last executing test programs: 2.447049074s ago: executing program 0 (id=1536): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000140), 0x4) listen(r0, 0x67c90c79) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c067f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b17f5fadc10e18e574983e260010d619f74dd4c30", 0x94}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000f40)="f48f2d17124220834d94b04600401fdab2261560abe764104234704ca3152399a1fd15628555c3e937558739de09031a4aa3411bc2b37c96348364972a386d3f251103de45ed4ac4328dae035eb07762e26b1dd45ce08a724a635c8e3dd6f833ed741e0e1bdd760079b5f3cd93f398a35173e691315df3f348f9cf59333fa2f5", 0x80}], 0x1}}], 0x2, 0x0) (async) sendmmsg(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c067f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b17f5fadc10e18e574983e260010d619f74dd4c30", 0x94}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000f40)="f48f2d17124220834d94b04600401fdab2261560abe764104234704ca3152399a1fd15628555c3e937558739de09031a4aa3411bc2b37c96348364972a386d3f251103de45ed4ac4328dae035eb07762e26b1dd45ce08a724a635c8e3dd6f833ed741e0e1bdd760079b5f3cd93f398a35173e691315df3f348f9cf59333fa2f5", 0x80}], 0x1}}], 0x2, 0x0) connect$llc(r3, &(0x7f0000000040)={0x1a, 0x30a, 0xd, 0x8, 0x0, 0x8, @broadcast}, 0x10) (async) connect$llc(r3, &(0x7f0000000040)={0x1a, 0x30a, 0xd, 0x8, 0x0, 0x8, @broadcast}, 0x10) recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/150, 0x96}], 0x1}, 0x0) (async) recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/150, 0x96}], 0x1}, 0x0) 2.262708548s ago: executing program 4 (id=1541): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="c21504239e1dc595f0766418b856f059", 0xfffffe99}], 0x2, &(0x7f0000001a00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg$can_raw(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000440)=""/40, 0x28}], 0x2, &(0x7f00000005c0)=""/82, 0x52}, 0x2) 1.707505778s ago: executing program 1 (id=1553): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) epoll_create(0x401) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x44010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x4801000000000000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @dev}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x20) 1.594966623s ago: executing program 2 (id=1554): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r4, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x0, 0x0, 0x10, 0x8, 0x22, 0x0}}, 0x10) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="1c005e80060005"], 0x38}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="6eaa000000000000791098000000000018090000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="6eaa000000000000791098000000000018090000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.555060167s ago: executing program 1 (id=1556): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ec}, 0x1}, 0x18, &(0x7f00000004c0)={&(0x7f0000000040)="192c", 0x2}}, 0xcc0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r3, @ANYBLOB="010029bd7000fddbdf25040000002800018008000300020000001400020076657468315f746f5f6873720000000008000300040000001c0001800800030003000000080003000200000008000100", @ANYRES32=r1, @ANYBLOB="60000180140002007767320000000000000000000000000014000200776c616e31000000000000000000000008000100", @ANYRES32=r1, @ANYBLOB="0800030001000000080003000100000008000100", @ANYRES32=r1, @ANYBLOB="14000200766574683000000000000000000000003c00018008000100", @ANYRES32=r1, @ANYBLOB="140002007866726d300000000000000000000000140002006e72300000000000000000000000000008000100", @ANYRES32=r1, @ANYBLOB="45f6df1011826ff8346ca444fd1f1571587d8d6961f3761bec0d45b6798d691fcd1bde77be24800da7860a84ba869a58eb14696bea7c70112660ba1288d4225420ce2044d0fe8006383432f7bf78"], 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x884) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.49654466s ago: executing program 0 (id=1557): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="b9ff03006044238cb89e14f086dd1bffffff0000402f630677fbac141442e934a0a662079f4b4dfe87e5feca6aab845013f288a81a3908020b098da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) 1.429913577s ago: executing program 2 (id=1558): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002c40)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000020000000c0000000000000002"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x8, 0x50, &(0x7f0000000140)="f9ad48cc420029fc", 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.422942997s ago: executing program 3 (id=1559): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) close(0xffffffffffffffff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="130000001000000008"], 0x50) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x3, [@volatile={0xa, 0x0, 0x0, 0x9, 0x3}, @union={0x2, 0x4, 0x0, 0x5, 0x0, 0xce, [{0xc, 0x1, 0x1}, {0xe, 0x2, 0x1}, {0xf, 0x2, 0x5}, {0x3, 0x0, 0xfffffffa}]}, @type_tag={0x7fff}, @var={0xa, 0x0, 0x0, 0xe, 0x4, 0x2}, @struct={0x1, 0x1, 0x0, 0x4, 0x1, 0x4e, [{0x2, 0x1, 0xa}]}, @func={0x10, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x61]}}, &(0x7f00000005c0)=""/221, 0xa3, 0xdd, 0x1, 0x2, 0x0, @void, @value}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) sendmmsg(r4, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000002e80)="0157e0eb2cd0bcd4b7b7ffde367b907b461a72af835bf816fc7e099e93c07195ca0176868430bb058b53691bf32b36649e2de83594ee56a2a070c1814469ae8547736c5041c911ba59f989c421c21e447adbcd12f313ae43276e440913a79c9a8b34aeabd8d6c29d9d1f508703194aafca66446248af9175eab7c95c9a85fa32101a876c1d3e290b71ce5dc1f58524404b90d35d6ee7314825d7846449f0da3d6fce26ac4815627ac8c39ec4ba04e49b3cbabedb39f540af5968c0f9e402f43271b00933f12e42cf971c1ba8509b47fcd562b15d284a838dde8b6b8b18f84c935bfb9c163f58350521b60e9b4a1c046be691ce97a6e0de8eaf1b9e8d5762d8dbaacae10e7025285539ca047f761d1ab87a6eb1236bf3d5a5a7e897aa6844d338c9f25f726d105a8fcaaaed06661ad6ee94be6c51b2c205060afd16dde3b104ebd2d96fe03b93401ada6ddabe00431316482daf790fd461e0974fc235073001534bff8a0c5bcc48171ca603d7133ce3cf37cd10c2dd179a076c7d1ae9e0cf96bc74a6efb3f3c3d58de82903902b14351d39190545476443a708ce8da40c3ff0525ef4bbba0689b863d3d0a94a202856893125b105df60b1123eb3f9e9b7cbea2fef6b84e3d13fe9d18eec3410a19749f890989c454c01ee8df161c1584a04bc601bc7d300c271e78b3895edbcc1d62e19b13026d353a21c6f4d5cdc10a3099b0ff35119098f5e470f01ebdb8ce8b3c7691ef4f8782a0840e3b9593dc4f63c1c904b541b5004dd3c22f733ca217824c8c61522ef28bc27f41cf2e07c8f0fc5b291e5a295e77c044f199af844326cc4c660d685a47a255589151dc3d29a398313156e2819dc49cca81998962df8b197ac476dbeaf0d6754e245952645969785d2add1ad5495f3981c255bd6990d14163434e95ddc84a1496676fda9aa47f9da9a7c91a669470e591e9ca19192af662a846b2d2b07aecdb4ccdfd217dabcf1bdc3e1bddfd18adca1fe4f328e3afd02017ab59634cecd9362b4d4895749cf969cca59131704b983760c5f5c4f22b7de6f4408f0ef2541e7f3ba0c63bcf936ad9c139de7d8dd6fe9b51ce432eb20961587a4d8c9b12d53fecf0ea078c2e5c08fdce538192727eaa76cd7d700d4018e603d39f2f3fdb2439a876a1aae62bfe21ac4b724c2b2392f81f22c15d3007cc7ac14319922b43a3bc85a93ff3539859c95459f712ab893149f4eabc3df214348b8533c8d831f4b85cf1f7250012f41963d84d0753acc301c1dc1e4acef832dacb16e74666c3eff0657f89f272371b37cbf1902070e593d1717e26440e3d868ab8b0cf0e2aa411f781b7039b6ec63c799df687dd06bb738627b16cce886d5efeef9d58cfbafcea2aea176a96acc4d771bcc98beef5b86e7c19068f09dfd8ce774e3cbb90373185d4c1ec71d142deaf32ef6cec1a3fdabaa2cca9f568ddd0c071a5f042544c399ddbccf9ac85a982cd4d762ffb794434d95fe92e8a19c8cacd38758d9d475d1b56d73eb95fac938c12d4c921c9d54b9c6fd74b48113a2b09b1f80b848dd6955e9858cd19d617a72af111fd0472324ea3cbdc99a0f6a95ea11c66e4f5cafbd662331be1ce032641c1ce63a85d4e488e19e6f50620c426983cb50b9ba054be6972af5ed4412ded68d6c133c7263ff590902257c0ba6123a2068a32041867ad98db2d3636da1f78104b573a22f9e225f0bc31d6945c48ad14d1a5b78308bb0eb8e1ac59fb75e5b610ecc6c8773cb835da803639546be9c0441655b8c3101cda74c370b890bf7deee46a7d4e14f7d484ba9dc5f6ba53d64bea5c0995a597b3aeecf045a77e0967f28a5b7c9f9d722e5e3249423b95ecde9fbe9d229d7d9dcb54dc8121a296147bc2af3d67c69232232e78dd56ff0eaf7f556185b780bbbd7258e44df08e4686e8e765fa9d2cd1dcce6c54132586f42ee829465924626a77520ecd6178fbc99a8b0e257d0d1564a3595c8e58d0dd82af4b732391eaa4777bec6d88594e20ad8cd27f0cc42ae6b7e712a0d98d15977df7028b1d70933bf51a3fc220e433eedd79ea64773a6053966e1f7a59121c673b11865d6a348fe2bf66b2ba57e5648ed89b7158b008eb099fc0001ebb7bf37e3609b0a4ae53b791df5e732f09ba809bb8de5e6bf75f5e21aa53409db008a4f236b6f37c2c7af535fee4060f28cc9557bdcdff351226c5979c3d74ba5a60766d68dad7f05fe94a5c2ce631d95b1c642c5300738b64860eef67097cc10d3b0d3ab9151e4b9b7db4a6034dd26a500ea228db8070b23400c8a6fda7d7b223aee0bd284bffc6b8266c431d14311a95f1fef28090a491bc03a6aa9265e09643a6c1522a43b443d8f2a57292f1fab667d5201f86d24bdeff4666a3d641513809e8208968beb70d78cebc367b35bda7ff71e5d2b1541eb9a61e829040774c8e75ecc0dd8fd4133905839145595159e5dc8c2dfe353e37c81f38a8284ffdbf30d44eea7aaf9cc21985751476b9f47e69915adac7bf53f7198b7f878eb81f4413bf2c1241562a01f0628191523a0200e968dd4eebcc462f03b783a5182fe109f6bb5a9339a3f66b1406c7ee5890573c2dabf6ba71e34e90e8ed26a1b198e52c1c699155c8984cc0c7a1ca4ec20f73e3f1848de39dfa2703f2b618bbc99de7d28cf825f56c8ca1dc6b1e3da66e3eb156b4b269566eb6903e8a1234b609b53b726363e83d84df6f30632eeea124485dbabd27654957769616638130b937b4c6207383bed43ebf0637bd54a6d72261589a3585fa66771051961cf815eb9e03499211cb24f8d9f1997d6512ca80fd07927609efeee88a781ad248b612a905e8a2add83ebd69a0ad70a16b59f9ed1f943c6b379a126f87f77", 0x7f5}], 0x1}}], 0x1, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbfc, {0x1}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000400)={r0, 0x8000000000000001, 0x0, 0x10000}) 1.362743235s ago: executing program 1 (id=1560): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000bde4fe3ec3000000002000f88c636d1530507dfb76b7802c7d49009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x8e, &(0x7f0000000080)=""/142, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffecf, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0xfffc}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000840)=""/240, 0xf0}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000001940)=""/4098, 0x1002}, {&(0x7f0000000040)=""/6, 0x6}, {&(0x7f00000006c0)=""/233, 0xe9}], 0x5}, 0x80000000}], 0x4, 0x20, 0x0) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f00000002c0)=""/35, 0x23}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000001940)=""/4102, 0x1006}, {&(0x7f0000000100)=""/74, 0x4a}, {&(0x7f00000004c0)=""/6, 0x6}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x8}, 0x5}], 0x4, 0x20, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="660a000000000000611183000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="09000000010003", 0x7) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000500)="f9a3491f845b13e70f81b6117ed2b7a14d7604173acf38c123fcbad9caf446817e7eee24e7c4343befc0e08c4ed80cda51c41cc3e9c7da759b7a5b13ab788d421275eedc665e69dd9ca2585eb1db94a3ad188f33feb38ecf8eceb5a2e410017234e2eb019d6ac709ba8fb91d068d0fc9f61b168cb7a8aead67b1eee47f3ca0074f3cc7c6a1064e51bfa7cd6ad4dcdc5e533087e70af9199821e8c7f13ba49695f77791f76464dda1b45ca4d795c390f2f5d09d5ee6d64732881c1d28fc12c006c1f240cc59ad79838901afcf88500d2af70c8763a6", 0xd5, 0x45, &(0x7f0000000600)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) recvmsg(r4, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x40018002) pipe(&(0x7f0000000040)={0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='kvm_vcpu_wakeup\x00', r6, 0x0, 0x2}, 0x18) 1.321282698s ago: executing program 3 (id=1561): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) epoll_create(0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r6, 0x84, 0x74, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000f9086bb2154b8162dd94d4f0b66d3ef63e47fe38feb652956847beba71368fedae5ea83234bdf52b3c68f4ee5e5e7aa9febb7bcc1d0eb90710749ca43246c634971e4447ef65f0391a0cef4", @ANYRES16=r3, @ANYBLOB="cf0404000000000000001300000008000300", @ANYRES32=r5, @ANYBLOB="040013000a0006000802110000010000060010008005000006001200000000000c0081000500010081000000"], 0x48}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000003c0)={r9, 0x7}, 0x8) getsockopt$sock_buf(r8, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) socket$inet6(0xa, 0x800, 0x80000001) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$PPPIOCGIDLE64(r10, 0x8010743f, &(0x7f0000000180)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r11) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000100)) 1.298289841s ago: executing program 4 (id=1562): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3a, &(0x7f0000000000)=0x2, 0x4) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/195, 0xc3, 0x1, &(0x7f0000000140)=""/46, 0x2e}, &(0x7f00000001c0)=0x40) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x4, @empty, 0x2}, 0x1c) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffff7, 0x30}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000002c0)={r2, 0x75}, &(0x7f0000000300)=0x8) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r2, 0x10000000}, &(0x7f0000000380)=0x8) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f00000003c0)) getsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f0000000400), &(0x7f0000000440)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) recvmsg(r0, &(0x7f0000001980)={&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/185, 0xb9}, {&(0x7f0000001600)=""/114, 0x72}, {&(0x7f0000001680)=""/11, 0xb}, {&(0x7f00000016c0)=""/158, 0x9e}, {&(0x7f0000001780)=""/47, 0x2f}, {&(0x7f00000017c0)=""/156, 0x9c}], 0x7, &(0x7f0000001900)=""/75, 0x4b}, 0x12160) getsockname$unix(r5, &(0x7f00000019c0)=@abs, &(0x7f0000001a40)=0x6e) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001a80)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000001b80)=0xe8) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000001bc0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, r6}) (async) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000001c00), &(0x7f0000001c40)=0x4) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000001c80)={r3, 0x5, 0x7, 0x0, 0x126, 0x5078798f}, 0x14) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = gettid() (async) r9 = getgid() r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002f00)=@generic={&(0x7f0000002ec0)='./file0\x00', 0x0, 0x10}, 0x18) (async) r11 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r12 = gettid() (async) r13 = getgid() r14 = getpid() (async) r15 = getgid() (async) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000003940)=0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000003bc0)=0x0) sendmmsg$unix(r5, &(0x7f0000004880)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000001cc0)="b41633e3dfa4848a562289a9a7f3fdcd62db0aa66f517a133c32a48f475ecfc0bb50ce3f604f1f35a3220785f3f7fd1c2dff8a30ef0e582e62a240954cbcd0934c11f9d3c4cb0c646766a71ca085b3dedfa1404879572a5a2d8512e768e0020f29e59ef7e9cb64aec497a749f36d19d83effd25376c5263eed9dafd607b45a4c7acf199b46ea7bac48a8ca5f1fa03b29e1d16880c1ed77b78712bde7f154fd40944dfb88cc4e04fab85839e334342f496f73d15a9de5e5", 0xb7}, {&(0x7f0000001d80)="afd631eaf5fd7b7c1d77df146cb31282952937760402bf340398d30d05fced447a1519788ddc3a2e9dd22d3e91f918773c2ac88c59329bea8e5351852906dd32dffe90287cccc4d1f88c6e28fd7426916ea842e0fa1afa29a9d1c36610d13e6f9097433ccba23e04efa83054c042aa2beea55430dabcce0a9b8e1b03d334fd71d89b6380495b976e471f0b69e5a0cad4bf7c627866c9eb7008c74a9117179e90d21055c8f94e58d5e59b7e3902dbfdbd95aea8cb1cbe138e1d57be9c63411e5400136d95df7933e29b335f871b3a64338d62ed", 0xd3}, {&(0x7f0000001e80)="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", 0x1000}], 0x3, &(0x7f0000002f40)=[@rights={{0x1c, 0x1, 0x1, [r0, r5, r7]}}, @cred={{0x1c, 0x1, 0x2, {r8, r6, r9}}}, @rights={{0x28, 0x1, 0x1, [r10, r4, r1, r1, r11, r4]}}, @rights={{0x18, 0x1, 0x1, [r0, r4]}}, @cred={{0x1c, 0x1, 0x2, {r12, r6, r13}}}], 0xa0, 0x40000}}, {{&(0x7f0000003000)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003480)=[{&(0x7f0000003080)="eac771e93b9ffa61c2dd8e300599a8cd8cf0087ccd35556fbd6fbafe2823ff2749ddc9bd6ce65eca8086ab32996fbad7ae24b31451cfd576b7f60c406d93c41ad5033cd471cf203758e566020ad6fa034e673ac39b0c8531aa8668a9b1c5e68e3a9b23fd3872917e6ee49aad2cff668425d22e88e4b7a3a28f27ef0a583fe23a8814f605b4bf0518eb26dbad6d1864338aa0486474e8c0803e8a81aec11170d21bd235aa33cec4b841ee8f43192d810656faba850d4372555d2d577fac89d833f1dedb", 0xc3}, {&(0x7f0000003180)="b8806118a87d1cb24944e0f332d6a0db273b10cb245d2137af429a5eadeb5a42588bd449a316bae739be342c378a0bee8a6570080eb5ca678090b33c22218674327750ffaa8e9e1063590a3919887def3d6b2b", 0x53}, {&(0x7f0000003200)="59bbb884e9ecdee22b3734001bc0dce103b7d12f7a0c7b21cc0e9f968df53f0d29050b208c8065199b2512bb91564782917a90", 0x33}, {&(0x7f0000003240)="d1b6089bd6bf2a1a717811446bcae781a7a566ba3a86bb624ea06744215e91f5968ccd97ab232982fd85546ab90fe3e6f0c405e8ad2322119f5acea62d8c17043c530298aeaa5522a46493431407ac6c7dc0bdcb9e89664bbd5edad65a73b5f5ae2c86db916bf3d402558832fcaea7d9cb0218d4d8fb24497c87418b00c706e8cb55d23992ded10a9149e5679e5eaf4d83bb94138e9c5d8705617a", 0x9b}, {&(0x7f0000003300)="46abdb0becf8999699f81e98614470d6c513cd6b4eed44aaa3028d7ce48a8d901886626e6d8583db57a1410fa3601bb5d65671acd4663dbf87ddeb147bfb022795d636e5fcd5a0", 0x47}, {&(0x7f0000003380)="2e8e8c2627fc15ac4e014d04509e19c83a2b1e7b95eebb0704d585520dab5841d6dd9c", 0x23}, {&(0x7f00000033c0)="f899840c5603fd999cb94a7711ba11f8baeffe74dbbb29f7f6756077c4676b6b3c5ab303732b622ca9d5b497f50f41673397fb4193db5f64192e520ced93c1038f53d8ad2322d00790bb24ae3b8d47636fe73019cc43fc490fcff56e24c165950ed8f3e69f1859004f8d822f54eeb62180d561b0b9bb7767221453", 0x7b}, {&(0x7f0000003440)="c589dbfcee7f15d7517e04acb8ff614a9b28fff7b2f8a35493cc26de35c772ebeaa7197b", 0x24}], 0x8, &(0x7f0000003500)=[@rights={{0x28, 0x1, 0x1, [r4, r4, r5, r4, r1, r0]}}, @rights={{0x18, 0x1, 0x1, [r5, r0]}}], 0x40, 0x8080}}, {{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000003540)="e4da3ae876c6e45c284c365af0d86ac1a6277d05929e0c482bde298a49b8c95daa02d074ed005948b4112101fc946e28a0b5eda332ca3ffbe598d229ac0fbb45b8d257642e9696e577b87c7f1113c2f022e9e3dd9c0030cde899b09667a596f0bb61b1e3877ec4e89e610ae148f9e1fb21013336f2", 0x75}, {&(0x7f00000035c0)="e5168c96d306cab8ab5d6f5cb2461ff78ba565c07e4b3b83824d12d7990dfe9a077199679866df9979c26e227bf4b0", 0x2f}, {&(0x7f0000003600)="50f018c382a7a0a9114c42755148957cb770c442ddf918e3", 0x18}, {&(0x7f0000003640)="cd5fa09dc8a8dce96b1ca4b0877ec46ac291f19f9b82b1af86bb68eb5583c3c40684c367394a6c9a5404d7ef864905c6604a54492dc4c0251698fed5910cb525d7718348614eae89c1ebfa6d03739b2ce69ca96ff6b7854834820ec334a4628f1f2f24cf8d4d9610cc9321ffec1273d408b6309e26bef6683953f5058cc9689e34f1d4d21b7eceff4caaf268e661e48b5593ab92c6b9c98462b1dbb85c14", 0x9e}, {&(0x7f0000003700)="efebd5ec6e36e87451ef32913e4ee3c4f9bc81236d60e445937eb56b7845f0049f121ee38b6852fdfec02e0cd434c31eb1", 0x31}, {&(0x7f0000003740)="a9d9ece077e55836e507e6da75313202b22c42f7cbf9c8cbcf5cb53cf73f3065c57312e8cb1263c4574dd989d9c02fc69684b4c18becc80d5262d104626e", 0x3e}, {&(0x7f0000003780)="47f5436b6c3132b6d2b321e312c6014b3b6d26eede7c3f2a49e78a8f60c056b95f44ecd20884a885aa4f6188494bfc256815b8e3bfdd0a597fa1107e8bff9e70285f3b9d7023a93b397f77ac6c2a08d165458bd65b0a456eaa1f4d9e9e1969ef0fbc16b188211e4bd46079045f39cb3846f20987dfa140991492dcd2761793ada62461c28fcda2cfd7aa6fb1bbf8c920a9a2ef2358033662a7a0657a1bcaff77b8eeb2d2fbf202052b4e3d0daece", 0xae}, {&(0x7f0000003840)="f4536e3333a20fab0f2fff85aaf10c37770e43b693867103cb5a042814cebebaecaed099ce3b14810816a85ecae39919d2d8e8865a79af56db7a2595a13a470e6df4e4ec1497fa4af431b8bed6bc5c6a8b7e79374a386905a8f1fbed13de512d9230c6eeb943094fe0", 0x69}], 0x8, &(0x7f0000003980)=[@cred={{0x1c, 0x1, 0x2, {r14, r6, r15}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r1, r5]}}, @cred={{0x1c, 0x1, 0x2, {r16, r6, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r0, r5, r4]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}], 0xa0, 0x8840}}, {{&(0x7f0000003a40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003b80)=[{&(0x7f0000003ac0)="fc0aaee00004d1a029bf0c842200ac9cf46afc595e0596efcd98431c9e8989f6e33d6eb3f8027e4b3919818e23c81a1799c7931bd536a7b80e9a2c54017299588ddceb4e9444d7a16124af67893fa7431f6d2c24594e4d2cbcb73d0e0a151f259e4bf02a56e3eeee358caadc6d468834704817e235d797823e8459baeedaf63709e2ce51f960d9e45c8821aa37df7b09f57cecfcaf6e29ad02ef709c00e7107fad7422c8de222f4d54e827a7dbe06f01dad7f0bd4004d25c91c31b7536c971", 0xbf}], 0x1, &(0x7f0000003d80)=[@cred={{0x1c, 0x1, 0x2, {r17, r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6}}}], 0xc0, 0x4c850}}, {{0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000003e40)="063d5a35141ddbbb1db79b1194c83ded0081c27a977f87e30736a2221c51527721487374cedcb6bcf0e4040296e6773097362e045b516b45078a218a138ad7185e14450d812186f1a4026b30189e869998aa18fda0eace4f80a78537f4c976440e8d68885b862cccadae78555f31278435574b51ad5e77bce4134a", 0x7b}, {&(0x7f0000003ec0)="3207bf93f7f81b", 0x7}], 0x2, &(0x7f0000004300)=[@rights={{0x24, 0x1, 0x1, [r5, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6}}}, @rights={{0x30, 0x1, 0x1, [r4, r5, r5, r4, r4, r5, r5, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}], 0xd8, 0x40}}, {{&(0x7f0000004400)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004680)=[{&(0x7f0000004480)="fedf470a7dccfa61fffb75632866739ab55539f28432ab083357aedadbb0f9676d5a2647018e60b3", 0x28}, {&(0x7f00000044c0)="1d2f9add4d61f480fb6165453f2a7ce2dbeb5bf15cb9c60c6b16d98eaa075b4abbb0ac8d13d9c1", 0x27}, {&(0x7f0000004500)="ab8c01dfb8786ab89ef9b9dea24cb5c688b032157848a211a5b75b22eb3ec01d969cb84a63811422f8b1da8c84af11a2dc076b3ab189a16959035e06a89cd5a63158893f1c384aaf50856e263fd866ef1351bf3a3164498dec699885fc19b8a8cbbb3b54c5d8538210d189ae8c6adc236109b67694797284ab5a3780a6eb6cb871884dd293899fcc994a9665b1828a9ab2bb2d8d1e62f1dcb49a34b11b07a3b37d37ccf9fd4e91fbbf377f3ea323d97a1bbae20e4f7d456fa9c6901ff7fb85ded65ddfcc1bd33e9b1d09b8b0ce4158133f4b33c351166c31b8779119e9f1b30673be14e14ba89c", 0xe7}, {&(0x7f0000004600)="75f535418a4c624d314808fe2ebbf695bad39bbfd41a9a60faa1a84e0bf3e329f7317d2c4f98404547f20e5456366be81b59fe2278fa8fc8706e5304ff2424e658d54a97f634d472b918605a3c049aea5555efd00fce83966f68578647a14bdeec", 0x61}], 0x4, &(0x7f0000004800)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6}}}, @rights={{0x24, 0x1, 0x1, [r5, 0xffffffffffffffff, r5, r1, r0]}}], 0x80, 0x24000000}}], 0x6, 0x80) 1.203087353s ago: executing program 2 (id=1563): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x5e, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYBLOB="08000200ac14141fb61f993b8f99704c268b0f1f68f372e6bbc57f2646b5f1f00c5a06c83c08af43451845444215d825642dcc3b0cc00756a2ef584cd37c109428580e635486a55bba6d3a3feb9729effc2ac09d48e122ed3e4a813bcaae4320071ba6db3cc7819ebe7095ff4722babbe192f4cb0d44f4f9cde861a28a6ae89a084706c64991cae138baccc419e78f0100000000000000069c44cf7540a068d212f00000"], 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x804) 1.196294782s ago: executing program 0 (id=1564): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='scalable\x00', 0x9) shutdown(r0, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0x4a, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) recvmmsg(r4, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)=""/146, 0x92}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x3}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4112, 0x1010}, {&(0x7f0000000440)=""/163, 0xa3}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000005c80)=""/4080, 0xff0}, {&(0x7f0000001840)=""/105, 0x69}, {&(0x7f00000018c0)=""/147, 0x93}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008060, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000002740)={0xffffffffffffffff}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r7, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000800)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmmsg$unix(r5, 0x0, 0x0, 0x4041) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 1.147371368s ago: executing program 3 (id=1565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008f20340000000000900010073797a3000000000080003400000000134000000980a03006d30000000000000020000000900010073797a300000800008000340000000010c0006"], 0x98}}, 0x0) 1.140832261s ago: executing program 2 (id=1566): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) 1.136213245s ago: executing program 4 (id=1567): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x22, 0x2, 0x2) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="32003300209c0600080211000000080211000000ffffffffffffd9c40400800110000900080211000000000602020202020200000800cd00"], 0x58}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x24008080) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)={0x1a9c, r9, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SMPS_MODE={0x5}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x723, 0x91, "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"}, @NL80211_ATTR_IE={0x1014, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}, @measure_req={0x26, 0x1003, {0x9, 0x1, 0x3d, "aaca2066b1998c64223f02f13c19cae40ba89afadd5908beaa7a02cb1317665de3b117437cf1a30f795e80992704a1bf24cfe8b91d30233419368dd88800e6782053fb819a12d1e452bfe39adee9f2d0af54a5431851cfe4e5a2f8b8312e64fec4a6dfccde96d745525e8dc945eb09a1834f67d2770139f8a0c181ebf92f619370c4b153ffd46c2e2babe6f11c40038730f5330c484315a3c562a16ab5ae62b5541fd3d23ce35a69c41bb2ba86c29b171e04b6b7f7347cd99af12a045c2c4b09eb2cc10c6a8210f2fe74f5601bc9db2ba5590c18445160df0ab766c1b486cc9eeebea0fba36190dcdaa67259d172893f60ed4a9565e4eab181e23bbcf25a7edd8ea05b720926425d134221d8356c54050265a49f81f07acf9f0fe61a6ebcce777c3704094d3eb213e8e1a71feda16d0f8555bcccd6d4cf8e7f51a0423c6799d9bcc3dedb8c7fd68565bb951fbd13b16e1d0e3569993424976c353c574be3a8d6a50f64d32a7458bedf9a23d220e662c8f8cacab929c512405226d027668fda9e5e3917baf6febb182fd955223a984d364cc3d1183bdaabad9af93f0f467abe322be09264c44bbde524d12b51e8764e4320b2c121fe061f52cce5f59c0505a18808a8c52d81dfdca2cb0facea67c88da807e2b46bc436e04a0cae5f88052d4a201ab229c4d849a0bc6bb1dde2e4b5f1e32acea6e2ceba86f5952c7e96340884b2056b64fbca0f0261bf7c6f33b332497d0130d9a01c868e2e3e0cba44efba17e26f46f14cc8c9fc9781c3797905782e44c367401725d3bebc5eff687df57b39bb6e9be2091f92c28739f0db3585516fda6f787989c75434eee7c7a09a21f1565b383d75e703269846d66e27797115c7b37f400a412c33320339e16637e9874446790f0d47abcdd58b9fd3c0f72b084ffe6d47f234ea1a33d44ebcb2de2321106d8a47446b2a0cbefe6d7d941ef9394a6d86d023abb59330a2871d895c7f4d7413e9007e9fb8d54c72b159ae3a880fa624d7707b3c2ebad77c644cfba519c85cfe6db835b33f31640cf5f39f7bc808b47a154ebe7107edec661f0c1b9291476a4602fda1e2c529234a1148e70558d020a2b7bb235b3047e99d53ea81cc60fe3c34a9c23d44232c788ca2336cd50ecbe5bd3c7c5e359d29a8074fe7852d00d2171d026462e479b6af9963d05839ef7ebb9aa9b83148ee0a44436975adcd90042ffd7acaea82af0ab14830099fd50675f659c1ddddf6d77ef53756bd8995353f8d44eb8449587fdf461ae4e00154d85796ca9b35dce41b7a5b54dd3f16fc5fc5e10bc24c227fb4c1a09990e3dc6ff1d4902e7cbfb1de9f4fa42b34aad4df02a210f07deba44e200e52103dabefaa43e2156cdeb4b9a864ca169f98818115ca62ad055eef2a723ae9d20756b96f363d66ffa9c13ed0708eebdffe063503e6f6863bdf5ba8b282bdc4d210384a5e0308df8a8bf8c31f9fe9e57cf03006e4ed0afa58284b7ce8a43b0ceab4adffd4e895eda743175e2d017b0477853a01bc710258eb006f6541367e3ee514b82cc96ae2f1b641eba947319effac45c5e1678d427331c1050eb4fc58f06b04c0d9a86000d981302e546b07093e39ef55eb4d8e8f1e58669fb229a5bfd41676fbcf368e0e638450ab2c9b6f2b3e9ba51a4d5df6d0111305667e3ffc77dd029544b8759b4ece9f50833bd6ead3e9b08860307dfd60482fc86bf2a7b50438967b995b2346f5c9568f30872cd08152128bf2a3e2d83187298e7cecfb64753a55b5735879ac1e19611b4c5124148c6ebe20c4089892574ed489f106aafb7d4de94c7b9a54fd1f41f4c1b07f546816ed675a2dc1a7de517df3748b7763d77536582d4adf416dfcb01f3098c6b9175f13894e01a8a4edb0f2eb14fb4c126d33df106d79da7d847ab7d3004e2dd749246ba50520d4be5ab14d38b83f8d8c0c5ac24abd8dade7c05d6216e87c296ae544418ebfef41a5095e3c0e2bf36b988f3481cadb23c1c05b5a75db94e3fee7c7cf68db655d81fd3661268086b50e101526dbd8ff7673874c758babbcbe98c62d06bc216c0af28605a07ecc191b6ebe85f58431e191ff06847257a2f1a548e97e33fa70ed3822f15985820e42137adfacb0c86df76cf3f7ba30c751c4c358d016dfd18e33f48955d871ff2423676ed0d9d62c074e04a0788a67e77c5148a2e44a4b22781df75079569f303271ac55cd747769fea4051d6ceac166e9d128451fc8a18bd6f1aecbf40bd0aab57d1fc238f300311adf0870dee254af9bad53ccbda05812de16a37cc1740bb6972ea900b0940ef77cdd4f7fd7c73a3cd8317c5e2c76f2d6b27ac3719af1bab68b626565cea5f12ef63cbec3293bf6057f2589206d1393ab0605dddf33c3b445754bfa24356606b57c949127ebe02817676c30fc3faf14d2209ee1dd00c9c0a74cb1cb72941e1e72c0e145b35286de22aefa6d8675c7c42e7486ccdf8e96a2cbbe42a3cfeea85249706cbd6fb1ffbc0ad3ba6eafea0beb4b6d8844caeac7cc43ccb842035447f4e166d3eb6924a4a6114fa85f3d59a4c286b5677f819dd8d297b0e843ef57e982e29d12791a966f20f6bf63f9d9254fc789f4f047e8f59d71eaf566be23aa9502f741494a2778132531c502ce44d7c561be52dee8a103363028388cb3fec73bed415f5ab1f779e1b5ff7847adfd69c6827551a99ff75d29442eb064a8df35a2ac4a04fd5904de96a2d9e624281e7d2db87b7df7e463b1da2de21a7a729b8ea0f3a41980df5b64ae7a8746c478d26e59d1abba9d6850829c2d61d0a7f9bc099a715e8fad4bc89d5e2cd78fc9da3557d960ac31af23ebbcb1c2ed4da1660515a9498e0a97488c3be80c7e60a1408b97bd112eaeceedbaa613253d9088c87fc410e6c34be3fbcb165f5377008a5009305b03154e71c5726fc522722a6a161dc34e28f467466686061030758856312c6e8be3f2cfd6356a731cf12f38d3ddd886d618348061e33fa22664c3afb9bf8e3a8966902b36d39f00ea124a542d709e1dadf2690d567f602b6a1ead79812f9848135d655f56aa2b4e1911e871249d7b71e02f801957c70be11e8f2e00d9aac8a7d72e833bb2c84e10ae41585706e761127d5ed35b8568c345058ac88f6e46303ce6b3d1bbbcfca0d0706411b6efc528667c514d880a1c4018bdd906924c052632fb7124d9531fe5b95815b839f52fa8da490856e8ef734d26b3b74112d7c2d419a9555093e8777c50ef2d82c95bc675f19d728ec240f6d99acf2b8daac085082ed9e306612cc1fc95d706a028cbfde5274ecdc4f7942417f84ee7d16d97f18ce5877c9d7b3326f41da8dceeb72b2620d5c0d4545e8c46e76a3027c4e9a782c8e4722186bdc52bcd076f69317cf1bc13d62f6bcd6417a0f844a6fb62f2b46bc942df34a7d08dd81d39fe01cf95bd718781caf5fb78d871419a6f10d04b6afec2cb386924716140bca853088594befd545ea9cf6fcd85da406135e0075a254bbf27743cb1b243266bf9762ec255426c0e6b2928122b6db476818570dc5964ec2eefe9f1a3f727017a695deb896a3b2b3bc9df4675213258fd7c5c32fbdd6214acd593c4854ecd5324275495d1bc857350740c4e6ed07343db2aca777346422d34cfc2492d2c2b917876c730fb35a47d8ea3a03873b3adf45f5ac2af9669030055be87faff741b80e0c8bb3b3573d39d07352e168634c3c062dd29273c90f8b6bedee7ee83224c47ecfa906eb74db22746d9ca366d6ab891422d5ae669bcccfbec6fda45ba3e29890fbd671825cd09d12f176bd49bee3713de2e6a738926c6e9df1265bdc5d2ad42e55e8b9e48a329438598e46dea8654a1e3e30d17b83e534c37dec53afaa6a025da2a73803535cbc4686d19dd4a0831a352d61823a84484dab422c98f8769d6980390936ee101f7df5e0f1f6a0bfbbe32e399f98beb621504d313f7628228e98069acbeb48902c4c4262a3467200bb690982ab11c254003b5af3728de0a2acd14134c8fdc2e620c6b94b0200fd137496caa354fcec3473bcaaf8a14c411c6d292aeb76f7be88b99acdb9ec6dee3eee768a7947ffc4e0c36a7b7b18a7faa6eac4010510aabf097566da85c5075b1c41825e1bc251e1878d2ba5620bcd097992bb4271a33fa0f35b9b2223a3c9e3c4e6341815da43886bdbe95b7b694084fcf142c31870a592ab54ce6bea0e7b91c511894ac15855087f026f127f7ba6a2ab0b122a8524c3f93a9fa67236749929e114698698125d672e9a0940748a1c0aed7e04edd50d8e7b865b50b5c7f17c40760db183273a063b94c00baab977843db6d3b7bdb37a17e20a96069637de2672f07032ae29f8dc50faf4d83eb9a67e6196332228a0e58747267ad1220d85f3b0977df439699bc6c36924f3b5a7da2c307f938c3d50720d838ff7377948fd08ae5431fd00f0aea6b584b9f45826f634c2cb0420c90fb2951b9d37f871cc400f84f1eb2886bdbc97ef232c58b3d6aa57ea1dc56919ba9ed2153bcf5615df6582f84448e8a0fe9c9ca6413360e71aa353b1258ce440a3d99d9ac595bc6cae6cd1a3d139076095aaf46e9226c0ac4a58e6bdb6999048f3d833d9d3a176dcbf22d28d4e341f44f0238b6fb60a5e6d6fdac03d1c89a5655d19a4ba37cbacfac721c3daee6ebbf7d47c3620d7f4f951ec13ddc97b5a2c077bd11e807e29085538f0563c9300e1e5ee84e59bd74f6984728b8dd0dd02ddd54561fc2fada73b5f00578b1ee4a0784f9a23201b8f6426234ea68e7a5e00fe2d329079d6e2d72ad4a79e8adbec52c1c5ccf920c3b4d04478a8bf252b2cfc4897dcdbf746d1c0fc670b7d68357e241da3641184e92bc882fbe44a20a231c32c6d4fab8f7e1ff9e593b5d7a77b5ea4800c6ea78b0688e87a5eb72ba69f657d73c427f65b255fdc011ad3788182afac075d88939e7e6e201137755657889e953a0c814069fde40901466151b3f30f48e7bc0b55b9cb66ff46d8d87c3c5c2ff97680e83fd48ebb512c721139be95234091cb3f909200862117286417b6c0dc3121c4787a0ee175a660e35057a5a2eaf4a4fd5fd0d99d92dd4b77d0efa2f137b53b770ab27e203b7dc19ff91bb57ee5468975f7a2c92ab9b6f7afe91c62788cf99e4d4d18aea676e029fe24bae704780f84255748dc1ea6ee71d44c3bdc31bfa400753fe4eb3b59bb767c46df2225ab5f9a7280a93ce23bba0fb61d79defe78905cce98fb68ab63fcea9081e80ac820260c85f9067ee8a303af8d7de218170eeae1e07e7c3b0b0dc061b34bcfca0ad1628e6472debbdfdf54342811184b5c96c06517101dbf3bb666a1ed7774eb4963c71bf7c9292f9d2a3cbce7e0c93bd1c86852925aed6ae58abd15264e5b7470a508aa752d74d625c22c48372564fae41217913594dd3b67a6428dc58535cb87f9d391c77f6ce8a1184652bb4c47156c3c8b4da8c593aabd3f09a9faaab36ce13556fa3baa9612342a89eb317ab958c1f89aabd68f9c5cf0e666a1ced1acf740d748f172c9833976ab604206020284626ea406fff675d94a37af43aad492687f42a189fefa2580b27ac33ff8f7d4a00f287934dfd48cc8da996719101da888c3aee0efe6f1b906f81f9a102937006258c91e434f2672dd51cfcdd8472bf8ce0469c0a0aee9af3fefeb42390a7260faf6f719fa5b406a159da0dbcb3fa5894db980b473c9389506daf44952963798272d1c80245ba348a73f870fd072cf98349a864864c149d5e3f3de051bcc51e4eae9fe18dcd27b789a3601c34"}}, @dsss={0x3, 0x1, 0x34}]}, @NL80211_ATTR_FTM_RESPONDER={0x310, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xbd, 0x3, "997b77a032bdcbe5a2d33e02307d96adcaa299cb41cf03a14b5243758fe8f5f01bc85e27276d70f8ceabbe7e26b7f14dd85570bfc6b394e7c129a65eb77219ce3120d8f05d6887dc381f90d69ecc864bf1d0c43a26db7a57f5703a166c0d0036c278327248a8793a0247e1884a17855cc304c633904ad439545a1ef2c829da782818116f23c701115cd4d3e3d0f906f7de8398844e42e14ea585d33aa87f281743041a22472f82a7da87a45e093c4da99ab61be8fe9a486964"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xd9, 0x3, "c4147a091d8a98477c659dd730cb491307ad7eee9d47e3260474319161d5212314a43269d4e64d7af43756838e34d74e0f1b43fc8679c2bffbc5c7c8d4fb12758799a45eb5833fb039e7af5308527886f11f03994e18807262211393ba94c3776951967017d8d58d2027d17c682366974e9cec1bc20ddfb57b4859521155741a4d6f9dd8e3161661d5083a3cffab8a2893325afd3044b921077a723c08cd6d5797d056fc78fe97323e1fa94ac76fa7b9d4265d17dc1d7f768c9072ea9b31ac3ac70561b7ddde25d6f3c2fe1787eb8df8e9de9334fe"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xef, 0x3, "ebff7b049170ade2a3f9a476880738e5f4d3a10513cc92383fc76c6eb676d1f226930161487555ceb5aa65489a3bf1f8b616107dd57e5b850b0af71324826a739c464b5cb994004f80810e4e08b296596584c903f63f1082b6dc93722ec0914261712827d64dc33fd4a3ac88712e6d646d7ddb9c6b4f945557590d181a49442eece791a3e63635b42cfcc89af3442b23594dee1e376fd94e9e9c115b1e3585ae1e900582a5d42eeea9e0e15b8e545cd62779c9df177a69a30f93df86900bd89f8bda93e044c10faafa30ee109ec4dab8746d85631a213969223d4802387e90621fdaaf6598d49d84853f49"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x79, 0x3, "217e90730d981d685ccff9055c2a0ab684916711ce742e16c18acc024f8241721cc9d51ecd7e7773fb61e1a23bd644c4aa8870e6a8b9beb27b71ab86bd0b791b0146f53a82ef9510ea7e3feaf5fe976cf52ed1f82581563d566c405153971799d3cfc4ef9cae3769930d03f21b3a442aa4fe0b1519"}]}], @NL80211_ATTR_SMPS_MODE={0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffeffff}], @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x4}]}, 0x1a9c}, 0x1, 0x0, 0x0, 0x4004884}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x3, {0x0, 0x0, 0x0, 0x0, 0x4243b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) r11 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x751ac9f6bb096e60) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000a4e2eecfcd3189b84a37b751136cf3b844e35509b3c3f78ac66175a32e90617572d363368ad202ab30079e72c3a8ece39d4dc5b147ab46a9ffe11cd9fc4c00a34fcc9611df33c8acd9078013b59ce821beb447667d1a59917f2b90e7d5fe13384fc466c8765d36749e2a3d6f46fc3d683e84a80c", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf252700000008000300", @ANYRES32=r13, @ANYBLOB="0a0006000802110000000000060036001000000004005f00"], 0x34}, 0x1, 0x0, 0x0, 0x20008800}, 0x80) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c001) 1.066683627s ago: executing program 1 (id=1568): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000015000100000000000000000002000000", @ANYRES32, @ANYBLOB="1400030076657468315f746f5fb0e7e13ed58465"], 0x2c}}, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x15}, [@call={0x45, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000b40)=""/153, 0x0, 0x8, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket(0x200000000000011, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c000000100003040000000000000000000074004a3f39bbb76a824e0f25f2392c225756d88f292283ce9513821a2f3f8625e48a7de4830e54b2aaba000acfdd010f05a419965b2fcc7c4ae27f101c64122455311438a1219d113d4bce8f10f619c0f136c1b00f4b7cf0b65a9d7ac94809b2894c12520e2ad51af78a18d7d7e1a4092a960ad87da9a7fd62219fde357df73aa31ae7e783674f0544d2601e8b824de7eff23048dfdd406cb8d61ce59ae0ed1705004782d239fd48ef498cb88fb817ad2fedc51d9edd20ced641103f76dd99544bf2c6f37d3353b37c030cd6205e959aa956fe587fc40c91ba0f93", @ANYRES32=r4, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028006000900ff000000"], 0x3c}}, 0x0) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r5, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x88) (async) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000001b00), 0x4) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 32) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xd) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r9, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) (async) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x103, 0x3a, 0xff, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) (async) recvmmsg(r9, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffde1, 0x0}}], 0x1, 0x2140, 0x0) (async, rerun: 32) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x78, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000002c0)={r10, &(0x7f0000000000), 0x0}, 0x20) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x64, &(0x7f0000000440)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x1000f0, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) (rerun: 64) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x6, 0x10}, 0xc) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x1f, 0xffff, 0x400a, 0xbc8, 0x9, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740), 0x4) 1.025987991s ago: executing program 2 (id=1569): syz_emit_ethernet(0x4e, &(0x7f0000000440)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xd7, '\x00', @remote}}}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, 0x0, &(0x7f0000000300)) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000080)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(r1, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}, 0x5c) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000280)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000340)={{{@in=@local, @in6=@loopback, 0x4e20, 0x0, 0x4e21, 0xfff8, 0x2, 0x10, 0x0, 0xd7, 0x0, r5}, {0x7, 0x0, 0x2, 0x2, 0x100000001, 0xfbac, 0x90, 0x3c}, {0x8, 0x2, 0x1, 0x9}, 0x6, 0x6e6bb5, 0x2, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1f}, 0x4d4, 0xff}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x1, 0x0, 0xff, 0x80000001, 0x5, 0x8001}}, 0xe8) sendto$inet(r4, &(0x7f0000000040)="1976534e6094f2c5823db13fd84fae87893d10c7e603cd1e891898fb72", 0x1d, 0x20000001, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r6, &(0x7f0000000140)=0x7ff, 0x12) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x14, 0x14, 0x0, 0x7f}, [@FRA_SRC={0x8}]}, 0x24}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x10) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r10 = socket$l2tp(0x2, 0x2, 0x73) mmap(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x1000000, 0x4000010, r10, 0xfcb7000) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000000)={r9, 0x1}, 0x8) 1.003441837s ago: executing program 0 (id=1570): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x20000006, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r4, &(0x7f0000000240), 0x0}, 0x20) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) 906.952908ms ago: executing program 3 (id=1571): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x200, 0x4) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f000025d000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x180000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0xa) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x1, 0x18}, 0xc) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000080)) writev(r3, &(0x7f00000000c0)=[{&(0x7f00000007c0)="458d1fca4f1d0461442e12c4d90f415e934058153b9b1faca44ed5f590ee47724fe6f560d2d6483e7f5ccc9f360207f117fafd8f5ad5c2d0e60a4e2af0e10b793ed8e9532a", 0x45}], 0x1) r5 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r1, 0x0) mmap(&(0x7f00004ef000/0x4000)=nil, 0x4000, 0x2000006, 0x12, r1, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, r0, 0x0) 896.481873ms ago: executing program 4 (id=1572): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x0, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000, 0x19}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 749.813819ms ago: executing program 0 (id=1573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0xf, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c45}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r4) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000001900)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0xa48730c52a5fb0a0}, 0xc, &(0x7f00000018c0)={&(0x7f00000016c0)={0x20, r5, 0x304, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x74, 0x52}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x48000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000fedbdf254400000008000300", @ANYRES32=r9, @ANYBLOB="0c002380060016001320"], 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r3, &(0x7f0000000040)={0x2000001c}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) close(r10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x59}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}}, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x24}}, 0x0) recvmmsg$unix(r11, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{0x0}, {&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/87, 0x57}, {&(0x7f0000000140)=""/52, 0x34}, {&(0x7f0000001480)=""/232, 0xe8}, {&(0x7f0000001580)=""/158, 0x9e}, {&(0x7f00000001c0)=""/78, 0x4e}, {&(0x7f0000001cc0)=""/157, 0x9d}, {&(0x7f0000001700)=""/194, 0xc2}], 0xa}}], 0x1, 0x0, 0x0) write(r11, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001a00), r11) sendmsg$IPVS_CMD_DEL_DAEMON(r12, &(0x7f0000001b80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a40)={0xfc, r13, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x2}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xffffffffffffff8e, 0x7, {0x30, 0x19}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x100078}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xfc}}, 0x80) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x130, r13, 0x608, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x42}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x2e}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x130}, 0x1, 0x0, 0x0, 0x24040080}, 0x10000040) r14 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r14, 0x89f0, &(0x7f0000000200)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) 674.940617ms ago: executing program 4 (id=1574): getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f00000004c0)=""/4096, &(0x7f0000000040)=0x1000) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010f000000000000000003000000080004"], 0x1c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x5, 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000540)={&(0x7f0000000040)={0x1d, r4}, 0xe5, &(0x7f00000001c0)={&(0x7f0000000800)={0x1, 0x4fc34febd88dcfa7, 0x800, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @canfd={{0x9, 0x1}, 0x24, 0x2, 0x0, 0x0, "b3f3977f7f02d0de100f60dbb8411104d7083c34a7fb805d0db92d7774e6d9083d92a51fcc14b37a34d142de0528d818e27a3b586f163144d23a1f995d95769f"}}, 0x80}, 0x2, 0x0, 0x0, 0x10000800}, 0x4000087) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r5, 0x10d, 0xd1, &(0x7f0000000000), &(0x7f0000000240)=0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000480)={0xffff1a47, 0x40000000, 0x10000, 0x9, 0x9}, 0x14) 626.454229ms ago: executing program 1 (id=1575): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000e40)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x11, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x836ff000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040), 0x1, 0x40) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @local, 0x8}}}, {{@arp={@remote, @multicast2, 0xffffff00, 0xff, 0x9, 0x9, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x7, 0xe, 0x40, 0xfffd, 0x0, 0x5, 'syz_tun\x00', 'gre0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x78, 0x8, 0x3}}}, {{@arp={@empty, @dev={0xac, 0x14, 0x14, 0x1a}, 0xffffff00, 0x0, 0x2, 0x0, {@empty, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@random="290c176c978f", {[0x7f, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0xb7, 0x5, 0x0, 0xa7fb, 0x7, 0x800, 'veth1_to_batadv\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0x2f2c2646b822bef8}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 544.331357ms ago: executing program 4 (id=1576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xa602, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20480, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef0001000900002c"], 0x66) 430.920822ms ago: executing program 1 (id=1577): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), 0x6) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="ff00be0700000003000464503694bd928de656a4799149c0790b53d3dd514084f1b182ea"], 0xe) openat$cgroup(r0, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c00018008000100000004000c0002"], 0x30}}, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x12, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="550a00000000000061191c00000000001800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 422.703703ms ago: executing program 0 (id=1578): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x20000080) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x44814) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "018100", 0x64, 0x11, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x3, "fd38ff72d0317fffbe71b898de053219f2da7b07653606d96dbff4105a9cdfe1", "9b86bfa3211d0bb127575392155ca4f9", {"e194e07e4bc9a4830f4bdf4b40c027a5", "e6f6dad946e196374f97fda3652956fd"}}}}}}}}, 0x0) unshare(0x68060200) 294.571029ms ago: executing program 3 (id=1579): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_dccp(0x2, 0x6, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000028c0)=ANY=[@ANYBLOB="340000001058bbd550f437db2b8f18f435c84000010000000000feeaad1db2000000", @ANYRES32=r3, @ANYBLOB="604600000000000014001680100001800c0003000000000006000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet(r1, &(0x7f0000002880)={&(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000002700)=[{&(0x7f0000000140)="1e747327f062d955b40f65f10c37698705d2c33aca4284a3ed9e2f9944ece4600d53ee1b5927f13babb97fded9387edd90e84d3abc0b1c9ceefde5c9efd7bd70b8aa1eceb95c9816e972cd7e51b104314284d67586a5b782371a9755236701206768a36a74ee2101f52648f626e81e17b9140ca77db7ded63c50f9ff669cc1fe93e00ba65bfd0c93528f3556", 0x8c}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000200)="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", 0xff}, {&(0x7f0000000400)="675db302b4a7699be698c52ec819f7e0d76d249340bd0bb746f0f0e14192c69344d4e626944612b08e3f04ae7fb9138a81e535d03091cb5ca49bf61f35bad249fbec19fb720ecf4070da76b232a3e30a66c7d8975a40100519713077bafccebb5c5489b673f02bd63c5d5fefaf67310852ad24ca228f186b9dc53df74fefeb4c7ab18b56b0f6db4de55c2b9da283f7158625d4cc79", 0x95}, {&(0x7f0000000300)="1626fe5c348160ff0fc15f5f9c5047ed9a145e2fa3ac59f6332d0388ec92c907fac5834a37dd2a20cf", 0x29}, {&(0x7f0000001580)="8d0ebfc54e370fa923b589f03a494bdfa178eb425882620d992a60d270c4ff467e2abd4a11f2c35c98a810a91794cd7dfc0b09010a827b62f33de68db6163f4e190d44268b5fba2fad6907da98b554a261863f198057b92d3c117835ea7f2e1a873faa01ce5416b018014cf6cd1371972a2453969f2d691432fcd643d53890d45f0ce271b3fa6987214e538bc0d5d7bf431118b138ab5e4bb2bafceaaa24f90a4d4dab663679a0a7e7ee55149634d331f559c241c346401da162", 0xba}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000002640)="7e3ea3462a739b5dee4d0a5cc513d7402b2b20c0915df92e745c7798a9c84e7dc52d74e65581f7a6315748f355aa81f3aa5e9adede7b50f038984304912203adb1c284f5bc9fc93fe7e8861289224af9a11aad32a8eb773b6a669ddb97b0f21dfd894a89b7fa7ef3e0f70d06b7035e00894edf98bd49718529da0b9b88ebfb781127b8ad3b9a8232d0973ef709462f655dd15f9b5edc", 0x96}, {&(0x7f00000004c0)="ebfa653d59ef7531b4bc242a498d14867f3deaffc66ba325e8ae9a4ff7f684612d5fc5e4dbb3339f3c39632ecbd93189ec2a3781e4ba3fb8746b70871dd27790fafcc186f165a959b48b2d69a6cd7f8a3a88", 0x52}, {&(0x7f0000000380)="8e9edf04656fb462330c9bbc75e8570cb1d9268f200a26b1d558adf89691cbc49fdfaa98d24c3c270b4c4f78725aa7e90007e02f", 0x34}], 0xa, &(0x7f00000027c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @multicast2}}}], 0xb8}, 0x4081) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x0, 0x0) 175.677526ms ago: executing program 3 (id=1580): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bd4e54d45303aaaaaaaaaa0008060001080006040000ffff13ffffffcd141400aaaaaaaaaaaae0000002"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r2, 0x0, 0x14}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bd4e54d45303aaaaaaaaaa0008060001080006040000ffff13ffffffcd141400aaaaaaaaaaaae0000002"], 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r2, 0x0, 0x14}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) (async) 0s ago: executing program 2 (id=1581): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000060000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000b2c20000e24db6de141a64319245c100c63bd4510000000000"], 0x48) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f00000002c0)='c', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000200)=@assoc_value, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdc35, 0x0, 0x0, 0x0, 0xf}, [@map_fd={0x18, 0x8, 0x1, 0x0, r1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffff6}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe4, &(0x7f0000002b00)=""/228, 0x0, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000002"], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a00)={r6, &(0x7f00000002c0)="3827f5a625", 0x0}, 0x20) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) listen(r0, 0x7f80) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r10, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x26f}]}]}]}}]}, 0xac}}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)=ANY=[@ANYBLOB="9c0400003d000003fbffffff000000000100000054004900844bfd1ce28a351b14de8855ff8f572aeaba4ea052ddc3df8ed5e87546c3339b73b0bd7b59f1e11658982dd07c0c906a8d22c9176e8c734597bd838a8b04473bebb631a65dbdf3e31ffc2c6850edfc1a3221a5f0b03b60edfaf921cf16b8a3a8a12b214483957bee32f8529d241309552630f0b509d0168eefcd3b15368700e9079d53707926eda770bc0e4918c291641be85cb42259180ea0b7ad8b1cd0bcb86f8aa737f049f0da954a4fc5d799a3d40493474a953f3b3fafcbbc890f5059f7b15fd62a14d4f5e276673ee2af21082012dd6d538540f355e770c938b5f236857bf6adb708b82a5a660131b6066590285e4b070b7e610d1b488d9e23b0ae0ff7012ab383835465a20165800a00fd006879626c610000000c0087007fffffffffffffff0c0021000800000000000000947ebc309af9ef726577dc84364beca4d0abf631c29ff949d73095b293757580d3ce9ba2485391a1afd221f8dcd4a581e176d323b33988c36f9529802cce3bdbe41d243b9f390e121d2157ae3e307a01ac58aa53bf44a92e92798cc1034c73518636ba800970a674196879581ae5938c7bdcc1b039c0db7b10672944ecd8a9ee1f8ebde903630e282d48584472aae7d5f433019bef8b01a1205176d8d2ad5ae3d4a15e84dc8dbbbf4dad09b259c3f437c6c84ecb20f5bd0d88d57ca8488332d97062d61b63c80e7fc06415a4acd220afc8967a974a55a231a2cfa90f6001b631cbf8ac4941c8779b53b3d60f3afd4321fc060800330002000000caf1921fd3f4c2f0027160941f64fbc9c10587123c7ce669f77be3aa285b37fa78fd8aaf7b7d8d53a5779471ac3c1e889f63ed8ad1fa91d42afd7995321dd7c11ead5a57da2738d22157ef7f5f7a99136d988cac36302aacd46e202f0b7c6f38428d7fbe65197a76c9a09fe4caac2362f0c57ff08ddcfadd73034147aed5f4d0000024e1b3767fe0de687f977e4eb2d400c6eb2d4906f2316b346e414aba488bb170ab6d8a318385f7a99641fb44cb9d6f6fb52ac4373047bc07bba3b291bef6c27a0b02233e30eae1288c318264f9c58525f43d02f8da2c2e29a396e0d7f3c5e150dea1118bb42e5cd07c309ea70d4feae0b92bd183353def25019131d3e0df29f2333c092ed12e3a30060b0ad88ddc1c21ef534760a89cd4b1b065320d9c5f755f9bb826f6411025355dafeec75422a300826f82e8ea45be5d1bcf55fd0aceb9b787aed6cce8e60befb32de08dc4d4c0d94893da1d4983fe1bab340d5d0bf12313c113f0db02ad31d83bd657effacb0dec3e2072b2664f6bb582662ec3aed4d6b2198523bd82f9a809d9b5ddfbc16050b0ef5264fe03a31fd18d61d0f657752a5dc3089e8a15872e85f4e9db043e32afb9fd820abbb2299fb2a2b8e506e8c8d00f57c3ac237eb7f5648e0dcf5debbff8dacd2c50799f119094918d270ede6a67e8e9cdcf5f2fc59222e27913175729b04e6b6e88d0bb5458bd59675afcf39213efc5bbfc053df02286efe069b4a69a7cbf3c084190114c6ad419574e4131c59c26671070334e49fabbd43e3e2f1e6efcb9dc270d08d17e9e786563a7d57a10bc6cc509e74c0b9c52ab0c1601503a7bd8a96643bbc8c7707e1f0012fc252f63eb52d57d4e71"], 0x49c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) close(r0) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000100)=0x4, 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.122' (ED25519) to the list of known hosts. [ 59.207775][ T5819] cgroup: Unknown subsys name 'net' [ 59.357397][ T5819] cgroup: Unknown subsys name 'cpuset' [ 59.365735][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.658661][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.299712][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.310375][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.318221][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.326561][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.330072][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.334474][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.342426][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.349687][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.358117][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.370606][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.374908][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.379031][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.394273][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.413393][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.421710][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.427669][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.429613][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.450135][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.450402][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.457578][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.465549][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.480937][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.488129][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.500804][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.509016][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.518104][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.529541][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.543904][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.554305][ T5847] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 64.566999][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.935172][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 64.978462][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 65.016754][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 65.031840][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 65.089844][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 65.222554][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.230044][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.239398][ T5840] bridge_slave_0: entered allmulticast mode [ 65.246292][ T5840] bridge_slave_0: entered promiscuous mode [ 65.255059][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.262251][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.269494][ T5840] bridge_slave_1: entered allmulticast mode [ 65.276442][ T5840] bridge_slave_1: entered promiscuous mode [ 65.321611][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.328853][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.338242][ T5829] bridge_slave_0: entered allmulticast mode [ 65.345313][ T5829] bridge_slave_0: entered promiscuous mode [ 65.384579][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.391694][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.399067][ T5830] bridge_slave_0: entered allmulticast mode [ 65.406208][ T5830] bridge_slave_0: entered promiscuous mode [ 65.423448][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.430867][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.438565][ T5829] bridge_slave_1: entered allmulticast mode [ 65.445411][ T5829] bridge_slave_1: entered promiscuous mode [ 65.468555][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.475927][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.483184][ T5848] bridge_slave_0: entered allmulticast mode [ 65.491301][ T5848] bridge_slave_0: entered promiscuous mode [ 65.498281][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.505496][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.512704][ T5830] bridge_slave_1: entered allmulticast mode [ 65.519890][ T5830] bridge_slave_1: entered promiscuous mode [ 65.529500][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.555934][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.563115][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.570926][ T5833] bridge_slave_0: entered allmulticast mode [ 65.578439][ T5833] bridge_slave_0: entered promiscuous mode [ 65.586071][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.593198][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.600694][ T5848] bridge_slave_1: entered allmulticast mode [ 65.607628][ T5848] bridge_slave_1: entered promiscuous mode [ 65.632502][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.645082][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.656838][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.666726][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.674732][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.682106][ T5833] bridge_slave_1: entered allmulticast mode [ 65.689036][ T5833] bridge_slave_1: entered promiscuous mode [ 65.749942][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.762532][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.774978][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.787138][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.805604][ T5829] team0: Port device team_slave_0 added [ 65.813311][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.846637][ T5840] team0: Port device team_slave_0 added [ 65.865686][ T5829] team0: Port device team_slave_1 added [ 65.873448][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.893341][ T5848] team0: Port device team_slave_0 added [ 65.901931][ T5848] team0: Port device team_slave_1 added [ 65.909172][ T5840] team0: Port device team_slave_1 added [ 65.926852][ T5830] team0: Port device team_slave_0 added [ 65.978552][ T5830] team0: Port device team_slave_1 added [ 65.997902][ T5833] team0: Port device team_slave_0 added [ 66.014810][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.022041][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.048753][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.070035][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.077261][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.105006][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.119119][ T5833] team0: Port device team_slave_1 added [ 66.128760][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.135954][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.162106][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.174250][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.181228][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.207696][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.227883][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.235040][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.261185][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.272753][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.280026][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.306246][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.332865][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.340120][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.366169][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.382729][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.390726][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.417105][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.436497][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.443504][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.469971][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.504743][ T5847] Bluetooth: hci0: command tx timeout [ 66.504747][ T55] Bluetooth: hci1: command tx timeout [ 66.518382][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.526037][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.552880][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.584055][ T5847] Bluetooth: hci4: command tx timeout [ 66.594054][ T5847] Bluetooth: hci3: command tx timeout [ 66.594060][ T55] Bluetooth: hci2: command tx timeout [ 66.595698][ T5848] hsr_slave_0: entered promiscuous mode [ 66.612066][ T5848] hsr_slave_1: entered promiscuous mode [ 66.631505][ T5840] hsr_slave_0: entered promiscuous mode [ 66.637958][ T5840] hsr_slave_1: entered promiscuous mode [ 66.644571][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.652420][ T5840] Cannot create hsr debugfs directory [ 66.717754][ T5829] hsr_slave_0: entered promiscuous mode [ 66.724288][ T5829] hsr_slave_1: entered promiscuous mode [ 66.730424][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.738564][ T5829] Cannot create hsr debugfs directory [ 66.770753][ T5830] hsr_slave_0: entered promiscuous mode [ 66.777480][ T5830] hsr_slave_1: entered promiscuous mode [ 66.783535][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.791266][ T5830] Cannot create hsr debugfs directory [ 66.809809][ T5833] hsr_slave_0: entered promiscuous mode [ 66.819054][ T5833] hsr_slave_1: entered promiscuous mode [ 66.825339][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.833018][ T5833] Cannot create hsr debugfs directory [ 67.139671][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.156965][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.197190][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.221582][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.241815][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.257987][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.281933][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.308443][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.337762][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.349334][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.361195][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.373196][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.461734][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.472212][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.489289][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.498861][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.561563][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.580459][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.604214][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.615405][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.692319][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.748477][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.775737][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.802864][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.814834][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.833538][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.850485][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.857845][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.871658][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.878805][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.901593][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.908768][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.918949][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.926081][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.938655][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.959257][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.966451][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.976485][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.983576][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.028458][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.076317][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.083484][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.092408][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.099519][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.131825][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.191010][ T5829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.215979][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.240270][ T5848] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.251527][ T5848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.357771][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.381638][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.388844][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.458659][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.466386][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.511152][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.583954][ T5847] Bluetooth: hci0: command tx timeout [ 68.584431][ T55] Bluetooth: hci1: command tx timeout [ 68.666605][ T55] Bluetooth: hci3: command tx timeout [ 68.666625][ T5847] Bluetooth: hci4: command tx timeout [ 68.672032][ T55] Bluetooth: hci2: command tx timeout [ 68.701628][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.739953][ T5840] veth0_vlan: entered promiscuous mode [ 68.776599][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.795869][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.810858][ T5840] veth1_vlan: entered promiscuous mode [ 68.873430][ T5829] veth0_vlan: entered promiscuous mode [ 68.890278][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.912289][ T5829] veth1_vlan: entered promiscuous mode [ 68.951958][ T5830] veth0_vlan: entered promiscuous mode [ 68.965057][ T5840] veth0_macvtap: entered promiscuous mode [ 68.974761][ T5848] veth0_vlan: entered promiscuous mode [ 68.999862][ T5840] veth1_macvtap: entered promiscuous mode [ 69.011764][ T5829] veth0_macvtap: entered promiscuous mode [ 69.022781][ T5848] veth1_vlan: entered promiscuous mode [ 69.043378][ T5830] veth1_vlan: entered promiscuous mode [ 69.067390][ T5829] veth1_macvtap: entered promiscuous mode [ 69.111072][ T5848] veth0_macvtap: entered promiscuous mode [ 69.132594][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.145765][ T5848] veth1_macvtap: entered promiscuous mode [ 69.158031][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.170752][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.185244][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.214377][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.234953][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.249653][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.261055][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.280394][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.289692][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.298915][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.309926][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.325281][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.334847][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.344532][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.353294][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.378442][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.389951][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.402582][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.413114][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.425970][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.453480][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.464696][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.475129][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.485847][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.496895][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.508198][ T5830] veth0_macvtap: entered promiscuous mode [ 69.546730][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.556207][ T5848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.565870][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.575540][ T5848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.593237][ T5830] veth1_macvtap: entered promiscuous mode [ 69.620384][ T5833] veth0_vlan: entered promiscuous mode [ 69.665163][ T5833] veth1_vlan: entered promiscuous mode [ 69.709103][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.720902][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.731554][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.743566][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.753549][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.764488][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.775678][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.799737][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.803424][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.818914][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.824226][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.836267][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.846833][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.857985][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.869355][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.881576][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.902660][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.912422][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.921631][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.931498][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.949811][ T5833] veth0_macvtap: entered promiscuous mode [ 69.973568][ T5833] veth1_macvtap: entered promiscuous mode [ 69.993073][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.014778][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.054030][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.062242][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.068756][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.083033][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.094835][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.105737][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.116823][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.127525][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.137456][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.147945][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.158685][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.180234][ T3488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.180281][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.199303][ T3488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.209181][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.219416][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.230667][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.240906][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.251544][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.261769][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.280512][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.291322][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.316380][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.331133][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.340182][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.349376][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.382956][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.399624][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.408183][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.423199][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.523617][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.550780][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.562760][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.663926][ T55] Bluetooth: hci1: command tx timeout [ 70.664125][ T5847] Bluetooth: hci0: command tx timeout [ 70.698922][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.744323][ T5847] Bluetooth: hci2: command tx timeout [ 70.744584][ T55] Bluetooth: hci4: command tx timeout [ 70.749943][ T5847] Bluetooth: hci3: command tx timeout [ 70.763775][ T3527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.771689][ T3527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.789349][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.831992][ T5920] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.896401][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.940206][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.047780][ T5929] Zero length message leads to an empty skb [ 71.512478][ T5945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 71.538738][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 71.597069][ T5947] nbd: must specify a size in bytes for the device [ 71.620902][ T5947] netlink: 'syz.3.11': attribute type 4 has an invalid length. [ 71.665566][ T5950] netlink: 'syz.2.12': attribute type 11 has an invalid length. [ 71.674894][ T5951] netlink: 'syz.3.11': attribute type 4 has an invalid length. [ 71.708928][ T5950] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12'. [ 71.709354][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.731306][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.365972][ T5982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.25'. [ 72.410668][ T5975] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 72.443254][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.454724][ T5981] netlink: 72 bytes leftover after parsing attributes in process `syz.1.21'. [ 72.590558][ T5986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 72.658009][ T5986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.26'. [ 72.744282][ T5847] Bluetooth: hci1: command tx timeout [ 72.749751][ T5847] Bluetooth: hci0: command tx timeout [ 72.751668][ T5915] hid-generic 0005:07C0:0058.0001: item fetching failed at offset 0/1 [ 72.790758][ T5915] hid-generic 0005:07C0:0058.0001: probe with driver hid-generic failed with error -22 [ 72.824834][ T5847] Bluetooth: hci4: command tx timeout [ 72.831820][ T5842] Bluetooth: hci2: command tx timeout [ 72.837647][ T5842] Bluetooth: hci3: command tx timeout [ 73.008968][ T6005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.36'. [ 73.087782][ T6011] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.172502][ T6014] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.913918][ T6048] FAULT_INJECTION: forcing a failure. [ 73.913918][ T6048] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 73.934555][ T6048] CPU: 0 UID: 0 PID: 6048 Comm: syz.3.46 Not tainted 6.14.0-rc2-syzkaller-00154-g054e61bb1de4 #0 [ 73.934582][ T6048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 73.934599][ T6048] Call Trace: [ 73.934605][ T6048] [ 73.934613][ T6048] dump_stack_lvl+0x241/0x360 [ 73.934644][ T6048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.934662][ T6048] ? __pfx__printk+0x10/0x10 [ 73.934680][ T6048] ? __pfx_lock_release+0x10/0x10 [ 73.934709][ T6048] should_fail_ex+0x40a/0x550 [ 73.934734][ T6048] _copy_from_user+0x2d/0xb0 [ 73.934753][ T6048] do_ipt_set_ctl+0x731/0x1250 [ 73.934779][ T6048] ? nf_setsockopt+0x240/0x2c0 [ 73.934794][ T6048] ? do_ip_setsockopt+0x2824/0x3ae0 [ 73.934813][ T6048] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 73.934834][ T6048] ? rcu_is_watching+0x15/0xb0 [ 73.934851][ T6048] ? trace_contention_end+0x3c/0x120 [ 73.934877][ T6048] ? __mutex_unlock_slowpath+0x227/0x800 [ 73.934904][ T6048] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 73.934921][ T6048] ? aa_sk_perm+0x96d/0xab0 [ 73.934947][ T6048] ? __pfx_aa_sk_perm+0x10/0x10 [ 73.934970][ T6048] nf_setsockopt+0x295/0x2c0 [ 73.934990][ T6048] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 73.935008][ T6048] do_sock_setsockopt+0x3af/0x720 [ 73.935034][ T6048] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 73.935059][ T6048] ? __fget_files+0x395/0x410 [ 73.935079][ T6048] ? __fget_files+0x2a/0x410 [ 73.935106][ T6048] __x64_sys_setsockopt+0x1ee/0x280 [ 73.935132][ T6048] do_syscall_64+0xf3/0x230 [ 73.935151][ T6048] ? clear_bhb_loop+0x35/0x90 [ 73.935175][ T6048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.935195][ T6048] RIP: 0033:0x7f96c898cde9 [ 73.935217][ T6048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.935230][ T6048] RSP: 002b:00007f96c9753038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 73.935249][ T6048] RAX: ffffffffffffffda RBX: 00007f96c8ba5fa0 RCX: 00007f96c898cde9 [ 73.935261][ T6048] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 73.935270][ T6048] RBP: 00007f96c9753090 R08: 0000000000000a68 R09: 0000000000000000 [ 73.935280][ T6048] R10: 0000400000000ac0 R11: 0000000000000246 R12: 0000000000000001 [ 73.935290][ T6048] R13: 0000000000000000 R14: 00007f96c8ba5fa0 R15: 00007ffdabbb5bd8 [ 73.935314][ T6048] [ 74.833069][ T6062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.49'. [ 74.892379][ T6063] netlink: 16 bytes leftover after parsing attributes in process `syz.1.49'. [ 75.545765][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 75.695936][ T6067] nbd: must specify a size in bytes for the device [ 75.821130][ T6072] netlink: 'syz.3.53': attribute type 10 has an invalid length. [ 76.102698][ T6090] netlink: 104 bytes leftover after parsing attributes in process `syz.3.60'. [ 76.149971][ T6092] Cannot find add_set index 0 as target [ 76.263188][ T6098] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 77.147827][ T6108] __nla_validate_parse: 1 callbacks suppressed [ 77.147844][ T6108] netlink: 28 bytes leftover after parsing attributes in process `syz.3.66'. [ 77.315137][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.67'. [ 78.061758][ T6101] vlan2: entered promiscuous mode [ 78.070083][ T6101] bond0: entered promiscuous mode [ 78.075736][ T6101] bond_slave_0: entered promiscuous mode [ 78.082256][ T6101] bond_slave_1: entered promiscuous mode [ 78.096139][ T6101] bond0: left promiscuous mode [ 78.101579][ T6101] bond_slave_0: left promiscuous mode [ 78.109123][ T6101] bond_slave_1: left promiscuous mode [ 78.340939][ T6127] FAULT_INJECTION: forcing a failure. [ 78.340939][ T6127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.402531][ T6127] CPU: 0 UID: 0 PID: 6127 Comm: syz.4.72 Not tainted 6.14.0-rc2-syzkaller-00154-g054e61bb1de4 #0 [ 78.402559][ T6127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 78.402569][ T6127] Call Trace: [ 78.402575][ T6127] [ 78.402583][ T6127] dump_stack_lvl+0x241/0x360 [ 78.402608][ T6127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.402625][ T6127] ? __pfx__printk+0x10/0x10 [ 78.402650][ T6127] should_fail_ex+0x40a/0x550 [ 78.402675][ T6127] _copy_from_user+0x2d/0xb0 [ 78.402694][ T6127] copy_from_sockptr_offset+0x6b/0xb0 [ 78.402718][ T6127] do_ipt_set_ctl+0xbdd/0x1250 [ 78.402744][ T6127] ? nf_setsockopt+0x240/0x2c0 [ 78.402758][ T6127] ? do_ip_setsockopt+0x2824/0x3ae0 [ 78.402777][ T6127] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 78.402797][ T6127] ? rcu_is_watching+0x15/0xb0 [ 78.402815][ T6127] ? trace_contention_end+0x3c/0x120 [ 78.402840][ T6127] ? __mutex_unlock_slowpath+0x227/0x800 [ 78.402867][ T6127] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 78.402882][ T6127] ? aa_sk_perm+0x96d/0xab0 [ 78.402908][ T6127] ? __pfx_aa_sk_perm+0x10/0x10 [ 78.402928][ T6127] nf_setsockopt+0x295/0x2c0 [ 78.402956][ T6127] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 78.402971][ T6127] do_sock_setsockopt+0x3af/0x720 [ 78.402996][ T6127] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 78.403019][ T6127] ? __fget_files+0x395/0x410 [ 78.403038][ T6127] ? __fget_files+0x2a/0x410 [ 78.403063][ T6127] __x64_sys_setsockopt+0x1ee/0x280 [ 78.403089][ T6127] do_syscall_64+0xf3/0x230 [ 78.403109][ T6127] ? clear_bhb_loop+0x35/0x90 [ 78.403132][ T6127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.403151][ T6127] RIP: 0033:0x7f968238cde9 [ 78.403165][ T6127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.403178][ T6127] RSP: 002b:00007f9683200038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 78.403195][ T6127] RAX: ffffffffffffffda RBX: 00007f96825a5fa0 RCX: 00007f968238cde9 [ 78.403206][ T6127] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 78.403216][ T6127] RBP: 00007f9683200090 R08: 0000000000000a68 R09: 0000000000000000 [ 78.403225][ T6127] R10: 0000400000000ac0 R11: 0000000000000246 R12: 0000000000000001 [ 78.403234][ T6127] R13: 0000000000000000 R14: 00007f96825a5fa0 R15: 00007ffd7731b1d8 [ 78.403257][ T6127] [ 78.689927][ T6133] Cannot find add_set index 0 as target [ 79.121229][ T6163] netlink: 'syz.4.84': attribute type 32 has an invalid length. [ 79.543519][ T6184] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 79.998111][ T6211] netlink: 'syz.2.101': attribute type 2 has an invalid length. [ 80.039794][ T6217] ip6tnl1: entered allmulticast mode [ 80.245728][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'. [ 80.256334][ T6226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.109'. [ 80.284553][ T6226] netlink: 6 bytes leftover after parsing attributes in process `syz.3.109'. [ 80.310396][ T6226] syz.3.109 uses obsolete (PF_INET,SOCK_PACKET) [ 80.318356][ T6229] vlan2: entered allmulticast mode [ 80.337163][ T6229] bond0: entered allmulticast mode [ 80.350087][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.110'. [ 80.360783][ T6229] bond_slave_0: entered allmulticast mode [ 80.372168][ T6229] bond_slave_1: entered allmulticast mode [ 80.386437][ T6229] bridge0: port 3(vlan2) entered blocking state [ 80.397374][ T6229] bridge0: port 3(vlan2) entered disabled state [ 80.409349][ T6229] vlan2: entered promiscuous mode [ 80.419272][ T6229] bond0: entered promiscuous mode [ 80.425866][ T6229] bond_slave_0: entered promiscuous mode [ 80.431784][ T6229] bond_slave_1: entered promiscuous mode [ 80.445415][ T6229] bridge0: port 3(vlan2) entered blocking state [ 80.452093][ T6229] bridge0: port 3(vlan2) entered forwarding state [ 80.771756][ T6249] x_tables: unsorted underflow at hook 2 [ 80.948554][ T6256] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20001 [ 81.404287][ T6276] netlink: 20 bytes leftover after parsing attributes in process `syz.4.129'. [ 81.950584][ T975] cfg80211: failed to load regulatory.db [ 81.992436][ T6314] netlink: 'syz.4.144': attribute type 10 has an invalid length. [ 82.040616][ T6314] team0: Port device netdevsim0 added [ 82.084486][ T6316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.146'. [ 82.096146][ T6316] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 82.214629][ T6320] IPv6: addrconf: prefix option has invalid lifetime [ 82.224227][ T6322] netlink: 'syz.4.149': attribute type 1 has an invalid length. [ 82.258065][ T6326] IPv6: addrconf: prefix option has invalid lifetime [ 82.266966][ T6325] netlink: 24 bytes leftover after parsing attributes in process `syz.3.148'. [ 82.277333][ T6326] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 82.517416][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'. [ 82.944116][ T6363] netlink: 24 bytes leftover after parsing attributes in process `syz.0.157'. [ 83.122764][ T6371] tipc: Started in network mode [ 83.139225][ T6371] tipc: Node identity 9, cluster identity 4711 [ 83.149402][ T6371] tipc: Node number set to 9 [ 83.379683][ T6387] netlink: 'syz.1.166': attribute type 10 has an invalid length. [ 83.425695][ T6387] team0: Device hsr_slave_0 failed to register rx_handler [ 83.529856][ T6393] netlink: 'syz.4.167': attribute type 13 has an invalid length. [ 83.548320][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.167'. [ 83.597356][ T6393] netem: incorrect gi model size [ 83.627778][ T6393] netem: change failed [ 83.903175][ T6419] netlink: 36 bytes leftover after parsing attributes in process `syz.4.175'. [ 83.906094][ T6421] netlink: 24 bytes leftover after parsing attributes in process `syz.2.173'. [ 83.939752][ T6419] x_tables: duplicate underflow at hook 3 [ 85.512468][ T6445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.179'. [ 85.773859][ T6463] netlink: 24 bytes leftover after parsing attributes in process `syz.3.182'. [ 85.791895][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.184'. [ 85.844880][ T6468] Bluetooth: MGMT ver 1.23 [ 86.367530][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 86.409574][ T6505] netlink: 'syz.3.193': attribute type 1 has an invalid length. [ 86.552667][ T6507] x_tables: duplicate entry at hook 1 [ 86.576164][ T6507] openvswitch: netlink: IPv4 tun info is not correct [ 86.699895][ T6519] netlink: 'syz.3.197': attribute type 6 has an invalid length. [ 86.869004][ T6527] netlink: 'syz.1.200': attribute type 4 has an invalid length. [ 87.009081][ T6537] bridge_slave_0: default FDB implementation only supports local addresses [ 87.044430][ T6537] bridge_slave_0: default FDB implementation only supports local addresses [ 88.928949][ T6576] __nla_validate_parse: 3 callbacks suppressed [ 88.928966][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.213'. [ 89.316562][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.218'. [ 89.402938][ T6606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.221'. [ 89.481387][ T6606] netlink: 56 bytes leftover after parsing attributes in process `syz.2.221'. [ 89.800140][ T6630] tipc: Enabling of bearer rejected, failed to enable media [ 90.298523][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.236'. [ 90.344171][ T6658] can: request_module (can-proto-0) failed. [ 90.895266][ T6681] netlink: 'syz.1.240': attribute type 11 has an invalid length. [ 91.048725][ T6679] xt_CT: No such helper "snmp_trap" [ 91.208533][ T6694] netlink: 'syz.4.244': attribute type 6 has an invalid length. [ 91.597846][ T6712] Dead loop on virtual device ip6_vti0, fix it urgently! [ 91.633084][ T6712] Dead loop on virtual device ip6_vti0, fix it urgently! [ 91.648155][ T6718] bridge0: port 3(vlan2) entered blocking state [ 91.658621][ T6720] netlink: 256 bytes leftover after parsing attributes in process `syz.2.252'. [ 91.671149][ T6712] Dead loop on virtual device ip6_vti0, fix it urgently! [ 91.693895][ T6718] bridge0: port 3(vlan2) entered disabled state [ 91.700386][ T6718] vlan2: entered allmulticast mode [ 91.722441][ T6712] Dead loop on virtual device ip6_vti0, fix it urgently! [ 91.740740][ T6712] Dead loop on virtual device ip6_vti0, fix it urgently! [ 91.751653][ T6712] Dead loop on virtual device ip6_vti0, fix it urgently! [ 91.760180][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 91.776621][ T6718] vlan2: left allmulticast mode [ 91.791717][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 91.910102][ T6726] netlink: 96 bytes leftover after parsing attributes in process `syz.4.253'. [ 92.134781][ T6748] Cannot find add_set index 0 as target [ 92.325132][ T6759] netlink: 'syz.1.260': attribute type 1 has an invalid length. [ 92.392062][ T6763] Bluetooth: MGMT ver 1.23 [ 92.597390][ T6776] x_tables: duplicate underflow at hook 4 [ 92.843503][ T6766] team0 (unregistering): Port device team_slave_0 removed [ 92.875941][ T6766] team0 (unregistering): Port device team_slave_1 removed [ 93.204238][ T6793] syzkaller1: entered promiscuous mode [ 93.259324][ T6793] syzkaller1: entered allmulticast mode [ 93.525873][ T6814] Cannot find add_set index 0 as target [ 93.749711][ T6825] veth0_to_hsr: invalid flags given to default FDB implementation [ 94.009514][ T6842] netlink: 248 bytes leftover after parsing attributes in process `syz.2.280'. [ 94.053796][ T6842] NCSI netlink: No device for ifindex 0 [ 94.398781][ T6857] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.851301][ T6891] FAULT_INJECTION: forcing a failure. [ 94.851301][ T6891] name failslab, interval 1, probability 0, space 0, times 1 [ 94.864391][ T6891] CPU: 0 UID: 0 PID: 6891 Comm: syz.2.292 Not tainted 6.14.0-rc2-syzkaller-00154-g054e61bb1de4 #0 [ 94.864411][ T6891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 94.864420][ T6891] Call Trace: [ 94.864426][ T6891] [ 94.864432][ T6891] dump_stack_lvl+0x241/0x360 [ 94.864456][ T6891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.864474][ T6891] ? __pfx__printk+0x10/0x10 [ 94.864490][ T6891] ? __pfx_lock_acquire+0x10/0x10 [ 94.864518][ T6891] should_fail_ex+0x40a/0x550 [ 94.864543][ T6891] should_failslab+0xac/0x100 [ 94.864566][ T6891] __kmalloc_cache_noprof+0x70/0x390 [ 94.864585][ T6891] ? reuseport_alloc+0x11d/0x430 [ 94.864604][ T6891] reuseport_alloc+0x11d/0x430 [ 94.864623][ T6891] __inet_hash+0x6d4/0xbe0 [ 94.864656][ T6891] inet_csk_listen_start+0x23a/0x320 [ 94.864677][ T6891] __inet_listen_sk+0x2a0/0x7d0 [ 94.864695][ T6891] ? __local_bh_enable_ip+0x168/0x200 [ 94.864712][ T6891] ? lockdep_hardirqs_on+0x99/0x150 [ 94.864728][ T6891] ? __pfx___inet_listen_sk+0x10/0x10 [ 94.864742][ T6891] ? __local_bh_enable_ip+0x168/0x200 [ 94.864769][ T6891] ? inet_listen+0x46/0x110 [ 94.864784][ T6891] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 94.864812][ T6891] inet_listen+0xa3/0x110 [ 94.864831][ T6891] __x64_sys_listen+0x1ac/0x230 [ 94.864853][ T6891] do_syscall_64+0xf3/0x230 [ 94.864870][ T6891] ? clear_bhb_loop+0x35/0x90 [ 94.864893][ T6891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.864910][ T6891] RIP: 0033:0x7ff1db38cde9 [ 94.864924][ T6891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.864936][ T6891] RSP: 002b:00007ff1dc214038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 94.864953][ T6891] RAX: ffffffffffffffda RBX: 00007ff1db5a5fa0 RCX: 00007ff1db38cde9 [ 94.864963][ T6891] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 94.864972][ T6891] RBP: 00007ff1dc214090 R08: 0000000000000000 R09: 0000000000000000 [ 94.864981][ T6891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.864989][ T6891] R13: 0000000000000000 R14: 00007ff1db5a5fa0 R15: 00007ffc08837598 [ 94.865012][ T6891] [ 95.184120][ T6896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.296'. [ 95.211261][ T6904] netlink: 'syz.0.297': attribute type 2 has an invalid length. [ 95.948500][ T6943] FAULT_INJECTION: forcing a failure. [ 95.948500][ T6943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.965047][ T6943] CPU: 1 UID: 0 PID: 6943 Comm: syz.3.309 Not tainted 6.14.0-rc2-syzkaller-00154-g054e61bb1de4 #0 [ 95.965073][ T6943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 95.965083][ T6943] Call Trace: [ 95.965088][ T6943] [ 95.965095][ T6943] dump_stack_lvl+0x241/0x360 [ 95.965120][ T6943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.965138][ T6943] ? __pfx__printk+0x10/0x10 [ 95.965160][ T6943] ? snprintf+0xda/0x120 [ 95.965185][ T6943] should_fail_ex+0x40a/0x550 [ 95.965211][ T6943] _copy_to_user+0x31/0xb0 [ 95.965232][ T6943] simple_read_from_buffer+0xca/0x150 [ 95.965256][ T6943] proc_fail_nth_read+0x1e9/0x250 [ 95.965279][ T6943] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.965302][ T6943] ? rw_verify_area+0x243/0x630 [ 95.965324][ T6943] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.965346][ T6943] vfs_read+0x1f8/0xb40 [ 95.965361][ T6943] ? fdget_pos+0x254/0x320 [ 95.965381][ T6943] ? __pfx___mutex_lock+0x10/0x10 [ 95.965400][ T6943] ? __pfx_vfs_read+0x10/0x10 [ 95.965418][ T6943] ? __fget_files+0x2a/0x410 [ 95.965440][ T6943] ? __fget_files+0x395/0x410 [ 95.965458][ T6943] ? __fget_files+0x2a/0x410 [ 95.965487][ T6943] ksys_read+0x18f/0x2b0 [ 95.965505][ T6943] ? __pfx_ksys_read+0x10/0x10 [ 95.965522][ T6943] ? do_syscall_64+0x100/0x230 [ 95.965543][ T6943] ? do_syscall_64+0xb6/0x230 [ 95.965564][ T6943] do_syscall_64+0xf3/0x230 [ 95.965582][ T6943] ? clear_bhb_loop+0x35/0x90 [ 95.965606][ T6943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.965625][ T6943] RIP: 0033:0x7f96c898b7fc [ 95.965640][ T6943] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 95.965653][ T6943] RSP: 002b:00007f96c9753030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 95.965671][ T6943] RAX: ffffffffffffffda RBX: 00007f96c8ba5fa0 RCX: 00007f96c898b7fc [ 95.965682][ T6943] RDX: 000000000000000f RSI: 00007f96c97530a0 RDI: 0000000000000005 [ 95.965692][ T6943] RBP: 00007f96c9753090 R08: 0000000000000000 R09: 0000000000000000 [ 95.965702][ T6943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.965711][ T6943] R13: 0000000000000000 R14: 00007f96c8ba5fa0 R15: 00007ffdabbb5bd8 [ 95.965738][ T6943] [ 95.972263][ T6942] netlink: 'syz.1.310': attribute type 4 has an invalid length. [ 96.213542][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 96.246967][ T6947] pimreg: entered allmulticast mode [ 96.494196][ T6964] netlink: 'syz.2.317': attribute type 1 has an invalid length. [ 96.561062][ T6964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.650922][ T6964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.680754][ T6964] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 96.693186][ T6964] bond1: (slave ipip0): Error -95 calling set_mac_address [ 96.953004][ T6990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.324'. [ 97.167107][ T12] tipc: Subscription rejected, illegal request [ 97.462227][ T7026] Unsupported ieee802154 address type: 0 [ 97.497370][ T7026] netlink: 320 bytes leftover after parsing attributes in process `syz.2.336'. [ 97.663005][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.341'. [ 97.673212][ T7036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.339'. [ 97.875299][ T7047] vlan2: entered promiscuous mode [ 97.914375][ T7047] bond0: entered promiscuous mode [ 97.926978][ T7047] bond_slave_0: entered promiscuous mode [ 97.957567][ T7047] bond_slave_1: entered promiscuous mode [ 98.054982][ T7047] bond0: left promiscuous mode [ 98.059818][ T7047] bond_slave_0: left promiscuous mode [ 98.093388][ T7047] bond_slave_1: left promiscuous mode [ 98.249888][ T7073] netlink: 'syz.4.353': attribute type 4 has an invalid length. [ 98.313010][ T7075] trusted_key: syz.2.354 sent an empty control message without MSG_MORE. [ 98.425991][ T7085] netlink: 'syz.3.355': attribute type 3 has an invalid length. [ 98.450421][ T7085] netlink: 224 bytes leftover after parsing attributes in process `syz.3.355'. [ 98.505209][ T7085] xt_cluster: node mask cannot exceed total number of nodes [ 98.709811][ T7103] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 98.743621][ T7101] netlink: 72 bytes leftover after parsing attributes in process `syz.3.362'. [ 98.794894][ T7101] Cannot find add_set index 0 as target [ 98.943422][ T7115] netlink: 'syz.2.367': attribute type 11 has an invalid length. [ 98.964210][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.369'. [ 99.196692][ T7131] __nla_validate_parse: 2 callbacks suppressed [ 99.196711][ T7131] netlink: 24 bytes leftover after parsing attributes in process `syz.1.375'. [ 99.306789][ T7138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.377'. [ 99.471754][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 99.690245][ T7161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.385'. [ 99.887361][ T7166] xt_limit: Overflow, try lower: 2147483649/128 [ 100.047211][ T7177] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.398070][ T7203] netlink: 'syz.0.402': attribute type 18 has an invalid length. [ 100.414546][ T7205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.444396][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.401'. [ 100.491496][ T7203] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.501993][ T7203] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.511041][ T7203] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.522302][ T7203] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.018393][ T7246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.411'. [ 101.284957][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.416'. [ 101.381267][ T7260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.417'. [ 101.810866][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.425'. [ 101.857081][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.426'. [ 101.863708][ T7281] netlink: 'syz.0.425': attribute type 30 has an invalid length. [ 102.155600][ T7299] vlan3: entered allmulticast mode [ 102.162889][ T3527] tipc: Subscription rejected, illegal request [ 102.185337][ T7299] bond0: entered allmulticast mode [ 102.200654][ T7299] bond_slave_0: entered allmulticast mode [ 102.234874][ T7299] bond_slave_1: entered allmulticast mode [ 103.163523][ T7363] netlink: 'syz.2.451': attribute type 10 has an invalid length. [ 103.197210][ T7362] macvlan2: entered promiscuous mode [ 103.206340][ T7362] macvlan2: entered allmulticast mode [ 103.231597][ T7363] team0: Cannot enslave team device to itself [ 103.264662][ T7364] vlan2: entered promiscuous mode [ 103.282001][ T7364] vlan2: entered allmulticast mode [ 103.326237][ T7364] vlan0: entered allmulticast mode [ 103.334215][ T7364] veth0_vlan: entered allmulticast mode [ 103.355878][ T7375] netlink: 'syz.0.455': attribute type 39 has an invalid length. [ 103.374940][ T7364] vlan0: entered promiscuous mode [ 103.396032][ T7364] team0: Port device vlan2 added [ 103.592601][ T5911] IPVS: starting estimator thread 0... [ 103.694353][ T7392] IPVS: using max 22 ests per chain, 52800 per kthread [ 103.831821][ T7406] vlan2: entered allmulticast mode [ 103.846061][ T7406] bond0: entered allmulticast mode [ 103.865536][ T7406] bond_slave_0: entered allmulticast mode [ 103.875683][ T7406] bond_slave_1: entered allmulticast mode [ 103.913291][ T7413] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 104.162987][ T7424] vlan2: entered promiscuous mode [ 104.188471][ T7424] bridge0: entered promiscuous mode [ 104.209480][ T7424] vlan2: entered allmulticast mode [ 104.235123][ T7424] bridge0: entered allmulticast mode [ 104.268493][ T7424] __nla_validate_parse: 5 callbacks suppressed [ 104.268513][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.470'. [ 104.338228][ T7424] bridge_slave_1: left allmulticast mode [ 104.381371][ T7424] bridge_slave_1: left promiscuous mode [ 104.410168][ T7424] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.437798][ T7424] bridge_slave_0: left allmulticast mode [ 104.452147][ T7424] bridge_slave_0: left promiscuous mode [ 104.454749][ T7446] netlink: 24 bytes leftover after parsing attributes in process `syz.3.476'. [ 104.458860][ T7424] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.487790][ T7449] netlink: 20 bytes leftover after parsing attributes in process `syz.1.478'. [ 104.528197][ T7424] bridge0: left allmulticast mode [ 104.533292][ T7424] bridge0: left promiscuous mode [ 105.146575][ T7479] openvswitch: netlink: Tunnel attr 1 has unexpected len 24 expected 4 [ 105.227323][ T7479] netlink: 28 bytes leftover after parsing attributes in process `syz.2.487'. [ 105.567311][ T7496] ip6gre1: entered allmulticast mode [ 105.696839][ T7503] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 105.697225][ T5915] IPVS: starting estimator thread 0... [ 105.781957][ T7513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.495'. [ 105.801636][ T7510] IPVS: using max 20 ests per chain, 48000 per kthread [ 105.838302][ T7513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.495'. [ 105.847359][ T7513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.495'. [ 105.856581][ T7513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.495'. [ 105.865734][ T7513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.495'. [ 105.875607][ T7513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.495'. [ 106.246482][ T7513] bridge0: port 3(vlan2) entered disabled state [ 106.252900][ T7513] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.262135][ T7513] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.328850][ T7513] bond0: left allmulticast mode [ 106.334064][ T7513] bond_slave_0: left allmulticast mode [ 106.339733][ T7513] bond_slave_1: left allmulticast mode [ 106.346058][ T7513] bond0: left promiscuous mode [ 106.350926][ T7513] bond_slave_0: left promiscuous mode [ 106.356909][ T7513] bond_slave_1: left promiscuous mode [ 106.413236][ T7513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.430461][ T7513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.483388][ T7513] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.494491][ T7513] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.506186][ T7513] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.515397][ T7513] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.551150][ T7513] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.560506][ T7513] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.569689][ T7513] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.578687][ T7513] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.198226][ T7544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.437796][ T7628] eth0_vlan: renamed from bridge_slave_1 (while UP) [ 109.500506][ T7641] __nla_validate_parse: 49 callbacks suppressed [ 109.500524][ T7641] netlink: 40 bytes leftover after parsing attributes in process `syz.0.525'. [ 109.661844][ T7648] netlink: 'syz.3.526': attribute type 30 has an invalid length. [ 110.291591][ T5847] Bluetooth: hci4: link tx timeout [ 110.295354][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 110.305901][ T5847] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.332757][ T5842] Bluetooth: hci4: link tx timeout [ 110.339168][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.457570][ T7697] FAULT_INJECTION: forcing a failure. [ 110.457570][ T7697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.505495][ T7697] CPU: 1 UID: 0 PID: 7697 Comm: syz.3.541 Not tainted 6.14.0-rc2-syzkaller-00154-g054e61bb1de4 #0 [ 110.505521][ T7697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 110.505531][ T7697] Call Trace: [ 110.505536][ T7697] [ 110.505543][ T7697] dump_stack_lvl+0x241/0x360 [ 110.505569][ T7697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.505586][ T7697] ? __pfx__printk+0x10/0x10 [ 110.505603][ T7697] ? __pfx_lock_release+0x10/0x10 [ 110.505633][ T7697] should_fail_ex+0x40a/0x550 [ 110.505658][ T7697] _copy_from_user+0x2d/0xb0 [ 110.505678][ T7697] copy_msghdr_from_user+0xae/0x680 [ 110.505697][ T7697] ? __pfx___might_resched+0x10/0x10 [ 110.505719][ T7697] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 110.505741][ T7697] ? do_recvmmsg+0x44e/0xab0 [ 110.505763][ T7697] ? __might_fault+0xaa/0x120 [ 110.505791][ T7697] do_recvmmsg+0x3bd/0xab0 [ 110.505822][ T7697] ? __pfx_do_recvmmsg+0x10/0x10 [ 110.505863][ T7697] ? ksys_write+0x22a/0x2b0 [ 110.505879][ T7697] ? __pfx_lock_release+0x10/0x10 [ 110.505906][ T7697] ? sb_end_write+0xe9/0x1c0 [ 110.505927][ T7697] ? vfs_write+0x7fa/0xd10 [ 110.505945][ T7697] ? __mutex_unlock_slowpath+0x227/0x800 [ 110.505978][ T7697] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 110.505995][ T7697] ? __fget_files+0x2a/0x410 [ 110.506029][ T7697] __x64_sys_recvmmsg+0x199/0x250 [ 110.506054][ T7697] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 110.506077][ T7697] ? do_syscall_64+0x100/0x230 [ 110.506098][ T7697] ? do_syscall_64+0xb6/0x230 [ 110.506118][ T7697] do_syscall_64+0xf3/0x230 [ 110.506137][ T7697] ? clear_bhb_loop+0x35/0x90 [ 110.506160][ T7697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.506180][ T7697] RIP: 0033:0x7f96c898cde9 [ 110.506194][ T7697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.506207][ T7697] RSP: 002b:00007f96c9753038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 110.506224][ T7697] RAX: ffffffffffffffda RBX: 00007f96c8ba5fa0 RCX: 00007f96c898cde9 [ 110.506236][ T7697] RDX: 0000000000000005 RSI: 00004000000086c0 RDI: 0000000000000003 [ 110.506246][ T7697] RBP: 00007f96c9753090 R08: 0000000000000000 R09: 0000000000000000 [ 110.506256][ T7697] R10: 0000000040008062 R11: 0000000000000246 R12: 0000000000000002 [ 110.506265][ T7697] R13: 0000000000000000 R14: 00007f96c8ba5fa0 R15: 00007ffdabbb5bd8 [ 110.506290][ T7697] [ 110.808674][ T7710] netlink: 20 bytes leftover after parsing attributes in process `syz.4.543'. [ 110.873589][ T7717] netlink: 192 bytes leftover after parsing attributes in process `syz.2.547'. [ 110.883929][ T7717] openvswitch: netlink: Flow key attr not present in new flow. [ 110.981602][ T7721] netlink: 20 bytes leftover after parsing attributes in process `syz.3.548'. [ 111.120589][ T7726] netlink: 'syz.1.550': attribute type 3 has an invalid length. [ 111.149517][ T7726] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.550'. [ 111.185525][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.553'. [ 111.202115][ T7726] ieee802154 phy0 wpan0: encryption failed: -22 [ 111.278912][ T7732] hsr_slave_1 (unregistering): left promiscuous mode [ 112.348071][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 113.233332][ T7748] netlink: 144 bytes leftover after parsing attributes in process `syz.2.558'. [ 113.289165][ T7755] netlink: 24 bytes leftover after parsing attributes in process `syz.3.560'. [ 113.738643][ T7784] vlan3: entered allmulticast mode [ 113.747109][ T7784] bond0: entered allmulticast mode [ 113.752380][ T7784] bond_slave_0: entered allmulticast mode [ 113.759010][ T7784] bond_slave_1: entered allmulticast mode [ 113.768165][ T7784] bridge0: port 3(vlan3) entered blocking state [ 113.775253][ T7784] bridge0: port 3(vlan3) entered disabled state [ 113.806615][ T7784] vlan3: entered promiscuous mode [ 113.811708][ T7784] bond0: entered promiscuous mode [ 113.823305][ T7784] bond_slave_0: entered promiscuous mode [ 113.833687][ T7784] bond_slave_1: entered promiscuous mode [ 113.845792][ T7784] bridge0: port 3(vlan3) entered blocking state [ 113.852223][ T7784] bridge0: port 3(vlan3) entered forwarding state [ 113.934736][ T7796] netlink: 'syz.4.574': attribute type 3 has an invalid length. [ 114.110880][ T7806] netlink: 'syz.3.576': attribute type 1 has an invalid length. [ 114.128767][ T7806] netlink: 'syz.3.576': attribute type 3 has an invalid length. [ 114.149399][ T7806] netlink: 216 bytes leftover after parsing attributes in process `syz.3.576'. [ 114.172154][ T7806] NCSI netlink: No device for ifindex 813332851 [ 114.912743][ T7828] netlink: 16 bytes leftover after parsing attributes in process `syz.4.582'. [ 116.128899][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'. [ 116.174155][ T7852] sctp: [Deprecated]: syz.0.588 (pid 7852) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.174155][ T7852] Use struct sctp_sack_info instead [ 116.650208][ T7869] netlink: 187320 bytes leftover after parsing attributes in process `syz.2.597'. [ 116.682460][ T7869] netlink: zone id is out of range [ 116.709478][ T7869] netlink: zone id is out of range [ 116.715919][ T7869] netlink: zone id is out of range [ 116.721962][ T7869] netlink: zone id is out of range [ 116.725722][ T7873] bond1: entered promiscuous mode [ 116.729417][ T7869] netlink: zone id is out of range [ 116.737698][ T7869] netlink: zone id is out of range [ 116.743182][ T7869] netlink: zone id is out of range [ 116.747137][ T7873] bond1: entered allmulticast mode [ 116.748460][ T7869] netlink: zone id is out of range [ 116.759404][ T7869] netlink: zone id is out of range [ 116.762979][ T7873] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.764640][ T7869] netlink: zone id is out of range [ 116.853367][ T7886] netlink: 28 bytes leftover after parsing attributes in process `syz.2.599'. [ 117.146541][ T7901] geneve2: entered promiscuous mode [ 117.171050][ T7901] sctp: [Deprecated]: syz.2.603 (pid 7901) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.171050][ T7901] Use struct sctp_sack_info instead [ 117.335839][ T7914] netlink: 'syz.2.608': attribute type 11 has an invalid length. [ 117.421771][ T7919] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.429037][ T7919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.545351][ T7926] netlink: 28 bytes leftover after parsing attributes in process `syz.4.612'. [ 117.699221][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.615'. [ 118.162883][ T7962] tipc: Enabling of bearer rejected, failed to enable media [ 118.226049][ T7965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.621'. [ 118.235234][ T7965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.621'. [ 118.361368][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'. [ 118.563888][ T7980] netlink: 28 bytes leftover after parsing attributes in process `syz.2.625'. [ 119.324012][ T8030] xt_hashlimit: size too large, truncated to 1048576 [ 119.384436][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 119.444508][ T8036] netlink: 'syz.4.638': attribute type 1 has an invalid length. [ 120.094705][ T8073] __nla_validate_parse: 4 callbacks suppressed [ 120.094721][ T8073] netlink: 40 bytes leftover after parsing attributes in process `syz.2.650'. [ 120.236687][ T8083] netlink: 60 bytes leftover after parsing attributes in process `syz.4.652'. [ 120.374996][ T8098] netlink: 20 bytes leftover after parsing attributes in process `syz.0.657'. [ 120.394687][ T8100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'. [ 120.746149][ T8119] netlink: 'syz.1.662': attribute type 10 has an invalid length. [ 120.757295][ T8118] netlink: 'syz.1.662': attribute type 10 has an invalid length. [ 120.794900][ T8119] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.802597][ T8119] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.869209][ T8119] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.876428][ T8119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.884612][ T8119] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.891759][ T8119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.923348][ T8138] netlink: 28 bytes leftover after parsing attributes in process `syz.2.661'. [ 120.923399][ T8119] bridge0: entered allmulticast mode [ 120.963314][ T8119] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 120.980923][ T8118] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.988255][ T8118] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.363846][ T8160] netlink: 224 bytes leftover after parsing attributes in process `syz.2.669'. [ 121.468877][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.672'. [ 121.753022][ T8188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.676'. [ 121.846973][ T8196] netlink: 16 bytes leftover after parsing attributes in process `syz.3.678'. [ 122.004930][ T8204] netlink: 'syz.4.680': attribute type 10 has an invalid length. [ 122.024128][ T8204] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 122.051006][ T8204] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 122.072480][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.682'. [ 122.241262][ T8218] : entered promiscuous mode [ 122.406129][ T8227] netlink: 'syz.2.688': attribute type 1 has an invalid length. [ 122.458597][ T8227] netlink: 'syz.2.688': attribute type 1 has an invalid length. [ 122.475195][ T8234] netlink: 'syz.3.689': attribute type 64 has an invalid length. [ 122.496894][ T8227] bond2: entered promiscuous mode [ 122.502025][ T8227] bond2: entered allmulticast mode [ 122.578895][ T8237] veth5: entered allmulticast mode [ 122.617144][ T8237] bond2: (slave veth5): Enslaving as an active interface with a down link [ 123.009763][ T8261] netlink: 'syz.2.697': attribute type 10 has an invalid length. [ 123.079794][ T8261] team0: Device netdevsim0 failed to register rx_handler [ 123.244246][ T8266] netem: change failed [ 124.723785][ T8350] netlink: 'syz.4.723': attribute type 1 has an invalid length. [ 124.747940][ T8350] netlink: 'syz.4.723': attribute type 1 has an invalid length. [ 124.779576][ T8350] netlink: 'syz.4.723': attribute type 1 has an invalid length. [ 124.823167][ T8350] netlink: 'syz.4.723': attribute type 2 has an invalid length. [ 125.821140][ T8403] netlink: 'syz.2.738': attribute type 2 has an invalid length. [ 125.850461][ T8403] netlink: 'syz.2.738': attribute type 1 has an invalid length. [ 126.561236][ T8449] IPVS: length: 157 != 24 [ 126.813212][ T8463] netlink: 'syz.4.754': attribute type 4 has an invalid length. [ 126.986377][ T8472] netlink: 'syz.0.757': attribute type 10 has an invalid length. [ 127.015428][ T8472] bridge0: port 4(team0) entered blocking state [ 127.031023][ T8472] bridge0: port 4(team0) entered disabled state [ 127.048313][ T8472] team0: entered allmulticast mode [ 127.055419][ T8478] __nla_validate_parse: 16 callbacks suppressed [ 127.055445][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.758'. [ 127.069166][ T8472] team_slave_0: entered allmulticast mode [ 127.100490][ T8478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.758'. [ 127.113998][ T8472] team_slave_1: entered allmulticast mode [ 127.170021][ T8472] team0: entered promiscuous mode [ 127.194079][ T8472] team_slave_0: entered promiscuous mode [ 127.234661][ T8472] team_slave_1: entered promiscuous mode [ 127.241590][ T8486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.759'. [ 127.464666][ T8500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 127.595853][ T8490] netlink: 2 bytes leftover after parsing attributes in process `syz.3.760'. [ 127.613758][ T8490] net_ratelimit: 1477 callbacks suppressed [ 127.613778][ T8490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.271057][ T8546] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.357264][ T8554] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.368647][ T8552] netlink: 108 bytes leftover after parsing attributes in process `syz.3.774'. [ 128.435741][ T8559] xt_socket: unknown flags 0x3c [ 128.572540][ T8566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'. [ 128.620596][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.778'. [ 128.768696][ T8575] bridge0: entered promiscuous mode [ 128.817314][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.779'. [ 128.834948][ T8575] bridge_slave_1: left allmulticast mode [ 128.848807][ T8575] bridge_slave_1: left promiscuous mode [ 128.865997][ T8575] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.892348][ T8575] bridge_slave_0: left allmulticast mode [ 128.929157][ T8575] bridge_slave_0: left promiscuous mode [ 128.949065][ T8575] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.005651][ T8585] netlink: 232 bytes leftover after parsing attributes in process `syz.1.784'. [ 129.093918][ T8575] bridge0 (unregistering): left promiscuous mode [ 129.324524][ T8597] raw_sendmsg: syz.2.787 forgot to set AF_INET. Fix it! [ 129.621036][ T8620] bond2: entered promiscuous mode [ 129.627103][ T8620] bond2: entered allmulticast mode [ 129.632754][ T8620] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.906317][ T8620] bond2 (unregistering): Released all slaves [ 130.450827][ T8657] netlink: 'syz.1.804': attribute type 39 has an invalid length. [ 130.735670][ T8677] netlink: 'syz.2.809': attribute type 1 has an invalid length. [ 131.229267][ T975] hid (null): unknown global tag 0xe [ 131.284914][ T975] hid (null): global environment stack underflow [ 131.291399][ T975] hid (null): report_id 0 is invalid [ 132.078006][ T8746] __nla_validate_parse: 4 callbacks suppressed [ 132.078024][ T8746] netlink: 256 bytes leftover after parsing attributes in process `syz.0.823'. [ 132.104223][ T8747] netlink: 88 bytes leftover after parsing attributes in process `syz.4.825'. [ 132.117201][ T8746] netlink: 4936 bytes leftover after parsing attributes in process `syz.0.823'. [ 132.130542][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.823'. [ 132.616601][ T8768] netlink: 16 bytes leftover after parsing attributes in process `syz.3.831'. [ 132.645193][ T8770] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.832'. [ 132.683828][ T8770] openvswitch: netlink: Message has 44053 unknown bytes. [ 133.149644][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.349981][ T8811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.844'. [ 133.585846][ T8825] openvswitch: netlink: Invalid VLAN frame [ 133.656911][ T8827] netlink: 24 bytes leftover after parsing attributes in process `syz.1.849'. [ 133.786587][ T975] hid-generic 0005:046D:0A0F.0002: unknown global tag 0xe [ 133.812077][ T975] hid-generic 0005:046D:0A0F.0002: item 0 2 1 14 parsing failed [ 133.854491][ T975] hid-generic 0005:046D:0A0F.0002: probe with driver hid-generic failed with error -22 [ 134.807956][ T8896] xt_CT: You must specify a L4 protocol and not use inversions on it [ 134.946704][ T8900] sctp: [Deprecated]: syz.1.867 (pid 8900) Use of int in maxseg socket option. [ 134.946704][ T8900] Use struct sctp_assoc_value instead [ 135.206671][ T8913] netlink: 16 bytes leftover after parsing attributes in process `syz.2.870'. [ 135.226716][ T8920] netlink: 64 bytes leftover after parsing attributes in process `syz.3.873'. [ 135.378999][ T8931] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 135.875130][ T8971] netlink: 'syz.2.883': attribute type 11 has an invalid length. [ 136.051344][ T8978] netlink: 'syz.1.886': attribute type 39 has an invalid length. [ 136.868816][ T9025] netlink: 'syz.1.897': attribute type 39 has an invalid length. [ 136.932723][ T9027] IPVS: Unknown mcast interface: bridge_slave_1 [ 137.040307][ T9031] netlink: 'syz.3.899': attribute type 2 has an invalid length. [ 137.094269][ T9035] __nla_validate_parse: 3 callbacks suppressed [ 137.094287][ T9035] netlink: 164 bytes leftover after parsing attributes in process `syz.0.898'. [ 137.148114][ T9040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.900'. [ 137.167777][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.898'. [ 137.228516][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.902'. [ 137.292214][ T9047] netlink: 'syz.4.903': attribute type 24 has an invalid length. [ 137.500026][ T9059] bridge0: entered promiscuous mode [ 137.501614][ T9054] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.505838][ T9059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.908'. [ 137.582904][ T9059] bridge_slave_1: left allmulticast mode [ 137.609890][ T9059] bridge_slave_1: left promiscuous mode [ 137.648931][ T9059] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.668882][ T9059] bridge_slave_0: left allmulticast mode [ 137.674776][ T9059] bridge_slave_0: left promiscuous mode [ 137.680629][ T9059] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.715326][ T9059] bond0: (slave bridge0): Releasing backup interface [ 137.722798][ T9059] bridge0 (unregistering): left allmulticast mode [ 137.737951][ T9059] bridge0 (unregistering): left promiscuous mode [ 137.755046][ T9077] af_packet: tpacket_rcv: packet too big, clamped from 2932 to 2928. macoff=96 [ 138.050439][ T9092] bond0: left allmulticast mode [ 138.070047][ T9092] bond_slave_0: left allmulticast mode [ 138.085083][ T9092] bond_slave_1: left allmulticast mode [ 138.111253][ T9092] bridge0: port 3(vlan3) entered disabled state [ 138.137269][ T9101] netlink: 'syz.2.915': attribute type 12 has an invalid length. [ 138.163052][ T9101] netlink: 'syz.2.915': attribute type 29 has an invalid length. [ 138.177666][ T9101] netlink: 148 bytes leftover after parsing attributes in process `syz.2.915'. [ 138.189964][ T9101] netlink: 51 bytes leftover after parsing attributes in process `syz.2.915'. [ 138.440859][ T9122] netlink: 40 bytes leftover after parsing attributes in process `syz.4.919'. [ 138.690979][ T9130] netlink: 'syz.0.925': attribute type 13 has an invalid length. [ 138.905543][ T9151] Cannot find add_set index 0 as target [ 139.687982][ T9195] netlink: 'syz.1.940': attribute type 1 has an invalid length. [ 140.166303][ T9223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.947'. [ 140.370137][ T9236] netdevsim netdevsim4 netdevsim1: Unsupported IPsec algorithm [ 140.584377][ T9243] bond0: left allmulticast mode [ 140.598011][ T9243] bond_slave_0: left allmulticast mode [ 140.605229][ T9243] bond_slave_1: left allmulticast mode [ 140.789504][ T9243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.791455][ T9248] netlink: 72 bytes leftover after parsing attributes in process `syz.0.956'. [ 140.819842][ T9243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.849049][ T9243] bond0 (unregistering): Released all slaves [ 141.720774][ T9304] FAULT_INJECTION: forcing a failure. [ 141.720774][ T9304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.768880][ T9304] CPU: 0 UID: 0 PID: 9304 Comm: syz.3.973 Not tainted 6.14.0-rc2-syzkaller-00154-g054e61bb1de4 #0 [ 141.768906][ T9304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 141.768916][ T9304] Call Trace: [ 141.768922][ T9304] [ 141.768930][ T9304] dump_stack_lvl+0x241/0x360 [ 141.768955][ T9304] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.768973][ T9304] ? __pfx__printk+0x10/0x10 [ 141.768991][ T9304] ? __pfx_lock_release+0x10/0x10 [ 141.769021][ T9304] should_fail_ex+0x40a/0x550 [ 141.769046][ T9304] _copy_from_user+0x2d/0xb0 [ 141.769066][ T9304] copy_msghdr_from_user+0xae/0x680 [ 141.769084][ T9304] ? __pfx___might_resched+0x10/0x10 [ 141.769106][ T9304] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 141.769129][ T9304] ? do_recvmmsg+0x44e/0xab0 [ 141.769150][ T9304] ? __might_fault+0xaa/0x120 [ 141.769178][ T9304] do_recvmmsg+0x3bd/0xab0 [ 141.769210][ T9304] ? __pfx_do_recvmmsg+0x10/0x10 [ 141.769250][ T9304] ? ksys_write+0x22a/0x2b0 [ 141.769277][ T9304] ? __pfx_lock_release+0x10/0x10 [ 141.769304][ T9304] ? sb_end_write+0xe9/0x1c0 [ 141.769325][ T9304] ? vfs_write+0x7fa/0xd10 [ 141.769343][ T9304] ? __mutex_unlock_slowpath+0x227/0x800 [ 141.769371][ T9304] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 141.769388][ T9304] ? __fget_files+0x2a/0x410 [ 141.769422][ T9304] __x64_sys_recvmmsg+0x199/0x250 [ 141.769452][ T9304] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 141.769475][ T9304] ? do_syscall_64+0x100/0x230 [ 141.769496][ T9304] ? do_syscall_64+0xb6/0x230 [ 141.769517][ T9304] do_syscall_64+0xf3/0x230 [ 141.769535][ T9304] ? clear_bhb_loop+0x35/0x90 [ 141.769557][ T9304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.769576][ T9304] RIP: 0033:0x7f96c898cde9 [ 141.769591][ T9304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.769603][ T9304] RSP: 002b:00007f96c9753038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 141.769619][ T9304] RAX: ffffffffffffffda RBX: 00007f96c8ba5fa0 RCX: 00007f96c898cde9 [ 141.769628][ T9304] RDX: 0000000000000003 RSI: 0000400000002200 RDI: 0000000000000003 [ 141.769636][ T9304] RBP: 00007f96c9753090 R08: 0000000000000000 R09: 0000000000000000 [ 141.769645][ T9304] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 141.769653][ T9304] R13: 0000000000000000 R14: 00007f96c8ba5fa0 R15: 00007ffdabbb5bd8 [ 141.769676][ T9304] [ 142.527919][ T9337] __nla_validate_parse: 2 callbacks suppressed [ 142.527937][ T9337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.983'. [ 142.727108][ T9345] netlink: 496 bytes leftover after parsing attributes in process `syz.4.984'. [ 143.191883][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.990'. [ 143.317197][ T9384] vlan2: entered promiscuous mode [ 143.329578][ T9384] bond0: entered promiscuous mode [ 143.342933][ T9384] bond_slave_0: entered promiscuous mode [ 143.363272][ T9384] bond_slave_1: entered promiscuous mode [ 143.388476][ T9384] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 143.449982][ T9384] bond0: left promiscuous mode [ 143.458395][ T9384] bond_slave_0: left promiscuous mode [ 143.459994][ T9389] netlink: 16 bytes leftover after parsing attributes in process `syz.0.995'. [ 143.486844][ T9384] bond_slave_1: left promiscuous mode [ 143.492446][ T9389] netlink: 32 bytes leftover after parsing attributes in process `syz.0.995'. [ 143.510793][ T9384] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 143.557614][ T9389] gretap1: entered promiscuous mode [ 143.562870][ T9389] gretap1: entered allmulticast mode [ 143.968081][ T9411] syzkaller0: entered promiscuous mode [ 144.002074][ T9411] syzkaller0: entered allmulticast mode [ 144.294318][ T9434] FAULT_INJECTION: forcing a failure. [ 144.294318][ T9434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.349996][ T9434] CPU: 0 UID: 0 PID: 9434 Comm: syz.0.1008 Not tainted 6.14.0-rc2-syzkaller-00154-g054e61bb1de4 #0 [ 144.350023][ T9434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 144.350030][ T9434] Call Trace: [ 144.350036][ T9434] [ 144.350043][ T9434] dump_stack_lvl+0x241/0x360 [ 144.350065][ T9434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.350079][ T9434] ? __pfx__printk+0x10/0x10 [ 144.350093][ T9434] ? __pfx_lock_release+0x10/0x10 [ 144.350128][ T9434] should_fail_ex+0x40a/0x550 [ 144.350151][ T9434] _copy_from_user+0x2d/0xb0 [ 144.350167][ T9434] __sys_bpf+0x1be/0x820 [ 144.350188][ T9434] ? __pfx___sys_bpf+0x10/0x10 [ 144.350216][ T9434] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 144.350239][ T9434] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 144.350261][ T9434] ? do_syscall_64+0x100/0x230 [ 144.350283][ T9434] __x64_sys_bpf+0x7c/0x90 [ 144.350300][ T9434] do_syscall_64+0xf3/0x230 [ 144.350317][ T9434] ? clear_bhb_loop+0x35/0x90 [ 144.350340][ T9434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.350359][ T9434] RIP: 0033:0x7f64fa18cde9 [ 144.350373][ T9434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.350385][ T9434] RSP: 002b:00007f64fb001038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 144.350403][ T9434] RAX: ffffffffffffffda RBX: 00007f64fa3a6080 RCX: 00007f64fa18cde9 [ 144.350414][ T9434] RDX: 0000000000000020 RSI: 0000400000000040 RDI: 0000000000000004 [ 144.350424][ T9434] RBP: 00007f64fb001090 R08: 0000000000000000 R09: 0000000000000000 [ 144.350433][ T9434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.350442][ T9434] R13: 0000000000000001 R14: 00007f64fa3a6080 R15: 00007ffd34e97e58 [ 144.350465][ T9434] [ 146.036073][ T9439] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 146.235254][ T9444] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 146.277629][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1014'. [ 146.304604][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1010'. [ 146.313517][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1010'. [ 146.351810][ T9454] netlink: 'syz.1.1010': attribute type 14 has an invalid length. [ 146.370689][ T9454] netlink: 'syz.1.1010': attribute type 13 has an invalid length. [ 147.976738][ T9442] netlink: 'syz.1.1010': attribute type 3 has an invalid length. [ 147.984908][ T9442] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1010'. [ 147.998838][ T9463] tipc: Started in network mode [ 148.004024][ T9463] tipc: Node identity ac14140f, cluster identity 4711 [ 148.011682][ T9463] tipc: New replicast peer: 255.255.255.255 [ 148.021884][ T9463] tipc: Enabled bearer , priority 10 [ 148.192421][ T9482] FAULT_INJECTION: forcing a failure. [ 148.192421][ T9482] name failslab, interval 1, probability 0, space 0, times 0 [ 148.242191][ T9482] CPU: 0 UID: 0 PID: 9482 Comm: syz.1.1021 Not tainted 6.14.0-rc2-syzkaller-00154-g054e61bb1de4 #0 [ 148.242219][ T9482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 148.242230][ T9482] Call Trace: [ 148.242235][ T9482] [ 148.242242][ T9482] dump_stack_lvl+0x241/0x360 [ 148.242266][ T9482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.242282][ T9482] ? __pfx__printk+0x10/0x10 [ 148.242298][ T9482] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 148.242325][ T9482] ? __pfx___might_resched+0x10/0x10 [ 148.242348][ T9482] should_fail_ex+0x40a/0x550 [ 148.242372][ T9482] should_failslab+0xac/0x100 [ 148.242390][ T9482] __kmalloc_node_noprof+0xe1/0x4d0 [ 148.242407][ T9482] ? __fget_files+0x2a/0x410 [ 148.242425][ T9482] ? __kvmalloc_node_noprof+0x72/0x190 [ 148.242450][ T9482] __kvmalloc_node_noprof+0x72/0x190 [ 148.242473][ T9482] map_get_next_key+0x230/0x5e0 [ 148.242493][ T9482] ? __might_fault+0xc6/0x120 [ 148.242521][ T9482] __sys_bpf+0x732/0x820 [ 148.242543][ T9482] ? __pfx___sys_bpf+0x10/0x10 [ 148.242574][ T9482] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 148.242598][ T9482] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 148.242620][ T9482] ? do_syscall_64+0x100/0x230 [ 148.242642][ T9482] __x64_sys_bpf+0x7c/0x90 [ 148.242659][ T9482] do_syscall_64+0xf3/0x230 [ 148.242675][ T9482] ? clear_bhb_loop+0x35/0x90 [ 148.242704][ T9482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.242722][ T9482] RIP: 0033:0x7efc51f8cde9 [ 148.242737][ T9482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.242749][ T9482] RSP: 002b:00007efc52dfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.242767][ T9482] RAX: ffffffffffffffda RBX: 00007efc521a5fa0 RCX: 00007efc51f8cde9 [ 148.242778][ T9482] RDX: 0000000000000020 RSI: 0000400000000040 RDI: 0000000000000004 [ 148.242787][ T9482] RBP: 00007efc52dfc090 R08: 0000000000000000 R09: 0000000000000000 [ 148.242797][ T9482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.242806][ T9482] R13: 0000000000000000 R14: 00007efc521a5fa0 R15: 00007ffcd4f15d48 [ 148.242830][ T9482] [ 148.743810][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1028'. [ 148.876546][ T9515] netlink: 'syz.0.1029': attribute type 39 has an invalid length. [ 149.016307][ T5884] tipc: Node number set to 2886997007 [ 149.067025][ T9532] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1031'. [ 149.116720][ T9532] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1031'. [ 149.156478][ T9527] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1033'. [ 149.193579][ T9527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1033'. [ 149.359954][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1036'. [ 149.432937][ T9549] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 149.468685][ T9551] netlink: 'syz.4.1040': attribute type 1 has an invalid length. [ 149.496042][ T9549] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 149.515120][ T9551] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1040'. [ 149.656328][ T9562] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1042'. [ 149.763107][ T9570] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1046'. [ 149.800243][ T9572] netlink: 'syz.0.1044': attribute type 39 has an invalid length. [ 150.180106][ T9591] FAULT_INJECTION: forcing a failure. [ 150.180106][ T9591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.210596][ T9591] CPU: 1 UID: 0 PID: 9591 Comm: syz.2.1053 Not tainted 6.14.0-rc2-syzkaller-00154-g054e61bb1de4 #0 [ 150.210621][ T9591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 150.210631][ T9591] Call Trace: [ 150.210637][ T9591] [ 150.210644][ T9591] dump_stack_lvl+0x241/0x360 [ 150.210669][ T9591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.210687][ T9591] ? __pfx__printk+0x10/0x10 [ 150.210710][ T9591] ? snprintf+0xda/0x120 [ 150.210741][ T9591] should_fail_ex+0x40a/0x550 [ 150.210767][ T9591] _copy_to_user+0x31/0xb0 [ 150.210788][ T9591] simple_read_from_buffer+0xca/0x150 [ 150.210813][ T9591] proc_fail_nth_read+0x1e9/0x250 [ 150.210837][ T9591] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.210860][ T9591] ? rw_verify_area+0x243/0x630 [ 150.210883][ T9591] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.210905][ T9591] vfs_read+0x1f8/0xb40 [ 150.210922][ T9591] ? fdget_pos+0x254/0x320 [ 150.210944][ T9591] ? __pfx___mutex_lock+0x10/0x10 [ 150.210963][ T9591] ? __pfx_vfs_read+0x10/0x10 [ 150.210983][ T9591] ? __fget_files+0x2a/0x410 [ 150.211005][ T9591] ? __fget_files+0x395/0x410 [ 150.211024][ T9591] ? __fget_files+0x2a/0x410 [ 150.211053][ T9591] ksys_read+0x18f/0x2b0 [ 150.211072][ T9591] ? __pfx_ksys_read+0x10/0x10 [ 150.211088][ T9591] ? do_syscall_64+0x100/0x230 [ 150.211110][ T9591] ? do_syscall_64+0xb6/0x230 [ 150.211131][ T9591] do_syscall_64+0xf3/0x230 [ 150.211149][ T9591] ? clear_bhb_loop+0x35/0x90 [ 150.211173][ T9591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.211193][ T9591] RIP: 0033:0x7ff1db38b7fc [ 150.211207][ T9591] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 150.211220][ T9591] RSP: 002b:00007ff1dc214030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.211237][ T9591] RAX: ffffffffffffffda RBX: 00007ff1db5a5fa0 RCX: 00007ff1db38b7fc [ 150.211249][ T9591] RDX: 000000000000000f RSI: 00007ff1dc2140a0 RDI: 0000000000000006 [ 150.211259][ T9591] RBP: 00007ff1dc214090 R08: 0000000000000000 R09: 0000000000000000 [ 150.211269][ T9591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.211279][ T9591] R13: 0000000000000000 R14: 00007ff1db5a5fa0 R15: 00007ffc08837598 [ 150.211306][ T9591] [ 150.864070][ T9616] netlink: 'syz.4.1059': attribute type 39 has an invalid length. [ 151.051752][ T9633] SET target dimension over the limit! [ 151.255299][ T9641] tipc: Started in network mode [ 151.268206][ T9641] tipc: Node identity 620d893dda77, cluster identity 4711 [ 151.291113][ T9641] tipc: Enabled bearer , priority 0 [ 151.412216][ T9643] syzkaller0: entered promiscuous mode [ 151.493771][ T9643] syzkaller0: entered allmulticast mode [ 151.500182][ T9643] tipc: Resetting bearer [ 151.545555][ T9640] tipc: Resetting bearer [ 151.693602][ T9665] Cannot find add_set index 0 as target [ 152.398706][ T975] tipc: Node number set to 3095038269 [ 153.432810][ T9640] tipc: Disabling bearer [ 153.453855][ T9686] __nla_validate_parse: 2 callbacks suppressed [ 153.453872][ T9686] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1078'. [ 153.494072][ T9686] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1078'. [ 153.512546][ T9686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.755448][ T9705] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1083'. [ 154.002471][ T9716] netlink: 'syz.4.1086': attribute type 10 has an invalid length. [ 154.029442][ T9716] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1086'. [ 154.074385][ T9724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1089'. [ 154.127134][ T9716] team0: Port device geneve0 added [ 154.146825][ T9730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1089'. [ 154.227288][ T9726] bridge2: entered promiscuous mode [ 154.232559][ T9726] bridge2: entered allmulticast mode [ 154.431163][ T9743] sctp: [Deprecated]: syz.4.1090 (pid 9743) Use of int in max_burst socket option deprecated. [ 154.431163][ T9743] Use struct sctp_assoc_value instead [ 154.662113][ T9757] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1096'. [ 154.735953][ T9762] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.1095'. [ 154.800839][ T9762] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 154.918060][ T9779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1099'. [ 155.122787][ T9792] bond0: option mode: unable to set because the bond device has slaves [ 155.271805][ T9799] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1104'. [ 155.316791][ T9802] netlink: 'syz.0.1105': attribute type 1 has an invalid length. [ 155.776451][ T9829] Cannot find add_set index 0 as target [ 156.093063][ T9840] netlink: 'syz.1.1119': attribute type 10 has an invalid length. [ 156.909121][ T9887] sctp: [Deprecated]: syz.0.1131 (pid 9887) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.909121][ T9887] Use struct sctp_sack_info instead [ 157.017597][ T9894] netlink: 'syz.3.1133': attribute type 29 has an invalid length. [ 157.432013][ T9916] netlink: 'syz.3.1140': attribute type 4 has an invalid length. [ 158.554713][ T9986] sctp: [Deprecated]: syz.4.1166 (pid 9986) Use of int in maxseg socket option. [ 158.554713][ T9986] Use struct sctp_assoc_value instead [ 158.850189][T10002] pim6reg1: entered promiscuous mode [ 158.907575][T10002] pim6reg1: entered allmulticast mode [ 159.401967][T10027] __nla_validate_parse: 14 callbacks suppressed [ 159.401984][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1178'. [ 159.596302][T10039] hsr_slave_0 (unregistering): left promiscuous mode [ 161.274850][T10041] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 161.284365][T10041] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 161.293195][T10041] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 161.303348][T10041] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 161.312777][T10041] geneve2: entered promiscuous mode [ 161.319571][T10041] geneve2: entered allmulticast mode [ 161.333215][T10041] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 161.349248][T10041] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 161.355973][T10057] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1186'. [ 161.359249][T10041] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 161.376596][T10041] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 161.411860][T10045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.419638][T10045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.428607][T10045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.437288][T10045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.469048][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 161.679745][T10068] .: renamed from bond0 [ 161.887736][T10080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.102271][T10090] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 162.286960][T10100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1201'. [ 162.301286][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.315640][T10100] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1201'. [ 162.329110][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.706814][T10121] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1207'. [ 162.737957][T10124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1209'. [ 163.201897][T10155] netlink: 'syz.2.1219': attribute type 1 has an invalid length. [ 163.210620][T10155] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1219'. [ 163.441183][T10160] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1220'. [ 163.557907][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 164.754352][T10160] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 164.978740][T10179] netlink: 'syz.1.1224': attribute type 11 has an invalid length. [ 165.085380][T10185] netlink: 'syz.0.1226': attribute type 1 has an invalid length. [ 165.166336][T10178] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1225'. [ 165.257912][T10194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1229'. [ 165.267233][T10194] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1229'. [ 165.276983][T10194] netlink: 'syz.4.1229': attribute type 5 has an invalid length. [ 165.286459][T10195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1229'. [ 165.322683][T10195] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1229'. [ 165.338993][T10202] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1228'. [ 165.348459][T10195] netlink: 'syz.4.1229': attribute type 5 has an invalid length. [ 165.624038][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 165.655737][T10219] netlink: 'syz.4.1235': attribute type 1 has an invalid length. [ 165.919105][T10234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1237'. [ 165.945532][T10234] nlmon0: Master is either lo or non-ether device [ 166.442365][T10260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1247'. [ 166.461019][T10260] geneve2: entered promiscuous mode [ 166.585222][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1249'. [ 166.725423][T10274] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1252'. [ 167.032769][T10289] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 167.426519][T10310] xt_CT: You must specify a L4 protocol and not use inversions on it [ 167.556339][T10318] dvmrp0: entered allmulticast mode [ 167.595620][T10318] lo: entered promiscuous mode [ 167.600836][T10318] tunl0: entered promiscuous mode [ 167.628035][T10318] gre0: entered promiscuous mode [ 167.633410][T10318] gretap0: entered promiscuous mode [ 167.655470][T10318] erspan0: entered promiscuous mode [ 167.671400][T10318] ip_vti0: entered promiscuous mode [ 168.059500][T10340] xt_TCPMSS: Only works on TCP SYN packets [ 168.392028][T10363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.440284][T10365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.751621][T10373] xt_limit: Overflow, try lower: 0/0 [ 169.038951][T10392] netlink: 'syz.4.1294': attribute type 39 has an invalid length. [ 169.145774][T10396] netlink: 'syz.0.1298': attribute type 2 has an invalid length. [ 169.148805][T10395] netlink: 'syz.2.1297': attribute type 32 has an invalid length. [ 170.386418][T10451] __nla_validate_parse: 18 callbacks suppressed [ 170.386439][T10451] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1320'. [ 170.691440][T10468] netlink: 'syz.0.1325': attribute type 21 has an invalid length. [ 170.711681][T10468] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1325'. [ 171.000273][T10482] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1329'. [ 171.172716][T10494] netlink: 'syz.0.1333': attribute type 39 has an invalid length. [ 171.334574][T10495] netlink: 'syz.4.1334': attribute type 39 has an invalid length. [ 171.464078][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 171.504747][T10502] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1336'. [ 171.557087][T10505] netlink: 'syz.2.1337': attribute type 1 has an invalid length. [ 171.565477][T10505] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1337'. [ 171.579568][T10505] bridge0: entered promiscuous mode [ 171.586756][T10505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1337'. [ 171.601094][T10505] vlan3: left promiscuous mode [ 171.608811][T10505] bridge0: port 3(vlan3) entered disabled state [ 171.617699][T10505] eth0_vlan: left allmulticast mode [ 171.623021][T10505] eth0_vlan: left promiscuous mode [ 171.628714][T10505] bridge0: port 2(eth0_vlan) entered disabled state [ 171.638183][T10505] bridge_slave_0: left allmulticast mode [ 171.644671][T10505] bridge_slave_0: left promiscuous mode [ 171.650517][T10505] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.671194][T10505] bridge0 (unregistering): left promiscuous mode [ 171.777517][T10512] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1339'. [ 171.816563][T10514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1340'. [ 172.103081][T10528] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1344'. [ 172.112294][ T29] audit: type=1107 audit(1739575433.045:2): pid=10524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='.}ZIU dO&[㉫冚Yp;Lk?T;A؞z采6iTr:( "OҌƳ%?OʝD6u+ r:e}VL؟`0"<3r`x `A|\{]ou{' [ 172.156302][T10527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1345'. [ 172.260065][T10532] Cannot find add_set index 0 as target [ 172.669066][ T5842] Bluetooth: hci2: command tx timeout [ 174.255481][T10565] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 174.487991][T10573] netlink: 'syz.1.1361': attribute type 1 has an invalid length. [ 174.522548][T10573] netlink: 'syz.1.1361': attribute type 1 has an invalid length. [ 174.539437][T10575] IPVS: Error connecting to the multicast addr [ 174.567640][T10575] sctp: [Deprecated]: syz.0.1362 (pid 10575) Use of int in max_burst socket option. [ 174.567640][T10575] Use struct sctp_assoc_value instead [ 174.596359][T10581] netlink: 'syz.3.1364': attribute type 1 has an invalid length. [ 174.970231][T10603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.152991][T10616] tipc: Invalid UDP bearer configuration [ 175.153032][T10616] tipc: Enabling of bearer rejected, failed to enable media [ 175.589517][T10638] __nla_validate_parse: 32 callbacks suppressed [ 175.589548][T10638] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1387'. [ 175.598626][T10644] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1388'. [ 175.623506][T10638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1387'. [ 175.788557][T10653] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1391'. [ 175.821318][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1392'. [ 175.821337][T10646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1389'. [ 175.831975][T10655] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1392'. [ 175.863906][T10646] tc_dump_action: action bad kind [ 176.296226][T10676] bond0: entered promiscuous mode [ 176.325517][T10676] bond_slave_0: entered promiscuous mode [ 176.333117][T10676] bond_slave_1: entered promiscuous mode [ 176.351797][T10676] bond0: left allmulticast mode [ 176.360661][T10676] bond_slave_0: left allmulticast mode [ 176.370245][T10676] bond_slave_1: left allmulticast mode [ 176.382342][T10681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1401'. [ 177.200007][T10738] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1419'. [ 177.262234][T10740] Bluetooth: MGMT ver 1.23 [ 177.416826][T10750] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1424'. [ 177.800033][T10767] syzkaller1: entered promiscuous mode [ 177.806386][T10767] syzkaller1: entered allmulticast mode [ 177.882463][T10774] Illegal XDP return value 67 on prog (id 264) dev N/A, expect packet loss! [ 178.193807][T10795] netlink: 'syz.0.1437': attribute type 1 has an invalid length. [ 178.239546][T10795] netlink: 'syz.0.1437': attribute type 1 has an invalid length. [ 178.298934][T10804] openvswitch: netlink: IP tunnel dst address not specified [ 178.352310][T10805] dvmrp1: entered allmulticast mode [ 178.913100][T10835] netlink: 'syz.3.1452': attribute type 2 has an invalid length. [ 178.953843][T10835] netlink: 'syz.3.1452': attribute type 2 has an invalid length. [ 178.966901][T10835] netlink: 'syz.3.1452': attribute type 1 has an invalid length. [ 179.020049][T10835] netlink: 'syz.3.1452': attribute type 2 has an invalid length. [ 179.090259][T10835] netlink: 'syz.3.1452': attribute type 2 has an invalid length. [ 179.499564][T10875] nft_compat: unsupported protocol 0 [ 179.542230][T10875] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 179.639957][T10886] validate_nla: 1 callbacks suppressed [ 179.639977][T10886] netlink: 'syz.1.1467': attribute type 9 has an invalid length. [ 179.979412][T10900] gtp0: entered promiscuous mode [ 179.988960][T10900] gtp0: entered allmulticast mode [ 180.348496][T10917] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.737619][T10936] __nla_validate_parse: 20 callbacks suppressed [ 180.737668][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1485'. [ 180.784368][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1485'. [ 180.793522][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1485'. [ 180.888167][T10949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1489'. [ 180.907978][T10950] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1489'. [ 180.918986][T10954] tipc: Enabling of bearer rejected, already enabled [ 181.107199][T10964] tipc: Started in network mode [ 181.112117][T10964] tipc: Node identity 9, cluster identity 4711 [ 181.119975][T10964] tipc: Node number set to 9 [ 181.187431][T10972] netlink: 'syz.1.1492': attribute type 39 has an invalid length. [ 181.211863][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1495'. [ 181.338484][T10971] netlink: 'syz.3.1493': attribute type 39 has an invalid length. [ 181.388730][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1498'. [ 181.855876][T11007] netlink: 'syz.3.1507': attribute type 1 has an invalid length. [ 181.897757][T11007] 8021q: adding VLAN 0 to HW filter on device bond3 [ 181.905692][T11013] syzkaller1: entered promiscuous mode [ 181.912178][T11013] syzkaller1: entered allmulticast mode [ 181.941641][T11006] 8021q: adding VLAN 0 to HW filter on device bond3 [ 181.949528][T11006] bond3: (slave ipip0): The slave device specified does not support setting the MAC address [ 181.961357][T11006] bond3: (slave ipip0): Error -95 calling set_mac_address [ 182.275142][T11028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1513'. [ 182.760013][T11060] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 182.961536][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1528'. [ 183.242509][T11092] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1533'. [ 183.620644][T11106] netlink: 'syz.1.1537': attribute type 24 has an invalid length. [ 183.635549][T11106] netlink: 'syz.1.1537': attribute type 3 has an invalid length. [ 183.860307][T11128] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 183.875850][T11128] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 184.079349][T11142] dummy0: entered allmulticast mode [ 184.089247][T11143] Cannot find add_set index 0 as target [ 184.102096][T11142] batman_adv: batadv0: Adding interface: dummy0 [ 184.114432][T11142] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.140725][T11142] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 184.595694][ T5842] Bluetooth: hci4: link tx timeout [ 184.600942][ T5842] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 185.099706][T11195] .: entered promiscuous mode [ 185.121218][T11195] bond_slave_0: entered promiscuous mode [ 185.130946][T11195] bond_slave_1: entered promiscuous mode [ 185.981612][T11230] sctp: [Deprecated]: syz.2.1581 (pid 11230) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.981612][T11230] Use struct sctp_sack_info instead [ 186.681784][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 186.697807][ T5847] ================================================================== [ 186.705887][ T5847] BUG: KASAN: slab-use-after-free in sco_conn_put+0xad/0x210 [ 186.713265][ T5847] Write of size 8 at addr ffff8880623af5a0 by task kworker/u9:8/5847 [ 186.721320][ T5847] [ 186.723664][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: kworker/u9:8 Not tainted 6.14.0-rc2-syzkaller-00154-g054e61bb1de4 #0 [ 186.723682][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 186.723693][ T5847] Workqueue: hci4 hci_cmd_sync_work [ 186.723721][ T5847] Call Trace: [ 186.723729][ T5847] [ 186.723736][ T5847] dump_stack_lvl+0x241/0x360 [ 186.723755][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.723771][ T5847] ? __pfx__printk+0x10/0x10 [ 186.723785][ T5847] ? _printk+0xd5/0x120 [ 186.723798][ T5847] ? __virt_addr_valid+0x183/0x530 [ 186.723819][ T5847] ? __virt_addr_valid+0x183/0x530 [ 186.723841][ T5847] print_report+0x169/0x550 [ 186.723859][ T5847] ? __virt_addr_valid+0x183/0x530 [ 186.723881][ T5847] ? __virt_addr_valid+0x183/0x530 [ 186.723897][ T5847] ? __virt_addr_valid+0x45f/0x530 [ 186.723909][ T5847] ? __phys_addr+0xba/0x170 [ 186.723921][ T5847] ? sco_conn_put+0xad/0x210 [ 186.723930][ T5847] kasan_report+0x143/0x180 [ 186.723941][ T5847] ? sco_conn_put+0xad/0x210 [ 186.723950][ T5847] sco_conn_put+0xad/0x210 [ 186.723959][ T5847] sco_connect_cfm+0xa7/0xae0 [ 186.723968][ T5847] ? __kasan_kmalloc+0x98/0xb0 [ 186.723978][ T5847] ? hci_cb_lookup+0x1b3/0x3c0 [ 186.723990][ T5847] ? __pfx_sco_connect_cfm+0x10/0x10 [ 186.723999][ T5847] ? hci_cb_lookup+0x3a0/0x3c0 [ 186.724010][ T5847] ? __pfx_sco_connect_cfm+0x10/0x10 [ 186.724019][ T5847] hci_conn_failed+0x287/0x400 [ 186.724030][ T5847] ? __pfx_hci_conn_failed+0x10/0x10 [ 186.724039][ T5847] ? hci_conn_unlink+0x57a/0x630 [ 186.724050][ T5847] hci_conn_unlink+0x41d/0x630 [ 186.724062][ T5847] hci_conn_del+0x61/0xc40 [ 186.724076][ T5847] ? kfree+0x196/0x430 [ 186.724093][ T5847] ? hci_conn_failed+0x298/0x400 [ 186.724109][ T5847] hci_conn_failed+0x319/0x400 [ 186.724126][ T5847] ? __pfx_hci_conn_failed+0x10/0x10 [ 186.724145][ T5847] hci_abort_conn_sync+0xd27/0x1340 [ 186.724162][ T5847] ? hci_abort_conn_sync+0x9fa/0x1340 [ 186.724178][ T5847] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 186.724197][ T5847] ? __pfx_lock_acquire+0x10/0x10 [ 186.724217][ T5847] ? hci_conn_valid+0x1f/0x210 [ 186.724235][ T5847] ? hci_conn_valid+0x1f4/0x210 [ 186.724254][ T5847] ? __pfx_abort_conn_sync+0x10/0x10 [ 186.724273][ T5847] hci_cmd_sync_work+0x22b/0x400 [ 186.724294][ T5847] ? process_scheduled_works+0x9c6/0x18e0 [ 186.724312][ T5847] process_scheduled_works+0xabe/0x18e0 [ 186.724342][ T5847] ? __pfx_process_scheduled_works+0x10/0x10 [ 186.724355][ T5847] ? assign_work+0x364/0x3d0 [ 186.724366][ T5847] worker_thread+0x870/0xd30 [ 186.724379][ T5847] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 186.724389][ T5847] ? __kthread_parkme+0x169/0x1d0 [ 186.724402][ T5847] ? __pfx_worker_thread+0x10/0x10 [ 186.724412][ T5847] kthread+0x7a9/0x920 [ 186.724424][ T5847] ? __pfx_kthread+0x10/0x10 [ 186.724436][ T5847] ? __pfx_worker_thread+0x10/0x10 [ 186.724446][ T5847] ? __pfx_kthread+0x10/0x10 [ 186.724458][ T5847] ? __pfx_kthread+0x10/0x10 [ 186.724470][ T5847] ? __pfx_kthread+0x10/0x10 [ 186.724482][ T5847] ? _raw_spin_unlock_irq+0x23/0x50 [ 186.724490][ T5847] ? lockdep_hardirqs_on+0x99/0x150 [ 186.724500][ T5847] ? __pfx_kthread+0x10/0x10 [ 186.724512][ T5847] ret_from_fork+0x4b/0x80 [ 186.724523][ T5847] ? __pfx_kthread+0x10/0x10 [ 186.724535][ T5847] ret_from_fork_asm+0x1a/0x30 [ 186.724548][ T5847] [ 186.724552][ T5847] [ 187.044895][ T5847] Allocated by task 10839: [ 187.049306][ T5847] kasan_save_track+0x3f/0x80 [ 187.054000][ T5847] __kasan_kmalloc+0x98/0xb0 [ 187.058600][ T5847] __kmalloc_noprof+0x285/0x4c0 [ 187.063459][ T5847] sk_prot_alloc+0xe0/0x210 [ 187.067980][ T5847] sk_alloc+0x38/0x370 [ 187.072048][ T5847] __netlink_create+0x65/0x260 [ 187.076815][ T5847] netlink_create+0x3ab/0x560 [ 187.081513][ T5847] __sock_create+0x4c0/0xa30 [ 187.086209][ T5847] __sys_socket+0x150/0x3c0 [ 187.090719][ T5847] __x64_sys_socket+0x7a/0x90 [ 187.095395][ T5847] do_syscall_64+0xf3/0x230 [ 187.099911][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.105800][ T5847] [ 187.108115][ T5847] Freed by task 24: [ 187.112254][ T5847] kasan_save_track+0x3f/0x80 [ 187.116941][ T5847] kasan_save_free_info+0x40/0x50 [ 187.122004][ T5847] __kasan_slab_free+0x59/0x70 [ 187.126759][ T5847] kfree+0x196/0x430 [ 187.130667][ T5847] __sk_destruct+0x479/0x5f0 [ 187.135444][ T5847] rcu_core+0xaaa/0x17a0 [ 187.139693][ T5847] handle_softirqs+0x2d4/0x9b0 [ 187.144461][ T5847] run_ksoftirqd+0xca/0x130 [ 187.148969][ T5847] smpboot_thread_fn+0x544/0xa30 [ 187.153912][ T5847] kthread+0x7a9/0x920 [ 187.157990][ T5847] ret_from_fork+0x4b/0x80 [ 187.162394][ T5847] ret_from_fork_asm+0x1a/0x30 [ 187.167165][ T5847] [ 187.169473][ T5847] Last potentially related work creation: [ 187.175179][ T5847] kasan_save_stack+0x3f/0x60 [ 187.179875][ T5847] kasan_record_aux_stack+0xaa/0xc0 [ 187.185339][ T5847] call_rcu+0x168/0xac0 [ 187.189486][ T5847] netlink_release+0x1718/0x1bf0 [ 187.194450][ T5847] sock_close+0xbc/0x240 [ 187.198696][ T5847] __fput+0x3e9/0x9f0 [ 187.202660][ T5847] task_work_run+0x24f/0x310 [ 187.207239][ T5847] syscall_exit_to_user_mode+0x13f/0x340 [ 187.212888][ T5847] do_syscall_64+0x100/0x230 [ 187.217474][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.223354][ T5847] [ 187.225674][ T5847] The buggy address belongs to the object at ffff8880623af000 [ 187.225674][ T5847] which belongs to the cache kmalloc-2k of size 2048 [ 187.239732][ T5847] The buggy address is located 1440 bytes inside of [ 187.239732][ T5847] freed 2048-byte region [ffff8880623af000, ffff8880623af800) [ 187.253702][ T5847] [ 187.256029][ T5847] The buggy address belongs to the physical page: [ 187.262461][ T5847] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x623a8 [ 187.271222][ T5847] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 187.279712][ T5847] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 187.287295][ T5847] page_type: f5(slab) [ 187.291261][ T5847] raw: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 187.299828][ T5847] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 187.308407][ T5847] head: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 187.317078][ T5847] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 187.325756][ T5847] head: 00fff00000000003 ffffea000188ea01 ffffffffffffffff 0000000000000000 [ 187.334425][ T5847] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 187.343098][ T5847] page dumped because: kasan: bad access detected [ 187.349510][ T5847] page_owner tracks the page as allocated [ 187.355219][ T5847] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5833, tgid 5833 (syz-executor), ts 64589236946, free_ts 17385310315 [ 187.376596][ T5847] post_alloc_hook+0x1f4/0x240 [ 187.381374][ T5847] get_page_from_freelist+0x365c/0x37a0 [ 187.386907][ T5847] __alloc_frozen_pages_noprof+0x292/0x710 [ 187.392700][ T5847] alloc_pages_mpol+0x311/0x660 [ 187.397549][ T5847] allocate_slab+0x8f/0x3a0 [ 187.402048][ T5847] ___slab_alloc+0xc27/0x14a0 [ 187.406712][ T5847] __slab_alloc+0x58/0xa0 [ 187.411042][ T5847] __kmalloc_cache_noprof+0x27b/0x390 [ 187.416410][ T5847] fib6_net_init+0x1a1/0x880 [ 187.421007][ T5847] ops_init+0x349/0x5b0 [ 187.425161][ T5847] setup_net+0x287/0x9e0 [ 187.429401][ T5847] copy_net_ns+0x33f/0x570 [ 187.433804][ T5847] create_new_namespaces+0x425/0x7b0 [ 187.439086][ T5847] unshare_nsproxy_namespaces+0x124/0x180 [ 187.444799][ T5847] ksys_unshare+0x57d/0xa70 [ 187.449306][ T5847] __x64_sys_unshare+0x38/0x40 [ 187.454062][ T5847] page last free pid 1 tgid 1 stack trace: [ 187.459880][ T5847] free_frozen_pages+0xe0d/0x10e0 [ 187.464900][ T5847] free_contig_range+0x14c/0x430 [ 187.469836][ T5847] destroy_args+0x94/0x4b0 [ 187.474250][ T5847] debug_vm_pgtable+0x551/0x590 [ 187.479101][ T5847] do_one_initcall+0x248/0x930 [ 187.483855][ T5847] do_initcall_level+0x157/0x210 [ 187.488790][ T5847] do_initcalls+0x71/0xd0 [ 187.493101][ T5847] kernel_init_freeable+0x435/0x5d0 [ 187.498291][ T5847] kernel_init+0x1d/0x2b0 [ 187.502645][ T5847] ret_from_fork+0x4b/0x80 [ 187.507048][ T5847] ret_from_fork_asm+0x1a/0x30 [ 187.511799][ T5847] [ 187.514197][ T5847] Memory state around the buggy address: [ 187.519820][ T5847] ffff8880623af480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.527890][ T5847] ffff8880623af500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.535947][ T5847] >ffff8880623af580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.544016][ T5847] ^ [ 187.549117][ T5847] ffff8880623af600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.557169][ T5847] ffff8880623af680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.565218][ T5847] ================================================================== [ 187.576698][ T5847] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 187.583921][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: kworker/u9:8 Not tainted 6.14.0-rc2-syzkaller-00154-g054e61bb1de4 #0 [ 187.594773][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 187.604819][ T5847] Workqueue: hci4 hci_cmd_sync_work [ 187.610017][ T5847] Call Trace: [ 187.613304][ T5847] [ 187.616226][ T5847] dump_stack_lvl+0x241/0x360 [ 187.620898][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.626083][ T5847] ? __pfx__printk+0x10/0x10 [ 187.630656][ T5847] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 187.636631][ T5847] ? vscnprintf+0x5d/0x90 [ 187.640951][ T5847] panic+0x349/0x880 [ 187.644836][ T5847] ? check_panic_on_warn+0x21/0xb0 [ 187.649942][ T5847] ? __pfx_panic+0x10/0x10 [ 187.654356][ T5847] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 187.660320][ T5847] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 187.666632][ T5847] check_panic_on_warn+0x86/0xb0 [ 187.671561][ T5847] ? sco_conn_put+0xad/0x210 [ 187.676136][ T5847] end_report+0x77/0x160 [ 187.680367][ T5847] kasan_report+0x154/0x180 [ 187.684866][ T5847] ? sco_conn_put+0xad/0x210 [ 187.689443][ T5847] sco_conn_put+0xad/0x210 [ 187.693850][ T5847] sco_connect_cfm+0xa7/0xae0 [ 187.698512][ T5847] ? __kasan_kmalloc+0x98/0xb0 [ 187.703267][ T5847] ? hci_cb_lookup+0x1b3/0x3c0 [ 187.708018][ T5847] ? __pfx_sco_connect_cfm+0x10/0x10 [ 187.713288][ T5847] ? hci_cb_lookup+0x3a0/0x3c0 [ 187.718041][ T5847] ? __pfx_sco_connect_cfm+0x10/0x10 [ 187.723314][ T5847] hci_conn_failed+0x287/0x400 [ 187.728073][ T5847] ? __pfx_hci_conn_failed+0x10/0x10 [ 187.733344][ T5847] ? hci_conn_unlink+0x57a/0x630 [ 187.738272][ T5847] hci_conn_unlink+0x41d/0x630 [ 187.743028][ T5847] hci_conn_del+0x61/0xc40 [ 187.747448][ T5847] ? kfree+0x196/0x430 [ 187.751506][ T5847] ? hci_conn_failed+0x298/0x400 [ 187.756439][ T5847] hci_conn_failed+0x319/0x400 [ 187.761200][ T5847] ? __pfx_hci_conn_failed+0x10/0x10 [ 187.766489][ T5847] hci_abort_conn_sync+0xd27/0x1340 [ 187.771769][ T5847] ? hci_abort_conn_sync+0x9fa/0x1340 [ 187.777126][ T5847] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 187.782748][ T5847] ? __pfx_lock_acquire+0x10/0x10 [ 187.787764][ T5847] ? hci_conn_valid+0x1f/0x210 [ 187.792515][ T5847] ? hci_conn_valid+0x1f4/0x210 [ 187.797353][ T5847] ? __pfx_abort_conn_sync+0x10/0x10 [ 187.802636][ T5847] hci_cmd_sync_work+0x22b/0x400 [ 187.807568][ T5847] ? process_scheduled_works+0x9c6/0x18e0 [ 187.813278][ T5847] process_scheduled_works+0xabe/0x18e0 [ 187.819168][ T5847] ? __pfx_process_scheduled_works+0x10/0x10 [ 187.825140][ T5847] ? assign_work+0x364/0x3d0 [ 187.829718][ T5847] worker_thread+0x870/0xd30 [ 187.834648][ T5847] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 187.840528][ T5847] ? __kthread_parkme+0x169/0x1d0 [ 187.845544][ T5847] ? __pfx_worker_thread+0x10/0x10 [ 187.850641][ T5847] kthread+0x7a9/0x920 [ 187.854700][ T5847] ? __pfx_kthread+0x10/0x10 [ 187.859280][ T5847] ? __pfx_worker_thread+0x10/0x10 [ 187.864386][ T5847] ? __pfx_kthread+0x10/0x10 [ 187.868964][ T5847] ? __pfx_kthread+0x10/0x10 [ 187.873546][ T5847] ? __pfx_kthread+0x10/0x10 [ 187.878123][ T5847] ? _raw_spin_unlock_irq+0x23/0x50 [ 187.883303][ T5847] ? lockdep_hardirqs_on+0x99/0x150 [ 187.888488][ T5847] ? __pfx_kthread+0x10/0x10 [ 187.893068][ T5847] ret_from_fork+0x4b/0x80 [ 187.897476][ T5847] ? __pfx_kthread+0x10/0x10 [ 187.902082][ T5847] ret_from_fork_asm+0x1a/0x30 [ 187.906858][ T5847] [ 187.910041][ T5847] Kernel Offset: disabled [ 187.914367][ T5847] Rebooting in 86400 seconds..