy0: entered allmulticast mode [ 190.978110][ T9692] dummy0: entered promiscuous mode [ 190.984131][ T9692] bridge0: port 3(dummy0) entered blocking state [ 190.990617][ T9692] bridge0: port 3(dummy0) entered forwarding state [ 191.037442][ T9698] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1118'. [ 191.070285][ T9698] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1118'. [ 191.094232][ T5874] tipc: Node number set to 2886997162 [ 191.111945][ T9698] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1118'. [ 191.126050][ T9702] .2@ÿ: renamed from bond_slave_0 [ 191.232620][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 191.375144][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1123'. [ 191.440406][ T9712] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.453723][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1123'. [ 191.513725][ T9716] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1124'. [ 191.565569][ T9712] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.660791][ T9712] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.666044][ T9722] FAULT_INJECTION: forcing a failure. [ 191.666044][ T9722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.689649][ T9722] CPU: 1 UID: 0 PID: 9722 Comm: syz.5.1127 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 191.689672][ T9722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 191.689682][ T9722] Call Trace: [ 191.689689][ T9722] [ 191.689696][ T9722] dump_stack_lvl+0x189/0x250 [ 191.689718][ T9722] ? __lock_acquire+0xaac/0xd20 [ 191.689741][ T9722] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.689759][ T9722] ? __pfx__printk+0x10/0x10 [ 191.689773][ T9722] ? __might_fault+0xb0/0x130 [ 191.689797][ T9722] should_fail_ex+0x414/0x560 [ 191.689829][ T9722] _copy_from_user+0x2d/0xb0 [ 191.689846][ T9722] ___sys_sendmsg+0x158/0x2a0 [ 191.689862][ T9722] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.689915][ T9722] ? __fget_files+0x2a/0x420 [ 191.689932][ T9722] ? __fget_files+0x3a0/0x420 [ 191.689959][ T9722] __x64_sys_sendmsg+0x19b/0x260 [ 191.689980][ T9722] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 191.690016][ T9722] ? do_syscall_64+0xba/0x210 [ 191.690041][ T9722] do_syscall_64+0xf6/0x210 [ 191.690062][ T9722] ? clear_bhb_loop+0x45/0xa0 [ 191.690080][ T9722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.690095][ T9722] RIP: 0033:0x7f449b98e969 [ 191.690110][ T9722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.690124][ T9722] RSP: 002b:00007f449c88d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.690141][ T9722] RAX: ffffffffffffffda RBX: 00007f449bbb5fa0 RCX: 00007f449b98e969 [ 191.690152][ T9722] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 191.690161][ T9722] RBP: 00007f449c88d090 R08: 0000000000000000 R09: 0000000000000000 [ 191.690171][ T9722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.690179][ T9722] R13: 0000000000000000 R14: 00007f449bbb5fa0 R15: 00007ffdd700eda8 [ 191.690204][ T9722] [ 191.888173][ T9723] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1126'. [ 191.898901][ T9723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1126'. [ 191.985850][ T9712] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.178550][ T9739] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1133'. [ 192.331493][ T9743] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.386318][ T9747] netlink: 'syz.0.1137': attribute type 4 has an invalid length. [ 192.930012][ T9774] netlink: 'syz.6.1148': attribute type 4 has an invalid length. [ 192.965312][ T9775] xt_CT: You must specify a L4 protocol and not use inversions on it [ 193.306067][ T9789] bridge0: port 3(dummy0) entered disabled state [ 193.312816][ T9789] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.320500][ T9789] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.474083][ T9789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.490715][ T9789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.549260][ T9789] vlan0: left promiscuous mode [ 193.650507][ T9789] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.672593][ T9789] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.680998][ T9789] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.702607][ T9789] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.914746][ T9807] netlink: 'syz.4.1158': attribute type 27 has an invalid length. [ 193.941961][ T9803] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 194.142988][ C0] net_ratelimit: 3 callbacks suppressed [ 194.143007][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 194.146309][ T9819] sctp: [Deprecated]: syz.6.1160 (pid 9819) Use of int in max_burst socket option. [ 194.146309][ T9819] Use struct sctp_assoc_value instead [ 194.200672][ T9807] bridge0: port 1(vlan3) entered disabled state [ 194.227734][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.234800][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.470125][ T9807] vlan0: left promiscuous mode [ 194.511657][ T9807] netdevsim netdevsim4 eth0: unset [1, 2] type 2 family 0 port 6081 - 0 [ 194.524786][ T9807] netdevsim netdevsim4 eth1: unset [1, 2] type 2 family 0 port 6081 - 0 [ 194.533680][ T9807] netdevsim netdevsim4 eth2: unset [1, 2] type 2 family 0 port 6081 - 0 [ 194.548400][ T9807] netdevsim netdevsim4 eth3: unset [1, 2] type 2 family 0 port 6081 - 0 [ 194.602100][ T9807] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 42773 - 0 [ 194.631686][ T9807] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 42773 - 0 [ 194.655682][ T9807] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 42773 - 0 [ 194.664221][ T9807] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 42773 - 0 [ 194.674475][ T9807] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 34437 - 0 [ 194.683980][ T9807] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 34437 - 0 [ 194.692481][ T9807] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 34437 - 0 [ 194.701478][ T9807] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 34437 - 0 [ 194.723964][ T9807] geneve2: left promiscuous mode [ 194.728969][ T9807] geneve2: left allmulticast mode [ 194.754819][ T9807] hsr0: left allmulticast mode [ 194.759641][ T9807] hsr_slave_0: left allmulticast mode [ 194.772625][ T9807] hsr_slave_1: left allmulticast mode [ 194.778247][ T9807] macsec1: left allmulticast mode [ 194.814146][ T9807] vlan4: left promiscuous mode [ 194.819115][ T9807] vlan4: left allmulticast mode [ 194.824569][ T9807] vlan5: left promiscuous mode [ 194.829345][ T9807] bond0: left promiscuous mode [ 194.834324][ T9807] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 194.841274][ T9807] vlan5: left allmulticast mode [ 194.851501][ T9712] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.898410][ T9811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.906435][ T9811] bridge0: port 1(vlan3) entered blocking state [ 194.912833][ T9811] bridge0: port 1(vlan3) entered forwarding state [ 194.932340][ T9811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.980393][ T9712] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.012105][ T9712] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.090426][ T9712] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.110653][ T9845] vlan0: entered promiscuous mode [ 195.182953][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 195.286876][ T9859] FAULT_INJECTION: forcing a failure. [ 195.286876][ T9859] name failslab, interval 1, probability 0, space 0, times 0 [ 195.314794][ T9863] FAULT_INJECTION: forcing a failure. [ 195.314794][ T9863] name failslab, interval 1, probability 0, space 0, times 0 [ 195.319089][ T9859] CPU: 0 UID: 0 PID: 9859 Comm: syz.0.1168 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 195.319112][ T9859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 195.319123][ T9859] Call Trace: [ 195.319130][ T9859] [ 195.319137][ T9859] dump_stack_lvl+0x189/0x250 [ 195.319167][ T9859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.319187][ T9859] ? __pfx__printk+0x10/0x10 [ 195.319209][ T9859] ? __pfx___might_resched+0x10/0x10 [ 195.319224][ T9859] ? fs_reclaim_acquire+0x7d/0x100 [ 195.319250][ T9859] should_fail_ex+0x414/0x560 [ 195.319278][ T9859] should_failslab+0xa8/0x100 [ 195.319299][ T9859] __kmalloc_cache_noprof+0x70/0x3d0 [ 195.319318][ T9859] ? genl_start+0x1c9/0x6c0 [ 195.319343][ T9859] genl_start+0x1c9/0x6c0 [ 195.319362][ T9859] ? netlink_lookup+0x30/0x200 [ 195.319393][ T9859] __netlink_dump_start+0x466/0x7e0 [ 195.319418][ T9859] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 195.319443][ T9859] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 195.319462][ T9859] ? genl_get_cmd+0x67f/0x910 [ 195.319487][ T9859] ? __pfx_genl_start+0x10/0x10 [ 195.319504][ T9859] ? __pfx_genl_dumpit+0x10/0x10 [ 195.319521][ T9859] ? __pfx_genl_done+0x10/0x10 [ 195.319547][ T9859] ? stack_depot_save_flags+0x40/0x910 [ 195.319569][ T9859] genl_rcv_msg+0x5da/0x790 [ 195.319596][ T9859] ? __pfx_genl_rcv_msg+0x10/0x10 [ 195.319615][ T9859] ? __pfx_ieee802154_llsec_dump_devkeys+0x10/0x10 [ 195.319648][ T9859] netlink_rcv_skb+0x219/0x490 [ 195.319667][ T9859] ? __pfx_genl_rcv_msg+0x10/0x10 [ 195.319688][ T9859] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 195.319729][ T9859] ? down_read+0x1ad/0x2e0 [ 195.319747][ T9859] genl_rcv+0x28/0x40 [ 195.319765][ T9859] netlink_unicast+0x758/0x8d0 [ 195.319792][ T9859] netlink_sendmsg+0x805/0xb30 [ 195.319819][ T9859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.319840][ T9859] ? aa_sock_msg_perm+0x94/0x160 [ 195.319860][ T9859] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 195.319877][ T9859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.319894][ T9859] __sock_sendmsg+0x219/0x270 [ 195.319924][ T9859] ____sys_sendmsg+0x505/0x830 [ 195.319948][ T9859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.319976][ T9859] ? import_iovec+0x74/0xa0 [ 195.320000][ T9859] ___sys_sendmsg+0x21f/0x2a0 [ 195.320022][ T9859] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.320077][ T9859] ? __fget_files+0x2a/0x420 [ 195.320096][ T9859] ? __fget_files+0x3a0/0x420 [ 195.320125][ T9859] __x64_sys_sendmsg+0x19b/0x260 [ 195.320147][ T9859] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 195.320182][ T9859] ? do_syscall_64+0xba/0x210 [ 195.320207][ T9859] do_syscall_64+0xf6/0x210 [ 195.320228][ T9859] ? clear_bhb_loop+0x45/0xa0 [ 195.320247][ T9859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.320262][ T9859] RIP: 0033:0x7fdd3758e969 [ 195.320276][ T9859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.320290][ T9859] RSP: 002b:00007fdd38439038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.320307][ T9859] RAX: ffffffffffffffda RBX: 00007fdd377b5fa0 RCX: 00007fdd3758e969 [ 195.320318][ T9859] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 195.320328][ T9859] RBP: 00007fdd38439090 R08: 0000000000000000 R09: 0000000000000000 [ 195.320338][ T9859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.320347][ T9859] R13: 0000000000000000 R14: 00007fdd377b5fa0 R15: 00007ffde1ab5048 [ 195.320379][ T9859] [ 195.712646][ T9863] CPU: 1 UID: 0 PID: 9863 Comm: syz.6.1169 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 195.712672][ T9863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 195.712681][ T9863] Call Trace: [ 195.712688][ T9863] [ 195.712696][ T9863] dump_stack_lvl+0x189/0x250 [ 195.712724][ T9863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.712744][ T9863] ? __pfx__printk+0x10/0x10 [ 195.712761][ T9863] ? __pfx___might_resched+0x10/0x10 [ 195.712776][ T9863] ? fs_reclaim_acquire+0x7d/0x100 [ 195.712800][ T9863] should_fail_ex+0x414/0x560 [ 195.712827][ T9863] should_failslab+0xa8/0x100 [ 195.712847][ T9863] __kmalloc_cache_noprof+0x70/0x3d0 [ 195.712866][ T9863] ? alloc_netdev_mqs+0xc36/0x11e0 [ 195.712891][ T9863] alloc_netdev_mqs+0xc36/0x11e0 [ 195.712920][ T9863] rtnl_create_link+0x31f/0xd10 [ 195.712948][ T9863] rtnl_newlink_create+0x25c/0xb00 [ 195.712973][ T9863] ? __pfx_aa_get_newest_label+0x10/0x10 [ 195.712995][ T9863] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 195.713012][ T9863] ? rtnl_newlink+0x8db/0x1c70 [ 195.713031][ T9863] ? __pfx___mutex_lock+0x10/0x10 [ 195.713064][ T9863] ? ns_capable+0x8a/0xf0 [ 195.713084][ T9863] rtnl_newlink+0x16d6/0x1c70 [ 195.713119][ T9863] ? __pfx_rtnl_newlink+0x10/0x10 [ 195.713138][ T9863] ? is_bpf_text_address+0x26/0x2b0 [ 195.713163][ T9863] ? is_bpf_text_address+0x292/0x2b0 [ 195.713188][ T9863] ? __lock_acquire+0xaac/0xd20 [ 195.713222][ T9863] ? __lock_acquire+0xaac/0xd20 [ 195.713261][ T9863] ? is_bpf_text_address+0x26/0x2b0 [ 195.713284][ T9863] ? is_bpf_text_address+0x292/0x2b0 [ 195.713303][ T9863] ? is_bpf_text_address+0x26/0x2b0 [ 195.713328][ T9863] ? aa_get_newest_label+0xf7/0x5d0 [ 195.713347][ T9863] ? __lock_acquire+0xaac/0xd20 [ 195.713392][ T9863] ? __pfx_rtnl_newlink+0x10/0x10 [ 195.713408][ T9863] rtnetlink_rcv_msg+0x7cc/0xb70 [ 195.713424][ T9863] ? kasan_save_track+0x4f/0x80 [ 195.713443][ T9863] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 195.713459][ T9863] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.713477][ T9863] ? __lock_acquire+0xaac/0xd20 [ 195.713510][ T9863] netlink_rcv_skb+0x219/0x490 [ 195.713529][ T9863] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.713548][ T9863] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 195.713585][ T9863] ? netlink_deliver_tap+0x2e/0x1b0 [ 195.713601][ T9863] ? netlink_deliver_tap+0x2e/0x1b0 [ 195.713630][ T9863] netlink_unicast+0x758/0x8d0 [ 195.713658][ T9863] netlink_sendmsg+0x805/0xb30 [ 195.713686][ T9863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.713707][ T9863] ? aa_sock_msg_perm+0x94/0x160 [ 195.713726][ T9863] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 195.713743][ T9863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.713763][ T9863] __sock_sendmsg+0x219/0x270 [ 195.713789][ T9863] ____sys_sendmsg+0x505/0x830 [ 195.713815][ T9863] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.713845][ T9863] ? import_iovec+0x74/0xa0 [ 195.713869][ T9863] ___sys_sendmsg+0x21f/0x2a0 [ 195.713891][ T9863] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.713951][ T9863] ? __fget_files+0x2a/0x420 [ 195.713969][ T9863] ? __fget_files+0x3a0/0x420 [ 195.713999][ T9863] __x64_sys_sendmsg+0x19b/0x260 [ 195.714022][ T9863] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 195.714060][ T9863] ? do_syscall_64+0xba/0x210 [ 195.714084][ T9863] do_syscall_64+0xf6/0x210 [ 195.714106][ T9863] ? clear_bhb_loop+0x45/0xa0 [ 195.714126][ T9863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.714141][ T9863] RIP: 0033:0x7f2e7998e969 [ 195.714157][ T9863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.714170][ T9863] RSP: 002b:00007f2e7a7ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.714188][ T9863] RAX: ffffffffffffffda RBX: 00007f2e79bb5fa0 RCX: 00007f2e7998e969 [ 195.714200][ T9863] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 195.714210][ T9863] RBP: 00007f2e7a7ec090 R08: 0000000000000000 R09: 0000000000000000 [ 195.714220][ T9863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.714230][ T9863] R13: 0000000000000000 R14: 00007f2e79bb5fa0 R15: 00007ffd8f9f5fa8 [ 195.714259][ T9863] [ 195.784286][ T9871] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 196.140629][ T9871] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 196.203510][ T8786] vlan2: left promiscuous mode [ 196.222905][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 196.314589][ T5138] Bluetooth: hci1: command 0x0406 tx timeout [ 196.328074][ T9880] __nla_validate_parse: 9 callbacks suppressed [ 196.328091][ T9880] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1173'. [ 196.354599][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1173'. [ 196.371027][ T9884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1175'. [ 196.433736][ T9884] netlink: 'syz.4.1175': attribute type 4 has an invalid length. [ 196.514196][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1177'. [ 196.542102][ T9894] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.559330][ T9895] netlink: 'syz.6.1179': attribute type 10 has an invalid length. [ 196.566471][ T9898] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1177'. [ 196.574987][ T9895] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1179'. [ 196.648655][ T9894] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.681862][ T9905] FAULT_INJECTION: forcing a failure. [ 196.681862][ T9905] name failslab, interval 1, probability 0, space 0, times 0 [ 196.696450][ T9905] CPU: 0 UID: 0 PID: 9905 Comm: syz.6.1183 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 196.696476][ T9905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 196.696486][ T9905] Call Trace: [ 196.696493][ T9905] [ 196.696500][ T9905] dump_stack_lvl+0x189/0x250 [ 196.696530][ T9905] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.696550][ T9905] ? __pfx__printk+0x10/0x10 [ 196.696574][ T9905] ? __pfx___might_resched+0x10/0x10 [ 196.696588][ T9905] ? fs_reclaim_acquire+0x7d/0x100 [ 196.696614][ T9905] should_fail_ex+0x414/0x560 [ 196.696643][ T9905] should_failslab+0xa8/0x100 [ 196.696664][ T9905] __kmalloc_cache_noprof+0x70/0x3d0 [ 196.696683][ T9905] ? hash_ip_create+0x6d5/0x1410 [ 196.696707][ T9905] hash_ip_create+0x6d5/0x1410 [ 196.696741][ T9905] ? __pfx_hash_ip_create+0x10/0x10 [ 196.696762][ T9905] ? ip_set_create+0x4a2/0x1940 [ 196.696782][ T9905] ? __pfx_hash_ip_create+0x10/0x10 [ 196.696801][ T9905] ip_set_create+0xa94/0x1940 [ 196.696822][ T9905] ? ip_set_create+0x4a2/0x1940 [ 196.696855][ T9905] ? __pfx_ip_set_create+0x10/0x10 [ 196.696913][ T9905] nfnetlink_rcv_msg+0xb4a/0x1130 [ 196.696935][ T9905] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 196.696974][ T9905] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 196.697026][ T9905] ? is_bpf_text_address+0x26/0x2b0 [ 196.697051][ T9905] ? is_bpf_text_address+0x292/0x2b0 [ 196.697080][ T9905] netlink_rcv_skb+0x219/0x490 [ 196.697099][ T9905] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 196.697121][ T9905] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 196.697152][ T9905] ? apparmor_capable+0x137/0x1b0 [ 196.697174][ T9905] ? bpf_lsm_capable+0x9/0x20 [ 196.697193][ T9905] ? security_capable+0x7e/0x2e0 [ 196.697218][ T9905] nfnetlink_rcv+0x273/0x2530 [ 196.697242][ T9905] ? kernel_text_address+0xa5/0xe0 [ 196.697263][ T9905] ? __kernel_text_address+0xd/0x40 [ 196.697287][ T9905] ? unwind_get_return_address+0x4d/0x90 [ 196.697305][ T9905] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 196.697322][ T9905] ? arch_stack_walk+0xfc/0x150 [ 196.697355][ T9905] ? stack_trace_save+0x9c/0xe0 [ 196.697374][ T9905] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 196.697395][ T9905] ? stack_depot_save_flags+0x40/0x910 [ 196.697421][ T9905] ? kasan_save_track+0x4f/0x80 [ 196.697436][ T9905] ? kasan_save_track+0x3e/0x80 [ 196.697460][ T9905] ? __lock_acquire+0xaac/0xd20 [ 196.697505][ T9905] ? __lock_acquire+0xaac/0xd20 [ 196.697534][ T9905] ? netlink_deliver_tap+0x2e/0x1b0 [ 196.697558][ T9905] ? netlink_deliver_tap+0x2e/0x1b0 [ 196.697574][ T9905] ? netlink_deliver_tap+0x2e/0x1b0 [ 196.697598][ T9905] netlink_unicast+0x758/0x8d0 [ 196.697626][ T9905] netlink_sendmsg+0x805/0xb30 [ 196.697653][ T9905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.697674][ T9905] ? aa_sock_msg_perm+0x94/0x160 [ 196.697693][ T9905] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 196.697710][ T9905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.697729][ T9905] __sock_sendmsg+0x219/0x270 [ 196.697755][ T9905] ____sys_sendmsg+0x505/0x830 [ 196.697781][ T9905] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.697810][ T9905] ? import_iovec+0x74/0xa0 [ 196.697834][ T9905] ___sys_sendmsg+0x21f/0x2a0 [ 196.697856][ T9905] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.697914][ T9905] ? __fget_files+0x2a/0x420 [ 196.697932][ T9905] ? __fget_files+0x3a0/0x420 [ 196.697962][ T9905] __x64_sys_sendmsg+0x19b/0x260 [ 196.697989][ T9905] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 196.698025][ T9905] ? do_syscall_64+0xba/0x210 [ 196.698051][ T9905] do_syscall_64+0xf6/0x210 [ 196.698073][ T9905] ? clear_bhb_loop+0x45/0xa0 [ 196.698093][ T9905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.698109][ T9905] RIP: 0033:0x7f2e7998e969 [ 196.698124][ T9905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.698138][ T9905] RSP: 002b:00007f2e7a7ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.698155][ T9905] RAX: ffffffffffffffda RBX: 00007f2e79bb5fa0 RCX: 00007f2e7998e969 [ 196.698167][ T9905] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 196.698178][ T9905] RBP: 00007f2e7a7ec090 R08: 0000000000000000 R09: 0000000000000000 [ 196.698188][ T9905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.698197][ T9905] R13: 0000000000000000 R14: 00007f2e79bb5fa0 R15: 00007ffd8f9f5fa8 [ 196.698226][ T9905] [ 197.196469][ T9894] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.214146][ T9911] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1187'. [ 197.229304][ T8786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.247605][ T8786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.263314][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 197.280885][ T9894] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.352116][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1189'. [ 197.410576][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1190'. [ 197.413496][ T9919] xt_CT: You must specify a L4 protocol and not use inversions on it [ 197.441289][ T9921] netlink: 'syz.0.1190': attribute type 4 has an invalid length. [ 197.508519][ T9925] hsr0: entered promiscuous mode [ 197.513841][ T9925] macsec1: entered allmulticast mode [ 197.519154][ T9925] hsr0: entered allmulticast mode [ 197.523149][ T9927] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1193'. [ 197.524669][ T9925] hsr_slave_0: entered allmulticast mode [ 197.538950][ T9925] hsr_slave_1: entered allmulticast mode [ 197.543983][ T9927] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 197.554537][ T9925] hsr0: left allmulticast mode [ 197.559357][ T9925] hsr_slave_0: left allmulticast mode [ 197.565641][ T9925] hsr_slave_1: left allmulticast mode [ 197.622348][ T9930] netlink: 'syz.4.1195': attribute type 1 has an invalid length. [ 197.684104][ T9932] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 197.701538][ T9932] batman_adv: batadv0: Adding interface: ip6gretap2 [ 197.717952][ T9932] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.744684][ T9932] batman_adv: batadv0: Interface activated: ip6gretap2 [ 197.758360][ T9930] bond0: entered promiscuous mode [ 197.767053][ T9930] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 197.789691][ T9930] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 197.801207][ T9930] bond5: (slave macvlan2): Enslaving as a backup interface with an up link [ 197.824770][ T9938] netlink: 'syz.0.1197': attribute type 1 has an invalid length. [ 197.908955][ T9944] FAULT_INJECTION: forcing a failure. [ 197.908955][ T9944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.926150][ T9944] CPU: 1 UID: 0 PID: 9944 Comm: syz.4.1199 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 197.926173][ T9944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 197.926183][ T9944] Call Trace: [ 197.926189][ T9944] [ 197.926196][ T9944] dump_stack_lvl+0x189/0x250 [ 197.926237][ T9944] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.926258][ T9944] ? __pfx__printk+0x10/0x10 [ 197.926287][ T9944] should_fail_ex+0x414/0x560 [ 197.926313][ T9944] _copy_from_user+0x2d/0xb0 [ 197.926334][ T9944] __copy_msghdr+0x3c5/0x5b0 [ 197.926356][ T9944] ___sys_sendmsg+0x1a5/0x2a0 [ 197.926378][ T9944] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.926431][ T9944] ? __fget_files+0x2a/0x420 [ 197.926449][ T9944] ? __fget_files+0x3a0/0x420 [ 197.926477][ T9944] __x64_sys_sendmsg+0x19b/0x260 [ 197.926498][ T9944] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 197.926532][ T9944] ? do_syscall_64+0xba/0x210 [ 197.926557][ T9944] do_syscall_64+0xf6/0x210 [ 197.926577][ T9944] ? clear_bhb_loop+0x45/0xa0 [ 197.926598][ T9944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.926613][ T9944] RIP: 0033:0x7f1ef738e969 [ 197.926627][ T9944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.926641][ T9944] RSP: 002b:00007f1ef82c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.926659][ T9944] RAX: ffffffffffffffda RBX: 00007f1ef75b5fa0 RCX: 00007f1ef738e969 [ 197.926671][ T9944] RDX: 0000000000000014 RSI: 0000200000000380 RDI: 0000000000000004 [ 197.926681][ T9944] RBP: 00007f1ef82c8090 R08: 0000000000000000 R09: 0000000000000000 [ 197.926691][ T9944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.926700][ T9944] R13: 0000000000000000 R14: 00007f1ef75b5fa0 R15: 00007ffe020027b8 [ 197.926727][ T9944] [ 198.302748][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 198.396999][ T9955] netlink: 'syz.0.1204': attribute type 5 has an invalid length. [ 198.616141][ T9978] netlink: 'syz.4.1211': attribute type 10 has an invalid length. [ 198.635220][ T9978] bridge0: port 2(0!) entered blocking state [ 198.642968][ T9978] bridge0: port 2(0!) entered disabled state [ 198.649312][ T9978] !: entered allmulticast mode [ 198.687112][ T9978] !: entered promiscuous mode [ 198.692426][ T9978] vlan3: entered promiscuous mode [ 198.709846][ T9978] bridge0: port 2(0!) entered blocking state [ 198.716201][ T9978] bridge0: port 2(0!) entered forwarding state [ 198.845706][ T9989] lo speed is unknown, defaulting to 1000 [ 199.049591][ T9894] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.204686][ T9894] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.288708][ T9894] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.341874][ T9894] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.350876][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 199.450114][T10017] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 199.740996][T10027] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 200.078009][T10045] tipc: Started in network mode [ 200.083310][T10045] tipc: Node identity 4, cluster identity 4711 [ 200.089478][T10045] tipc: Node number set to 4 [ 200.388288][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 201.353348][T10080] __nla_validate_parse: 7 callbacks suppressed [ 201.353365][T10080] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1237'. [ 201.422648][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 201.551876][T10082] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1237'. [ 202.198247][T10062] tipc: Started in network mode [ 202.203841][T10062] tipc: Node identity ac1414aa, cluster identity 4711 [ 202.211181][T10062] tipc: Enabled bearer , priority 10 [ 202.217967][T10065] netlink: 124 bytes leftover after parsing attributes in process `syz.6.1235'. [ 202.338339][T10085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.410614][T10089] netlink: 124 bytes leftover after parsing attributes in process `syz.7.1240'. [ 202.473111][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.009487][T10101] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1244'. [ 203.212825][ T5897] tipc: Node number set to 2886997162 [ 203.235565][T10107] netlink: 348 bytes leftover after parsing attributes in process `syz.5.1247'. [ 203.251630][T10107] bridge0: port 4(netdevsim1) entered blocking state [ 203.277919][T10107] bridge0: port 4(netdevsim1) entered disabled state [ 203.316263][T10107] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 203.338535][T10107] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 203.376748][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1247'. [ 203.436755][T10119] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1248'. [ 203.490270][T10118] ip6gre1: entered promiscuous mode [ 203.496143][T10118] ip6gre1: entered allmulticast mode [ 203.503130][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.520024][T10121] x_tables: duplicate underflow at hook 2 [ 203.548674][T10117] netlink: 'syz.5.1247': attribute type 4 has an invalid length. [ 203.556818][T10117] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1247'. [ 203.576389][T10117] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 203.826556][T10130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1253'. [ 203.844798][T10130] openvswitch: netlink: Flow actions attr not present in new flow. [ 203.887985][T10133] bridge2: entered promiscuous mode [ 203.913131][T10133] bridge2: entered allmulticast mode [ 203.940180][T10133] team0: Port device bridge2 added [ 204.188648][T10147] netlink: 'syz.4.1257': attribute type 2 has an invalid length. [ 204.258879][T10131] team0 (unregistering): Port device team_slave_0 removed [ 204.285237][T10131] team0 (unregistering): Port device team_slave_1 removed [ 204.294307][T10131] team0 (unregistering): Port device batadv1 removed [ 204.331430][T10152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.433004][T10156] netlink: 'syz.7.1261': attribute type 21 has an invalid length. [ 204.542966][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.896166][T10179] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 204.920929][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.940032][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.976191][T10188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.075764][T10179] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 205.110905][T10193] netlink: 'syz.7.1272': attribute type 10 has an invalid length. [ 205.275113][T10200] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 205.282799][T10202] netlink: 'syz.6.1277': attribute type 12 has an invalid length. [ 205.582728][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 206.091394][T10255] lo speed is unknown, defaulting to 1000 [ 206.125437][T10260] FAULT_INJECTION: forcing a failure. [ 206.125437][T10260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.147562][T10260] CPU: 0 UID: 0 PID: 10260 Comm: syz.4.1296 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 206.147586][T10260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 206.147596][T10260] Call Trace: [ 206.147610][T10260] [ 206.147618][T10260] dump_stack_lvl+0x189/0x250 [ 206.147641][T10260] ? __lock_acquire+0xaac/0xd20 [ 206.147662][T10260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.147681][T10260] ? __pfx__printk+0x10/0x10 [ 206.147698][T10260] ? __might_fault+0xb0/0x130 [ 206.147727][T10260] should_fail_ex+0x414/0x560 [ 206.147755][T10260] _copy_from_iter+0x1db/0x15a0 [ 206.147782][T10260] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 206.147798][T10260] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 206.147819][T10260] ? __pfx__copy_from_iter+0x10/0x10 [ 206.147839][T10260] ? __build_skb_around+0x257/0x3e0 [ 206.147861][T10260] ? netlink_sendmsg+0x642/0xb30 [ 206.147877][T10260] ? skb_put+0x11b/0x210 [ 206.147898][T10260] netlink_sendmsg+0x6b2/0xb30 [ 206.147924][T10260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.147945][T10260] ? aa_sock_msg_perm+0x94/0x160 [ 206.147963][T10260] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 206.147981][T10260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.147999][T10260] __sock_sendmsg+0x219/0x270 [ 206.148024][T10260] ____sys_sendmsg+0x505/0x830 [ 206.148048][T10260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.148076][T10260] ? import_iovec+0x74/0xa0 [ 206.148099][T10260] ___sys_sendmsg+0x21f/0x2a0 [ 206.148120][T10260] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.148175][T10260] ? __fget_files+0x2a/0x420 [ 206.148193][T10260] ? __fget_files+0x3a0/0x420 [ 206.148222][T10260] __x64_sys_sendmsg+0x19b/0x260 [ 206.148243][T10260] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 206.148278][T10260] ? do_syscall_64+0xba/0x210 [ 206.148303][T10260] do_syscall_64+0xf6/0x210 [ 206.148324][T10260] ? clear_bhb_loop+0x45/0xa0 [ 206.148344][T10260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.148358][T10260] RIP: 0033:0x7f1ef738e969 [ 206.148370][T10260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.148381][T10260] RSP: 002b:00007f1ef82c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.148395][T10260] RAX: ffffffffffffffda RBX: 00007f1ef75b5fa0 RCX: 00007f1ef738e969 [ 206.148406][T10260] RDX: 0000000020004804 RSI: 0000200000006040 RDI: 0000000000000003 [ 206.148417][T10260] RBP: 00007f1ef82c8090 R08: 0000000000000000 R09: 0000000000000000 [ 206.148427][T10260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.148436][T10260] R13: 0000000000000000 R14: 00007f1ef75b5fa0 R15: 00007ffe020027b8 [ 206.148463][T10260] [ 206.487655][T10263] FAULT_INJECTION: forcing a failure. [ 206.487655][T10263] name failslab, interval 1, probability 0, space 0, times 0 [ 206.514052][T10263] CPU: 1 UID: 0 PID: 10263 Comm: syz.5.1297 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 206.514078][T10263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 206.514091][T10263] Call Trace: [ 206.514098][T10263] [ 206.514106][T10263] dump_stack_lvl+0x189/0x250 [ 206.514136][T10263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.514156][T10263] ? __pfx__printk+0x10/0x10 [ 206.514179][T10263] ? __pfx___might_resched+0x10/0x10 [ 206.514195][T10263] ? fs_reclaim_acquire+0x7d/0x100 [ 206.514220][T10263] should_fail_ex+0x414/0x560 [ 206.514248][T10263] ? page_pool_create_percpu+0x32a/0xbe0 [ 206.514266][T10263] should_failslab+0xa8/0x100 [ 206.514286][T10263] __kvmalloc_node_noprof+0x168/0x5e0 [ 206.514306][T10263] ? page_pool_create_percpu+0x32a/0xbe0 [ 206.514331][T10263] page_pool_create_percpu+0x32a/0xbe0 [ 206.514351][T10263] ? bpf_test_run_xdp_live+0x1b8/0x1aa0 [ 206.514385][T10263] bpf_test_run_xdp_live+0x1cd/0x1aa0 [ 206.514410][T10263] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 206.514438][T10263] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 206.514457][T10263] ? synchronize_rcu+0x11a/0x310 [ 206.514472][T10263] ? __pfx_synchronize_rcu+0x10/0x10 [ 206.514491][T10263] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 206.514511][T10263] ? 0xffffffffa00038c0 [ 206.514543][T10263] ? 0xffffffffa00007cc [ 206.514555][T10263] ? 0xffffffffa000088c [ 206.514567][T10263] ? 0xffffffffa00008cc [ 206.514606][T10263] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 206.514634][T10263] ? _copy_from_user+0x94/0xb0 [ 206.514654][T10263] ? bpf_test_init+0x133/0x170 [ 206.514668][T10263] ? xdp_convert_md_to_buff+0x5b/0x330 [ 206.514689][T10263] bpf_prog_test_run_xdp+0x713/0xf90 [ 206.514721][T10263] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 206.514744][T10263] ? __fget_files+0x2a/0x420 [ 206.514769][T10263] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 206.514788][T10263] bpf_prog_test_run+0x2a9/0x340 [ 206.514812][T10263] __sys_bpf+0x4a4/0x860 [ 206.514832][T10263] ? __pfx___sys_bpf+0x10/0x10 [ 206.514863][T10263] ? ksys_write+0x1f0/0x250 [ 206.514879][T10263] ? rcu_is_watching+0x15/0xb0 [ 206.514911][T10263] __x64_sys_bpf+0x7c/0x90 [ 206.514928][T10263] do_syscall_64+0xf6/0x210 [ 206.514950][T10263] ? clear_bhb_loop+0x45/0xa0 [ 206.514970][T10263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.514985][T10263] RIP: 0033:0x7f449b98e969 [ 206.514999][T10263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.515013][T10263] RSP: 002b:00007f449c88d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 206.515031][T10263] RAX: ffffffffffffffda RBX: 00007f449bbb5fa0 RCX: 00007f449b98e969 [ 206.515043][T10263] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 206.515054][T10263] RBP: 00007f449c88d090 R08: 0000000000000000 R09: 0000000000000000 [ 206.515063][T10263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.515072][T10263] R13: 0000000000000000 R14: 00007f449bbb5fa0 R15: 00007ffdd700eda8 [ 206.515100][T10263] [ 206.515136][T10263] page_pool_create_percpu() gave up with errno -12 [ 206.620610][T10268] __nla_validate_parse: 17 callbacks suppressed [ 206.620635][T10268] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1294'. [ 206.624422][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 206.951828][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1303'. [ 206.958067][T10279] ------------[ cut here ]------------ [ 206.966369][T10279] memcpy: detected field-spanning write (size 8191) of single field "pfx->in6_u.u6_addr8" at ./include/net/ipv6.h:614 (size 16) [ 206.987223][T10279] WARNING: CPU: 1 PID: 10279 at ./include/net/ipv6.h:614 ipv6_addr_prefix+0x124/0x1d0 [ 206.988592][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1303'. [ 206.997070][T10279] Modules linked in: [ 206.997094][T10279] CPU: 1 UID: 0 PID: 10279 Comm: syz.0.1302 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 206.997116][T10279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 206.997129][T10279] RIP: 0010:ipv6_addr_prefix+0x124/0x1d0 [ 206.997158][T10279] Code: cc e8 a0 56 b2 f7 c6 05 1e cd 5b 05 01 90 b9 10 00 00 00 48 c7 c7 a0 59 7d 8c 4c 89 fe 48 c7 c2 c0 60 7d 8c e8 cd b2 76 f7 90 <0f> 0b 90 90 e9 33 ff ff ff e8 6e 56 b2 f7 44 89 e6 48 c7 c7 c0 10 [ 206.997174][T10279] RSP: 0018:ffffc900048e7920 EFLAGS: 00010246 [ 206.997191][T10279] RAX: a4b8fc9d7db8db00 RBX: ffff888059d4d468 RCX: 0000000000080000 [ 207.073157][T10279] RDX: ffffc90004ab2000 RSI: 000000000001c29f RDI: 000000000001c2a0 [ 207.081151][T10279] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 207.089218][T10279] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 0000000000001fff [ 207.097403][T10279] R13: 1ffff9200091cf4e R14: ffffc900048e7a94 R15: 0000000000001fff [ 207.105557][T10279] FS: 00007fdd384396c0(0000) GS:ffff8881261c1000(0000) knlGS:0000000000000000 [ 207.114557][T10279] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.121153][T10279] CR2: 0000001b325f4ff8 CR3: 0000000032b74000 CR4: 00000000003526f0 [ 207.129190][T10279] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 207.137507][T10279] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 207.145744][T10279] Call Trace: [ 207.149045][T10279] [ 207.151993][T10279] ip6_route_info_create+0x629/0xa70 [ 207.157357][T10279] ip6_route_add+0x29/0x2f0 [ 207.161879][T10279] ? ipv6_route_ioctl+0x313/0x480 [ 207.166970][T10279] ipv6_route_ioctl+0x35c/0x480 [ 207.171847][T10279] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 207.177341][T10279] inet6_ioctl+0x219/0x280 [ 207.181790][T10279] ? __pfx_inet6_ioctl+0x10/0x10 [ 207.186922][T10279] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 207.192982][T10279] sock_do_ioctl+0xd9/0x300 [ 207.197507][T10279] ? __pfx_sock_do_ioctl+0x10/0x10 [ 207.202683][T10279] ? __lock_acquire+0xaac/0xd20 [ 207.207565][T10279] sock_ioctl+0x576/0x790 [ 207.211919][T10279] ? __pfx_sock_ioctl+0x10/0x10 [ 207.216861][T10279] ? __fget_files+0x3a0/0x420 [ 207.221556][T10279] ? __fget_files+0x2a/0x420 [ 207.226321][T10279] ? bpf_lsm_file_ioctl+0x9/0x20 [ 207.231288][T10279] ? __pfx_sock_ioctl+0x10/0x10 [ 207.236586][T10279] __se_sys_ioctl+0xf9/0x170 [ 207.241219][T10279] do_syscall_64+0xf6/0x210 [ 207.245984][T10279] ? clear_bhb_loop+0x45/0xa0 [ 207.250695][T10279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.256680][T10279] RIP: 0033:0x7fdd3758e969 [ 207.261117][T10279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.280851][T10279] RSP: 002b:00007fdd38439038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.289336][T10279] RAX: ffffffffffffffda RBX: 00007fdd377b5fa0 RCX: 00007fdd3758e969 [ 207.297378][T10279] RDX: 0000200000000440 RSI: 000000000000890b RDI: 0000000000000006 [ 207.305419][T10279] RBP: 00007fdd37610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 207.313450][T10279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.321442][T10279] R13: 0000000000000000 R14: 00007fdd377b5fa0 R15: 00007ffde1ab5048 [ 207.329504][T10279] [ 207.332622][T10279] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 207.339917][T10279] CPU: 1 UID: 0 PID: 10279 Comm: syz.0.1302 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 207.351979][T10279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 207.362024][T10279] Call Trace: [ 207.365299][T10279] [ 207.368220][T10279] dump_stack_lvl+0x99/0x250 [ 207.372805][T10279] ? __asan_memcpy+0x40/0x70 [ 207.377390][T10279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.382586][T10279] ? __pfx__printk+0x10/0x10 [ 207.387188][T10279] panic+0x2db/0x790 [ 207.391083][T10279] ? __pfx_panic+0x10/0x10 [ 207.395494][T10279] ? show_trace_log_lvl+0x4fb/0x550 [ 207.400698][T10279] __warn+0x31b/0x4b0 [ 207.404672][T10279] ? ipv6_addr_prefix+0x124/0x1d0 [ 207.409693][T10279] ? ipv6_addr_prefix+0x124/0x1d0 [ 207.414707][T10279] report_bug+0x2be/0x4f0 [ 207.419027][T10279] ? ipv6_addr_prefix+0x124/0x1d0 [ 207.424042][T10279] ? ipv6_addr_prefix+0x124/0x1d0 [ 207.429056][T10279] ? ipv6_addr_prefix+0x126/0x1d0 [ 207.434079][T10279] handle_bug+0x84/0x160 [ 207.438317][T10279] exc_invalid_op+0x1a/0x50 [ 207.442826][T10279] asm_exc_invalid_op+0x1a/0x20 [ 207.447682][T10279] RIP: 0010:ipv6_addr_prefix+0x124/0x1d0 [ 207.453318][T10279] Code: cc e8 a0 56 b2 f7 c6 05 1e cd 5b 05 01 90 b9 10 00 00 00 48 c7 c7 a0 59 7d 8c 4c 89 fe 48 c7 c2 c0 60 7d 8c e8 cd b2 76 f7 90 <0f> 0b 90 90 e9 33 ff ff ff e8 6e 56 b2 f7 44 89 e6 48 c7 c7 c0 10 [ 207.472927][T10279] RSP: 0018:ffffc900048e7920 EFLAGS: 00010246 [ 207.479020][T10279] RAX: a4b8fc9d7db8db00 RBX: ffff888059d4d468 RCX: 0000000000080000 [ 207.486989][T10279] RDX: ffffc90004ab2000 RSI: 000000000001c29f RDI: 000000000001c2a0 [ 207.494949][T10279] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 207.502908][T10279] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 0000000000001fff [ 207.510867][T10279] R13: 1ffff9200091cf4e R14: ffffc900048e7a94 R15: 0000000000001fff [ 207.518845][T10279] ip6_route_info_create+0x629/0xa70 [ 207.524132][T10279] ip6_route_add+0x29/0x2f0 [ 207.528626][T10279] ? ipv6_route_ioctl+0x313/0x480 [ 207.533647][T10279] ipv6_route_ioctl+0x35c/0x480 [ 207.538493][T10279] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 207.543881][T10279] inet6_ioctl+0x219/0x280 [ 207.548293][T10279] ? __pfx_inet6_ioctl+0x10/0x10 [ 207.553259][T10279] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 207.559273][T10279] sock_do_ioctl+0xd9/0x300 [ 207.563771][T10279] ? __pfx_sock_do_ioctl+0x10/0x10 [ 207.568874][T10279] ? __lock_acquire+0xaac/0xd20 [ 207.573735][T10279] sock_ioctl+0x576/0x790 [ 207.578060][T10279] ? __pfx_sock_ioctl+0x10/0x10 [ 207.582909][T10279] ? __fget_files+0x3a0/0x420 [ 207.587584][T10279] ? __fget_files+0x2a/0x420 [ 207.592174][T10279] ? bpf_lsm_file_ioctl+0x9/0x20 [ 207.597103][T10279] ? __pfx_sock_ioctl+0x10/0x10 [ 207.601944][T10279] __se_sys_ioctl+0xf9/0x170 [ 207.606527][T10279] do_syscall_64+0xf6/0x210 [ 207.611023][T10279] ? clear_bhb_loop+0x45/0xa0 [ 207.615688][T10279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.621580][T10279] RIP: 0033:0x7fdd3758e969 [ 207.625984][T10279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.645584][T10279] RSP: 002b:00007fdd38439038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.654078][T10279] RAX: ffffffffffffffda RBX: 00007fdd377b5fa0 RCX: 00007fdd3758e969 [ 207.662040][T10279] RDX: 0000200000000440 RSI: 000000000000890b RDI: 0000000000000006 [ 207.670004][T10279] RBP: 00007fdd37610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 207.677959][T10279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.685920][T10279] R13: 0000000000000000 R14: 00007fdd377b5fa0 R15: 00007ffde1ab5048 [ 207.693897][T10279] [ 207.697139][T10279] Kernel Offset: disabled [ 207.701454][T10279] Rebooting in 86400 seconds..