last executing test programs: 3.418952117s ago: executing program 4 (id=607): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400e0ffb7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfca804a0, 0x54, 0x0, &(0x7f0000000900)="b80022ab98d1db1b883e04000000821c41888a26cbde7103060c317fd064e7be52cc66ba3ee509686a1e2c58344db640e1164430c16ce7d3c52f9285a99cd783b8e609ec782f15a0ab6094d925155d328b7ae353", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) 3.367660575s ago: executing program 2 (id=609): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000540)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_DST={0x8, 0x1, @broadcast}]}, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001a00010000000000000000008100001e000000000000000008000f80"], 0x24}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030004000500e1000cee0203001a000000", 0x33a) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4000, r1}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010300002000000000000100000004000180100002800c000180080001000663"], 0x28}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000070000000600000000000000", @ANYRES32=0x1, @ANYBLOB="00000000b10d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@loopback, @in6=@mcast1, 0x4e22, 0x0, 0x0, 0x3fff}, {@in=@remote, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0xfffffffc, 0x0, 0xa, 0x4, 0x0, 0x2f}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4054}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f00000000c0)=r13, 0x4) sendmsg$unix(r12, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000280), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050a01020000000000000000010020000c0002400000000000c2ac1344cd57133b22576d4ee00000010900010073797a3100000000040004802c000000000a01040000000000000000070000020900010073797a30000000000c0004400000000000000002140000001100010000000000000000000000000a"], 0xe4}}, 0x200000d4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x9, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r3], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) 3.293376123s ago: executing program 4 (id=610): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv4_getnexthop={0x1c, 0x6a, 0x119, 0x70bd2c, 0x25dfdbfe, {}, [@NHA_GROUPS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) (fail_nth: 7) 3.127126842s ago: executing program 4 (id=612): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x700, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000206011200000a00000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000a00000500050002000000050004000000000016000300686173683a6e6574"], 0x64}}, 0x0) 3.121277154s ago: executing program 2 (id=613): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x88, 0x1, &(0x7f0000000080), 0x4) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb, 0x0, &(0x7f00000006c0)="259e8c4cda791ca5e7cc68", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x2}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000520001000000ecbe0000000002"], 0x1c}}, 0x20000000) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x3, 0x92, [0x7, 0x1344, 0x2, 0x0, 0x1, 0x6], 0xa, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000180)=""/146}, &(0x7f0000000000)=0x78) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x3c, r4, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.970486055s ago: executing program 2 (id=616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}}], {0x14}}, 0xac}}, 0x0) 2.927665979s ago: executing program 4 (id=617): r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x193, 0x0, 0x0, 0x0, 0x400, &(0x7f00000000c0)='pim6reg1\x00', 0x2, 0xffffffff, 0x101}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x6}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000680)={0x0, 0x1, 0x6, 0x9, 0xe9a9, 0x212fbade}, 0x14) close(r0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0xeb, &(0x7f0000001040), &(0x7f0000000440)=0x4) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@dev}}, &(0x7f00000007c0)=0xe8) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x18, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x40}, {0x6}]}, 0x10) writev(r6, &(0x7f0000000500)=[{&(0x7f0000000080)="0ccc3611", 0x4}], 0x1) bind$rds(r5, &(0x7f0000000640)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="f0010000", @ANYRES16=r8, @ANYBLOB="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"], 0x1f0}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@local, 0x4e22, 0x6, 0x4e24, 0x0, 0xa, 0x40, 0x20, 0x2c, 0x0, r4}, {0x0, 0x1f, 0xd5b, 0x4, 0xfffffffffffffffb, 0x4, 0xe, 0x81}, {0x2, 0x7, 0x3b5e55b7, 0x8}, 0x3, 0x6e6bb9, 0x1, 0x1, 0x2}, {{@in=@private=0xa010100, 0x4d3, 0x2b}, 0xa, @in=@broadcast, 0x34ff, 0x3, 0x1, 0x2, 0x8, 0x100, 0xe}}, 0xe8) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, 0x0, &(0x7f0000000940)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000980)={0x0, 0x7}, &(0x7f00000009c0)=0xffffffffffffff7a) close(r2) 2.864543624s ago: executing program 2 (id=619): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r2, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x0) 2.711035303s ago: executing program 4 (id=620): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x120, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000660000000800", @ANYRES32=r2], 0x2c}}, 0x0) 2.708610134s ago: executing program 2 (id=621): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)={@val={0x2000, 0x6000}, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @dev={0xac, 0x14, 0x14, 0x41}}, {0x600, 0x0, 0x29, 0x0, @wg=@data={0x4, 0x9, 0xf59, "85b8e6665d890582126b83824ec5eabb03"}}}}}}}, 0x53) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @local, {[@end, @timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@multicast1}, {@loopback}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r3, 0x8b20, &(0x7f0000000080)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x6c, r5, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x6c}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x14, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.360349359s ago: executing program 0 (id=624): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000540)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_DST={0x8, 0x1, @broadcast}]}, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001a00010000000000000000008100001e000000000000000008000f80"], 0x24}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030004000500e1000cee0203001a000000", 0x33a) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4000, r1}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010300002000000000000100000004000180100002800c000180080001000663"], 0x28}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000070000000600000000000000", @ANYRES32=0x1, @ANYBLOB="00000000b10d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@loopback, @in6=@mcast1, 0x4e22, 0x0, 0x0, 0x3fff}, {@in=@remote, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0xfffffffc, 0x0, 0xa, 0x4, 0x0, 0x2f}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4054}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4) r13 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r13, 0x84, 0x7d, &(0x7f0000000280), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050a01020000000000000000010020000c0002400000000000c2ac1344cd57133b22576d4ee00000010900010073797a3100000000040004802c000000000a01040000000000000000070000020900010073797a30000000000c0004400000000000000002140000001100010000000000000000000000000a"], 0xe4}}, 0x200000d4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x9, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r3], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) 2.17929089s ago: executing program 2 (id=627): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="63ec070046dc3f0adf008936e7a8", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.897203153s ago: executing program 32 (id=627): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="63ec070046dc3f0adf008936e7a8", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.892084361s ago: executing program 0 (id=629): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}}], {0x14}}, 0xac}}, 0x0) 1.837998554s ago: executing program 4 (id=632): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x7c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4044800}, 0xc040) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x400) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="7f8d00c7ee2b41c1de2bc41034050ede15930c466bb03daceff2a7331c49b54860746086099fab1f64c647e2cf3919c8b43ca0bbaa2e99594c26bf0e5b466d7af7d781e2e0fd160898a80c16236b5db3bb485a2b1c7c986f796289665182c57e69daa6", 0x63}, {&(0x7f00000003c0)="ef9c997c293d1b1b84b6a9ea5d2f2c063ca73cf881f5cc333e97a8d2406eee5937119b890a05a941d3f5c0465f83b46e632858f3001bb68666c2e7f4dbc9ce73b65797e6f64fdc811ade171c49638e77547074d65a33e7", 0x57}, {&(0x7f0000000440)="469aa7c84ad6040728493601a9f8ccd7b0be0129608217efb24009d9844574cfaacc0e09b440fbfae259bd9031b9fcf282660e4a899e9892682603c3f43446f30ac1aa315538deb76834448c427e3d1c8d431890a8b38170ca44d668e46da94f5e9a474c455d28dbc6c9753400636d1f0a6a31331007032320ebe15a", 0x7c}], 0x3}, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x2404c140) socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newtaction={0x48, 0x1e, 0x109, 0x100, 0x0, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x0) 1.640791081s ago: executing program 33 (id=632): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x7c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4044800}, 0xc040) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x400) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="7f8d00c7ee2b41c1de2bc41034050ede15930c466bb03daceff2a7331c49b54860746086099fab1f64c647e2cf3919c8b43ca0bbaa2e99594c26bf0e5b466d7af7d781e2e0fd160898a80c16236b5db3bb485a2b1c7c986f796289665182c57e69daa6", 0x63}, {&(0x7f00000003c0)="ef9c997c293d1b1b84b6a9ea5d2f2c063ca73cf881f5cc333e97a8d2406eee5937119b890a05a941d3f5c0465f83b46e632858f3001bb68666c2e7f4dbc9ce73b65797e6f64fdc811ade171c49638e77547074d65a33e7", 0x57}, {&(0x7f0000000440)="469aa7c84ad6040728493601a9f8ccd7b0be0129608217efb24009d9844574cfaacc0e09b440fbfae259bd9031b9fcf282660e4a899e9892682603c3f43446f30ac1aa315538deb76834448c427e3d1c8d431890a8b38170ca44d668e46da94f5e9a474c455d28dbc6c9753400636d1f0a6a31331007032320ebe15a", 0x7c}], 0x3}, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x2404c140) socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newtaction={0x48, 0x1e, 0x109, 0x100, 0x0, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x0) 1.635805324s ago: executing program 0 (id=633): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x4, 0x81, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @fixed, 0x3ff}, 0xe) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@remote, @empty, 0x0, "e798888beab3af341dbec4427a73b0fbda814c5f5cd6f92215f46e0b091038f9"}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000001c0)=0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x27fd}, 0x8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0xa, 0x0, &(0x7f00000000c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000002fc0)={'ip6tnl0\x00', &(0x7f0000002f40)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x40, 0x5, 0x69, @mcast2, @loopback, 0x1, 0x40, 0xe1, 0x9}}) sendmmsg$inet6(r2, &(0x7f0000005940)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x80000000, @local, 0x4}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000800)}, {&(0x7f0000000340)="fa5c317ba1ea34091de809a182bea040eae14157ada3cc3f8a43", 0x1a}, {0x0}, {&(0x7f0000000900)="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", 0x1000}], 0x4, &(0x7f0000001940)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xcbe5}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x0, 0xe, 0x2, 0x9, 0x0, [@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast2]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x5e, 0x1, '\x00', [@ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x2}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xa}}, @tclass={{0x14, 0x29, 0x43, 0x6}}], 0x110}}, {{&(0x7f0000001a80)={0xa, 0x4e23, 0x0, @remote, 0x80000000}, 0x1c, &(0x7f0000001e40)=[{&(0x7f0000001ac0)="0fcbe2dd48e2db63e3903b3f0b2109d63f0e31bc54b73cd9eebc82fffa6c6673b02ed7404f728a6fe13bbb58dc293c1044b38c980538cb7fe43067d7b997309ba0c5876b2c2a35c6f5e9cc97d8e5a5db4c955b5afd5e1847e766704aa11b2cacbcea5628aaad515c305c32b25e2c63ace4c3", 0x72}, {&(0x7f0000001b80)="a8101d66d1965b979894c066c1a959e5e3944a8c4e8684f8291ee2d03ec40fcf75d4b8697c937585b29d0605f5dae52cd343560624b836570c63da61c99b57109cde5a2ebd0b7cedee346e930b4b3e7dac73", 0x52}, {&(0x7f0000001c00)="859212f9ff", 0x5}, {&(0x7f0000001c40)="dfd58bea4d6138f15122f96d320826b7bea47cd5f439fbfef93a346c4fd7c6f542ebb92b3f52b5027dbb1ec824c6d6cbe848c92590768623a44aa475154408893babf7ed84a1f4c06d180b", 0x4b}, {&(0x7f0000001cc0)="05a90c6a0f589a9a8ecb634a4a5f56db911e0527b19d3b7226a6384c92bb7b1f137e98f779fb7d138179cd6d222eeaf25014c7dd", 0x34}, {&(0x7f0000001d00)="052a14bf14b92e5a5b88004cbe807905bbf156f31ef6dbd723c2e008194b4b08b7100b00eeb3497ba5bcacebef3e44a273f73167c6bec659c232b0a2d680f9946633f8e305bfc2f25a89c1aa4511ca1424866c9d6cfd8309edba52af5483b8a5deb03c7052eda0297b0627a00ba2b2671f7f5dfe08452afdc567a489510bf77061b836a751486610a1fa6d1481dbcba9fed916606aea40127761fbbf958e2ca8ca81ebfe7e4ae91f3010dab8ea8930c53fd7bdc4041fe03069a017f18f7fe730a75b0bd3ea97d10393c864aa6d932699a016932c921ec40f2b2dca421b35f135e27c6a2f47db869e62fc9bf44436e2598f29", 0xf2}, {&(0x7f0000001e00)="0814ba758b79f14826513bcc850ce9aea8dd86c71c8d250c9083c8f73df593a344200614f2b8", 0x26}], 0x7}}, {{&(0x7f0000001ec0)={0xa, 0x4e20, 0x8, @local, 0xff}, 0x1c, &(0x7f0000002f00)=[{&(0x7f0000001f00)="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", 0x7ed}], 0x1, &(0x7f0000003000)}}, {{&(0x7f0000004340)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c, &(0x7f0000004600)=[{&(0x7f0000004380)="958f617f069b7213dd3e324542f7b5eb0c1961d3379e8d20aa5a9aed8bafb00f03ad7cf5d2f0d67b48b5b68e281569a907a7075a9ab9d81b4ac416b3f33ca209e928580865a0213d06bc645d8b0ff854b52be600c3d81d629e7f24c031edf980d9efcd91fd7b59bcacd200984ea0fda8a3c84b8f38de13edd4e7fd25ee0cdb1d", 0x80}, {&(0x7f0000004500)="be376909d4c3cb6b3ee112d64794f07f379aeac867a7af820db5f2842f46aef3ffd472908b2bbaec5a4235b583bce08dd6b0098a156f4967055a1f95f0c509cbb4095445ba73786fc6", 0x49}, {&(0x7f0000004580)="124c219f8bdd16efbc79d111825e36f7224a726c14ff687ce2fc33c1051d70748a185c83e3e3cc77e3bdbb8cff0ff3881c2b1e84c806f6589ace5258728d49d29ec2b3a3b8008cfbb5f964b8dc45d2", 0x4f}], 0x3, &(0x7f0000004640)=[@rthdr={{0x88, 0x29, 0x39, {0x0, 0xe, 0x2, 0xaa, 0x0, [@local, @remote, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7e}}], 0xa0}}, {{&(0x7f0000004700)={0xa, 0x4e20, 0x7, @private1, 0x9}, 0x1c, &(0x7f0000005840)=[{&(0x7f0000004740)="1710aae9eb2a13877ab4e64a7e433716820fa14a1eaf3251a9b1415d6beab75a213a7f1ec062ece1d4e7e8badea12fa95753e5afdf1a9beb25179f1bdc38ab4e143ddb2ff4e9b6cae4aef7609c837fb9aa384f89aed5a1376085340f6381c3842571b6274653c1186c6fb1b0e63687f15f0e7472db3bddc854efa37f4d0004afd3fbee0847f4e2", 0x87}, {&(0x7f0000004800)="defec15839e2c9bf78e9f8de45a5e5ff97252f66c8eb0b53f70e66654aef6699536763d3af32556bdd2d213b6056afefb63aed2ac9b2b5ce31314b66d99dcc3d11a98e14ea455d689a4c91b979a03ae8a2fe9b6db4cb97b42364a21312bccf3771b88fafb54eb9c31df41ff502078dde7ce0764bc782594f8f23c6ce5dd320b9ad88f59c02230563896f339faecb4166218d75e22c48cf0767111d9826b602a549bd25c69349833460c6e9d6b59d2c97910d6ab42aac30735f812dafe12b6e4104cbdea91bbff6c00083ae7fa415cb676015796eaf9abc103150ce4274107429f4cdcd81bc8e7a8aeb11befff97f46f844d7b5bf8c4ad6db1a8abdeb7e4773d2c5fbf40484458b793302e03c86fc0ad826bf8b9709436cdf2ec250fd39653ad5c5a0f1e4701d30c5c7707d2d73328a0ee965b484723b0f6b5b99a6f24ce3b5e5e7d9856096ddb21d4b132d7f27dfbb3db19bc2ea98ce282ae07e0a4d4679af2e71bf2abaf17cd18e0cbe32f46b854a180a107b43536d4f45bed2ee83aede4c60b4ea96ca6f29ea73ee7f4fe7fa74c4675815c6cfb2d2570bebfd1b82ed905085e23ce2f588f4718c1dbbaf322d233b315298ca71efe7707c76d692b086e93f7cae677c41c403cf897c7cc916426bc02761f355f5b9c5a8e1ea140b28338a6049ab972bfb7e51e4dac063a177f3b66de014ab28eebc3cad3aecd7f293e7e23a249a73810d1371fab6f5b676e3021e63500b714a084160757f63eaccc5ea7e5ca75ca57836d058cc1bb5cffab1836e759e5788251656264576198888ea9c25e2704471571393e6aeeba73962fbe1ef6202e6eb89585b85e5f9122d58f4d47d49993b72f4fbcd628ea014d95d50f22b784753a125f3a5fdd0c99c72237de4d21f9e806de32b75a8d92c73df0e4eda5dcd039ba2145f7d25f71ca439e52984c6b1d610e62ab114103af2587db795232879f3837da996c120a895f0c0cfc2effc5aadeae2487fc0a8aa8e7195cc94b714c8bc5d24b344c41e535fad434a26e962256eb0578f5819bf2931501eb3b9f474f082d6217a58444e594bebddfbc72ef65bb79d3972bc383f710d01d5aea8311379cb310428abb943e559372365570e715f671be91a65c737207603116970dab6e6bdbcd51428d08c69fe6b83126fc1f897696c2409e2a5d1b13088d888826ae21d2647fa30e35e6ac2c9756524e14355c228fedaf00d9ee6fe19fbf269dff1df556f59c70afd3f3941bc6364d796b62d013de844869611d6c397391a9f97af6ee0080434f25666841434c619d25b318f43b4dc2002ab3c2f434230d1b90d093f046272d3d1c27f3c3a1b7062cafd0ed257eab2ae379b1393aeb55323b43b483a1565bd65259bec0fee69615f197a7204747ca6f3ef226daf9142defd2a459aaec97d837726422a71ca152e6ca0a14a44fad2bfb917034cb6db77079b1029ea6928ae5067ab61a4a8bbe7e49486349270902733ae46edaf89cd61d60139a8c3cf99c15a71dfd42b70180b8a0e399dfa3b009154e8d19379b46729610cfb06252fd8ac159413c61e520b9e087b6b6f64a406b79ac80743555820b87fec4827ffa6a5ce9948e3316e13666204c8b7545e4e86b215d1fddb560c55f68c5d155a042bcb58c50e5bdcbd564ddc20c2043cbc92de25795b48863d156fbc6e2915b34a949229a066785d302229557088c68e8a52d940d566cf9e240edd4ef4cdb3bd29871aab8cd8a1dd99e35d4b2777a1990d67d895d3a1909a44c63c61486fadf3d840080f1fbb536c4865cb367cc426af0c4c85da64ad283a5265632292e502c4cac3377d506850d823f54bcb37d65e00264516129199e76b0a4f372d7db0293d495b2ced4ce6f30a0c03e97ba42027230be93d4919eac9f99355a169293ec82d12ebbed6b2ce4016e1d20052075dd429fd81e676e587514b058f600d74b6249c83de7038bcc274c1873ab258dbe54457985f0dc0b7b4aeaa698f8969736e39920b440b438829f9ce67c00ac0799fccd6529c94377dcff001ad6e87d5b4a8456f1edab8261fa93ea6f0ffdee521930a58090dbc9004907316442f3c2548d967b76ee0c13208e0640ed866ca40b3cb6469ea2ac502f0126eb2b35c7b9665c70e5107ee70dccac6f8f71f58fa037b1acadf831cf5e5302167909c8ba7fb0735d230ef10aef7ad3570a8778c80d4855ce3109622aee92c8804636cd2aa9eefec12a73a3babd477b634d37af9b8988c972b9b42bed7d3e13b0960b99d45c778ce65c2d2d567c1c13f2cf36a5e6ad0d6cae012720cbe7d90cad18dccbc4907ee1787bf92252f37de90e8f5f4c17745a1faebb70d1306a4e703b0244b559b8859158d0826322168319788da1b829a1478ac0b34cd0bd6602b5abd7382cfe96bcd75a5f2062b48a9cc90960f54b90d8f512018aa14259252ef26ed93ff10b85ed26aba0afeaedb56d9e7c1e22aab9141eeff2ec506f593d60406bbbb1a2d5c579ec9266895b6838b104bef2b0800389b596a03cbe3e613e937124c350c8f15692c90ce15741545954ba87f97b2c5e11784cdc35d82c850845e7dd495b654db74a139190c98b1cd3ac1cd659d46c91dd21691851f0e13d17e7508517999b75a00083a8a04dc4bcef78f34a851c585d3c18c9f7e710e57afcb6ee97a7f59ce80fcb6d98eaad5a9890fe6e0a2f583178881de4c18ad05a937c0d0c5fcf3442beef5f6ca3834123901528ada0dbc2834d040a9813899f1637b3a52fb901b2fbcecc45241da1d1f8ce2892f6b709e458222f1c9a29ea273eca12e311ddb9b9fb4c6814576bc9b88845e4e1563e875ceb169934317c1536a0b6f930a88922b71b41505af2791390a12381c00fed4237b24eed6f66ba078052aee005b014c9c9a8fd6ed449fda22a59b0c329376b93c35eb7536fc37e8d72330a64a25bfbfc4c7efeb29f1eb85313e44fb5964c28bacfb81958f4006a304375db3bd4d307f19fac160839a24e28c0d7fef9c446e0070d294bbd61bd3190e20d130fe18f6c444dd6d81dbf75fcf6d82bd4f5d01df92f20cd9a206599ae925cd8393b697ea430ec72db6786df0f352e9b07eaf77049976ecfcc47a8c22667af3ea0de38d943bc75a6dfb490f0f440b6e58253c7a7feffb79998dc28e32534c29de09725300f93c5b8f8a1008506231c8a3237fbf1a13cf5d16fa687b312dc9af8e284552c58833ca693ac2a8d11fe8858b74a12a9262adad0bc88db1bb5b5f45e1726376bd7156f26590bb4b9c5da6a34ed4bb90f110a156a71f280d5d49ee4837eefc598009b94ded4948a1b642e686fe868031e7a1e96f5931d92820b18c26d21b005f1f7da5d958d93458666e38bbbae8c4093c5c881a325db9ed9defc673216827af90a30c00e7fde766eae98e2466677ca6988e770abe8505a9bbbc5236d341addbd5744946e74e443f73a682d79abe5583fd888ad7e400cc09f2100265bb2ff4b8c87d322e47fdccb5172643c5c1e19c1735e5014d2e2f88e88d8152621e249326f5ff48c9fa96449b1ddd29f6b3edef53f6f67c53e410695d20fe67db0064f345bb0d57fb4b0cf033b3663f03b0e1b3206081b0679ba9e344e16a114b01c6c69cbbae916a99d01bce8cd87beb276aa1cfe65cb6d91456595eea3fd192457c05d86c8daf561d28659ecaf8d273a686036041f5d76bb6818d5f620aacf2f5919008c312139e845ee000ba5abc9e5eee1cfe3343f9cac72fd09ff8df7462a9bb44c656d9f618f120a158c7c095618054fb9d68cdd9f8751dfa1f4ec20cbecbb08d3b665d5667f5e777f12fecfb96322ca66f668270cbdc768e4ae377dedf8b570c860316824c37689af0ec7f1e8255577362b83950c7e91d19a0cf254715f6c0f993dc7ac36ece0927e7b8fa0310b27c2673b9e70b", 0xad4}, {&(0x7f0000005800)='P', 0x1}], 0x3, &(0x7f0000005880)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2d}, @ra={0x5, 0x2, 0xe}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x14, 0xa, 0x1, 0x2, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, @local]}}}], 0x88}}], 0x5, 0x200000c0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x38}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="01c20607144257e803c3febea3bd8ae08ee91a853fd5c141476938933e31e70b6467ae0d55b9a7a305724cb3adf67f1b5537a797bb6d5eed212b29b6e50137dbfbf0acf114e74157eaa1ec215b436e303c934ec4ad7aea9a49a29807ae95d13ad1e418a15f113b4dfd9743a4b668aeb7cd9d6cad827f8748afefe4a99f582aed8836a32aae9e40913423f55377495ce6699593abb31e1c82fe869e24054705769b808fc598ab04383bd7d480ca9295a40029b183e284a80d8c2e780113f74859c26c62ae67cf23c1e896f14d38", @ANYRES16=0x0, @ANYBLOB="02002bbd7000ffdbdf25870000000c009900f9ffffff0300000006004800220000000a000600ffffffffffff0000060048001c00000043002a00dd3a7bcaff9c752822bbfa73f86ca2e13d43c22fbc954875df1b9a71f0070d4fac9102b87b16ef0b04c1403292880512641ca100baa9445ba80a576b2a"], 0x80}, 0x1, 0x0, 0x0, 0x40004}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000040000000000000700000000000000000000000b010000000000000000000003000000100400000003000000f7ffffff000000005f0000000000000000000000000000000000da0df9feed4c296bc2088546334a7f136ba7df6dffc3e7f8b918204dcc6059e36c35b1b20fadc624e0f1bdc0b97719eefe708887337bcbd6dc87f49b2f4af57b59089551368638aec4019aa5ded6ceabc0783d565229174a0e2b3b16"], 0x0, 0x5a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000002c0)=0x7, 0x4) 1.496829809s ago: executing program 3 (id=636): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000030400000000fddbdf2500000400", @ANYRES32=r1, @ANYBLOB="60bc010034a705002400128009000100626f6e640000000014000280080003003e000000"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x8010) 1.29621584s ago: executing program 1 (id=637): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)="e751dd8f06091c46b225d5c4870c12", 0xf}], 0x1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x0, 0xff, 0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f00000000c0)={0x11, 0xf8, r8, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r7, &(0x7f0000000100)={0x11, 0x4, r8}, 0x14) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000069000010000000000100000018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000000400000620000001000000095", @ANYRES64=r7], &(0x7f0000000040)='syzkaller\x00', 0xe, 0xfe3, &(0x7f0000001e00)=""/4067, 0x100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff3f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[], 0x0) bind$can_j1939(r3, &(0x7f00000001c0)={0x1d, r5, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r10, 0x8983, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}, [@exit, @generic={0x4, 0x2, 0x1, 0x6, 0x8}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xffea}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 1.265623452s ago: executing program 3 (id=639): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000540)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_DST={0x8, 0x1, @broadcast}]}, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001a00010000000000000000008100001e000000000000000008000f80"], 0x24}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030004000500e1000cee0203001a000000", 0x33a) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4000, r1}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010300002000000000000100000004000180100002800c000180080001000663"], 0x28}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000070000000600000000000000", @ANYRES32=0x1, @ANYBLOB="00000000b10d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@loopback, @in6=@mcast1, 0x4e22, 0x0, 0x0, 0x3fff}, {@in=@remote, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0xfffffffc, 0x0, 0xa, 0x4, 0x0, 0x2f}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4054}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4) r13 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r13, 0x84, 0x7d, &(0x7f0000000280), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050a01020000000000000000010020000c0002400000000000c2ac1344cd57133b22576d4ee00000010900010073797a3100000000040004802c000000000a01040000000000000000070000020900010073797a30000000000c0004400000000000000002140000001100010000000000000000000000000a"], 0xe4}}, 0x200000d4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x9, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r3], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) 906.514799ms ago: executing program 1 (id=640): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x88, 0x1, &(0x7f0000000080), 0x4) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xd, 0x0, &(0x7f00000006c0)="259e8c4cda791ca5e7cc68a6a1", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x2}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000520001000000ecbe0000000002"], 0x1c}}, 0x20000000) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x3, 0x92, [0x7, 0x1344, 0x2, 0x0, 0x1, 0x6], 0xa, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000180)=""/146}, &(0x7f0000000000)=0x78) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x3c, r4, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 784.344937ms ago: executing program 3 (id=641): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x120, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000660000000800", @ANYRES32=r2], 0x2c}}, 0x0) 748.404111ms ago: executing program 1 (id=642): socket$netlink(0x10, 0x3, 0x8000000004) 626.667256ms ago: executing program 0 (id=643): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r2, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x0) 558.869121ms ago: executing program 1 (id=644): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8000001}, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000000f1401000bbd7000fcdbdf25080045"], 0x18}, 0x1, 0x0, 0x0, 0x4000890}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000005", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00'}, 0x10) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x60}}, 0x0) 555.627921ms ago: executing program 3 (id=645): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000006000000000000000000000085"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0700000000000000bcf7d1725c60", 0x0, 0x808005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) 502.913662ms ago: executing program 0 (id=646): r0 = socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0069ae000000000000000023"], 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPVS_CMD_SET_CONFIG(r2, 0x0, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) sendmsg$nl_generic(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0c0100002600000126bd7000fedbdf250100000004002d80c100db8004004f800400ba8004000280fc044f2ab26d6dc73728ab01c5d5089f698caadaa646b84a267a2627ac84a68533decbad38ca9310fea014008b00fc010000000000000000000000000001040041805f9cf9a065d8f44214d44a6a04002680f2d525268f9b7449c41fe2557090ad5dfdc3b00daa4f9c5dfda9c157283c20056e267f806081905b77613fcc1facac396b2129325164178ef845ddd599a3dafc08002800e00000028692f072daa8b97e854fd4abbbc451b0334d5798ec0d3700000008006b00", @ANYRES32=r3, @ANYBLOB="7335bfbaf518235c42e257efd681cd56b087beb17cebb9c8040030800c003f000a00000000000000"], 0x10c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40840) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'ip6gretap0\x00', {0x2, 0x4e24, @broadcast}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000800000015000300", @ANYRES32=r7], 0x34}}, 0x0) 394.105731ms ago: executing program 3 (id=647): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='pmap_register\x00', r3, 0x0, 0x1}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@broadcast, @dev, @val, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00=$', 0x28, 0x3a, 0x0, @remote, @empty, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @private2}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x12, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b688a8", 0x0, 0x739d, 0x0, 0x20}, 0x28) write$tun(0xffffffffffffffff, &(0x7f00000007c0)={@val={0x8, 0xf8}, @val={0x7, 0x0, 0x0, 0x0, 0x20}, @ipv4=@tcp={{0x5, 0x4, 0x1, 0x1, 0x28, 0x65, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @remote}, {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20}}}}, 0x36) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00010c000000000000000007000000", @ANYRES32, @ANYBLOB="8000a2000a000200aaaaaaaaaabb000008000f"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0xffff}, {0x10, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 190.778704ms ago: executing program 1 (id=648): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400e0ffb7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfca804a0, 0x62, 0x0, &(0x7f0000000900)="b80022ab98d1db1b883e04000000821c41888a26cbde7103060c317fd064e7be52cc66ba3ee509686a1e2c58344db640e1164430c16ce7d3c52f9285a99cd783b8e609ec782f15a0ab6094d925155d328b7ae35377835f4421eac373164a36894059", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) 107.892979ms ago: executing program 1 (id=649): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000540)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_DST={0x8, 0x1, @broadcast}]}, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001a00010000000000000000008100001e000000000000000008000f80"], 0x24}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030004000500e1000cee0203001a000000", 0x33a) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4000, r1}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010300002000000000000100000004000180100002800c000180080001000663"], 0x28}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000070000000600000000000000", @ANYRES32=0x1, @ANYBLOB="00000000b10d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@loopback, @in6=@mcast1, 0x4e22, 0x0, 0x0, 0x3fff}, {@in=@remote, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0xfffffffc, 0x0, 0xa, 0x4, 0x0, 0x2f}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4054}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4) r13 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r13, 0x84, 0x7d, &(0x7f0000000280), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050a01020000000000000000010020000c0002400000000000c2ac1344cd57133b22576d4ee00000010900010073797a3100000000040004802c000000000a01040000000000000000070000020900010073797a30000000000c0004400000000000000002140000001100010000000000000000000000000a"], 0xe4}}, 0x200000d4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x9, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r3], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) 43.331091ms ago: executing program 0 (id=650): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x88, 0x1, &(0x7f0000000080), 0x4) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xd, 0x0, &(0x7f00000006c0)="259e8c4cda791ca5e7cc68a6a1", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x2}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000520001000000ecbe0000000002"], 0x1c}}, 0x20000000) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x3, 0x92, [0x7, 0x1344, 0x2, 0x0, 0x1, 0x6], 0xa, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000180)=""/146}, &(0x7f0000000000)=0x78) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x3c, r4, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 0s ago: executing program 3 (id=651): r0 = socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0069ae000000000000000023"], 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPVS_CMD_SET_CONFIG(r2, 0x0, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) sendmsg$nl_generic(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0c0100002600000126bd7000fedbdf250100000004002d80c100db8004004f800400ba8004000280fc044f2ab26d6dc73728ab01c5d5089f698caadaa646b84a267a2627ac84a68533decbad38ca9310fea014008b00fc010000000000000000000000000001040041805f9cf9a065d8f44214d44a6a04002680f2d525268f9b7449c41fe2557090ad5dfdc3b00daa4f9c5dfda9c157283c20056e267f806081905b77613fcc1facac396b2129325164178ef845ddd599a3dafc08002800e00000028692f072daa8b97e854fd4abbbc451b0334d5798ec0d3700000008006b00", @ANYRES32=r3, @ANYBLOB="7335bfbaf518235c42e257efd681cd56b087beb17cebb9c8040030800c003f000a00000000000000"], 0x10c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40840) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'ip6gretap0\x00', {0x2, 0x4e24, @broadcast}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000800000015000300", @ANYRES32=r7], 0x34}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.147' (ED25519) to the list of known hosts. [ 57.837928][ T5820] cgroup: Unknown subsys name 'net' [ 58.068985][ T5820] cgroup: Unknown subsys name 'cpuset' [ 58.076752][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.344621][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.500100][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.508581][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.516356][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.525233][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.533746][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.541919][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.549848][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.556902][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.564933][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.566601][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.572355][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.579779][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.588509][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.595414][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.600963][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.610843][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.615594][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.622718][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.637126][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.644527][ T5147] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.644952][ T5848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.651578][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.660800][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.667514][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.674352][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.680969][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.697139][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.713883][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.734445][ T5847] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.744548][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.118092][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 62.163112][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 62.189079][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 62.283032][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 62.360574][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 62.370868][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.378876][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.386467][ T5830] bridge_slave_0: entered allmulticast mode [ 62.393489][ T5830] bridge_slave_0: entered promiscuous mode [ 62.426857][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.434042][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.441485][ T5831] bridge_slave_0: entered allmulticast mode [ 62.448226][ T5831] bridge_slave_0: entered promiscuous mode [ 62.455118][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.462416][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.469638][ T5830] bridge_slave_1: entered allmulticast mode [ 62.476686][ T5830] bridge_slave_1: entered promiscuous mode [ 62.502234][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.509755][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.517099][ T5831] bridge_slave_1: entered allmulticast mode [ 62.523629][ T5831] bridge_slave_1: entered promiscuous mode [ 62.547454][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.554565][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.561918][ T5834] bridge_slave_0: entered allmulticast mode [ 62.569021][ T5834] bridge_slave_0: entered promiscuous mode [ 62.609715][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.620300][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.628090][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.635297][ T5834] bridge_slave_1: entered allmulticast mode [ 62.642232][ T5834] bridge_slave_1: entered promiscuous mode [ 62.667740][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.674870][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.682190][ T5832] bridge_slave_0: entered allmulticast mode [ 62.689757][ T5832] bridge_slave_0: entered promiscuous mode [ 62.706990][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.736325][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.743445][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.751638][ T5832] bridge_slave_1: entered allmulticast mode [ 62.758724][ T5832] bridge_slave_1: entered promiscuous mode [ 62.767410][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.779282][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.800837][ T5830] team0: Port device team_slave_0 added [ 62.809634][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.821552][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.869157][ T5830] team0: Port device team_slave_1 added [ 62.883586][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.890937][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.898505][ T5838] bridge_slave_0: entered allmulticast mode [ 62.905107][ T5838] bridge_slave_0: entered promiscuous mode [ 62.923631][ T5831] team0: Port device team_slave_0 added [ 62.945814][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.953010][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.960661][ T5838] bridge_slave_1: entered allmulticast mode [ 62.967814][ T5838] bridge_slave_1: entered promiscuous mode [ 62.977060][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.987762][ T5831] team0: Port device team_slave_1 added [ 62.995163][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.010852][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.018140][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.044245][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.059182][ T5834] team0: Port device team_slave_0 added [ 63.096079][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.103051][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.129584][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.143244][ T5834] team0: Port device team_slave_1 added [ 63.196531][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.209675][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.225146][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.235644][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.262177][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.275732][ T5832] team0: Port device team_slave_0 added [ 63.283603][ T5832] team0: Port device team_slave_1 added [ 63.290502][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.297527][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.323659][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.336428][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.343392][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.369589][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.395504][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.402573][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.428758][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.469867][ T5838] team0: Port device team_slave_0 added [ 63.499928][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.507198][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.533618][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.545707][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.552673][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.578950][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.592195][ T5838] team0: Port device team_slave_1 added [ 63.609011][ T5830] hsr_slave_0: entered promiscuous mode [ 63.615146][ T5830] hsr_slave_1: entered promiscuous mode [ 63.649884][ T5831] hsr_slave_0: entered promiscuous mode [ 63.656206][ T5831] hsr_slave_1: entered promiscuous mode [ 63.662224][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.670308][ T5831] Cannot create hsr debugfs directory [ 63.690778][ T5834] hsr_slave_0: entered promiscuous mode [ 63.697605][ T5847] Bluetooth: hci0: command tx timeout [ 63.698553][ T5834] hsr_slave_1: entered promiscuous mode [ 63.711148][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.719083][ T5834] Cannot create hsr debugfs directory [ 63.752912][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.761237][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.787954][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.792453][ T5846] Bluetooth: hci1: command tx timeout [ 63.798553][ T54] Bluetooth: hci3: command tx timeout [ 63.804068][ T5841] Bluetooth: hci4: command tx timeout [ 63.812609][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.815730][ T5847] Bluetooth: hci2: command tx timeout [ 63.822348][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.853630][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.919373][ T5832] hsr_slave_0: entered promiscuous mode [ 63.925379][ T5832] hsr_slave_1: entered promiscuous mode [ 63.931922][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.939895][ T5832] Cannot create hsr debugfs directory [ 63.999405][ T5838] hsr_slave_0: entered promiscuous mode [ 64.006377][ T5838] hsr_slave_1: entered promiscuous mode [ 64.012279][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.020505][ T5838] Cannot create hsr debugfs directory [ 64.288992][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.310951][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.323611][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.349975][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.387031][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.398153][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.411460][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.430690][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.475280][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.518998][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.529320][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.553014][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.617398][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.629641][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.650805][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.665251][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.678936][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.732112][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.757258][ T1904] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.764533][ T1904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.776966][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.786448][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.819020][ T1904] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.826159][ T1904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.840910][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.853780][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.870055][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.921180][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.970666][ T1076] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.977820][ T1076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.000084][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.032419][ T1904] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.039611][ T1904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.060552][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.109932][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.127387][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.134498][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.153397][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.160555][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.203037][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.260723][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.276885][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.292821][ T1904] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.299934][ T1904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.313673][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.329133][ T3590] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.336289][ T3590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.360229][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.404228][ T1904] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.411412][ T1904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.472524][ T1904] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.479710][ T1904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.572663][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.607906][ T5830] veth0_vlan: entered promiscuous mode [ 65.664395][ T5830] veth1_vlan: entered promiscuous mode [ 65.769921][ T5834] veth0_vlan: entered promiscuous mode [ 65.776785][ T5847] Bluetooth: hci0: command tx timeout [ 65.802141][ T5834] veth1_vlan: entered promiscuous mode [ 65.832232][ T5830] veth0_macvtap: entered promiscuous mode [ 65.850133][ T5830] veth1_macvtap: entered promiscuous mode [ 65.856487][ T5846] Bluetooth: hci2: command tx timeout [ 65.861919][ T5846] Bluetooth: hci1: command tx timeout [ 65.867450][ T5841] Bluetooth: hci4: command tx timeout [ 65.873098][ T5847] Bluetooth: hci3: command tx timeout [ 65.883365][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.930188][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.951174][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.961577][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.010759][ T5834] veth0_macvtap: entered promiscuous mode [ 66.022425][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.038954][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.049411][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.058904][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.072044][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.087191][ T5834] veth1_macvtap: entered promiscuous mode [ 66.144319][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.166507][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.182399][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.212477][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.223296][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.234796][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.249049][ T5832] veth0_vlan: entered promiscuous mode [ 66.272320][ T5838] veth0_vlan: entered promiscuous mode [ 66.293257][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.302275][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.311247][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.320125][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.343593][ T5832] veth1_vlan: entered promiscuous mode [ 66.364338][ T5838] veth1_vlan: entered promiscuous mode [ 66.438766][ T1076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.448863][ T1076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.454821][ T5831] veth0_vlan: entered promiscuous mode [ 66.498462][ T5838] veth0_macvtap: entered promiscuous mode [ 66.517660][ T5838] veth1_macvtap: entered promiscuous mode [ 66.528528][ T5832] veth0_macvtap: entered promiscuous mode [ 66.539666][ T5831] veth1_vlan: entered promiscuous mode [ 66.558448][ T5832] veth1_macvtap: entered promiscuous mode [ 66.571476][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.582751][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.585585][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.593885][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.610738][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.621310][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.632497][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.652242][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.670838][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.681256][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.694851][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.712304][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.744173][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.756025][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.766369][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.777027][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.786895][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.797578][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.811743][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.827031][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.858106][ T5831] veth0_macvtap: entered promiscuous mode [ 66.867941][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.879363][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.895493][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.911514][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.921562][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.935867][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.953449][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.964217][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.983355][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.995709][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.004450][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.024618][ T1076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.042570][ T1076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.053405][ T5831] veth1_macvtap: entered promiscuous mode [ 67.091328][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.098166][ T5920] FAULT_INJECTION: forcing a failure. [ 67.098166][ T5920] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 67.106718][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.113649][ T5920] CPU: 0 UID: 0 PID: 5920 Comm: syz.0.6 Not tainted 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 [ 67.113669][ T5920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 67.113682][ T5920] Call Trace: [ 67.113688][ T5920] [ 67.113694][ T5920] dump_stack_lvl+0x241/0x360 [ 67.113726][ T5920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 67.113744][ T5920] ? __pfx__printk+0x10/0x10 [ 67.113761][ T5920] ? __pfx_lock_release+0x10/0x10 [ 67.113789][ T5920] should_fail_ex+0x40a/0x550 [ 67.113814][ T5920] _copy_from_iter+0x1df/0x1c40 [ 67.113831][ T5920] ? __virt_addr_valid+0x183/0x530 [ 67.113848][ T5920] ? __pfx_lock_release+0x10/0x10 [ 67.113874][ T5920] ? __alloc_skb+0x28f/0x440 [ 67.113889][ T5920] ? __pfx__copy_from_iter+0x10/0x10 [ 67.113914][ T5920] ? __virt_addr_valid+0x183/0x530 [ 67.113929][ T5920] ? __virt_addr_valid+0x183/0x530 [ 67.113942][ T5920] ? __virt_addr_valid+0x45f/0x530 [ 67.113957][ T5920] ? __phys_addr_symbol+0x2f/0x70 [ 67.113970][ T5920] ? __check_object_size+0x47a/0x730 [ 67.113994][ T5920] netlink_sendmsg+0x742/0xcb0 [ 67.114025][ T5920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.114048][ T5920] ? aa_sock_msg_perm+0x91/0x160 [ 67.114074][ T5920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.114092][ T5920] __sock_sendmsg+0x221/0x270 [ 67.114114][ T5920] ____sys_sendmsg+0x53a/0x860 [ 67.114137][ T5920] ? __pfx_____sys_sendmsg+0x10/0x10 [ 67.114151][ T5920] ? __fget_files+0x2a/0x410 [ 67.114174][ T5920] ? __fget_files+0x2a/0x410 [ 67.114201][ T5920] __sys_sendmsg+0x269/0x350 [ 67.114221][ T5920] ? __pfx___sys_sendmsg+0x10/0x10 [ 67.114248][ T5920] ? do_sys_openat2+0x17a/0x1d0 [ 67.114289][ T5920] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 67.114311][ T5920] ? do_syscall_64+0x100/0x230 [ 67.114332][ T5920] ? do_syscall_64+0xb6/0x230 [ 67.114351][ T5920] do_syscall_64+0xf3/0x230 [ 67.114368][ T5920] ? clear_bhb_loop+0x35/0x90 [ 67.114391][ T5920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.114413][ T5920] RIP: 0033:0x7ff5a1f8d169 [ 67.114431][ T5920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.114444][ T5920] RSP: 002b:00007ff5a2e8c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.114461][ T5920] RAX: ffffffffffffffda RBX: 00007ff5a21a5fa0 RCX: 00007ff5a1f8d169 [ 67.114473][ T5920] RDX: 00000000040040c0 RSI: 0000400000000000 RDI: 0000000000000003 [ 67.114483][ T5920] RBP: 00007ff5a2e8c090 R08: 0000000000000000 R09: 0000000000000000 [ 67.114492][ T5920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.114501][ T5920] R13: 0000000000000000 R14: 00007ff5a21a5fa0 R15: 00007ffd0e626918 [ 67.114524][ T5920] [ 67.395629][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.404359][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.481817][ T1076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.483937][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.492304][ T1076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.502068][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.519981][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.531422][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.541976][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.552545][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.562806][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.573416][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.584837][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.601349][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.612496][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.623711][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.634339][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.644245][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.654788][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.665274][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.682319][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.682361][ T5928] syz.0.9 uses obsolete (PF_INET,SOCK_PACKET) [ 67.694412][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.750738][ T5831] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.767896][ T5831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.785236][ T5831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.796302][ T5831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.856273][ T5847] Bluetooth: hci0: command tx timeout [ 67.930223][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.939269][ T5847] Bluetooth: hci4: command tx timeout [ 67.945187][ T5846] Bluetooth: hci2: command tx timeout [ 67.945218][ T54] Bluetooth: hci1: command tx timeout [ 67.957812][ T5841] Bluetooth: hci3: command tx timeout [ 67.959375][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.045127][ T5936] Cannot find set identified by id 0 to match [ 68.080233][ T1076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.092531][ T3590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.109076][ T1076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.134472][ T3590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.252264][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.280334][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.309739][ T5944] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11'. [ 68.332291][ T3590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.360167][ T3590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.425330][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.447357][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.449821][ T5948] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.143460][ T5975] bridge0: port 3(hsr0) entered blocking state [ 69.165141][ T5975] bridge0: port 3(hsr0) entered disabled state [ 69.196090][ T5975] hsr0: entered allmulticast mode [ 69.255976][ T5975] hsr_slave_0: entered allmulticast mode [ 69.275804][ T5975] hsr_slave_1: entered allmulticast mode [ 69.293664][ T5981] Illegal XDP return value 4294967294 on prog (id 4) dev N/A, expect packet loss! [ 69.306999][ T5975] hsr0: entered promiscuous mode [ 69.322456][ T5975] bridge0: port 3(hsr0) entered blocking state [ 69.329024][ T5975] bridge0: port 3(hsr0) entered forwarding state [ 69.519549][ T5989] Zero length message leads to an empty skb [ 69.611309][ T5978] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.833842][ T5992] netlink: 'syz.2.23': attribute type 2 has an invalid length. [ 69.862798][ T5995] bond0: option arp_all_targets: invalid value (254) [ 69.936833][ T5841] Bluetooth: hci0: command tx timeout [ 70.001030][ T5978] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.016281][ T5841] Bluetooth: hci3: command tx timeout [ 70.021747][ T5841] Bluetooth: hci1: command tx timeout [ 70.027268][ T54] Bluetooth: hci2: command tx timeout [ 70.028887][ T5846] Bluetooth: hci4: command tx timeout [ 70.580245][ T5978] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.688917][ T6026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.32'. [ 70.851403][ T5978] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.942323][ T6031] tipc: Enabling of bearer rejected, failed to enable media [ 70.982672][ T6035] netlink: 'syz.2.37': attribute type 2 has an invalid length. [ 71.089292][ T5978] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.169574][ T5978] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.282135][ T6046] netlink: 16 bytes leftover after parsing attributes in process `syz.2.40'. [ 71.323374][ T6045] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.410151][ T6045] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.518070][ T6045] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.621322][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.629988][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.646447][ T6045] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.680309][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.43'. [ 71.681120][ T6055] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 71.752043][ T6045] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.792492][ T6045] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.835976][ T6045] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.864836][ T6045] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.911270][ T6055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 72.177562][ T6062] netlink: 36 bytes leftover after parsing attributes in process `syz.0.45'. [ 72.219311][ T6065] netlink: 'syz.2.46': attribute type 3 has an invalid length. [ 72.234508][ T6065] netlink: 3 bytes leftover after parsing attributes in process `syz.2.46'. [ 72.332183][ T6068] netlink: 16 bytes leftover after parsing attributes in process `syz.2.46'. [ 72.979883][ T6091] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 73.202718][ T6100] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 73.224763][ T6100] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 73.251117][ T6104] netlink: 'syz.3.56': attribute type 1 has an invalid length. [ 73.263410][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 73.273441][ T6104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.56'. [ 73.451240][ T6111] netlink: 'syz.3.57': attribute type 2 has an invalid length. [ 73.668429][ T6118] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.801398][ T6120] FAULT_INJECTION: forcing a failure. [ 73.801398][ T6120] name failslab, interval 1, probability 0, space 0, times 0 [ 73.816352][ T6120] CPU: 1 UID: 0 PID: 6120 Comm: syz.3.61 Not tainted 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 [ 73.816375][ T6120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 73.816383][ T6120] Call Trace: [ 73.816388][ T6120] [ 73.816394][ T6120] dump_stack_lvl+0x241/0x360 [ 73.816415][ T6120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.816429][ T6120] ? __pfx__printk+0x10/0x10 [ 73.816443][ T6120] ? kmem_cache_alloc_noprof+0x48/0x380 [ 73.816461][ T6120] ? __pfx___might_resched+0x10/0x10 [ 73.816480][ T6120] should_fail_ex+0x40a/0x550 [ 73.816502][ T6120] should_failslab+0xac/0x100 [ 73.816520][ T6120] ? skb_clone+0x20c/0x390 [ 73.816533][ T6120] kmem_cache_alloc_noprof+0x70/0x380 [ 73.816548][ T6120] ? __pfx_lock_release+0x10/0x10 [ 73.816569][ T6120] skb_clone+0x20c/0x390 [ 73.816586][ T6120] pfkey_broadcast_one+0x99/0x330 [ 73.816604][ T6120] ? pfkey_broadcast+0x45/0x400 [ 73.816614][ T6120] pfkey_broadcast+0x3ca/0x400 [ 73.816626][ T6120] ? pfkey_broadcast+0x45/0x400 [ 73.816641][ T6120] pfkey_sendmsg+0xe27/0x1070 [ 73.816665][ T6120] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 73.816692][ T6120] ? __pfx_aa_sk_perm+0x10/0x10 [ 73.816710][ T6120] ? __import_iovec+0x582/0x830 [ 73.816728][ T6120] ? aa_sock_msg_perm+0x91/0x160 [ 73.816751][ T6120] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 73.816762][ T6120] __sock_sendmsg+0x221/0x270 [ 73.816781][ T6120] ____sys_sendmsg+0x53a/0x860 [ 73.816802][ T6120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 73.816814][ T6120] ? __fget_files+0x2a/0x410 [ 73.816835][ T6120] ? __fget_files+0x2a/0x410 [ 73.816859][ T6120] __sys_sendmsg+0x269/0x350 [ 73.816880][ T6120] ? __pfx___sys_sendmsg+0x10/0x10 [ 73.816905][ T6120] ? do_sys_openat2+0x17a/0x1d0 [ 73.816954][ T6120] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 73.816977][ T6120] ? do_syscall_64+0x100/0x230 [ 73.816998][ T6120] ? do_syscall_64+0xb6/0x230 [ 73.817017][ T6120] do_syscall_64+0xf3/0x230 [ 73.817035][ T6120] ? clear_bhb_loop+0x35/0x90 [ 73.817057][ T6120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.817080][ T6120] RIP: 0033:0x7f37e7f8d169 [ 73.817094][ T6120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.817107][ T6120] RSP: 002b:00007f37e8d00038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.817124][ T6120] RAX: ffffffffffffffda RBX: 00007f37e81a5fa0 RCX: 00007f37e7f8d169 [ 73.817136][ T6120] RDX: 0000000000000000 RSI: 00004000005f5000 RDI: 0000000000000003 [ 73.817145][ T6120] RBP: 00007f37e8d00090 R08: 0000000000000000 R09: 0000000000000000 [ 73.817162][ T6120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.817171][ T6120] R13: 0000000000000000 R14: 00007f37e81a5fa0 R15: 00007fff718c1e78 [ 73.817193][ T6120] [ 74.604771][ T6141] netlink: 'syz.4.69': attribute type 2 has an invalid length. [ 74.909117][ T6153] FAULT_INJECTION: forcing a failure. [ 74.909117][ T6153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.941615][ T6153] CPU: 0 UID: 0 PID: 6153 Comm: syz.4.74 Not tainted 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 [ 74.941642][ T6153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 74.941652][ T6153] Call Trace: [ 74.941658][ T6153] [ 74.941665][ T6153] dump_stack_lvl+0x241/0x360 [ 74.941690][ T6153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.941707][ T6153] ? __pfx__printk+0x10/0x10 [ 74.941725][ T6153] ? __pfx_lock_release+0x10/0x10 [ 74.941756][ T6153] should_fail_ex+0x40a/0x550 [ 74.941791][ T6153] _copy_from_iter+0x1df/0x1c40 [ 74.941810][ T6153] ? __virt_addr_valid+0x183/0x530 [ 74.941827][ T6153] ? __pfx_lock_release+0x10/0x10 [ 74.941854][ T6153] ? __alloc_skb+0x28f/0x440 [ 74.941870][ T6153] ? __pfx__copy_from_iter+0x10/0x10 [ 74.941888][ T6153] ? __virt_addr_valid+0x183/0x530 [ 74.941901][ T6153] ? __virt_addr_valid+0x183/0x530 [ 74.941912][ T6153] ? __virt_addr_valid+0x45f/0x530 [ 74.941927][ T6153] ? __phys_addr_symbol+0x2f/0x70 [ 74.941940][ T6153] ? __check_object_size+0x47a/0x730 [ 74.941964][ T6153] netlink_sendmsg+0x742/0xcb0 [ 74.941997][ T6153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.942021][ T6153] ? aa_sock_msg_perm+0x91/0x160 [ 74.942048][ T6153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.942067][ T6153] __sock_sendmsg+0x221/0x270 [ 74.942091][ T6153] ____sys_sendmsg+0x53a/0x860 [ 74.942115][ T6153] ? __pfx_____sys_sendmsg+0x10/0x10 [ 74.942130][ T6153] ? __fget_files+0x2a/0x410 [ 74.942153][ T6153] ? __fget_files+0x2a/0x410 [ 74.942181][ T6153] __sys_sendmsg+0x269/0x350 [ 74.942203][ T6153] ? __pfx___sys_sendmsg+0x10/0x10 [ 74.942232][ T6153] ? do_sys_openat2+0x17a/0x1d0 [ 74.942276][ T6153] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 74.942300][ T6153] ? do_syscall_64+0x100/0x230 [ 74.942322][ T6153] ? do_syscall_64+0xb6/0x230 [ 74.942342][ T6153] do_syscall_64+0xf3/0x230 [ 74.942360][ T6153] ? clear_bhb_loop+0x35/0x90 [ 74.942384][ T6153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.942403][ T6153] RIP: 0033:0x7f7c0cd8d169 [ 74.942418][ T6153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.942431][ T6153] RSP: 002b:00007f7c0db8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.942450][ T6153] RAX: ffffffffffffffda RBX: 00007f7c0cfa5fa0 RCX: 00007f7c0cd8d169 [ 74.942462][ T6153] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000003 [ 74.942472][ T6153] RBP: 00007f7c0db8d090 R08: 0000000000000000 R09: 0000000000000000 [ 74.942482][ T6153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.942490][ T6153] R13: 0000000000000000 R14: 00007f7c0cfa5fa0 R15: 00007fff2a7d9c08 [ 74.942516][ T6153] [ 74.992553][ T6159] netlink: 'syz.2.77': attribute type 10 has an invalid length. [ 75.046964][ T6157] gretap0: entered promiscuous mode [ 75.109829][ T6161] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 75.125436][ T6157] macsec1: entered promiscuous mode [ 75.278383][ T6157] gretap0: left promiscuous mode [ 75.351658][ T6159] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.407575][ T6159] bond0: (slave team0): Enslaving as an active interface with an up link [ 75.564398][ T6168] netlink: 'syz.4.80': attribute type 3 has an invalid length. [ 75.593597][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.80'. [ 75.940657][ T6174] --map-set only usable from mangle table [ 76.071200][ T6192] gretap1: entered promiscuous mode [ 76.128506][ T6192] gretap1: entered allmulticast mode [ 76.316644][ T6198] xt_addrtype: ipv6 does not support BROADCAST matching [ 76.699803][ T6210] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 76.759121][ T6210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 76.852147][ T6215] netlink: 52 bytes leftover after parsing attributes in process `syz.1.95'. [ 77.647976][ T6229] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 77.762739][ T6233] xt_hashlimit: size too large, truncated to 1048576 [ 77.884874][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 78.203974][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.108'. [ 78.237852][ T6242] Bluetooth: MGMT ver 1.23 [ 78.245679][ T6241] netlink: 'syz.0.108': attribute type 30 has an invalid length. [ 78.324633][ T6241] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.333289][ T6241] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.341717][ T6241] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.350053][ T6241] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.434956][ T6229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.651418][ T6256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'. [ 78.735294][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'. [ 78.775038][ T6257] netlink: 'syz.0.110': attribute type 6 has an invalid length. [ 78.789885][ T6257] netlink: 'syz.0.110': attribute type 11 has an invalid length. [ 79.137659][ T6268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.114'. [ 79.226004][ T6271] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 79.766383][ T6282] netlink: 256 bytes leftover after parsing attributes in process `syz.0.119'. [ 79.852802][ T6282] netlink: 72 bytes leftover after parsing attributes in process `syz.0.119'. [ 79.961995][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.119'. [ 80.161261][ T6271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.760722][ T6311] gretap1: entered promiscuous mode [ 80.772497][ T6311] gretap1: entered allmulticast mode [ 81.242551][ T6321] __nla_validate_parse: 1 callbacks suppressed [ 81.242569][ T6321] netlink: 280 bytes leftover after parsing attributes in process `syz.1.129'. [ 81.317950][ T6321] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 81.547404][ T6336] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 81.701001][ T6341] netlink: 'syz.4.137': attribute type 10 has an invalid length. [ 81.745947][ T6341] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 81.835840][ T6341] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 81.862763][ T974] cfg80211: failed to load regulatory.db [ 81.888753][ T6336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.961910][ T6341] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 82.468694][ T6369] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 82.482410][ T25] IPVS: starting estimator thread 0... [ 82.595735][ T6371] IPVS: using max 23 ests per chain, 55200 per kthread [ 82.835596][ T6380] netlink: 'syz.1.148': attribute type 3 has an invalid length. [ 82.849121][ T6380] netlink: 3 bytes leftover after parsing attributes in process `syz.1.148'. [ 83.238049][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'. [ 83.504886][ T6407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.158'. [ 83.546115][ T6407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.158'. [ 83.907849][ T6419] netlink: 'syz.0.163': attribute type 3 has an invalid length. [ 83.945996][ T6419] netlink: 3 bytes leftover after parsing attributes in process `syz.0.163'. [ 84.050396][ T6425] netlink: 'syz.3.164': attribute type 1 has an invalid length. [ 84.071277][ T6429] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 84.154980][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.167'. [ 84.261327][ T6425] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.529580][ T6453] netlink: 'syz.0.174': attribute type 11 has an invalid length. [ 85.285215][ T6485] netlink: 16 bytes leftover after parsing attributes in process `syz.1.186'. [ 85.443903][ T6493] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 85.493517][ T6496] netlink: 'syz.4.190': attribute type 1 has an invalid length. [ 85.511158][ T6496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.587793][ T6497] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.612070][ T6497] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.663643][ T6497] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.676967][ T6497] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.762216][ T6497] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.780871][ T6493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.805878][ T6497] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.881699][ T6497] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.906765][ T6497] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.233647][ T6519] netlink: 16 bytes leftover after parsing attributes in process `syz.2.198'. [ 86.250896][ T6497] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.281095][ T6497] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.385239][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.433806][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.439805][ T6497] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.463644][ T6497] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.514133][ T6497] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.547230][ T6497] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.581777][ T6497] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.590316][ T6497] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.923700][ T6544] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 87.327031][ T6544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.741983][ T6573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.218'. [ 88.164537][ T6596] netlink: 16 bytes leftover after parsing attributes in process `syz.2.227'. [ 88.254195][ T6598] gretap1: entered promiscuous mode [ 88.262657][ T6598] gretap1: entered allmulticast mode [ 88.327335][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.229'. [ 88.344709][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.229'. [ 88.387493][ T6601] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 88.403268][ T6601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.554049][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 88.574221][ T6611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.233'. [ 88.624236][ T6615] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 88.775768][ T6621] netlink: 'syz.3.236': attribute type 3 has an invalid length. [ 88.783475][ T6621] netlink: 3 bytes leftover after parsing attributes in process `syz.3.236'. [ 88.807349][ T6622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.237'. [ 88.864088][ T6621] netlink: 16 bytes leftover after parsing attributes in process `syz.3.236'. [ 89.138972][ T6615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.262548][ T6633] netlink: 'syz.1.242': attribute type 3 has an invalid length. [ 89.305737][ T6633] netlink: 3 bytes leftover after parsing attributes in process `syz.1.242'. [ 89.632868][ T6652] netlink: 'syz.1.248': attribute type 2 has an invalid length. [ 89.826073][ T6665] --map-set only usable from mangle table [ 90.037060][ T6669] nftables ruleset with unbound set [ 90.184642][ T6677] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 90.198999][ T6677] gretap2: entered promiscuous mode [ 90.204350][ T6677] gretap2: entered allmulticast mode [ 90.234760][ T6679] netlink: 'syz.2.257': attribute type 3 has an invalid length. [ 90.510641][ T6691] netlink: 'syz.0.260': attribute type 3 has an invalid length. [ 90.747789][ T6704] netlink: 'syz.3.262': attribute type 2 has an invalid length. [ 91.078100][ T6714] Cannot find add_set index 0 as target [ 91.171603][ T6722] netlink: 'syz.0.267': attribute type 3 has an invalid length. [ 91.354029][ T6729] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 91.364680][ T6729] gretap2: entered promiscuous mode [ 91.370123][ T6729] gretap2: entered allmulticast mode [ 91.498888][ T6734] netlink: 'syz.1.273': attribute type 3 has an invalid length. [ 91.664309][ T6739] netlink: 'syz.2.276': attribute type 2 has an invalid length. [ 92.116024][ T6752] --map-set only usable from mangle table [ 92.320724][ T6766] FAULT_INJECTION: forcing a failure. [ 92.320724][ T6766] name failslab, interval 1, probability 0, space 0, times 0 [ 92.336341][ T6765] netlink: 'syz.4.285': attribute type 3 has an invalid length. [ 92.394131][ T6766] CPU: 1 UID: 0 PID: 6766 Comm: syz.3.284 Not tainted 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 [ 92.394155][ T6766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 92.394164][ T6766] Call Trace: [ 92.394171][ T6766] [ 92.394178][ T6766] dump_stack_lvl+0x241/0x360 [ 92.394204][ T6766] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.394221][ T6766] ? __pfx__printk+0x10/0x10 [ 92.394252][ T6766] should_fail_ex+0x40a/0x550 [ 92.394279][ T6766] should_failslab+0xac/0x100 [ 92.394307][ T6766] ? skb_clone+0x20c/0x390 [ 92.394323][ T6766] kmem_cache_alloc_noprof+0x70/0x380 [ 92.394350][ T6766] skb_clone+0x20c/0x390 [ 92.394371][ T6766] __netlink_deliver_tap+0x3c4/0x7f0 [ 92.394404][ T6766] ? netlink_deliver_tap+0x2e/0x1b0 [ 92.394423][ T6766] netlink_deliver_tap+0x19d/0x1b0 [ 92.394444][ T6766] netlink_unicast+0x7c4/0x990 [ 92.394472][ T6766] ? __pfx_netlink_unicast+0x10/0x10 [ 92.394488][ T6766] ? __virt_addr_valid+0x45f/0x530 [ 92.394505][ T6766] ? __phys_addr_symbol+0x2f/0x70 [ 92.394519][ T6766] ? __check_object_size+0x47a/0x730 [ 92.394544][ T6766] netlink_sendmsg+0x8de/0xcb0 [ 92.394577][ T6766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.394602][ T6766] ? aa_sock_msg_perm+0x91/0x160 [ 92.394631][ T6766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.394650][ T6766] __sock_sendmsg+0x221/0x270 [ 92.394672][ T6766] ____sys_sendmsg+0x53a/0x860 [ 92.394702][ T6766] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.394717][ T6766] ? __fget_files+0x2a/0x410 [ 92.394741][ T6766] ? __fget_files+0x2a/0x410 [ 92.394771][ T6766] __sys_sendmsg+0x269/0x350 [ 92.394794][ T6766] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.394824][ T6766] ? do_sys_openat2+0x17a/0x1d0 [ 92.394872][ T6766] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 92.394895][ T6766] ? do_syscall_64+0x100/0x230 [ 92.394918][ T6766] ? do_syscall_64+0xb6/0x230 [ 92.394939][ T6766] do_syscall_64+0xf3/0x230 [ 92.394957][ T6766] ? clear_bhb_loop+0x35/0x90 [ 92.394981][ T6766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.395005][ T6766] RIP: 0033:0x7f37e7f8d169 [ 92.395019][ T6766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.395031][ T6766] RSP: 002b:00007f37e8d00038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.395049][ T6766] RAX: ffffffffffffffda RBX: 00007f37e81a5fa0 RCX: 00007f37e7f8d169 [ 92.395060][ T6766] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000003 [ 92.395070][ T6766] RBP: 00007f37e8d00090 R08: 0000000000000000 R09: 0000000000000000 [ 92.395080][ T6766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.395089][ T6766] R13: 0000000000000000 R14: 00007f37e81a5fa0 R15: 00007fff718c1e78 [ 92.395114][ T6766] [ 92.891599][ T6778] gretap0: entered promiscuous mode [ 92.952566][ T6778] macsec1: entered promiscuous mode [ 92.968126][ T6778] gretap0: left promiscuous mode [ 93.078077][ T6783] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.088565][ T6783] bond0: (slave team0): Enslaving as an active interface with an up link [ 93.112725][ T6783] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 93.276395][ T6796] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 93.315208][ T6796] gretap1: entered promiscuous mode [ 93.332276][ T6796] gretap1: entered allmulticast mode [ 93.387854][ T6803] __nla_validate_parse: 13 callbacks suppressed [ 93.387872][ T6803] netlink: 3 bytes leftover after parsing attributes in process `syz.1.301'. [ 93.559922][ T6805] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.591573][ T6810] FAULT_INJECTION: forcing a failure. [ 93.591573][ T6810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.619763][ T6810] CPU: 0 UID: 0 PID: 6810 Comm: syz.1.303 Not tainted 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 [ 93.619789][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 93.619798][ T6810] Call Trace: [ 93.619803][ T6810] [ 93.619810][ T6810] dump_stack_lvl+0x241/0x360 [ 93.619835][ T6810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.619852][ T6810] ? __pfx__printk+0x10/0x10 [ 93.619870][ T6810] ? __pfx_lock_release+0x10/0x10 [ 93.619900][ T6810] should_fail_ex+0x40a/0x550 [ 93.619925][ T6810] _copy_from_user+0x2d/0xb0 [ 93.619944][ T6810] __sys_bpf+0x1be/0x820 [ 93.619966][ T6810] ? __pfx___sys_bpf+0x10/0x10 [ 93.619994][ T6810] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 93.620017][ T6810] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 93.620040][ T6810] ? do_syscall_64+0x100/0x230 [ 93.620063][ T6810] __x64_sys_bpf+0x7c/0x90 [ 93.620083][ T6810] do_syscall_64+0xf3/0x230 [ 93.620101][ T6810] ? clear_bhb_loop+0x35/0x90 [ 93.620124][ T6810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.620144][ T6810] RIP: 0033:0x7f060f58d169 [ 93.620159][ T6810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.620170][ T6810] RSP: 002b:00007f061036e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 93.620188][ T6810] RAX: ffffffffffffffda RBX: 00007f060f7a5fa0 RCX: 00007f060f58d169 [ 93.620206][ T6810] RDX: 0000000000000048 RSI: 0000400000000600 RDI: 000000000000000a [ 93.620215][ T6810] RBP: 00007f061036e090 R08: 0000000000000000 R09: 0000000000000000 [ 93.620224][ T6810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.620233][ T6810] R13: 0000000000000000 R14: 00007f060f7a5fa0 R15: 00007ffc11a5eb58 [ 93.620255][ T6810] [ 93.885323][ T6805] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.916670][ T6814] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.924261][ T6814] IPv6: NLM_F_CREATE should be set when creating new route [ 93.931625][ T6814] IPv6: NLM_F_CREATE should be set when creating new route [ 93.938942][ T6814] IPv6: NLM_F_CREATE should be set when creating new route [ 94.008382][ T6805] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.231932][ T6805] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.233936][ T6829] FAULT_INJECTION: forcing a failure. [ 94.233936][ T6829] name failslab, interval 1, probability 0, space 0, times 0 [ 94.313400][ T6829] CPU: 0 UID: 0 PID: 6829 Comm: syz.4.309 Not tainted 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 [ 94.313424][ T6829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 94.313433][ T6829] Call Trace: [ 94.313439][ T6829] [ 94.313446][ T6829] dump_stack_lvl+0x241/0x360 [ 94.313471][ T6829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.313488][ T6829] ? __pfx__printk+0x10/0x10 [ 94.313506][ T6829] ? __kmalloc_noprof+0xb5/0x4c0 [ 94.313526][ T6829] ? __pfx___might_resched+0x10/0x10 [ 94.313543][ T6829] ? aa_get_newest_label+0xff/0x6f0 [ 94.313568][ T6829] should_fail_ex+0x40a/0x550 [ 94.313595][ T6829] should_failslab+0xac/0x100 [ 94.313616][ T6829] __kmalloc_noprof+0xdd/0x4c0 [ 94.313634][ T6829] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 94.313651][ T6829] ? apparmor_capable+0x13b/0x1b0 [ 94.313670][ T6829] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 94.313693][ T6829] genl_rcv_msg+0x80b/0xec0 [ 94.313717][ T6829] ? __pfx_genl_rcv_msg+0x10/0x10 [ 94.313760][ T6829] ? __pfx_lock_acquire+0x10/0x10 [ 94.313781][ T6829] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 94.313801][ T6829] ? __pfx_nl80211_del_station+0x10/0x10 [ 94.313819][ T6829] ? __pfx_nl80211_post_doit+0x10/0x10 [ 94.313840][ T6829] ? __pfx___might_resched+0x10/0x10 [ 94.313870][ T6829] netlink_rcv_skb+0x206/0x480 [ 94.313892][ T6829] ? __pfx_genl_rcv_msg+0x10/0x10 [ 94.313909][ T6829] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 94.313941][ T6829] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 94.313974][ T6829] genl_rcv+0x28/0x40 [ 94.313989][ T6829] netlink_unicast+0x7f6/0x990 [ 94.314015][ T6829] ? __pfx_netlink_unicast+0x10/0x10 [ 94.314031][ T6829] ? __virt_addr_valid+0x45f/0x530 [ 94.314046][ T6829] ? __phys_addr_symbol+0x2f/0x70 [ 94.314061][ T6829] ? __check_object_size+0x47a/0x730 [ 94.314085][ T6829] netlink_sendmsg+0x8de/0xcb0 [ 94.314118][ T6829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.314142][ T6829] ? aa_sock_msg_perm+0x91/0x160 [ 94.314177][ T6829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.314196][ T6829] __sock_sendmsg+0x221/0x270 [ 94.314219][ T6829] ____sys_sendmsg+0x53a/0x860 [ 94.314244][ T6829] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.314259][ T6829] ? __fget_files+0x2a/0x410 [ 94.314283][ T6829] ? __fget_files+0x2a/0x410 [ 94.314308][ T6829] __sys_sendmsg+0x269/0x350 [ 94.314328][ T6829] ? __pfx___sys_sendmsg+0x10/0x10 [ 94.314356][ T6829] ? do_sys_openat2+0x17a/0x1d0 [ 94.314398][ T6829] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 94.314419][ T6829] ? do_syscall_64+0x100/0x230 [ 94.314439][ T6829] ? do_syscall_64+0xb6/0x230 [ 94.314458][ T6829] do_syscall_64+0xf3/0x230 [ 94.314475][ T6829] ? clear_bhb_loop+0x35/0x90 [ 94.314497][ T6829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.314516][ T6829] RIP: 0033:0x7f7c0cd8d169 [ 94.314531][ T6829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.314543][ T6829] RSP: 002b:00007f7c0db6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.314559][ T6829] RAX: ffffffffffffffda RBX: 00007f7c0cfa6080 RCX: 00007f7c0cd8d169 [ 94.314570][ T6829] RDX: 0000000004000010 RSI: 0000400000002240 RDI: 0000000000000004 [ 94.314579][ T6829] RBP: 00007f7c0db6c090 R08: 0000000000000000 R09: 0000000000000000 [ 94.314588][ T6829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.314597][ T6829] R13: 0000000000000000 R14: 00007f7c0cfa6080 R15: 00007fff2a7d9c08 [ 94.314623][ T6829] [ 94.382938][ T6834] validate_nla: 4 callbacks suppressed [ 94.382954][ T6834] netlink: 'syz.0.314': attribute type 2 has an invalid length. [ 94.820188][ T6840] netlink: set zone limit has 4 unknown bytes [ 94.830686][ T6805] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.934075][ T6805] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.944607][ T6846] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 94.972507][ T6805] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.176096][ T6805] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.426030][ T6844] IPVS: set_ctl: invalid protocol: 1 172.20.20.47:19997 [ 95.591273][ T6873] FAULT_INJECTION: forcing a failure. [ 95.591273][ T6873] name failslab, interval 1, probability 0, space 0, times 0 [ 95.593548][ T6868] bridge0: port 3(hsr0) entered blocking state [ 95.621277][ T6873] CPU: 0 UID: 0 PID: 6873 Comm: syz.3.325 Not tainted 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 [ 95.621302][ T6873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 95.621313][ T6873] Call Trace: [ 95.621319][ T6873] [ 95.621326][ T6873] dump_stack_lvl+0x241/0x360 [ 95.621352][ T6873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.621370][ T6873] ? __pfx__printk+0x10/0x10 [ 95.621389][ T6873] ? fs_reclaim_acquire+0x93/0x130 [ 95.621408][ T6873] ? __pfx___might_resched+0x10/0x10 [ 95.621432][ T6873] should_fail_ex+0x40a/0x550 [ 95.621460][ T6873] should_failslab+0xac/0x100 [ 95.621482][ T6873] __kmalloc_noprof+0xdd/0x4c0 [ 95.621502][ T6873] ? kstrtouint_from_user+0x128/0x190 [ 95.621518][ T6873] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 95.621540][ T6873] tomoyo_realpath_from_path+0xcf/0x5e0 [ 95.621569][ T6873] tomoyo_path_number_perm+0x239/0x770 [ 95.621590][ T6873] ? __lock_acquire+0x1397/0x2100 [ 95.621615][ T6873] ? tomoyo_path_number_perm+0x209/0x770 [ 95.621638][ T6873] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 95.621699][ T6873] ? __fget_files+0x2a/0x410 [ 95.621743][ T6873] ? __fget_files+0x2a/0x410 [ 95.621769][ T6873] security_file_ioctl+0xc6/0x2a0 [ 95.621791][ T6873] __se_sys_ioctl+0x46/0x170 [ 95.621812][ T6873] do_syscall_64+0xf3/0x230 [ 95.621832][ T6873] ? clear_bhb_loop+0x35/0x90 [ 95.621856][ T6873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.621876][ T6873] RIP: 0033:0x7f37e7f8d169 [ 95.621891][ T6873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.621905][ T6873] RSP: 002b:00007f37e8d00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.621923][ T6873] RAX: ffffffffffffffda RBX: 00007f37e81a5fa0 RCX: 00007f37e7f8d169 [ 95.621934][ T6873] RDX: 0000400000000000 RSI: 00000000000089a2 RDI: 0000000000000004 [ 95.621945][ T6873] RBP: 00007f37e8d00090 R08: 0000000000000000 R09: 0000000000000000 [ 95.621955][ T6873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.621964][ T6873] R13: 0000000000000000 R14: 00007f37e81a5fa0 R15: 00007fff718c1e78 [ 95.621991][ T6873] [ 95.622003][ T6873] ERROR: Out of memory at tomoyo_realpath_from_path. [ 95.634731][ T6868] bridge0: port 3(hsr0) entered disabled state [ 95.878054][ T6868] hsr0: entered allmulticast mode [ 95.883148][ T6868] hsr_slave_0: entered allmulticast mode [ 95.916362][ T6868] hsr_slave_1: entered allmulticast mode [ 95.940266][ T6868] hsr0: entered promiscuous mode [ 95.957030][ T6868] bridge0: port 3(hsr0) entered blocking state [ 95.963405][ T6868] bridge0: port 3(hsr0) entered forwarding state [ 96.199577][ T6891] netlink: 'syz.3.328': attribute type 2 has an invalid length. [ 96.425624][ T6906] netlink: 'syz.2.332': attribute type 3 has an invalid length. [ 96.471785][ T6906] netlink: 3 bytes leftover after parsing attributes in process `syz.2.332'. [ 96.588999][ T6910] netlink: 16 bytes leftover after parsing attributes in process `syz.2.332'. [ 96.620760][ T6914] netlink: 48 bytes leftover after parsing attributes in process `syz.1.333'. [ 96.793695][ T6926] x_tables: duplicate underflow at hook 3 [ 96.850150][ T6931] FAULT_INJECTION: forcing a failure. [ 96.850150][ T6931] name failslab, interval 1, probability 0, space 0, times 0 [ 96.863672][ T6931] CPU: 1 UID: 0 PID: 6931 Comm: syz.0.339 Not tainted 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 [ 96.863694][ T6931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 96.863703][ T6931] Call Trace: [ 96.863709][ T6931] [ 96.863716][ T6931] dump_stack_lvl+0x241/0x360 [ 96.863741][ T6931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.863759][ T6931] ? __pfx__printk+0x10/0x10 [ 96.863778][ T6931] ? __kmalloc_cache_noprof+0x48/0x390 [ 96.863801][ T6931] ? __pfx___might_resched+0x10/0x10 [ 96.863826][ T6931] should_fail_ex+0x40a/0x550 [ 96.863853][ T6931] should_failslab+0xac/0x100 [ 96.863882][ T6931] __kmalloc_cache_noprof+0x70/0x390 [ 96.863901][ T6931] ? alloc_netdev_mqs+0xc7c/0x1210 [ 96.863925][ T6931] alloc_netdev_mqs+0xc7c/0x1210 [ 96.863950][ T6931] ppp_ioctl+0x71b/0x1cd0 [ 96.863979][ T6931] ? __pfx_ppp_ioctl+0x10/0x10 [ 96.864003][ T6931] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 96.864028][ T6931] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 96.864053][ T6931] ? __pfx_ppp_ioctl+0x10/0x10 [ 96.864071][ T6931] __se_sys_ioctl+0xf5/0x170 [ 96.864091][ T6931] do_syscall_64+0xf3/0x230 [ 96.864109][ T6931] ? clear_bhb_loop+0x35/0x90 [ 96.864133][ T6931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.864152][ T6931] RIP: 0033:0x7ff5a1f8d169 [ 96.864166][ T6931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.864179][ T6931] RSP: 002b:00007ff5a2e8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.864196][ T6931] RAX: ffffffffffffffda RBX: 00007ff5a21a5fa0 RCX: 00007ff5a1f8d169 [ 96.864208][ T6931] RDX: 0000400000000080 RSI: 00000000c004743e RDI: 0000000000000003 [ 96.864218][ T6931] RBP: 00007ff5a2e8c090 R08: 0000000000000000 R09: 0000000000000000 [ 96.864228][ T6931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 96.864238][ T6931] R13: 0000000000000000 R14: 00007ff5a21a5fa0 R15: 00007ffd0e626918 [ 96.864264][ T6931] [ 97.138068][ T6937] netlink: 'syz.2.341': attribute type 2 has an invalid length. [ 97.238661][ T6942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.287179][ T6945] FAULT_INJECTION: forcing a failure. [ 97.287179][ T6945] name failslab, interval 1, probability 0, space 0, times 0 [ 97.346380][ T6947] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.357976][ T6945] CPU: 0 UID: 0 PID: 6945 Comm: syz.0.344 Not tainted 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 [ 97.358000][ T6945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 97.358009][ T6945] Call Trace: [ 97.358015][ T6945] [ 97.358022][ T6945] dump_stack_lvl+0x241/0x360 [ 97.358047][ T6945] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.358064][ T6945] ? __pfx__printk+0x10/0x10 [ 97.358082][ T6945] ? fs_reclaim_acquire+0x93/0x130 [ 97.358099][ T6945] ? __pfx___might_resched+0x10/0x10 [ 97.358122][ T6945] should_fail_ex+0x40a/0x550 [ 97.358149][ T6945] should_failslab+0xac/0x100 [ 97.358170][ T6945] __kmalloc_noprof+0xdd/0x4c0 [ 97.358188][ T6945] ? kstrtouint_from_user+0x128/0x190 [ 97.358204][ T6945] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 97.358224][ T6945] tomoyo_realpath_from_path+0xcf/0x5e0 [ 97.358251][ T6945] tomoyo_path_number_perm+0x239/0x770 [ 97.358270][ T6945] ? __lock_acquire+0x1397/0x2100 [ 97.358294][ T6945] ? tomoyo_path_number_perm+0x209/0x770 [ 97.358316][ T6945] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 97.358371][ T6945] ? __fget_files+0x2a/0x410 [ 97.358394][ T6945] ? __fget_files+0x2a/0x410 [ 97.358418][ T6945] security_file_ioctl+0xc6/0x2a0 [ 97.358439][ T6945] __se_sys_ioctl+0x46/0x170 [ 97.358458][ T6945] do_syscall_64+0xf3/0x230 [ 97.358477][ T6945] ? clear_bhb_loop+0x35/0x90 [ 97.358499][ T6945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.358517][ T6945] RIP: 0033:0x7ff5a1f8d169 [ 97.358532][ T6945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.358544][ T6945] RSP: 002b:00007ff5a2e8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.358568][ T6945] RAX: ffffffffffffffda RBX: 00007ff5a21a5fa0 RCX: 00007ff5a1f8d169 [ 97.358580][ T6945] RDX: 0000400000000400 RSI: 0000000000008922 RDI: 0000000000000003 [ 97.358590][ T6945] RBP: 00007ff5a2e8c090 R08: 0000000000000000 R09: 0000000000000000 [ 97.358599][ T6945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.358608][ T6945] R13: 0000000000000000 R14: 00007ff5a21a5fa0 R15: 00007ffd0e626918 [ 97.358632][ T6945] [ 97.358639][ T6945] ERROR: Out of memory at tomoyo_realpath_from_path. [ 97.742965][ T6960] netlink: 'syz.2.348': attribute type 3 has an invalid length. [ 97.823382][ T6960] netlink: 3 bytes leftover after parsing attributes in process `syz.2.348'. [ 97.893053][ T6965] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 97.916518][ T6965] gretap1: entered promiscuous mode [ 97.921804][ T6965] gretap1: entered allmulticast mode [ 97.979498][ T6960] netlink: 16 bytes leftover after parsing attributes in process `syz.2.348'. [ 98.223856][ T6986] netlink: 'syz.2.355': attribute type 2 has an invalid length. [ 98.435333][ T6987] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.526225][ T6987] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.675173][ T6987] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.777841][ T6987] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.810484][ T7011] netlink: 20 bytes leftover after parsing attributes in process `syz.1.362'. [ 98.900458][ T7019] netlink: 44 bytes leftover after parsing attributes in process `syz.2.365'. [ 98.912147][ T7017] FAULT_INJECTION: forcing a failure. [ 98.912147][ T7017] name failslab, interval 1, probability 0, space 0, times 0 [ 98.935904][ T7017] CPU: 0 UID: 0 PID: 7017 Comm: syz.0.364 Not tainted 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 [ 98.935927][ T7017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 98.935937][ T7017] Call Trace: [ 98.935943][ T7017] [ 98.935949][ T7017] dump_stack_lvl+0x241/0x360 [ 98.935973][ T7017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.935990][ T7017] ? __pfx__printk+0x10/0x10 [ 98.936009][ T7017] ? __kmalloc_noprof+0xb5/0x4c0 [ 98.936031][ T7017] ? __pfx___might_resched+0x10/0x10 [ 98.936049][ T7017] ? aa_get_newest_label+0xff/0x6f0 [ 98.936076][ T7017] should_fail_ex+0x40a/0x550 [ 98.936103][ T7017] should_failslab+0xac/0x100 [ 98.936124][ T7017] __kmalloc_noprof+0xdd/0x4c0 [ 98.936144][ T7017] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 98.936161][ T7017] ? apparmor_capable+0x13b/0x1b0 [ 98.936182][ T7017] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 98.936206][ T7017] genl_rcv_msg+0x80b/0xec0 [ 98.936230][ T7017] ? __pfx_genl_rcv_msg+0x10/0x10 [ 98.936273][ T7017] ? __pfx_lock_acquire+0x10/0x10 [ 98.936294][ T7017] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 98.936313][ T7017] ? __pfx_nl80211_set_tx_bitrate_mask+0x10/0x10 [ 98.936335][ T7017] ? __pfx_nl80211_post_doit+0x10/0x10 [ 98.936356][ T7017] ? __pfx___might_resched+0x10/0x10 [ 98.936384][ T7017] netlink_rcv_skb+0x206/0x480 [ 98.936404][ T7017] ? __pfx_genl_rcv_msg+0x10/0x10 [ 98.936421][ T7017] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 98.936451][ T7017] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 98.936481][ T7017] genl_rcv+0x28/0x40 [ 98.936496][ T7017] netlink_unicast+0x7f6/0x990 [ 98.936522][ T7017] ? __pfx_netlink_unicast+0x10/0x10 [ 98.936536][ T7017] ? __virt_addr_valid+0x45f/0x530 [ 98.936549][ T7017] ? __phys_addr_symbol+0x2f/0x70 [ 98.936562][ T7017] ? __check_object_size+0x47a/0x730 [ 98.936580][ T7017] netlink_sendmsg+0x8de/0xcb0 [ 98.936604][ T7017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.936623][ T7017] ? aa_sock_msg_perm+0x91/0x160 [ 98.936647][ T7017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.936665][ T7017] __sock_sendmsg+0x221/0x270 [ 98.936686][ T7017] ____sys_sendmsg+0x53a/0x860 [ 98.936723][ T7017] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.936737][ T7017] ? __fget_files+0x2a/0x410 [ 98.936760][ T7017] ? __fget_files+0x2a/0x410 [ 98.936788][ T7017] __sys_sendmsg+0x269/0x350 [ 98.936810][ T7017] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.936839][ T7017] ? do_sys_openat2+0x17a/0x1d0 [ 98.936886][ T7017] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 98.936914][ T7017] ? do_syscall_64+0x100/0x230 [ 98.936936][ T7017] ? do_syscall_64+0xb6/0x230 [ 98.936957][ T7017] do_syscall_64+0xf3/0x230 [ 98.936975][ T7017] ? clear_bhb_loop+0x35/0x90 [ 98.936999][ T7017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.937019][ T7017] RIP: 0033:0x7ff5a1f8d169 [ 98.937034][ T7017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.937047][ T7017] RSP: 002b:00007ff5a2e8c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.937064][ T7017] RAX: ffffffffffffffda RBX: 00007ff5a21a5fa0 RCX: 00007ff5a1f8d169 [ 98.937076][ T7017] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000003 [ 98.937085][ T7017] RBP: 00007ff5a2e8c090 R08: 0000000000000000 R09: 0000000000000000 [ 98.937094][ T7017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.937103][ T7017] R13: 0000000000000000 R14: 00007ff5a21a5fa0 R15: 00007ffd0e626918 [ 98.937129][ T7017] [ 99.333380][ T7022] netlink: 'syz.1.366': attribute type 3 has an invalid length. [ 99.342107][ T7022] netlink: 3 bytes leftover after parsing attributes in process `syz.1.366'. [ 99.428839][ T7022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.366'. [ 99.455323][ T7027] netlink: 'syz.4.367': attribute type 2 has an invalid length. [ 99.588624][ T7032] netlink: 52 bytes leftover after parsing attributes in process `syz.0.368'. [ 99.744774][ T6987] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.797662][ T6987] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.868064][ T6987] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.900816][ T6987] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.367958][ T7067] netlink: 'syz.1.379': attribute type 2 has an invalid length. [ 100.410373][ T7071] netlink: 'syz.3.381': attribute type 3 has an invalid length. [ 100.441144][ T7071] netlink: 3 bytes leftover after parsing attributes in process `syz.3.381'. [ 100.506308][ T7073] netlink: 'syz.4.380': attribute type 1 has an invalid length. [ 100.530420][ T7071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.381'. [ 100.814852][ T7095] netlink: 24 bytes leftover after parsing attributes in process `syz.3.386'. [ 100.854372][ T7093] netlink: 52 bytes leftover after parsing attributes in process `syz.0.388'. [ 101.303359][ T7116] netlink: 'syz.1.394': attribute type 2 has an invalid length. [ 101.338709][ T7117] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 101.403618][ T7117] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 101.473180][ T7120] Bluetooth: MGMT ver 1.23 [ 101.760413][ T7138] netlink: 52 bytes leftover after parsing attributes in process `syz.2.401'. [ 102.303963][ T7168] netlink: 'syz.4.402': attribute type 10 has an invalid length. [ 102.323496][ T7167] netlink: 'syz.0.410': attribute type 2 has an invalid length. [ 102.436404][ T7174] netlink: 'syz.4.402': attribute type 1 has an invalid length. [ 102.892318][ T7168] team0: Device veth1_macvtap failed to register rx_handler [ 103.118375][ T7191] FAULT_INJECTION: forcing a failure. [ 103.118375][ T7191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.151763][ T7191] CPU: 0 UID: 0 PID: 7191 Comm: syz.0.416 Not tainted 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 [ 103.151787][ T7191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.151796][ T7191] Call Trace: [ 103.151802][ T7191] [ 103.151809][ T7191] dump_stack_lvl+0x241/0x360 [ 103.151834][ T7191] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.151851][ T7191] ? __pfx__printk+0x10/0x10 [ 103.151869][ T7191] ? __pfx_lock_release+0x10/0x10 [ 103.151894][ T7191] should_fail_ex+0x40a/0x550 [ 103.151915][ T7191] _copy_from_user+0x2d/0xb0 [ 103.151932][ T7191] do_sock_getsockopt+0x1d1/0x740 [ 103.151950][ T7191] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 103.151962][ T7191] ? __fget_files+0x2a/0x410 [ 103.151980][ T7191] ? __fget_files+0x395/0x410 [ 103.151995][ T7191] ? __fget_files+0x2a/0x410 [ 103.152016][ T7191] __x64_sys_getsockopt+0x2a1/0x370 [ 103.152034][ T7191] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 103.152048][ T7191] ? do_syscall_64+0x100/0x230 [ 103.152065][ T7191] ? do_syscall_64+0xb6/0x230 [ 103.152081][ T7191] do_syscall_64+0xf3/0x230 [ 103.152095][ T7191] ? clear_bhb_loop+0x35/0x90 [ 103.152113][ T7191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.152129][ T7191] RIP: 0033:0x7ff5a1f8d169 [ 103.152140][ T7191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.152150][ T7191] RSP: 002b:00007ff5a2e8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 103.152164][ T7191] RAX: ffffffffffffffda RBX: 00007ff5a21a5fa0 RCX: 00007ff5a1f8d169 [ 103.152173][ T7191] RDX: 0000000000000082 RSI: 0000000000000084 RDI: 0000000000000004 [ 103.152181][ T7191] RBP: 00007ff5a2e8c090 R08: 0000400000000480 R09: 0000000000000000 [ 103.152189][ T7191] R10: 0000400000000340 R11: 0000000000000246 R12: 0000000000000001 [ 103.152196][ T7191] R13: 0000000000000000 R14: 00007ff5a21a5fa0 R15: 00007ffd0e626918 [ 103.152215][ T7191] [ 103.645070][ T7215] netlink: 'syz.2.424': attribute type 2 has an invalid length. [ 103.819677][ T7223] __nla_validate_parse: 5 callbacks suppressed [ 103.819696][ T7223] netlink: 24 bytes leftover after parsing attributes in process `syz.3.425'. [ 103.908334][ T7226] pim6reg: entered allmulticast mode [ 103.988960][ T7233] FAULT_INJECTION: forcing a failure. [ 103.988960][ T7233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.045825][ T7233] CPU: 1 UID: 0 PID: 7233 Comm: syz.0.429 Not tainted 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 [ 104.045848][ T7233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 104.045858][ T7233] Call Trace: [ 104.045863][ T7233] [ 104.045870][ T7233] dump_stack_lvl+0x241/0x360 [ 104.045895][ T7233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.045912][ T7233] ? __pfx__printk+0x10/0x10 [ 104.045930][ T7233] ? __pfx_lock_release+0x10/0x10 [ 104.045960][ T7233] should_fail_ex+0x40a/0x550 [ 104.045986][ T7233] _copy_from_iter+0x1df/0x1c40 [ 104.046004][ T7233] ? __virt_addr_valid+0x183/0x530 [ 104.046021][ T7233] ? __pfx_lock_release+0x10/0x10 [ 104.046049][ T7233] ? __alloc_skb+0x28f/0x440 [ 104.046064][ T7233] ? __pfx__copy_from_iter+0x10/0x10 [ 104.046084][ T7233] ? __virt_addr_valid+0x183/0x530 [ 104.046098][ T7233] ? __virt_addr_valid+0x183/0x530 [ 104.046111][ T7233] ? __virt_addr_valid+0x45f/0x530 [ 104.046127][ T7233] ? __phys_addr_symbol+0x2f/0x70 [ 104.046148][ T7233] ? __check_object_size+0x47a/0x730 [ 104.046172][ T7233] netlink_sendmsg+0x742/0xcb0 [ 104.046205][ T7233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.046229][ T7233] ? aa_sock_msg_perm+0x91/0x160 [ 104.046256][ T7233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.046275][ T7233] __sock_sendmsg+0x221/0x270 [ 104.046304][ T7233] ____sys_sendmsg+0x53a/0x860 [ 104.046329][ T7233] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.046344][ T7233] ? __fget_files+0x2a/0x410 [ 104.046367][ T7233] ? __fget_files+0x2a/0x410 [ 104.046396][ T7233] __sys_sendmsg+0x269/0x350 [ 104.046417][ T7233] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.046446][ T7233] ? do_sys_openat2+0x17a/0x1d0 [ 104.046491][ T7233] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 104.046514][ T7233] ? do_syscall_64+0x100/0x230 [ 104.046536][ T7233] ? do_syscall_64+0xb6/0x230 [ 104.046556][ T7233] do_syscall_64+0xf3/0x230 [ 104.046574][ T7233] ? clear_bhb_loop+0x35/0x90 [ 104.046596][ T7233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.046615][ T7233] RIP: 0033:0x7ff5a1f8d169 [ 104.046630][ T7233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.046642][ T7233] RSP: 002b:00007ff5a2e8c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.046660][ T7233] RAX: ffffffffffffffda RBX: 00007ff5a21a5fa0 RCX: 00007ff5a1f8d169 [ 104.046671][ T7233] RDX: 0000000000000000 RSI: 00004000000006c0 RDI: 0000000000000003 [ 104.046681][ T7233] RBP: 00007ff5a2e8c090 R08: 0000000000000000 R09: 0000000000000000 [ 104.046691][ T7233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.046700][ T7233] R13: 0000000000000000 R14: 00007ff5a21a5fa0 R15: 00007ffd0e626918 [ 104.046725][ T7233] [ 104.487173][ T7241] FAULT_INJECTION: forcing a failure. [ 104.487173][ T7241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.501772][ T7241] CPU: 1 UID: 0 PID: 7241 Comm: syz.0.432 Not tainted 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 [ 104.501795][ T7241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 104.501804][ T7241] Call Trace: [ 104.501810][ T7241] [ 104.501818][ T7241] dump_stack_lvl+0x241/0x360 [ 104.501844][ T7241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.501861][ T7241] ? __pfx__printk+0x10/0x10 [ 104.501884][ T7241] ? snprintf+0xda/0x120 [ 104.501908][ T7241] should_fail_ex+0x40a/0x550 [ 104.501935][ T7241] _copy_to_user+0x31/0xb0 [ 104.501958][ T7241] simple_read_from_buffer+0xca/0x150 [ 104.501982][ T7241] proc_fail_nth_read+0x1e9/0x250 [ 104.502006][ T7241] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.502030][ T7241] ? rw_verify_area+0x243/0x630 [ 104.502046][ T7241] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.502068][ T7241] vfs_read+0x1f8/0xb40 [ 104.502085][ T7241] ? fdget_pos+0x254/0x320 [ 104.502115][ T7241] ? __pfx___mutex_lock+0x10/0x10 [ 104.502134][ T7241] ? __pfx_vfs_read+0x10/0x10 [ 104.502147][ T7241] ? do_sys_openat2+0x17a/0x1d0 [ 104.502171][ T7241] ? __fget_files+0x2a/0x410 [ 104.502193][ T7241] ? __fget_files+0x395/0x410 [ 104.502212][ T7241] ? __fget_files+0x2a/0x410 [ 104.502241][ T7241] ksys_read+0x18f/0x2b0 [ 104.502260][ T7241] ? __pfx_ksys_read+0x10/0x10 [ 104.502277][ T7241] ? do_syscall_64+0x100/0x230 [ 104.502299][ T7241] ? do_syscall_64+0xb6/0x230 [ 104.502319][ T7241] do_syscall_64+0xf3/0x230 [ 104.502338][ T7241] ? clear_bhb_loop+0x35/0x90 [ 104.502360][ T7241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.502380][ T7241] RIP: 0033:0x7ff5a1f8bb7c [ 104.502395][ T7241] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 104.502408][ T7241] RSP: 002b:00007ff5a2e6b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.502425][ T7241] RAX: ffffffffffffffda RBX: 00007ff5a21a6080 RCX: 00007ff5a1f8bb7c [ 104.502437][ T7241] RDX: 000000000000000f RSI: 00007ff5a2e6b0a0 RDI: 0000000000000004 [ 104.502447][ T7241] RBP: 00007ff5a2e6b090 R08: 0000000000000000 R09: 0000000000000000 [ 104.502456][ T7241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.502466][ T7241] R13: 0000000000000001 R14: 00007ff5a21a6080 R15: 00007ffd0e626918 [ 104.502492][ T7241] [ 105.172053][ T7264] netlink: 'syz.3.441': attribute type 12 has an invalid length. [ 105.190527][ T7266] xt_l2tp: v2 doesn't support IP mode [ 105.363291][ T7279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.375245][ T7276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.444'. [ 105.386079][ T7271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.607118][ T7264] netlink: zone id is out of range [ 105.681023][ T7279] netlink: 'syz.3.441': attribute type 2 has an invalid length. [ 105.843578][ T7279] Tq!7: entered promiscuous mode [ 106.154258][ T7264] netlink: set zone limit has 4 unknown bytes [ 107.453685][ T7358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.459'. [ 107.656347][ T7372] netlink: 'syz.0.461': attribute type 10 has an invalid length. [ 107.674570][ T7372] netlink: 40 bytes leftover after parsing attributes in process `syz.0.461'. [ 107.756890][ T7372] team0: Port device geneve0 added [ 107.864145][ T7378] netlink: 'syz.2.463': attribute type 3 has an invalid length. [ 107.895720][ T7378] netlink: 3 bytes leftover after parsing attributes in process `syz.2.463'. [ 107.916439][ T7372] syz.0.461 (7372) used greatest stack depth: 17744 bytes left [ 107.943355][ T7378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.463'. [ 107.982111][ T7331] netlink: 'syz.1.454': attribute type 13 has an invalid length. [ 108.588427][ T7405] netlink: 'syz.2.468': attribute type 3 has an invalid length. [ 108.610865][ T7405] netlink: 3 bytes leftover after parsing attributes in process `syz.2.468'. [ 108.716486][ T7405] netlink: 16 bytes leftover after parsing attributes in process `syz.2.468'. [ 108.785353][ T7409] netlink: 52 bytes leftover after parsing attributes in process `syz.0.467'. [ 108.821873][ T7418] x_tables: duplicate underflow at hook 2 [ 108.877092][ T7418] x_tables: duplicate underflow at hook 2 [ 109.115401][ T7429] netlink: 'syz.1.475': attribute type 3 has an invalid length. [ 109.136870][ T7429] netlink: 3 bytes leftover after parsing attributes in process `syz.1.475'. [ 109.265077][ T7429] netlink: 16 bytes leftover after parsing attributes in process `syz.1.475'. [ 109.667688][ T7453] gretap2: entered promiscuous mode [ 109.673330][ T7453] gretap2: entered allmulticast mode [ 109.907119][ T7463] netlink: 'syz.4.485': attribute type 3 has an invalid length. [ 109.965226][ T7463] netlink: 3 bytes leftover after parsing attributes in process `syz.4.485'. [ 110.026116][ T7463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.485'. [ 110.194465][ T7483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.488'. [ 110.613819][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.492'. [ 110.624083][ T7495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.490'. [ 110.658961][ T7495] netlink: 'syz.2.490': attribute type 13 has an invalid length. [ 110.714383][ T7495] gretap0: refused to change device tx_queue_len [ 110.756838][ T7495] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 111.026831][ T7504] --map-set only usable from mangle table [ 111.253054][ T7523] netlink: 'syz.0.499': attribute type 3 has an invalid length. [ 111.297166][ T7523] netlink: 3 bytes leftover after parsing attributes in process `syz.0.499'. [ 111.351425][ T7523] netlink: 16 bytes leftover after parsing attributes in process `syz.0.499'. [ 111.859932][ T7547] netlink: 'syz.1.505': attribute type 3 has an invalid length. [ 111.895927][ T7547] netlink: 3 bytes leftover after parsing attributes in process `syz.1.505'. [ 112.311313][ T7561] netlink: 'syz.0.511': attribute type 1 has an invalid length. [ 112.720295][ T7581] --map-set only usable from mangle table [ 112.960196][ T7596] netlink: 'syz.4.520': attribute type 3 has an invalid length. [ 113.256751][ T7611] smc: net device bond0 applied user defined pnetid SYZ0 [ 113.270033][ T7611] smc: net device bond0 erased user defined pnetid SYZ0 [ 113.720972][ T7629] netlink: 'syz.0.534': attribute type 3 has an invalid length. [ 114.057105][ T7650] smc: net device bond0 applied user defined pnetid SYZ0 [ 114.079690][ T7650] smc: net device bond0 erased user defined pnetid SYZ0 [ 114.101769][ T7650] trusted_key: syz.0.541 sent an empty control message without MSG_MORE. [ 114.239783][ T7655] __nla_validate_parse: 10 callbacks suppressed [ 114.239799][ T7655] netlink: 20 bytes leftover after parsing attributes in process `syz.3.546'. [ 114.346410][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.547'. [ 114.687594][ T7676] netlink: 'syz.3.553': attribute type 3 has an invalid length. [ 114.695297][ T7676] netlink: 3 bytes leftover after parsing attributes in process `syz.3.553'. [ 114.740337][ T7676] netlink: 16 bytes leftover after parsing attributes in process `syz.3.553'. [ 115.125243][ T7690] smc: net device bond0 applied user defined pnetid SYZ0 [ 115.141230][ T7690] smc: net device bond0 erased user defined pnetid SYZ0 [ 115.175351][ T7694] netlink: 20 bytes leftover after parsing attributes in process `syz.2.559'. [ 115.238161][ T7696] smc: net device bond0 applied user defined pnetid SYZ0 [ 115.246790][ T7696] smc: net device bond0 erased user defined pnetid SYZ0 [ 115.271222][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 115.497736][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'. [ 115.515337][ T7707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.564'. [ 115.679916][ T7718] smc: net device bond0 applied user defined pnetid SYZ0 [ 115.711062][ T7718] smc: net device bond0 erased user defined pnetid SYZ0 [ 115.873286][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.573'. [ 115.885183][ T7713] --map-set only usable from mangle table [ 115.958048][ T7732] netlink: 20 bytes leftover after parsing attributes in process `syz.4.574'. [ 116.074535][ T7740] netlink: 'syz.3.576': attribute type 3 has an invalid length. [ 116.773369][ T7774] netlink: 'syz.0.590': attribute type 3 has an invalid length. [ 117.266438][ T7797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.282958][ T7797] bridge0: port 3(vlan2) entered blocking state [ 117.315708][ T7797] bridge0: port 3(vlan2) entered disabled state [ 117.322186][ T7797] vlan2: entered allmulticast mode [ 117.359988][ T7797] vlan2: entered promiscuous mode [ 117.388750][ T7807] gretap2: entered promiscuous mode [ 117.394138][ T7807] gretap2: entered allmulticast mode [ 117.789555][ T7829] netlink: 'syz.2.609': attribute type 3 has an invalid length. [ 118.902279][ T7867] netlink: 'syz.0.624': attribute type 3 has an invalid length. [ 119.231486][ T1904] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.317800][ T7879] __nla_validate_parse: 14 callbacks suppressed [ 119.317818][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.630'. [ 119.347175][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.630'. [ 119.385188][ T1904] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.549856][ T1904] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.647317][ T1904] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.678370][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.636'. [ 119.801842][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.818929][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.832808][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.847796][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.859183][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 119.868602][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.993622][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 120.003747][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 120.011988][ T1904] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.012010][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 120.023868][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 120.039962][ T5847] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 120.047479][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 120.083457][ T7903] netlink: 'syz.3.639': attribute type 3 has an invalid length. [ 120.094376][ T7903] netlink: 3 bytes leftover after parsing attributes in process `syz.3.639'. [ 120.155004][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.640'. [ 120.171508][ T7898] netlink: 16 bytes leftover after parsing attributes in process `syz.3.639'. [ 120.174911][ T1904] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.340631][ T7909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.641'. [ 120.377671][ T1904] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.605341][ T1904] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.657052][ T7925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.644'. [ 120.690874][ T7924] netlink: 'syz.0.646': attribute type 3 has an invalid length. [ 120.706517][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.646'. [ 121.108725][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.650'. [ 121.137757][ T7944] netlink: 'syz.1.649': attribute type 3 has an invalid length. [ 121.164542][ T5502] [ 121.166916][ T5502] ============================================ [ 121.173066][ T5502] WARNING: possible recursive locking detected [ 121.179247][ T5502] 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 Not tainted [ 121.186349][ T5502] -------------------------------------------- [ 121.192482][ T5502] dhcpcd/5502 is trying to acquire lock: [ 121.198093][ T5502] ffff888067f6cd28 (&dev->lock){+.+.}-{4:4}, at: lapbeth_device_event+0x766/0xa20 [ 121.207319][ T5502] [ 121.207319][ T5502] but task is already holding lock: [ 121.214663][ T5502] ffff888024fa4d28 (&dev->lock){+.+.}-{4:4}, at: dev_change_flags+0x120/0x270 [ 121.223541][ T5502] [ 121.223541][ T5502] other info that might help us debug this: [ 121.231581][ T5502] Possible unsafe locking scenario: [ 121.231581][ T5502] [ 121.239010][ T5502] CPU0 [ 121.242277][ T5502] ---- [ 121.245561][ T5502] lock(&dev->lock); [ 121.249530][ T5502] lock(&dev->lock); [ 121.253503][ T5502] [ 121.253503][ T5502] *** DEADLOCK *** [ 121.253503][ T5502] [ 121.261632][ T5502] May be due to missing lock nesting notation [ 121.261632][ T5502] [ 121.269932][ T5502] 2 locks held by dhcpcd/5502: [ 121.274676][ T5502] #0: ffffffff8fed6908 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x34c/0x1d80 [ 121.283806][ T5502] #1: ffff888024fa4d28 (&dev->lock){+.+.}-{4:4}, at: dev_change_flags+0x120/0x270 [ 121.293106][ T5502] [ 121.293106][ T5502] stack backtrace: [ 121.298974][ T5502] CPU: 1 UID: 0 PID: 5502 Comm: dhcpcd Not tainted 6.14.0-rc5-syzkaller-01183-g40587f749df2 #0 [ 121.298989][ T5502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 121.298996][ T5502] Call Trace: [ 121.299001][ T5502] [ 121.299007][ T5502] dump_stack_lvl+0x241/0x360 [ 121.299023][ T5502] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.299036][ T5502] ? __pfx__printk+0x10/0x10 [ 121.299047][ T5502] ? lockdep_unlock+0x16a/0x300 [ 121.299066][ T5502] print_deadlock_bug+0x483/0x620 [ 121.299080][ T5502] validate_chain+0x15e2/0x5920 [ 121.299096][ T5502] ? is_bpf_text_address+0x26/0x2a0 [ 121.299110][ T5502] ? unwind_next_frame+0x18e6/0x22d0 [ 121.299127][ T5502] ? __pfx_validate_chain+0x10/0x10 [ 121.299139][ T5502] ? preempt_count_add+0x93/0x190 [ 121.299154][ T5502] ? 0xffffffffa0003b40 [ 121.299163][ T5502] ? 0xffffffffa0003b40 [ 121.299172][ T5502] ? is_bpf_text_address+0x285/0x2a0 [ 121.299199][ T5502] ? is_bpf_text_address+0x26/0x2a0 [ 121.299210][ T5502] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 121.299226][ T5502] ? kernel_text_address+0xa7/0xe0 [ 121.299239][ T5502] ? look_up_lock_class+0x77/0x170 [ 121.299253][ T5502] ? register_lock_class+0x102/0x980 [ 121.299271][ T5502] ? __pfx_register_lock_class+0x10/0x10 [ 121.299288][ T5502] ? mark_lock+0x9a/0x360 [ 121.299300][ T5502] __lock_acquire+0x1397/0x2100 [ 121.299321][ T5502] lock_acquire+0x1ed/0x550 [ 121.299336][ T5502] ? lapbeth_device_event+0x766/0xa20 [ 121.299356][ T5502] ? __pfx_lock_acquire+0x10/0x10 [ 121.299373][ T5502] ? __pfx___might_resched+0x10/0x10 [ 121.299392][ T5502] __mutex_lock+0x19c/0x1010 [ 121.299405][ T5502] ? lapbeth_device_event+0x766/0xa20 [ 121.299424][ T5502] ? __asan_memset+0x23/0x50 [ 121.299437][ T5502] ? lapbeth_device_event+0x766/0xa20 [ 121.299454][ T5502] ? __pfx___mutex_lock+0x10/0x10 [ 121.299471][ T5502] ? __raw_spin_lock_init+0x45/0x100 [ 121.299486][ T5502] lapbeth_device_event+0x766/0xa20 [ 121.299504][ T5502] notifier_call_chain+0x1a5/0x3f0 [ 121.299522][ T5502] __dev_notify_flags+0x207/0x400 [ 121.299533][ T5502] ? dev_set_rx_mode+0xb8/0x2e0 [ 121.299545][ T5502] ? __pfx___dev_notify_flags+0x10/0x10 [ 121.299556][ T5502] ? __dev_change_flags+0x515/0x6f0 [ 121.299568][ T5502] ? __pfx___mutex_lock+0x10/0x10 [ 121.299581][ T5502] ? __pfx___dev_change_flags+0x10/0x10 [ 121.299594][ T5502] ? __pfx___mutex_lock+0x10/0x10 [ 121.299607][ T5502] netif_change_flags+0xf0/0x1a0 [ 121.299620][ T5502] dev_change_flags+0x146/0x270 [ 121.299638][ T5502] devinet_ioctl+0xea2/0x1d80 [ 121.299657][ T5502] ? __pfx_devinet_ioctl+0x10/0x10 [ 121.299674][ T5502] ? get_user_ifreq+0x1bb/0x200 [ 121.299688][ T5502] inet_ioctl+0x3d7/0x4f0 [ 121.299701][ T5502] ? __pfx_inet_ioctl+0x10/0x10 [ 121.299714][ T5502] ? tomoyo_path_number_perm+0x5dd/0x770 [ 121.299738][ T5502] sock_do_ioctl+0x158/0x460 [ 121.299754][ T5502] ? __pfx_sock_do_ioctl+0x10/0x10 [ 121.299769][ T5502] ? __pfx_lock_release+0x10/0x10 [ 121.299788][ T5502] sock_ioctl+0x626/0x8e0 [ 121.299803][ T5502] ? __pfx_sock_ioctl+0x10/0x10 [ 121.299817][ T5502] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 121.299835][ T5502] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 121.299852][ T5502] ? __pfx_sock_ioctl+0x10/0x10 [ 121.299866][ T5502] __se_sys_ioctl+0xf5/0x170 [ 121.299879][ T5502] do_syscall_64+0xf3/0x230 [ 121.299893][ T5502] ? clear_bhb_loop+0x35/0x90 [ 121.299911][ T5502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.299926][ T5502] RIP: 0033:0x7f085fd8dd49 [ 121.299936][ T5502] Code: 5c c3 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <41> 89 c0 3d 00 f0 ff ff 76 10 48 8b 15 ae 60 0d 00 f7 d8 41 83 c8 [ 121.299947][ T5502] RSP: 002b:00007ffe6c0e7cf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 121.299959][ T5502] RAX: ffffffffffffffda RBX: 00007f085fcbf6c0 RCX: 00007f085fd8dd49 [ 121.299968][ T5502] RDX: 00007ffe6c0f7ee8 RSI: 0000000000008914 RDI: 0000000000000010 [ 121.299976][ T5502] RBP: 00007ffe6c1080a8 R08: 00007ffe6c0f7ea8 R09: 00007ffe6c0f7e58 [ 121.299985][ T5502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.299992][ T5502] R13: 00007ffe6c0f7ee8 R14: 0000000000000028 R15: 0000000000008914 [ 121.300005][ T5502] [ 121.761390][ T7900] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 121.776017][ T1904] vlan2: left allmulticast mode [ 121.789286][ T1904] vlan2: left promiscuous mode [ 121.794149][ T1904] bridge0: port 3(vlan2) entered disabled state [ 121.834176][ T1904] bridge_slave_1: left allmulticast mode [ 121.840110][ T1904] bridge_slave_1: left promiscuous mode [ 121.845826][ T1904] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.854078][ T1904] bridge_slave_0: left allmulticast mode [ 121.859846][ T1904] bridge_slave_0: left promiscuous mode [ 121.865535][ T1904] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.947118][ T5846] Bluetooth: hci1: command tx timeout [ 121.962933][ T1904] bridge_slave_1: left allmulticast mode [ 121.968657][ T1904] bridge_slave_1: left promiscuous mode [ 121.974317][ T1904] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.008049][ T1904] bridge_slave_0: left allmulticast mode [ 122.014248][ T1904] bridge_slave_0: left promiscuous mode [ 122.020185][ T1904] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.096431][ T5846] Bluetooth: hci4: command tx timeout [ 122.371599][ T1904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.382073][ T1904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.391497][ T1904] bond0 (unregistering): Released all slaves [ 122.403621][ T1904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.413668][ T1904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.423183][ T1904] bond0 (unregistering): (slave team0): Releasing backup interface [ 122.431956][ T1904] bond0 (unregistering): Released all slaves [ 122.440546][ T7891] chnl_net:caif_netlink_parms(): no params data found [ 122.728645][ T1904] hsr_slave_0: left promiscuous mode [ 122.734394][ T1904] hsr_slave_1: left promiscuous mode [ 122.742980][ T1904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.753241][ T1904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.760984][ T1904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.770104][ T1904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.780325][ T1904] hsr_slave_0: left promiscuous mode [ 122.786843][ T1904] hsr_slave_1: left promiscuous mode [ 122.792370][ T1904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.800345][ T1904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.808197][ T1904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.816475][ T1904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.827528][ T1904] veth0_macvtap: left promiscuous mode [ 122.833018][ T1904] veth1_vlan: left promiscuous mode [ 122.838464][ T1904] veth0_vlan: left promiscuous mode [ 122.844295][ T1904] veth1_macvtap: left promiscuous mode [ 122.849941][ T1904] veth0_macvtap: left promiscuous mode [ 122.855556][ T1904] veth1_vlan: left promiscuous mode [ 122.860791][ T1904] veth0_vlan: left promiscuous mode [ 123.029921][ T1904] team0 (unregistering): Port device team_slave_1 removed [ 123.051182][ T1904] team0 (unregistering): Port device team_slave_0 removed [ 123.144227][ T1904] pim6reg (unregistering): left allmulticast mode [ 123.232320][ T1904] team0 (unregistering): Port device team_slave_1 removed [ 123.248847][ T1904] team0 (unregistering): Port device team_slave_0 removed [ 123.409958][ T974] infiniband syz1: ib_query_port failed (-19) [ 123.922738][ T1904] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.969736][ T1904] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.021476][ T1904] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.058259][ T1904] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.142882][ T1904] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.152879][ T1904] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.219280][ T1904] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.230222][ T1904] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.250177][ T1904] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.260280][ T1904] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.310466][ T1904] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.321290][ T1904] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.457171][ T1904] hsr0: left allmulticast mode [ 124.461992][ T1904] hsr_slave_0: left allmulticast mode [ 124.470190][ T1904] hsr_slave_1: left allmulticast mode [ 124.476687][ T1904] hsr0: left promiscuous mode [ 124.481527][ T1904] bridge0: port 3(hsr0) entered disabled state [ 124.493303][ T1904] bridge_slave_1: left allmulticast mode [ 124.499135][ T1904] bridge_slave_1: left promiscuous mode [ 124.504819][ T1904] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.513640][ T1904] bridge_slave_0: left allmulticast mode [ 124.519570][ T1904] bridge_slave_0: left promiscuous mode [ 124.525239][ T1904] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.535058][ T1904] hsr0: left allmulticast mode [ 124.541050][ T1904] hsr_slave_0: left allmulticast mode [ 124.547679][ T1904] hsr_slave_1: left allmulticast mode [ 124.553078][ T1904] hsr0: left promiscuous mode [ 124.558269][ T1904] bridge0: port 3(hsr0) entered disabled state [ 124.566907][ T1904] bridge_slave_1: left allmulticast mode [ 124.572551][ T1904] bridge_slave_1: left promiscuous mode [ 124.578312][ T1904] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.587226][ T1904] bridge_slave_0: left allmulticast mode [ 124.593009][ T1904] bridge_slave_0: left promiscuous mode [ 124.599038][ T1904] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.607958][ T1904] bridge_slave_1: left allmulticast mode [ 124.613617][ T1904] bridge_slave_1: left promiscuous mode [ 124.620100][ T1904] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.630235][ T1904] bridge_slave_0: left allmulticast mode [ 124.637327][ T1904] bridge_slave_0: left promiscuous mode [ 124.642986][ T1904] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.802092][ T1904] team0: Port device geneve0 removed [ 125.127506][ T1904] bond0 (unregistering): Released all slaves [ 125.138931][ T1904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.149396][ T1904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.159225][ T1904] bond0 (unregistering): Released all slaves [ 125.238413][ T1904] bond1 (unregistering): Released all slaves [ 125.249964][ T1904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.260034][ T1904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.269996][ T1904] bond0 (unregistering): Released all slaves [ 125.281656][ T1904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.291481][ T1904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.301239][ T1904] bond0 (unregistering): (slave team0): Releasing backup interface [ 125.310195][ T1904] bond0 (unregistering): Released all slaves [ 126.931897][ T1904] Tq!7: left promiscuous mode [ 127.209290][ T1904] hsr_slave_0: left promiscuous mode [ 127.215014][ T1904] hsr_slave_1: left promiscuous mode [ 127.221812][ T1904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.229479][ T1904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.237187][ T1904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.244705][ T1904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.256311][ T1904] hsr_slave_0: left promiscuous mode [ 127.261859][ T1904] hsr_slave_1: left promiscuous mode [ 127.267661][ T1904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.275031][ T1904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.282766][ T1904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.290207][ T1904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.299657][ T1904] hsr_slave_0: left promiscuous mode [ 127.305449][ T1904] hsr_slave_1: left promiscuous mode [ 127.311394][ T1904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.318829][ T1904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.326836][ T1904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.334220][ T1904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.344230][ T1904] veth1_macvtap: left promiscuous mode [ 127.349806][ T1904] veth0_macvtap: left promiscuous mode [ 127.355321][ T1904] veth1_vlan: left promiscuous mode [ 127.361875][ T1904] veth0_vlan: left promiscuous mode [ 127.368272][ T1904] veth1_macvtap: left promiscuous mode [ 127.373736][ T1904] veth0_macvtap: left promiscuous mode [ 127.379492][ T1904] veth1_vlan: left promiscuous mode [ 127.384735][ T1904] veth0_vlan: left promiscuous mode [ 127.390643][ T1904] veth1_macvtap: left promiscuous mode [ 127.396200][ T1904] veth0_macvtap: left promiscuous mode [ 127.401726][ T1904] veth1_vlan: left promiscuous mode [ 127.407012][ T1904] veth0_vlan: left promiscuous mode [ 127.606139][ T1904] team0 (unregistering): Port device team_slave_1 removed [ 127.617472][ T1904] team0 (unregistering): Port device team_slave_0 removed [ 127.776904][ T1904] team0 (unregistering): Port device team_slave_1 removed [ 127.799208][ T1904] team0 (unregistering): Port device team_slave_0 removed [ 127.933177][ T1904] team0 (unregistering): Port device team_slave_1 removed [ 127.954845][ T1904] team0 (unregistering): Port device team_slave_0 removed [ 128.737482][ T1904] IPVS: stop unused estimator thread 0...