last executing test programs: 1.896327821s ago: executing program 3 (id=980): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r2}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000200)={r5, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000440)={r5, 0x1, 0x6, @remote}, 0x10) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4a) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000440)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)}], 0x1}, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_crypto(0x10, 0x3, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffef) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r8, @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r7, @ANYBLOB="24002d800800020003000000050001000000000005000400000000001800"], 0x40}}, 0x24040800) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) write(r9, &(0x7f0000000000)="0a000000010001", 0x7) 1.662849234s ago: executing program 2 (id=983): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x39}, @generic={0xa7}, @initr0, @exit]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x32}, 0x90) r0 = socket(0x10, 0x803, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4e8, 0x0, 0x0, 0x2a8, 0x0, 0x1e8, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@inet=@esp={{0x30}, {[0x4d5, 0x4d4], 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x23, 0x6, @broadcast, 0x4e23}}}, {{@uncond, 0x0, 0xb8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x3f, 0x6, [0x1, 0x3a, 0x27, 0x16, 0x13, 0x2b, 0x26, 0xe, 0x2d, 0xa, 0x23, 0x22, 0xb, 0x25, 0x20, 0x2], 0x0, 0x0, 0x1}}}, {{@ip={@empty, @local, 0xff, 0x0, 'tunl0\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x16, 0x3, 0x51}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xb, "0d13", 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x4}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x0, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x1, 0x1}}}, {{@ip={@remote, @loopback, 0xff000000, 0x0, 'ip6tnl0\x00', 'vlan0\x00', {0xff}, {}, 0x33, 0x2, 0x56}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) getsockname$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x5a}, @val={0x8}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x9054}, 0x4000001) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000bc0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x88, 0x12, "22378318b736e48dfc691baba367e346"}, @generic={0x88, 0x9, "1f281dc813156b"}, @cipso={0x86, 0x6}]}}, {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e80)=ANY=[], 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000001605000300030000000900010073797a30000000000900020073797a32"], 0x84}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010200000000000000000800000008000300", @ANYRES32=r6, @ANYBLOB="908c156f4837d947a0afbf79c16fc91ac140c724bfce76ddba7da89fcd71798ec7077a90345c780a872df649c16c4e45491f50425c50643832a7f8051b1e"], 0x1c}}, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000001c0)={0x0, 'veth1_vlan\x00', {0x2}, 0x81}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x3, 0x0, 0x2e03}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xfeffffff00000000}}, @IFLA_GRE_ERSPAN_VER={0x5}]}}}]}, 0x54}}, 0x0) write$binfmt_misc(r7, &(0x7f0000000100)=ANY=[], 0xfdef) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.536400176s ago: executing program 0 (id=986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c0001800d"], 0x24}}, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r3, 0x2f, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x16}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) 1.435580353s ago: executing program 0 (id=988): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000080000006a0a00ff000000407e000000000000009500000000000000181000", @ANYRES32, @ANYBLOB="100000000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x4, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000280)={r3}, &(0x7f00000012c0)=0x8) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r4, 0x909, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendto(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x4001, 0x3, 0x238, 0x0, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'vxcan1\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r5 = socket$inet6(0xa, 0x0, 0xfffffffd) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000280)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x1], 0x0, 0x0}, 0x78) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r7, 0x104, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000000e00), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='sys_exit\x00', r8}, 0x10) unshare(0x2000400) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@ipv4_getnetconf={0x2c, 0x52, 0x802, 0x70bd2c, 0x25dfdbfb, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x7fffffff}, @NETCONFA_FORWARDING={0x8, 0x2, 0x9}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="a1ab00800000000000000100000008001701"], 0x24}}, 0x0) 1.215686828s ago: executing program 4 (id=990): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (rerun: 64) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) (async) socketpair(0x23, 0x5, 0x0, &(0x7f0000000000)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x9, &(0x7f0000000fc0)=@raw=[@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000001040)='syzkaller\x00', 0x3f, 0xfc, &(0x7f0000001080)=""/252, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000011c0)={0x3, 0xc, 0xfffffffa}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001240)=[{0x2, 0x4, 0x0, 0x4}], 0x10, 0x3ff}, 0x90) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x53}}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) (async, rerun: 64) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r4}, 0x48) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000020803000000000000000000000004000900010073797a380000"], 0x20}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x5, 0x5, &(0x7f00000000c0)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r5}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%ps \x00'}, 0x20) (async) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180000000500000000000000080000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x6a, &(0x7f0000000380)=""/106, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x3, 0x1, 0xad74, 0x80000001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r7, r8], 0x0, 0x10, 0x1}, 0x90) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x2b, 0x0, 0x0, 0x1, '\x00', 0x0, 0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xaa) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x5, 0x7, 0xfff, 0x7}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x2add, 0x0, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa}, 0x48) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 1.106722809s ago: executing program 4 (id=991): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r0, 0x0, 0x20, 0x0, &(0x7f00000002c0)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3f) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153}, 0x15) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r0, 0x0, 0x20, 0x0, &(0x7f00000002c0)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3f) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa000000"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 1.060193243s ago: executing program 0 (id=992): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x94, r3, 0x5, 0x2, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x56, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6, {0xf3, 0x8, 0x3ff, 0x3}}, @void, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @void, @void, @val={0x71, 0x7}, @val={0x76, 0x6}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x94}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x2f}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}}, 0x4004) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x24, r6, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x2}]}, 0x24}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x200008}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 992.349952ms ago: executing program 2 (id=993): socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETINFO(r2, 0x89ed, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f00000003c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, 0x0, 0x6) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000015c0)=ANY=[@ANYBLOB="240000001a006da800000000000000001c0000f8"], 0x24}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) accept$alg(r5, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r7}, 0x10) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) close(r9) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x3, 0x1, 0x2cb, 0x4b, 0xffffffffffffffff, 0x2, '\x00', 0x0, r9, 0x1, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 990.305518ms ago: executing program 1 (id=994): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000002000058008000100756470"], 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)={0x70, r5, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x52, 0x33, @beacon={{{}, {}, @device_b}, 0x0, @random=0xffff, 0xe552, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @val={0x4, 0x6, {0x7}}, @void, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xfd, 0x16, 0x3f, 0x401}}}}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="10010000", @ANYRES16=r3, @ANYBLOB="200025bd7000fedbdf253a00000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000800000048000000ab005b006115dbda8b383bc8b1c551bb98ff0000000000000058e1ae7bd161ed15bdd1a558fa2dd63a4889f0f7d2db0ab0e03f5adc5bcaf4c0d7045878f2a89de5f13e32372bb5afce1d039fa2d9bab6d273a5b92b77ce89b3ba4d8b8809d9495d615c84d8c884a47eccf3148b232b473e78c533ee0908a07ad90cbf5021040c584e307eefa91585f7e47e7c46eea9de874c479d6f2200562c930bc5a3c73c5717600cc1786885930c7d8e147c57240031005b0056dfc66f56c4e0f8c0c49db3266015da1e1f1d61110211f33ffab40a3f268103903aa22c269796a1f3f0960fbb0000000600650005000000"], 0x110}}, 0x48001) 989.512759ms ago: executing program 4 (id=995): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000110000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000380)={0x9997e71fc4e0a5aa}) close(0x4) 930.169794ms ago: executing program 3 (id=996): r0 = socket$inet(0x2, 0x2000000000003, 0x2) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000000000001d0109004d000f803b6f2811032d68bea0612044f47c50e46d2e0d055c97c9e756eba90288098be9e3744644942e6a7bc97d3645a3e6db0d1191744909497df00d71d2273b51a237f2000000b7100e4945c235547d18fec77628429cdf3c55882658c287f44a4a066d828525d380a5144904f17fd58adb68ec33b22d24f40c18f589ad8290ca6a052b819a6f6e8010d43bc4d1807986274d8409d1"], 0x64}}, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0x7, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000500)='GPL\x00', 0x5, 0x11, &(0x7f00000017c0)=""/4098}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0xb189, 0x4}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r5, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 870.638638ms ago: executing program 1 (id=997): r0 = socket(0x840000000002, 0x3, 0x100) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x29, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x44}}, 0x0) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x9, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x4}, [@map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (rerun: 64) 824.338681ms ago: executing program 2 (id=998): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) recvmmsg(r2, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18a22145bc00"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000070000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='cq_modify\x00', r1}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r2, &(0x7f0000000080), 0x10) (async) recvmmsg(r2, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x2, 0x10002, 0x0) (async) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18a22145bc00"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000070000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='cq_modify\x00', r1}, 0x10) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) (async) 807.78558ms ago: executing program 4 (id=999): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) r1 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000140)=0xa7d, 0x4) (async) sendmmsg$inet6(r2, &(0x7f0000006b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e8020000000000"], 0x2e8}}], 0x1, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) (async) readv(r2, 0x0, 0x0) (async) getsockopt$packet_int(r1, 0x107, 0x9, 0x0, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000061c0)=[{{0x0, 0x300, &(0x7f0000000280)=[{&(0x7f0000000180)=""/153, 0x99}], 0x1}}], 0xffffff1f, 0x102, 0x0) (async, rerun: 32) r5 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 32) r6 = accept4(r5, 0x0, 0x0, 0x0) (rerun: 32) sendmmsg$alg(r6, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001) (async) sendmsg$unix(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)="8cc0013f79467b5665d82d9912c5e55c69915f61e41f2fa9d9f9093740d676c8ce7f7c63648977aa3218d86d63145b8f3aba8efb", 0x34}], 0x1}, 0x0) (async) recvmmsg(r6, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0xff78}, {&(0x7f0000000300)=""/92, 0x33}], 0x2}}], 0x1, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000580)=""/137, 0x89}], 0x1}}], 0x2, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "b1d65ab71f5ef2fe", "9e8ecc7bb5352776725e1047711330ff2bb17b550800", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e21, 0x0, @remote, 0x2}}, 0x0, 0x0, 0x2a, 0x0, "ad5e0d18f72d613622bbd0b9c654ac72125c40569220990f3b0faf1286ad312e578153c04f16338f18eadeea56bb7151cbc3b84412cd38c0d2f4a6f5f6c38c9cb3bca4d0b983da34c998a0c25b94c5e7"}, 0xd8) (async, rerun: 64) sendmmsg$inet(r0, &(0x7f0000004580)=[{{&(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000b00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x18}}], 0x1, 0x0) (rerun: 64) 800.890127ms ago: executing program 0 (id=1000): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000008100000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008010000b70400000200000085000000150000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="05000000000000006b113500000000008510000002000000850000000500000095003300000000009500a50500000000cfb916cfb1841e8e83c8d00c2a06d3fd305b68b234e73739634ac40c039206000000000000009b0cac928bd5"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf250300000008000400e00000011400060067656e6576653000000000000000000014000300fe80fb000000000000000000000000bb14000200fe8000000000000000000000000000bb260007"], 0xa4}}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="002229bd7000fcdbdf0a000000084f0a00000a0001da14b3346e3400"/37], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4004005) socket$nl_route(0x10, 0x3, 0x0) 728.253062ms ago: executing program 3 (id=1001): accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async) unshare(0x28000600) (async) r3 = socket$qrtr(0x2a, 0x2, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x3a, 0x0, 0x0) getpeername$qrtr(r3, &(0x7f0000000780), &(0x7f00000007c0)=0xc) (async) close(r2) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000240001000000000000020000e1ffffff0000040000fe000006000300000000000655a158b3000000"], 0x2c}}, 0x8004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002abd7000fbdbdf7e0000008000000004005f0004005f00"/34], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYBLOB], 0x64}}, 0x0) (async) r7 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r7, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) (async) sendmmsg$inet6(r7, &(0x7f0000004580), 0x0, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800040000000000080012000300000008001100ff070000080010000000020008000f"], 0x54}}, 0x0) (async) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f00000000c0)={@dev, @local, 0x0}, &(0x7f0000000100)=0x9) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ec030000", @ANYRES16=r9, @ANYRESDEC, @ANYRES32=r10, @ANYRES64=r0], 0x3ec}, 0x1, 0x0, 0x0, 0x8004001}, 0x854) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) (async) r13 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r12}, @IFLA_HSR_SLAVE2={0x8, 0x2, r14}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x48}}, 0x0) 655.769023ms ago: executing program 3 (id=1002): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @dev}}]}]}]}, 0x50}}, 0x0) write$binfmt_script(r0, &(0x7f0000000780)={'#! ', './file0'}, 0xfdef) 609.42635ms ago: executing program 2 (id=1003): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000000)="c42f95c71882736a11cb1a65c036b92a798b80f7f6690269c9fd8d9a65a36b6e2aa2b2b7af35ad8efec9620ce826e8e0dcdd43c14482b45e7356d6c6393eed0c286a84fe5eb0fe3ec04a319d787f3ca4471b9c62b219838e82fe7137e7ed92e7d13978e38356460c8cbd927e0feaa9b4ea5d5d8bddbb09b6d4e83ef4eefaf74c5698bf33badc2f051c5698c38b24c31615ee1109b518fd624a56e4b156fec111e7a4b7261d58eb512a44ff883a3fec40302155da4f8e9fec26250bd8e42abef94ff96d9ea678a070", 0xc8}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="c5658bdbf70b820b56032386f2b1e6a06fea3cce2b9f70153be977a42c6a3377569aaa6cc7a87f0e1e9d52425a81ace3f18cbae4d8c60bcaa80c285a1ec23b963d144798546102c9391f646c28e19090cb6376a156c988c2fc657a79bd5457e1548adac97c73b040d2a422", 0x6b}], 0x3, &(0x7f00000011c0)=[{0x98, 0x29, 0x3f80, "b2ed9cb8a5ac6108eefb32b759a9b251701771edb401b340323b79ff0ae3fd5720275b1da375a0945ec47654e5552412be58f6841e8db7459c8021c26c22c5db975f6a3d9fa4ccacfe87308196902fe331a2e37ebd0e3faa0419891783e0684d4e6ed3d9fa7adb9b4c13c14e35d81a7d35e164c6b72bc8cc403b39b99b6467c944904054"}, {0x60, 0x117, 0x90e, "cb8d881411dc34c7d10aaa0a15727837b95e62bd90901fe14c0234c650cd093f3f019f46e7a251b333b0671520d7db9efa7f4df993c5d823ef4ee93f2437fb86d703454d983775d160"}, {0xf0, 0x17, 0x0, "2f63307fa7227fa5bcd04f3c55f5f25f271a55869191b91886040a2a2155247dbe57ade90d32ce6426239da9fe11edeb5d892adba6d0735991b5d54e93fab841ee8d9e38da570953e9ad503c6066b466eebbf7a5976e1fcf5aa2f8053dbe28e6a353063694e718c789fee379d3b4e8ee84dfa1a8ff067205a94a08c0fdea737e380940aa7e2078bda4d350acb5977d80c6caf44bff2424af372f7cf52f914e3b9d78c01de80e4ca95a64fdb0242d36cd9d049adfd9f034b438aa193617adfc41a7cce6e20c19cf2736774c2ccefeafc15d402277ce8b115d5d2304bc6b97"}, {0x68, 0x118, 0x5, "bc7f473c516a1ef966d81b0adf60846d42c8abd8732f81546cda9e2faba3f9e222d642eb25036bb7f46b4da823d48db21d126bf9a81d9d716e45b7a8c8ec1265fb7890c50efa1c2f486663d5442bf50afa6338e54153"}], 0x250}, 0x40) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000001480)={'pimreg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000014c0)={0x0, 0x1000000000000, 0xfffffffffffffffe, 0x1}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000018c0)={r1, 0x7f, 0x2, 0x1}) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'gre0\x00', &(0x7f0000001cc0)={'syztnl2\x00', 0x0, 0x700, 0x7, 0x4, 0x200, {{0x25, 0x4, 0x3, 0x2a, 0x94, 0x64, 0x0, 0x28, 0x4, 0x0, @remote, @empty, {[@timestamp_addr={0x44, 0xc, 0x8f, 0x1, 0x0, [{@local, 0x4f6}]}, @timestamp_prespec={0x44, 0x1c, 0x1a, 0x3, 0x3, [{@broadcast, 0x1}, {@private=0xa010100, 0x2}, {@private=0xa010101, 0x5}]}, @timestamp={0x44, 0xc, 0x74, 0x0, 0x7, [0x6c, 0xedef]}, @timestamp_prespec={0x44, 0x4c, 0x4a, 0x3, 0x8, [{@rand_addr=0x64010102, 0x8001}, {@local, 0x2}, {@multicast2, 0xf}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x670}, {@empty, 0x7}, {@multicast2, 0x2}, {@local, 0x80000001}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2199cdb6}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001e40)={'gretap0\x00', &(0x7f0000001dc0)={'syztnl2\x00', r3, 0x8000, 0x7, 0xfff, 0x1, {{0xc, 0x4, 0x3, 0x9, 0x30, 0x66, 0x0, 0x4, 0x29, 0x0, @private=0xa010100, @loopback, {[@end, @lsrr={0x83, 0xb, 0x9e, [@private=0xa010100, @local]}, @generic={0x89, 0xe, "b2a4a5a00a7d5ed7e76f3f6f"}]}}}}}) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001f00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001e80), &(0x7f0000001ec0)='%ps \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002f80)={r5, &(0x7f0000001f40)="8df1350a7da858e559fd2a770a92d0", &(0x7f0000001f80)=""/4096}, 0x20) (async) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000002fc0), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000003000), 0x9) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000003100)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)=@ipv4_getroute={0x1c, 0x1a, 0x2, 0x70bd2c, 0x25dfdbfd, {0x2, 0x20, 0x0, 0x4, 0xff, 0x2, 0xff, 0x8, 0xa00}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000084) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r8, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x38, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x95e, 0x6b}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x39}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x40}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40000a0) (async) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000032c0), r8) sendmsg$IPVS_CMD_GET_DAEMON(r8, &(0x7f0000003380)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x40, r10, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x8}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000880}, 0x20004000) r11 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r11, 0x0, 0x0, 0x0) (async) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, &(0x7f00000033c0)="699a163866ea3cd314a6ba63b6f112575ec7a9fc250aebb90b627770c256b87ec0efb559097545ce9f6196227e004d112eabc4a6fc2071a831a33371df905da36a7a1aebba67de1edeab3f41b7de87907e8180f9e6dd6fbc186cdde77d10101b37028a9ba1a41cad77a068728d253d2a8dba382848bf4bf1bf651054ebf8fe618c434ba9f49ee6a9a4b353b2f40a8ddddb4f9ed0ffb702872e7be3366a626f38d690cfe4bd642e91dd453b3efd08e10fca213994d2911315c8a4046ec3e26ecf999baebe50cb9089f8763b45f7243c270df334ea707810c166e24f0cd957c2532632c47a4f1d4f96f27bd21bc99cb1e719082fc3ace154e7d3") (async) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000005c40)={&(0x7f00000034c0)={0xa, 0x4e21, 0x0, @mcast1, 0x7}, 0x1c, &(0x7f0000005800)=[{&(0x7f0000003500)="e74916b582a43e36e8b7c8745c1d1612214489a3a34faf2518ae45c7151506bd3f9d487ffb5cb0655450a0c32795555b3dc4fd5bb58a7327b1415bd5c7f1c7e0", 0x40}, {&(0x7f0000003540)="2142377ed688f4828c7fd2b8f094afac0e89e20683e99ca5999ab7c9ff1bc57f7b18172b60b0bab936dc267782346431d032c68c997a0ab086edc63cd15024127a0de7179f717558fb6b73fd3bccd42174716da36c99a4663d75c2a0fa6a534dae12fd2c", 0x64}, {&(0x7f00000035c0)="e15f79e29e97c8e69d19e9f9937db599e7ee8def402ca025d6e9dea89f80dfd09266e09fe6744d8f997bf8331800b8f7334445b9efadd042fc1c", 0x3a}, {&(0x7f0000003600)="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", 0x1000}, {&(0x7f0000004600)="c03c55b4c3aebce34e7c4e5e5081c43cb0340cb12aed0531639acc0f5562d06d8902565daba5708f003690c4a931b15193c42894f715fa72d95c2365e93ffbb78be098d07ecf37773b30984f3b711b58dfaf9090239fc7caf29b70ca17752831435f562540db6d86ad3365e3f4e7bfb986dba36d82b0629d2462838b32b5f2fa924673022cd7da90c7f9cd49d88266cdf36dfe9c4364dc03a84fb92b167e34424c3dd9232f2ae3f5253c6b1a3e43cd252842505a4d7bc72f2c3ddbdd74856b366603b229fcea8b1bdc70323ab0c46938a815bb564835b065447bf57dcfa0c173074cf83c11bd4d4dad4d6a69031f269d780116599daebe79946da7bc87ef5fed0ebd6f6e85f91480acece4f5fd3daef6d0d25f56f1d046355d35a8e92b69421152af91f179975b4e7d8231fa292213937f696b44bf046e4bb58988ad255e40d7be426cc96a1b9a6b4b6fd9c6f6b545c9664bf4a2c6ec225738996ed7a06a71d699ce4ff031e4d605f6d640077732853c540fa800fbe3eb87ed8891449632c94c8b5232ae3a02a50c62cd028bc25ac6905e64d66b0cd9e86fc78319c91e6e637cc71677a5980854b389d098699457642235d18457bd530444b39428ed123b24ffd7ab945d46040f32f0beb2e90d1026a87a31553345409a2a9bf9afeff316936260bbe5af64de8a27c012556c51b1f5bda338c7537cb2a964975acd7618e7c4e9c1e32f6bad16f3a89ab3604269fd41794c4fc66d2f0f39ffa50524a1ef2516ab360164cfa1377a8ce0cb98dead93773de0acc19a8a505d722f3f6cfbd047ad58d785bec789b187f6a43fe8ebfbd128c71e706a64777bee589634833534a5470506bcffb75083d071d387f8be5864a6210aa57f7ade371539a0c3e6966947a00e3fab6d53a66b73ebbe7d4c3a7647845d10b4e72ac334747f688533eccbbe125170f735553a445023a05fd2543b3ac7422b57a79a445fd2464efa9bb0dfbc89a8828bf7c4322bdab17818781cd5d2f5aada7b19170ea9a233947349e59eff0bb9eeee34820b20d162236942877259e486cf5f58281441e23376793d6cea86f341fa7c5bf67d5fa7cfa002750cbae60dec2c113e7de7744620e67691d5c7d433a77dfe79c257ba2a1570d840d566585ebfc0f157ac05519dbe08d649677e6e067f8ad9e9d257d79d0bc09aa9701bf6e42559eddf5c76482a1c634cfc70db5bbe37858edff05e8bfc9a457b298172e39c18d86513f08796b82da67b7024289a76f8d09c96f912398593bcd1bd0fb87ddb1f77aaf02c5814b72974462b7299b61e439f7d7d52455da0c0ee414c29a11187789c6499fc425c9b89bd0e3673beac1060117b48d87e1a65c91d8f0112e264f9deb72a8bf3a81db2c73a095d0e4f9e1e80fd0d295319b3b5050197ff0b40648f6a1ec559415bf38f98e53d3260f6d5d6ab9c4604f03168f46c040fe3d1c44fa929137fd4194a81a45a64c9f08747dee5e498c06f8482f6a636de985f9ee6ee7daed9d332bf02f2e4c60e1fc733ebf9babe7aa6a1bc8b8f795dd15d429a18742caab7512c6584013c34658d10c257dfdfa50989598c7269f0c4cfc48e656d1cd50a874bfc0eff978ba1a06a1c19a7888fd3193c35b427012399f93e591eb79fd856a5913621496facb5d228cd8d5765d6b2a5357179dddf0a5c685d322744c17d3db30ae2f5cd33b637f4727681cfe8178d359b1be97f12cd6e10b5cd8fd764cd1b0690f627109454058c03256b5a82723989247d315e1c0970458744d356d3fb2f34e537ed888e331e8b3483cac952b60061531b9485ac172ff8b8916e9bbd18020344e1495003ae43679fbfc28e4df72bb40b43064424331c73dce5c55a3c89c05fb1d77d2d25293ba9277efe9ef1a86c9c0d553ddfd455082f50a7398dd07f8a1dd2ceb5fd6ec3efd70fca2c200cb626271348a9c52cd0dc37da99cba865cc0bb747064001b98ad63a6099563aa1c45209000d54c829acfc79e03f8272054850c570e83b06c4c02b6f43a5d88dbe1e622f8e648ef9e77a6c4f7c98e8843b8b2fa08592e8c108fb6ea865cd0d8202f903cb93fa4181c9cefcb21ef4e9656c00eff3498ba380374074ea81d9f52a4d5d9eb79d8a0861952710d74a13dee936a2eae37951d54616457eb771f9dd8975169badb2377c4b294e2260d75d24db51cb5364fb4f5df12136d43e2f2b501aab1d297e4c1c5f63b5ccccd268b2a227882baf5640feec24f6ec6d26d0eb346478bd87cd8905f131e32a2ad2a833be632e5bc632f64eb1316e6c3a4562b19d0f637b1cd121c3ff1df2dac7febbe18e7cc935c9a5fb2c932b698735a52862e1aa8e4965cc26cc8936a8ef686f9aff7f45b84f9d253cc01046adefbb1b41142b7b2cc3c3f6662c74cb7f229189b1ddbe4cb969d6b45bf4e990351bdffa603ef0c864e195b9f9120551b2cccb3237cb3b2a580d804fc7a1f9d90d6b6e66ce379b71f43f1a2b29feb3a5a4d039b2449f919503a40230eebfd3780e4afa38a4d86a43bfe9481f55f32fb55172aedbea983d9f06b2caa590a804b002614394d6592d0df2df00ef80e5ce70be90478a0bbe03b5e8c724ba74732df4b8bb59d0f8d40d2499c1b5d4d4725d082d6732f46aa3410860a8f26c04778e7f6401b55e5673fc101a2ebd194d8ad45e499e65f3d7d04c5a28667e60b26b1303cc364167be7e70dc73f5ead5e90270b75e86fa118beebc1d334ea917a4a4faae60e39990ee989e71ed25ebab7b7a9fe59bb61f0bc27ba1fbfbb7e195c51b2ae28e6ffaa153ddfecb02df90eafd05b915601253ba932be755947098ddbf3913bedb89072ccb8d06dceeab17815c1c69238509e54fa551aaa1ba44048a1464047865cf3f7c581c2c50b466d490947db8baf27a9977d18c5ca5cfef89cdb13eb537b1bf1b13a9f81b40980a7e5d9fd129ce7efe136189bfbe990ee2d24a7b236506b0337ac86400e95112867fc1447dd5c21bc892a4e3d6bd43c783a52f25aab8734eab1fa3ee482cb61ffb56a4a381c3b7ce87618dbc7b4f4ddb6d93b868ab7bf6951edc941e27ebf87851e4ca7d11cec8d09809aa1a60a5f807234c2bd3d52667a4ccadcbfcc05235dbba1c331c95d5ddd88ab642c3acfbcccdb357e1fa2dab0e52d6fc81bd5f8a047717880358c5391dbc556eb582e25ac801cc858b179030239d95b87b1c75d5759ffa3cbfa94870bcad44f9a22c4bd2be2b8cd153416d62171340252663d1cdd6657d3a6ab7882f839bf759f15a1668e5b98a1a30857e0deed6d274fab5c154c18665a882e0b68f68047cf152dee422744d195946ff99aa3739ed64e2992431b2d8280efc482ec909d6eae5be68f596ecf514b76e8018f5e30d1601367c4e1a7d2c0fa3fb22555f0ae5fc87093c2ce73369eaa1e64da831c618111b38e7e989422ddc5c139d371b3a86dca8e85322ddd3c09c0b593eaa0587832969017f27853fb9bcf7209d30de54ced6c1186e3ec9b2ddcd2720abab153ade8ee90db5c0bd15fb8acca56cce8bf5adb7c9d4510abab26bf6773a6e6cc80553febd2c33f2becebeeba16e8d87488fa997a74469d99209c44911e063a4f7d09f47d4e83acabdbfe417374ccde053fece324ce7a104cdc98e4612ff86e26bbef29598accf59e26ac5497518353e936e012a8c08259d17e9311f4268bcf3756bf20ca9bddfe5c1111f659ab66269bd30401e3d0a3443c6ebf7dcb323614ca72fd916673edb94464a52c9a54beb39d3e85da78dd3c3d9f4e96cb6dd5539d88c10c900103101586c803ee74741b77776b0c42c73a4f8a58298240026d737033dcb6d01a40ce93c73ef5a405e50d7136c214f16ce4cd73d6b4dc25feb1dca56a32c00ee7ab0609bf4e8ae3371cba26f62e4c1401ba689040e99838e433550e8c42113894ce8fc3d0332044fc1f54c3d35999e5ca9d78dd9ebc6f10a177444b4efec5c5762a404bc0e6ec4e07c2e763981cf5b5689989436978a733bf9317a79efa5d5cab30a472c0944e0164a6bc5bf002814604b1b8f2921e3374bd58ca866623004b9a5a97dfb13b6e36ddfecb12cb023b0ebaed509b2a4ed9df0b8db24c580d0716545a0dc011a2b6932476bac90d042263207c155437affd56df92ac9f928aabad2a14394179a7b4f1538bd0cc940908dba52ef1524ccba99972e47da62aeb09e290f0dc92a585ac132fc6f06000d14b553c00d027f29680411aedf69ccf77937514c4a9bf1ba975c665a0e722960892987f7b6dc48cf5dd24f19be73d4357bf6dd78028f12473b76e0a1e16d6c224bfdbb729f0bd910c3cf10a9ff9f52c4b8c3075d28fe1218a582e82ab4a52308bec31e6fd1e2cd6eeb3beb0128d98c74605d45643f58524c921540e16600066e9c5d9f9e051502df743b5851b8d88dc55326d18d7f0e4ef7e0ced8b96314f0f60cc8abfe0f821004d7fff54e4390a8fd4f6a85d3e99fc6728804d53d86bc77c44e02be4de6a5a9caa8727b32cd4e174ec3d8bfdfd61b37ae40494a852f695d6729d447dac6e0ab01cc9a917df5b18134329d367832d4d635ec1f334d90b09793eecfdb33435090154f3775565dbcad2fe72b1d929ba148c97b32a95d9a183cb45420c5240f248fdb274d3abc94e6fe3a298a39b8f90f49c80d451a90d135ea85f9a8698270a812aa6b3b9db7d8e4aa37904ca2c85bdc7ec86b032d6080130c7313cf91543466695fdb046e06f40a484f09ac3dcecf6dd7b61d1fadb6a4973c7036a079ebed4467ebd0205876324ec5278126a9889a421834e3c4fc4d9df50d2764b0d0a81a58f914e8eae64dfe1703dd53632b5002cb907ec9b87c23c57c127759a6f41d681f3651e5c4fe07b7ffab1c9919b6c89512aeeeabbebce7f78d4e3f622424db6f003d1ae58b1ed72e95cb8e6be37af058c2f362e43a797d2e2261a4e51e4b0b81e478c4d2dcd80f725530680454147b0f456bbb7f827fe002ee8df0561933dfe7de1c489fe92cd4269341e66f27c208b927bf0a2a3c86f8c85d278fc7e4dc28ce1ddb0462a573616b34e49b2323b7764c9b006d6c9e380cbed9f2bfede40dafcbda05e7cc7cb20dc94c0a86ab651bdcef262001bc425f7d781e6ad27891a3f4ab183c35886c396b2a78ccb86614197c7aff8ba261b0c239e39e7110243d9849937353dc03f36dfcedefb9c6ea6c0ef9a72d719e97d1149af22120c2a071d2fc32d03a7cb9b4baa4fd51f172d59e0a3476ba6cc96625a56407bd6e487938b8bcdd97f22329040f74c08553a26634b2a3e9bdf71de9be4581eb1f8cd75617e1897268c7cb62da89bc0ed61fb10f6af134ab475600c8a8195ecce91a7f6bc2a2fb21b910132efab44d2e193d51c816f90afa1e8d5d91e96f5b3e84fb6abab60189e965288ba5bbb97caa4992592cfd5c0ffca552c72396f3041102c7d36afe57fac7dcb150a4e1f495c96b09d9eb0b76a85113a4811a76d94c2606015fa771892b007f01484ff7fef3637759945cb1499d03f4e14a7aa3fd0ba114fdc660d0968a248caaf7defe679b1e8ed6015dc606f325123cbedf3154ed0ff963cd957bc0435f118c4ca305d709a53a71296ede40a26a0a86589b666b5e3c39c227134f89f778dda63ceabe9cd7b2cde4f06e23c153fff6ccd5e72552ad6acdacb75236dcccfce2d1e007cf0b4399effcdf3a8267e45503e69084defe4e39204e795803885a54e1993cc5c6afd15e7706b399218b370ecfa7bcd2eae2abda7d58a075ecf1680a373973e8b0c19df10912674d34a6594bddc70dc51f39e8", 0x1000}, {&(0x7f0000005600)="77777809ddf3756925a4fca5655a426acb277f7a663f329830d224c1f684565c5ff21eea5e876d5b436a464b00e067ec708669794352c0892b84d6efc6518b07207839da18badef843efee05683f86b021e91746e32525f91695160b2674104ec4e66b76d1ce2bf9093b923e1e3a1a800f33b057b0698013498e028250280f0ceaba12d2ebbaa63f0fc5d5d296d608f1283c2dcb04f7048008ecacf87f7523de092d066c54c753d2d0c954213f9d24939623613084fa6e8168b11c69fd65bab29d500d7f9ab4907fa0453e83fba02b9323176237ff15c1abff616a2ab78eccc07fec51de68ce00f3d1c0e25fa230", 0xee}, {&(0x7f0000005700)="d42890da25025422312d32adbc7de1697f2ebe19c212a929e74edc47bebebdfee269acb4254a7632cebd5b714e74c2d68ec97b9b205046c72b8771f010c1a72575ec28e47d15caed2dd9a28984dbd1a72788f263a87a4b2ee63e529910e3e5341ed548d6be0da61cd9e2f2166b07591b1f40120ec0d6769ef88aabd4917ee939cf5d13c7e573ac138014de65243c7a2780bcdb582f6ac862408cf6e6c782a4689c04afd5e09bf1bab3c2e074aad4cf51f8d2b7f091a2fb5e075447160e4b25", 0xbf}, {&(0x7f00000057c0)="fa92660311b2011d42313900f12811e4a48f9586ba246e89260f37d7e3217b91afe9a53be81b07b19cbf356253a772a05ab0dcbb", 0x34}], 0x8, &(0x7f0000005880)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r4}}}, @dstopts_2292={{0x130, 0x29, 0x4, {0x38, 0x22, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0xbb, 0x0, [0x2, 0xfffffffffffffff0, 0x6, 0x81, 0x9, 0x1ff, 0x9]}}, @jumbo, @ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @generic={0xa, 0xa5, "ff5b5cac27b23b4b27334a197f474d59d6d3809a99a75140590649c2b9812f2aeedddc57b9bb9b3541b6175acb15becc11ad0190fa002d18b9954c392f534772cfa31ca1761d6ab4d9dfe0a8b82b20fa5bf5b8693fb6dd168bb99174127abc265c0f0ba64606c9bd600d4c44403b7d4bba0f25d969950d10a8d04927f1d94f1e44c19e334e7c6990e44badf0d94773c8278a8fd43ea552b45dc4ea41b67db700627dea350f"}, @pad1, @jumbo={0xc2, 0x4, 0x1}]}}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x1, 0x4, '\x00', [@pad1, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @mcast1}, @pad1, @jumbo={0xc2, 0x4, 0x3bd}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x88, 0x4, 0x1, 0x5, 0x0, [@dev={0xfe, 0x80, '\x00', 0x14}, @local]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r3}}}, @hopopts={{0xf0, 0x29, 0x36, {0x73, 0x1a, '\x00', [@pad1, @pad1, @generic={0x5, 0xc1, "4e9be7a550e9996f602a68e5ae63fd3dc659dbd886c25a010874f196c11bac614a1534c7a2872031d033aa91f1d21353c8809d38b0002ee3f1fc54999a9db9d489835da8a864e87c8b8bc9632b5703c1f1ea4ddb775af6b9c39bcf9627537615f97b4d76b48c29b11b20e60c3a0f95df69ba0eeb3c6a738d6123a560b9c6e190e1b4c2c577d80b10d61dd8a1d1c3ad5da3e3245d04819fff6fd04ef248977883628c2e36f5b0bccb3f89cc8c03269e4d1f2fa2686f42e46cbc71498c2de02c84ed"}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x6c, 0x8, 0x2, 0x7f, 0x0, [@mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @dstopts={{0x20, 0x29, 0x37, {0xc, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x6c, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x8, {0x0, 0x0, 0x40, 0x800}}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}], 0x3b0}, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005d40)={&(0x7f0000005c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x72, 0x0, 0x2c, 0x3}, @volatile={0x1, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x61, 0x5f, 0x30, 0x0]}}, &(0x7f0000005cc0)=""/107, 0x3a, 0x6b, 0x1, 0x6}, 0x20) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000005d80), r12) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000005dc0)={{{@in=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@private}}, &(0x7f0000005ec0)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000005f00)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@empty, 0x4e20, 0x2000, 0x4e23, 0x1, 0x2, 0x0, 0xa0, 0x0, 0x0, r13}, {0x6a, 0x8, 0x9, 0xffffffffffffffff, 0x3, 0x0, 0x7f, 0x81}, {0x5, 0x0, 0xff9, 0x1}, 0x1, 0x6e6bb2, 0x0, 0x1, 0x0, 0x1}, {{@in6=@loopback, 0x4d2, 0x7b}, 0xa, @in=@remote, 0x3501, 0x0, 0x1, 0xce, 0x2, 0x7, 0x2}}, 0xe8) (async) accept$alg(r11, 0x0, 0x0) 556.325475ms ago: executing program 1 (id=1004): r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r1, 0x0, 0x0, 0x80, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x28, 0x1, 'caif0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x800) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x44, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x44}}, 0x0) sendto$inet(r0, &(0x7f0000000100)='h', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) sendto$inet(r0, &(0x7f0000000300)="99", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) (async) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) (async) r6 = socket(0x15, 0x5, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x85, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 32) socket$inet6(0xa, 0x1, 0x0) (async, rerun: 32) r8 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000900000000000000000100008500000000000000000300000000000000000000000000000901"], 0x0, 0x4a}, 0x20) (async) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c8010000100033000000000000000000ffffffff000000000000000000000000ac141400000000000000000000000d00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1c8}}, 0x0) (async) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000340)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b", 0x48}], 0x1) 549.890131ms ago: executing program 0 (id=1005): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110960000000000040f0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000027c000004000000140009"], 0x2c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) bpf$BPF_PROG_QUERY(0x11, &(0x7f0000000240)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x0, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000100), 0x10) write(r1, &(0x7f0000000b80)="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", 0x1000) sendmsg$can_bcm(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001780)=ANY=[], 0x48}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r4) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r4) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r5, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r5}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r4], 0x7c}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x80000000}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}]}, 0x2c}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) 505.730547ms ago: executing program 3 (id=1006): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1c, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1801000000000000000000000000000085"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, r0}, 0x90) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x20010380) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x70}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x300040a0}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000110800080000007bbfed58b30dfd8700000400000800000000000000081b030001000000"], 0x28}}, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r3, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, 0x0) socket(0x11, 0x3, 0x0) socket(0x2, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) unshare(0x2000400) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) connect$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x902}, 0xe) write$binfmt_script(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1803}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 416.221191ms ago: executing program 4 (id=1007): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x5, [@union={0x7, 0xa, 0x0, 0x5, 0x1, 0x1000, [{0x0, 0x1, 0x3}, {0xe, 0x5, 0x11f0}, {0xb, 0x2, 0x2}, {0x1, 0x0, 0x10000}, {0x2, 0x2, 0x91}, {0xb, 0x1, 0xd1d8}, {0x2, 0x4, 0x3}, {0xd, 0x7, 0x3}, {0x7, 0x1, 0x800}, {0x2, 0x4, 0x5}]}]}, {0x0, [0x0, 0x0, 0x20]}}, 0x0, 0xa1}, 0x20) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x5, [@union={0x7, 0xa, 0x0, 0x5, 0x1, 0x1000, [{0x0, 0x1, 0x3}, {0xe, 0x5, 0x11f0}, {0xb, 0x2, 0x2}, {0x1, 0x0, 0x10000}, {0x2, 0x2, 0x91}, {0xb, 0x1, 0xd1d8}, {0x2, 0x4, 0x3}, {0xd, 0x7, 0x3}, {0x7, 0x1, 0x800}, {0x2, 0x4, 0x5}]}]}, {0x0, [0x0, 0x0, 0x20]}}, 0x0, 0xa1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020101090800000000170006ffffff0003000600100000000200000060000009f9ff0f0005000000030005007217440502"], 0x40}}, 0x0) (async) sendmsg$key(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020101090800000000170006ffffff0003000600100000000200000060000009f9ff0f0005000000030005007217440502"], 0x40}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200005a0000000000000000000000850000002700000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000240)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr, @multicast2}}}], 0x38}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f0000000300)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) connect$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7fff}, 0xe) (async) connect$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7fff}, 0xe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000000000001000004000000000300ef3c"], &(0x7f0000000280)=""/253, 0x35, 0xfd, 0x8}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000000000001000004000000000300ef3c"], &(0x7f0000000280)=""/253, 0x35, 0xfd, 0x8}, 0x20) 406.029756ms ago: executing program 1 (id=1008): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) (async) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r0, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000200)=""/2, 0x2}], 0x1}}], 0x1, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r11, &(0x7f0000000280)={@void, @val={0x1}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4a) 372.406219ms ago: executing program 2 (id=1009): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000110000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x10) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000380)={0x9997e71fc4e0a5aa}) close(0x4) 292.313847ms ago: executing program 3 (id=1010): r0 = socket$inet6(0xa, 0x3, 0x1) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x80fe) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) connect$llc(r2, &(0x7f0000000240)={0x1a, 0x321, 0xb, 0x1, 0x5, 0x9, @remote}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x18, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xfff0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a400000e6ff0900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x100, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x408c0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x9}}]}, 0x2c}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x9}, &(0x7f00000000c0)=0x8) 291.833018ms ago: executing program 0 (id=1011): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x5, 0x5, 0x20, @remote, @local, 0x8000, 0x700, 0xfffffffc, 0xf898}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r0, 0x2f, 0x3, 0x6, 0x5, 0x0, @loopback, @empty, 0x80, 0x7, 0x7, 0x8}}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r1, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x5}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f00000002c0)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="22f8213dd551da3a5c5f5f1acb390a77399b16b302f6a518afe347eba347c5f20f6a81177be2c085b5134a062952f2e43cc9c17bc9b48de995bc207f763a3c357112dc05e006c93130db66fad8d7e4d14c632c14416e13a8903af5c4f32b9e92ed6b8413816519ec618e6b1da6d84b8af703ff4c465b6a9671fb275cd2512c4b4bfc22300b6f1896d57dfd800ba94264b4c59a79781c25232b1ac9798f527a565fc84fd03910eb76f6df0ece36ffc5662803f7fdbcdb9e4c084e4f56b2af640a4c9564f39ef6f3e9c056cd3d8f076a839da477ca48d91c904472934ad3", 0xdd, 0x40000, &(0x7f0000000400)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r0, 0x29, 0xc7, 0x9, 0x9, 0x5, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2ba893ab5c2e031c, 0x40, 0x9, 0x9}}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x1410, 0x10, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000640)={'ipvlan0\x00', @multicast}) bpf$ENABLE_STATS(0x20, &(0x7f0000000680), 0x4) recvfrom(r2, &(0x7f00000006c0)=""/176, 0xb0, 0x0, &(0x7f0000000780)=@rc={0x1f, @none, 0x3c}, 0x80) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000800)=@req3={0x9, 0x4, 0x800, 0x9, 0x6746, 0x5}, 0x1c) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000840)={0x0, 0x5}, 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r7, &(0x7f0000000a00)={&(0x7f0000000880), 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xc}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xc3}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40040001) sendto$inet(r4, &(0x7f0000000a40)="b580a026d518a0038909d59b63fea23e717ee0bb2ba8d0e6adbddc2a90b00f47bfc8fb951ee466162aa04bc1aa70382476b20a46856d625e4ff138b1e2b709fd63fbf737633d04c32a34ed84d160d49814989c31bd70d0573aa17cfe7de1d40cf21e48c3a70ba541133e3fbffefab0a10598e268a9e75a52489322d418a4cec1", 0x80, 0x44, &(0x7f0000000ac0)={0x2, 0x4e22, @remote}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000b00), 0x4) recvfrom$rxrpc(r6, &(0x7f0000000b40)=""/1, 0x1, 0x0, &(0x7f0000000b80)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x8, @loopback, 0x5}}, 0x24) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c40)=@nat={'nat\x00', 0x1b, 0x5, 0x690, 0x488, 0x488, 0xffffffff, 0x238, 0x488, 0x5c0, 0x5c0, 0xffffffff, 0x5c0, 0x5c0, 0x5, &(0x7f0000000bc0), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x16}, @remote, [0x0, 0xffffff00, 0x0, 0xff], [0xffffffff, 0xffffffff, 0xffff00], 'ip6gre0\x00', 'veth0_macvtap\x00', {0xff}, {}, 0x87, 0x2, 0x0, 0x40}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv6=@remote, @ipv6=@private1, @port=0x4e23, @icmp_id=0x64}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0x6, 0x4}}, @common=@icmp6={{0x28}, {0x3, "bc51"}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x16, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3d}, @ipv6=@mcast1, @icmp_id=0xbe89, @port=0x4e21}}}, {{@ipv6={@mcast2, @mcast2, [0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000, 0xffffffff], 'wlan0\x00', 'hsr0\x00', {}, {0xff}, 0x4, 0xfa, 0x4, 0x20}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x80000000}}, @common=@rt={{0x138}, {0xb47, [0x6a8, 0x1], 0x4, 0x0, 0x1, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @private1, @mcast1, @dev={0xfe, 0x80, '\x00', 0x18}, @remote, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @empty, @private0, @dev={0xfe, 0x80, '\x00', 0x16}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}], 0x8}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xb, @ipv4=@loopback, @ipv4=@multicast2, @port=0x4e21, @icmp_id=0x67}}}, {{@ipv6={@mcast2, @remote, [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xff, 0xff], 'netpci0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x29, 0xbc, 0x4, 0x8}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x3, 0x0, 0x0, [0xff80, 0x7, 0x2, 0x1, 0x3, 0x40, 0x9708, 0xea, 0x1, 0x1731, 0x2, 0x8, 0x3, 0x8, 0x8001, 0x1ff], 0xc}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xd, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4=@empty, @gre_key=0x3, @port=0x4e20}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000001340)={0x8, 0x1, 0x9c8}) socket(0x29, 0x3, 0x7) socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x7c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4800) 218.65617ms ago: executing program 1 (id=1012): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @broadcast}, {0x0, @random="9f444415c302"}, 0x0, {0x2, 0x0, @broadcast}, 'xfrm0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x90, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xf}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xdc8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x90}}, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000014001a80100005800c00018008000100"], 0x34}}, 0x0) 183.317855ms ago: executing program 2 (id=1013): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x1, 0x1ea7c86, 0x0, 0x2120, 0x1, 0x7fffffff, '\x00', r4, r3, 0x0, 0x1, 0x1}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) gettid() r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="88008000080211000001080211000000505050505050d0ffebe5a5e0483c8ca4688a000000000000"], 0x28) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_80211_inject_frame(0x0, &(0x7f00000008c0)=ANY=[], 0x3c) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000003e0095"], &(0x7f0000000000)='syzkaller\x00'}, 0xc3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='contention_begin\x00', r8}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x400448ca, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x0, 0x0, 0x7}}]}}]}, 0x44}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xffff, '\x00', r11, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x48) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x3}) 72.429209ms ago: executing program 4 (id=1014): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="05000000010000", 0x7) r2 = socket(0x1, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000023000b03d05a806f8c6394f91f24fc60", 0x14}], 0x1}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x3c}}, 0x0) 0s ago: executing program 1 (id=1015): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x2, 0x80805, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x7f01, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast}}}}) getpeername$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000340)={0x0, @multicast1, @dev}, &(0x7f0000000380)=0xc) sendmsg$nl_route(r8, &(0x7f0000000a40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000b00)=ANY=[@ANYBLOB="8c0500001e0000032dbd7000fedbdf2507000000", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="056ec8681a000010"], 0x58c}, 0x1, 0x0, 0x0, 0x4040841}, 0x884) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f00000000c0)=0x1, 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYRES8=r7, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r4], 0x4}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r11, @ANYRES16=r12, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0700000000020000000005000000180001801400020073797a5f74756e00000000000000005a0c00038004000380040001"], 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="4c000000816578b31a752142fb44c50e652c0da4b48a8f2e6ba7049ca0efe279d8e69a7df82ee2395390ee920e1b8554bd01a488bb63", @ANYRES16=r12, @ANYBLOB="000227bd7000fcdbdf251400000008000d000e00000008000600f4ffffff08001600f70000000800170003000000080006000400000008000a000d00000005000b0000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) mmap$xdp(&(0x7f00007fb000/0x4000)=nil, 0x4000, 0x2000006, 0x40010, 0xffffffffffffffff, 0x100000000) sendfile(r6, r5, 0x0, 0x100000002) r13 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r13, &(0x7f0000001640), 0x300, 0x2, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="a787000000000000"], 0x14}}, 0x0) kernel console output (not intermixed with test programs): do_syscall_64+0xf3/0x230 [ 75.264338][ T5821] ? clear_bhb_loop+0x35/0x90 [ 75.269014][ T5821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.274902][ T5821] RIP: 0033:0x7f9d57579e79 [ 75.279307][ T5821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.299343][ T5821] RSP: 002b:00007f9d58281038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 75.307752][ T5821] RAX: ffffffffffffffda RBX: 00007f9d57715f80 RCX: 00007f9d57579e79 [ 75.315714][ T5821] RDX: 03fffffffffffec3 RSI: 0000000020004400 RDI: 0000000000000004 [ 75.323676][ T5821] RBP: 00007f9d58281090 R08: 0000000000000000 R09: 0000000000000000 [ 75.331723][ T5821] R10: 0000000000000121 R11: 0000000000000246 R12: 0000000000000002 [ 75.339681][ T5821] R13: 0000000000000000 R14: 00007f9d57715f80 R15: 00007fff21497e38 [ 75.347654][ T5821] [ 75.377481][ T5826] netlink: 'syz.0.145': attribute type 11 has an invalid length. [ 75.905240][ T5843] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 75.915085][ T5843] macvtap1: entered allmulticast mode [ 75.922245][ T5843] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 76.123955][ T5860] vlan2: entered promiscuous mode [ 76.849157][ T8] cfg80211: failed to load regulatory.db [ 76.885076][ T5886] netlink: 'syz.2.163': attribute type 1 has an invalid length. [ 76.961357][ T5892] netlink: 'syz.1.164': attribute type 14 has an invalid length. [ 77.361730][ T5905] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.370430][ T5905] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.498436][ T5900] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.505721][ T5900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.514152][ T5900] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.521387][ T5900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.578803][ T5900] bridge0: entered promiscuous mode [ 77.594593][ T5900] bridge0: entered allmulticast mode [ 77.710533][ T29] audit: type=1107 audit(1724411881.413:2): pid=5917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='q33x3êÀÎÅ‚??€Úï×¾‰œuÑôêúRfíÞ]ú©U"òžž¥ÂB¹•¯Æej?¯'LŽzÊÌÐb ü’Åjܘ¼$Ò‘L¬ ¨¡CD´­wc¤9”Dïp˜¾þÚG;¢h/žgųýöoL@¸cÙ;\“55¯äY“ß'"0p(µ¹üx' [ 77.805261][ T29] audit: type=1107 audit(1724411881.453:3): pid=5917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='q33x3êÀÎÅ‚??€Úï×¾‰œuÑôêúRfíÞ]ú©U"òžž¥ÂB¹•¯Æej?¯'LŽzÊÌÐb ü’Åjܘ¼$Ò‘L¬ ¨¡CD´­wc¤9”Dïp˜¾þÚG;¢h/žgųýöoL@¸cÙ;\“55¯äY“ß'"0p(µ¹üx' [ 78.083179][ T5932] __nla_validate_parse: 8 callbacks suppressed [ 78.083199][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.174'. [ 78.449743][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 78.503345][ T5949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.178'. [ 78.514071][ T5949] netlink: 'syz.4.178': attribute type 18 has an invalid length. [ 78.561673][ T5950] netlink: 'syz.2.180': attribute type 1 has an invalid length. [ 78.630478][ T5954] pimreg: entered allmulticast mode [ 78.653475][ T5954] pimreg: left allmulticast mode [ 78.679922][ T5956] netlink: 104 bytes leftover after parsing attributes in process `syz.2.182'. [ 78.692266][ T5957] netlink: 104 bytes leftover after parsing attributes in process `syz.2.182'. [ 79.244275][ T5985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.188'. [ 79.474907][ T5232] Bluetooth: hci4: command 0x0405 tx timeout [ 79.551329][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.192'. [ 80.071658][ T6016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.199'. [ 80.132962][ T6018] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 80.550661][ T6026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 80.650214][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.203'. [ 80.967209][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'. [ 81.707109][ T6094] ebt_among: dst integrity fail: 101 [ 81.769005][ T6094] ebt_among: dst integrity fail: 101 [ 82.823992][ T6132] bond0: entered promiscuous mode [ 82.834636][ T6132] bond_slave_0: entered promiscuous mode [ 82.851252][ T6132] bond_slave_1: entered promiscuous mode [ 82.976900][ T6142] 0ªX¹¦À: renamed from caif0 [ 83.005858][ T6142] 0ªX¹¦À: entered allmulticast mode [ 83.025374][ T6142] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 83.052861][ T6138] netlink: 'syz.2.230': attribute type 1 has an invalid length. [ 83.377397][ T6162] __nla_validate_parse: 3 callbacks suppressed [ 83.377416][ T6162] netlink: 40 bytes leftover after parsing attributes in process `syz.1.236'. [ 83.744264][ T6170] netlink: 'syz.3.238': attribute type 58 has an invalid length. [ 83.770612][ T6170] netlink: 20 bytes leftover after parsing attributes in process `syz.3.238'. [ 83.815452][ T6154] netlink: 60 bytes leftover after parsing attributes in process `syz.0.235'. [ 83.839816][ T6154] unsupported nlmsg_type 40 [ 84.127315][ T6187] Cannot find add_set index 0 as target [ 84.150338][ T6187] x_tables: duplicate underflow at hook 1 [ 84.751356][ T6216] hsr0: entered promiscuous mode [ 84.893917][ T6225] sctp: [Deprecated]: syz.4.255 (pid 6225) Use of struct sctp_assoc_value in delayed_ack socket option. [ 84.893917][ T6225] Use struct sctp_sack_info instead [ 84.943360][ T6229] netlink: 'syz.1.253': attribute type 10 has an invalid length. [ 84.943951][ T6226] sctp: [Deprecated]: syz.4.255 (pid 6226) Use of struct sctp_assoc_value in delayed_ack socket option. [ 84.943951][ T6226] Use struct sctp_sack_info instead [ 85.131053][ T6242] netlink: 40 bytes leftover after parsing attributes in process `syz.2.259'. [ 85.619594][ T6276] netlink: 1076 bytes leftover after parsing attributes in process `syz.0.269'. [ 85.658216][ T6276] netlink: 1076 bytes leftover after parsing attributes in process `syz.0.269'. [ 85.750352][ T6276] netlink: 1076 bytes leftover after parsing attributes in process `syz.0.269'. [ 85.840612][ T6286] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 85.915207][ T6288] xt_TPROXY: Can be used only with -p tcp or -p udp [ 86.308488][ T6294] netlink: 'syz.4.273': attribute type 4 has an invalid length. [ 86.366304][ T6294] netlink: 'syz.4.273': attribute type 4 has an invalid length. [ 86.548444][ T6303] tipc: Enabling not permitted [ 86.570535][ T6303] tipc: Enabling of bearer rejected, failed to enable media [ 87.251798][ T6334] netlink: 132 bytes leftover after parsing attributes in process `syz.1.282'. [ 87.407910][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.280'. [ 87.501020][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'. [ 88.285021][ T6363] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 88.554816][ T6386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.295'. [ 88.823762][ T6402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.299'. [ 88.866430][ T6406] netlink: 72 bytes leftover after parsing attributes in process `syz.3.301'. [ 89.032743][ T6413] FAULT_INJECTION: forcing a failure. [ 89.032743][ T6413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.070351][ T6413] CPU: 0 UID: 0 PID: 6413 Comm: syz.3.304 Not tainted 6.11.0-rc3-syzkaller-00542-gbfc52deef5ed #0 [ 89.080992][ T6413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 89.091069][ T6413] Call Trace: [ 89.094368][ T6413] [ 89.097312][ T6413] dump_stack_lvl+0x241/0x360 [ 89.102013][ T6413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.107232][ T6413] ? __pfx__printk+0x10/0x10 [ 89.111853][ T6413] ? __pfx_lock_release+0x10/0x10 [ 89.116909][ T6413] should_fail_ex+0x3b0/0x4e0 [ 89.121608][ T6413] _copy_from_user+0x2f/0xe0 [ 89.126221][ T6413] copy_msghdr_from_user+0xae/0x680 [ 89.131440][ T6413] ? __pfx___might_resched+0x10/0x10 [ 89.136744][ T6413] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 89.142588][ T6413] ? __might_fault+0xaa/0x120 [ 89.147290][ T6413] do_recvmmsg+0x40f/0xae0 [ 89.151732][ T6413] ? __pfx_lock_release+0x10/0x10 [ 89.156786][ T6413] ? __pfx_do_recvmmsg+0x10/0x10 [ 89.161819][ T6413] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 89.167739][ T6413] ? ksys_write+0x23e/0x2c0 [ 89.172268][ T6413] ? __pfx_lock_release+0x10/0x10 [ 89.177327][ T6413] ? vfs_write+0x7c4/0xc90 [ 89.181778][ T6413] ? __mutex_unlock_slowpath+0x21d/0x750 [ 89.187443][ T6413] ? __fget_files+0x3f6/0x470 [ 89.192145][ T6413] __x64_sys_recvmmsg+0x199/0x250 [ 89.197179][ T6413] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 89.202724][ T6413] ? do_syscall_64+0x100/0x230 [ 89.207493][ T6413] ? do_syscall_64+0xb6/0x230 [ 89.212267][ T6413] do_syscall_64+0xf3/0x230 [ 89.216867][ T6413] ? clear_bhb_loop+0x35/0x90 [ 89.221543][ T6413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.227432][ T6413] RIP: 0033:0x7f9d57579e79 [ 89.231839][ T6413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.251436][ T6413] RSP: 002b:00007f9d58281038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 89.259844][ T6413] RAX: ffffffffffffffda RBX: 00007f9d57715f80 RCX: 00007f9d57579e79 [ 89.267807][ T6413] RDX: 03fffffffffffec3 RSI: 0000000020004400 RDI: 0000000000000004 [ 89.275797][ T6413] RBP: 00007f9d58281090 R08: 0000000000000000 R09: 0000000000000000 [ 89.283779][ T6413] R10: 0000000000000121 R11: 0000000000000246 R12: 0000000000000002 [ 89.291773][ T6413] R13: 0000000000000000 R14: 00007f9d57715f80 R15: 00007fff21497e38 [ 89.299758][ T6413] [ 89.373571][ T6419] ieee802154 phy0 wpan0: encryption failed: -90 [ 89.423724][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'. [ 89.550008][ T6426] netlink: 'syz.2.308': attribute type 4 has an invalid length. [ 90.001416][ T6444] netlink: 40 bytes leftover after parsing attributes in process `syz.0.314'. [ 90.297638][ T6463] FAULT_INJECTION: forcing a failure. [ 90.297638][ T6463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.336266][ T6463] CPU: 1 UID: 0 PID: 6463 Comm: syz.3.319 Not tainted 6.11.0-rc3-syzkaller-00542-gbfc52deef5ed #0 [ 90.346911][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 90.357000][ T6463] Call Trace: [ 90.360297][ T6463] [ 90.363253][ T6463] dump_stack_lvl+0x241/0x360 [ 90.367957][ T6463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.373171][ T6463] ? __pfx__printk+0x10/0x10 [ 90.377786][ T6463] ? __pfx_lock_release+0x10/0x10 [ 90.382838][ T6463] should_fail_ex+0x3b0/0x4e0 [ 90.387532][ T6463] _copy_from_user+0x2f/0xe0 [ 90.392142][ T6463] copy_msghdr_from_user+0xae/0x680 [ 90.397361][ T6463] ? __pfx___might_resched+0x10/0x10 [ 90.402669][ T6463] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 90.408508][ T6463] ? __might_fault+0xaa/0x120 [ 90.413206][ T6463] do_recvmmsg+0x40f/0xae0 [ 90.417647][ T6463] ? __pfx_lock_release+0x10/0x10 [ 90.422690][ T6463] ? __pfx_do_recvmmsg+0x10/0x10 [ 90.427662][ T6463] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 90.433579][ T6463] ? ksys_write+0x23e/0x2c0 [ 90.438104][ T6463] ? __pfx_lock_release+0x10/0x10 [ 90.443161][ T6463] ? vfs_write+0x7c4/0xc90 [ 90.447603][ T6463] ? __mutex_unlock_slowpath+0x21d/0x750 [ 90.453262][ T6463] ? __fget_files+0x3f6/0x470 [ 90.457974][ T6463] __x64_sys_recvmmsg+0x199/0x250 [ 90.463020][ T6463] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 90.468584][ T6463] ? do_syscall_64+0x100/0x230 [ 90.473360][ T6463] ? do_syscall_64+0xb6/0x230 [ 90.478050][ T6463] do_syscall_64+0xf3/0x230 [ 90.482563][ T6463] ? clear_bhb_loop+0x35/0x90 [ 90.487261][ T6463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.493167][ T6463] RIP: 0033:0x7f9d57579e79 [ 90.497596][ T6463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.517225][ T6463] RSP: 002b:00007f9d58281038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 90.525667][ T6463] RAX: ffffffffffffffda RBX: 00007f9d57715f80 RCX: 00007f9d57579e79 [ 90.533702][ T6463] RDX: 03fffffffffffec3 RSI: 0000000020004400 RDI: 0000000000000004 [ 90.541695][ T6463] RBP: 00007f9d58281090 R08: 0000000000000000 R09: 0000000000000000 [ 90.549698][ T6463] R10: 0000000000000121 R11: 0000000000000246 R12: 0000000000000002 [ 90.557704][ T6463] R13: 0000000000000000 R14: 00007f9d57715f80 R15: 00007fff21497e38 [ 90.565715][ T6463] [ 91.484769][ T6511] FAULT_INJECTION: forcing a failure. [ 91.484769][ T6511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.547678][ T6511] CPU: 0 UID: 0 PID: 6511 Comm: syz.0.332 Not tainted 6.11.0-rc3-syzkaller-00542-gbfc52deef5ed #0 [ 91.558321][ T6511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 91.568373][ T6511] Call Trace: [ 91.571642][ T6511] [ 91.574574][ T6511] dump_stack_lvl+0x241/0x360 [ 91.579257][ T6511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.584449][ T6511] ? __pfx__printk+0x10/0x10 [ 91.589126][ T6511] ? __pfx_lock_release+0x10/0x10 [ 91.594151][ T6511] should_fail_ex+0x3b0/0x4e0 [ 91.598822][ T6511] _copy_from_user+0x2f/0xe0 [ 91.603406][ T6511] copy_msghdr_from_user+0xae/0x680 [ 91.608616][ T6511] ? __pfx___might_resched+0x10/0x10 [ 91.613904][ T6511] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 91.619719][ T6511] ? __might_fault+0xaa/0x120 [ 91.624405][ T6511] do_recvmmsg+0x40f/0xae0 [ 91.628821][ T6511] ? __pfx_lock_release+0x10/0x10 [ 91.633850][ T6511] ? __pfx_do_recvmmsg+0x10/0x10 [ 91.638793][ T6511] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 91.644687][ T6511] ? ksys_write+0x23e/0x2c0 [ 91.649182][ T6511] ? __pfx_lock_release+0x10/0x10 [ 91.654202][ T6511] ? vfs_write+0x7c4/0xc90 [ 91.658617][ T6511] ? __mutex_unlock_slowpath+0x21d/0x750 [ 91.664246][ T6511] ? __fget_files+0x3f6/0x470 [ 91.668934][ T6511] __x64_sys_recvmmsg+0x199/0x250 [ 91.673961][ T6511] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 91.679505][ T6511] ? do_syscall_64+0x100/0x230 [ 91.684266][ T6511] ? do_syscall_64+0xb6/0x230 [ 91.688935][ T6511] do_syscall_64+0xf3/0x230 [ 91.693429][ T6511] ? clear_bhb_loop+0x35/0x90 [ 91.698100][ T6511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.703984][ T6511] RIP: 0033:0x7f190f179e79 [ 91.708390][ T6511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.727992][ T6511] RSP: 002b:00007f190fe8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 91.736397][ T6511] RAX: ffffffffffffffda RBX: 00007f190f315f80 RCX: 00007f190f179e79 [ 91.744355][ T6511] RDX: 03fffffffffffec3 RSI: 0000000020004400 RDI: 0000000000000004 [ 91.752312][ T6511] RBP: 00007f190fe8e090 R08: 0000000000000000 R09: 0000000000000000 [ 91.760271][ T6511] R10: 0000000000000121 R11: 0000000000000246 R12: 0000000000000002 [ 91.768231][ T6511] R13: 0000000000000000 R14: 00007f190f315f80 R15: 00007ffd2e0522a8 [ 91.776560][ T6511] [ 92.107117][ T6522] netlink: 'syz.3.335': attribute type 4 has an invalid length. [ 117.190520][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 117.205769][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 117.214073][ T5230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 117.244683][ T5230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 117.254858][ T5230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 117.269162][ T5230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 117.284119][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 117.297364][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 117.306351][ T5230] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 117.314008][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 117.327600][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 117.335224][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 117.341798][ T5238] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 117.356679][ T5238] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 117.365062][ T5238] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 117.380537][ T5238] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 117.388261][ T5232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 117.399459][ T5238] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 117.400776][ T5232] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 117.406899][ T5238] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 117.421838][ T5238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 117.430806][ T5238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 117.439400][ T5238] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 117.447143][ T5238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 117.530698][ T5230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.548811][ T5230] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.558139][ T5230] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.569766][ T5230] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.583563][ T5230] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 117.592572][ T5230] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.140899][ T67] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.273542][ T67] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.327674][ T6554] chnl_net:caif_netlink_parms(): no params data found [ 118.350564][ T67] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.376707][ T6558] chnl_net:caif_netlink_parms(): no params data found [ 118.421992][ T67] bond0: (slave netdevsim0): Releasing backup interface [ 118.441794][ T67] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.467495][ T6553] chnl_net:caif_netlink_parms(): no params data found [ 118.629987][ T6561] chnl_net:caif_netlink_parms(): no params data found [ 118.722901][ T6557] chnl_net:caif_netlink_parms(): no params data found [ 118.761442][ T6558] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.768868][ T6558] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.776882][ T6558] bridge_slave_0: entered allmulticast mode [ 118.783624][ T6558] bridge_slave_0: entered promiscuous mode [ 118.804398][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.814190][ T6554] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.821630][ T6554] bridge_slave_0: entered allmulticast mode [ 118.829399][ T6554] bridge_slave_0: entered promiscuous mode [ 118.895540][ T6558] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.902677][ T6558] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.911374][ T6558] bridge_slave_1: entered allmulticast mode [ 118.919502][ T6558] bridge_slave_1: entered promiscuous mode [ 118.930332][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.938532][ T6554] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.945869][ T6554] bridge_slave_1: entered allmulticast mode [ 118.952594][ T6554] bridge_slave_1: entered promiscuous mode [ 118.971586][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.978884][ T6553] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.987118][ T6553] bridge_slave_0: entered allmulticast mode [ 118.993846][ T6553] bridge_slave_0: entered promiscuous mode [ 119.090702][ T6554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.100294][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.107799][ T6553] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.116399][ T6553] bridge_slave_1: entered allmulticast mode [ 119.123843][ T6553] bridge_slave_1: entered promiscuous mode [ 119.208091][ T6554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.277924][ T6561] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.285514][ T6561] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.292679][ T6561] bridge_slave_0: entered allmulticast mode [ 119.301047][ T6561] bridge_slave_0: entered promiscuous mode [ 119.312700][ T6558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.345331][ T6553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.358652][ T6553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.389215][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 119.397987][ T54] Bluetooth: hci2: command tx timeout [ 119.398459][ T54] Bluetooth: hci1: command tx timeout [ 119.407715][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.428749][ T6557] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.436112][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.443287][ T6557] bridge_slave_0: entered allmulticast mode [ 119.451159][ T6557] bridge_slave_0: entered promiscuous mode [ 119.460478][ T6557] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.467951][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.475440][ T6557] bridge_slave_1: entered allmulticast mode [ 119.486458][ T6557] bridge_slave_1: entered promiscuous mode [ 119.493044][ T6561] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.500618][ T6561] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.508008][ T6561] bridge_slave_1: entered allmulticast mode [ 119.514941][ T6561] bridge_slave_1: entered promiscuous mode [ 119.525556][ T6558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.554997][ T54] Bluetooth: hci5: command tx timeout [ 119.555027][ T5230] Bluetooth: hci6: command tx timeout [ 119.574251][ T6554] team0: Port device team_slave_0 added [ 119.611902][ T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.634663][ T54] Bluetooth: hci0: command tx timeout [ 119.671746][ T6554] team0: Port device team_slave_1 added [ 119.733838][ T6557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.761993][ T6558] team0: Port device team_slave_0 added [ 119.771455][ T6558] team0: Port device team_slave_1 added [ 119.788520][ T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.826523][ T6553] team0: Port device team_slave_0 added [ 119.847593][ T6553] team0: Port device team_slave_1 added [ 119.890678][ T6557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.917651][ T6561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.943286][ T6561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.012042][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.019464][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.050288][ T6554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.077909][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.092766][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.119799][ T6554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.146188][ T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.240564][ T6558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.248498][ T6558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.279892][ T6558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.330101][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.342664][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.372668][ T6553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.386667][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.393673][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.419777][ T6553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.437145][ T6557] team0: Port device team_slave_0 added [ 120.448714][ T6561] team0: Port device team_slave_0 added [ 120.458886][ T6558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.466191][ T6558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.492425][ T6558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.538562][ T6554] hsr_slave_0: entered promiscuous mode [ 120.545547][ T6554] hsr_slave_1: entered promiscuous mode [ 120.552771][ T6554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.560575][ T6554] Cannot create hsr debugfs directory [ 120.593434][ T6557] team0: Port device team_slave_1 added [ 120.619967][ T6561] team0: Port device team_slave_1 added [ 120.691858][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.699161][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.725373][ T6557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.759231][ T6558] hsr_slave_0: entered promiscuous mode [ 120.766473][ T6558] hsr_slave_1: entered promiscuous mode [ 120.772838][ T6558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.780470][ T6558] Cannot create hsr debugfs directory [ 120.816020][ T6553] hsr_slave_0: entered promiscuous mode [ 120.822762][ T6553] hsr_slave_1: entered promiscuous mode [ 120.829101][ T6553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.837221][ T6553] Cannot create hsr debugfs directory [ 120.851673][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.859445][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.885430][ T6557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.905623][ T6561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.912589][ T6561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.939447][ T6561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.031668][ T6561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.044260][ T6561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.072787][ T6561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.158849][ T6557] hsr_slave_0: entered promiscuous mode [ 121.167531][ T6557] hsr_slave_1: entered promiscuous mode [ 121.173730][ T6557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.183274][ T6557] Cannot create hsr debugfs directory [ 121.369071][ T6561] hsr_slave_0: entered promiscuous mode [ 121.375956][ T6561] hsr_slave_1: entered promiscuous mode [ 121.382381][ T6561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.390348][ T6561] Cannot create hsr debugfs directory [ 121.458127][ T67] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.475201][ T54] Bluetooth: hci2: command tx timeout [ 121.475247][ T5230] Bluetooth: hci1: command tx timeout [ 121.557899][ T6554] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.628575][ T67] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.639818][ T5230] Bluetooth: hci6: command tx timeout [ 121.647647][ T54] Bluetooth: hci5: command tx timeout [ 121.710627][ T6554] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.724361][ T54] Bluetooth: hci0: command tx timeout [ 121.809767][ T67] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.862692][ T6554] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.918776][ T6554] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 121.927732][ T6554] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 121.940969][ T6554] team0: Port device netdevsim0 removed [ 121.948841][ T6554] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.977508][ T67] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.318245][ T67] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.447018][ T67] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.473173][ T6554] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 122.515223][ T6554] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 122.540535][ T6554] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 122.580728][ T67] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.593065][ T6554] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 122.657247][ T67] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 122.688764][ T67] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.932235][ T67] bridge_slave_1: left allmulticast mode [ 122.938766][ T67] bridge_slave_1: left promiscuous mode [ 122.946133][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.958521][ T67] bridge_slave_0: left allmulticast mode [ 122.964207][ T67] bridge_slave_0: left promiscuous mode [ 122.971381][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.008152][ T67] bridge_slave_1: left allmulticast mode [ 123.013876][ T67] bridge_slave_1: left promiscuous mode [ 123.034784][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.061461][ T67] bridge_slave_0: left allmulticast mode [ 123.085548][ T67] bridge_slave_0: left promiscuous mode [ 123.091334][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.125861][ T67] bridge_slave_1: left allmulticast mode [ 123.131552][ T67] bridge_slave_1: left promiscuous mode [ 123.150528][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.162651][ T67] bridge_slave_0: left allmulticast mode [ 123.176481][ T67] bridge_slave_0: left promiscuous mode [ 123.182229][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.205584][ T67] bridge_slave_1: left allmulticast mode [ 123.212035][ T67] bridge_slave_1: left promiscuous mode [ 123.230442][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.254094][ T67] bridge_slave_0: left allmulticast mode [ 123.262012][ T67] bridge_slave_0: left promiscuous mode [ 123.268317][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.292507][ T67] team0: left allmulticast mode [ 123.297701][ T67] team_slave_0: left allmulticast mode [ 123.303429][ T67] team_slave_1: left allmulticast mode [ 123.312860][ T67] bridge0: port 3(team0) entered disabled state [ 123.323752][ T67] bridge_slave_1: left allmulticast mode [ 123.331774][ T67] bridge_slave_1: left promiscuous mode [ 123.337648][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.347327][ T67] bridge_slave_0: left allmulticast mode [ 123.352995][ T67] bridge_slave_0: left promiscuous mode [ 123.359519][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.555748][ T54] Bluetooth: hci1: command tx timeout [ 123.561216][ T54] Bluetooth: hci2: command tx timeout [ 123.714848][ T5230] Bluetooth: hci6: command tx timeout [ 123.720389][ T54] Bluetooth: hci5: command tx timeout [ 123.795149][ T54] Bluetooth: hci0: command tx timeout [ 124.689742][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.701985][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.715251][ T67] bond0 (unregistering): (slave team0): Releasing backup interface [ 124.726612][ T67] bond0 (unregistering): Released all slaves [ 124.804792][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.817191][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.828328][ T67] bond0 (unregistering): Released all slaves [ 124.911303][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.922221][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.937380][ T67] bond0 (unregistering): (slave team0): Releasing backup interface [ 124.947821][ T67] bond0 (unregistering): Released all slaves [ 125.030351][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.039557][ T67] bond_slave_0: left promiscuous mode [ 125.048037][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.058472][ T67] bond_slave_1: left promiscuous mode [ 125.065815][ T67] bond0 (unregistering): Released all slaves [ 125.143593][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.162067][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.172627][ T67] bond0 (unregistering): Released all slaves [ 125.244171][ T6554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.468116][ T6554] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.468132][ T67] IPVS: stopping backup sync thread 6018 ... [ 125.526334][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.533512][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.557193][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.564378][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.598408][ T6558] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 125.641743][ T54] Bluetooth: hci2: command tx timeout [ 125.648418][ T5230] Bluetooth: hci1: command tx timeout [ 125.712447][ T6558] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 125.735784][ T6558] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 125.757765][ T6558] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 125.795513][ T54] Bluetooth: hci5: command tx timeout [ 125.801054][ T54] Bluetooth: hci6: command tx timeout [ 125.874769][ T54] Bluetooth: hci0: command tx timeout [ 126.257041][ T6553] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.305945][ T6553] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.374730][ T6553] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.390324][ T6553] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 126.705826][ T6554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.777280][ T6558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.929543][ T6558] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.110954][ T6554] veth0_vlan: entered promiscuous mode [ 127.126287][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.133460][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.263196][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.270354][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.292466][ T6553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.342690][ T6557] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 127.356116][ T6557] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 127.368775][ T6554] veth1_vlan: entered promiscuous mode [ 127.440225][ T6557] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 127.451724][ T6557] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 127.612538][ T6553] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.744958][ T6558] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 127.755947][ T6558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.812492][ T6554] veth0_macvtap: entered promiscuous mode [ 127.862500][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.869889][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.935783][ T67] hsr_slave_0: left promiscuous mode [ 127.941959][ T67] hsr_slave_1: left promiscuous mode [ 127.951761][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.959783][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.969183][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.977380][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.990428][ T67] hsr_slave_0: left promiscuous mode [ 127.996580][ T67] hsr_slave_1: left promiscuous mode [ 128.002481][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.010164][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.021162][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.030266][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.043324][ T67] hsr_slave_0: left promiscuous mode [ 128.050941][ T67] hsr_slave_1: left promiscuous mode [ 128.059253][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.067190][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.075264][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.082675][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.097925][ T67] hsr_slave_0: left promiscuous mode [ 128.103809][ T67] hsr_slave_1: left promiscuous mode [ 128.112201][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.120308][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.132772][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.140518][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.148868][ T67] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 128.156147][ T67] batman_adv: batadv0: Removing interface: virt_wifi0 [ 128.167283][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.174979][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.182738][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.190428][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.259182][ T67] veth1_macvtap: left promiscuous mode [ 128.265162][ T67] veth0_macvtap: left promiscuous mode [ 128.270781][ T67] veth1_vlan: left promiscuous mode [ 128.277065][ T67] veth0_vlan: left promiscuous mode [ 128.285249][ T67] veth1_macvtap: left promiscuous mode [ 128.290808][ T67] veth0_macvtap: left promiscuous mode [ 128.296918][ T67] veth1_vlan: left promiscuous mode [ 128.302201][ T67] veth0_vlan: left promiscuous mode [ 128.308802][ T67] veth1_macvtap: left promiscuous mode [ 128.314294][ T67] veth0_macvtap: left promiscuous mode [ 128.320223][ T67] veth1_vlan: left promiscuous mode [ 128.326015][ T67] veth0_vlan: left promiscuous mode [ 128.332340][ T67] team_slave_1: left promiscuous mode [ 128.338075][ T67] veth1_macvtap: left promiscuous mode [ 128.343793][ T67] veth0_macvtap: left promiscuous mode [ 128.349853][ T67] veth1_vlan: left promiscuous mode [ 128.356444][ T67] veth0_vlan: left promiscuous mode [ 128.363444][ T67] veth1_macvtap: left promiscuous mode [ 128.369273][ T67] veth0_macvtap: left promiscuous mode [ 128.374988][ T67] veth1_vlan: left promiscuous mode [ 128.380312][ T67] veth0_vlan: left promiscuous mode [ 129.100540][ T67] team0 (unregistering): Port device team_slave_1 removed [ 129.138215][ T67] team0 (unregistering): Port device team_slave_0 removed [ 129.743070][ T67] team0 (unregistering): Port device team_slave_1 removed [ 129.778941][ T67] team0 (unregistering): Port device team_slave_0 removed [ 130.081870][ T67] lo (unregistering): left allmulticast mode [ 130.332997][ T67] team0 (unregistering): Port device team_slave_1 removed [ 130.363980][ T67] team0 (unregistering): Port device team_slave_0 removed [ 130.971914][ T67] team0 (unregistering): Port device team_slave_1 removed [ 131.007513][ T67] team0 (unregistering): Port device team_slave_0 removed [ 131.545294][ T67] team_slave_1 (unregistering): left promiscuous mode [ 131.555324][ T67] team0 (unregistering): Port device team_slave_1 removed [ 131.586971][ T67] team_slave_0 (unregistering): left promiscuous mode [ 131.596971][ T67] team0 (unregistering): Port device team_slave_0 removed [ 131.916671][ T6554] veth1_macvtap: entered promiscuous mode [ 131.933543][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.940707][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.120472][ T6554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.162669][ T6561] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 132.208727][ T6561] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 132.218251][ T6561] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 132.257938][ T6554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.269735][ T6561] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 132.313722][ T6557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.325795][ T6554] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.335319][ T6554] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.344058][ T6554] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.354210][ T6554] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.371568][ T6558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.442613][ T6557] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.547672][ T1071] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.554876][ T1071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.611297][ T1071] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.618486][ T1071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.738383][ T2492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.747240][ T2492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.758386][ T6558] veth0_vlan: entered promiscuous mode [ 132.864119][ T6553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.883873][ T6558] veth1_vlan: entered promiscuous mode [ 132.998428][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.030033][ T6561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.043242][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.112536][ T6558] veth0_macvtap: entered promiscuous mode [ 133.159083][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.165995][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.222520][ T6686] netlink: 224 bytes leftover after parsing attributes in process `syz.1.343'. [ 133.233681][ T6557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.258496][ T6558] veth1_macvtap: entered promiscuous mode [ 133.297818][ T6553] veth0_vlan: entered promiscuous mode [ 133.313915][ T6561] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.369952][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.377171][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.401421][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.408654][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.475734][ T6553] veth1_vlan: entered promiscuous mode [ 133.490682][ T6558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.513138][ T6558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.536845][ T6558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.593284][ T6558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.610201][ T6558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.632733][ T6558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.757265][ T6558] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.772162][ T6558] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.781709][ T6558] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.791662][ T6558] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.816025][ T6557] veth0_vlan: entered promiscuous mode [ 133.901869][ T6553] veth0_macvtap: entered promiscuous mode [ 133.924821][ T6557] veth1_vlan: entered promiscuous mode [ 133.946407][ T6553] veth1_macvtap: entered promiscuous mode [ 134.046145][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.067966][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.085360][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.099996][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.117578][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.159992][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.186085][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.199651][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.211501][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.233940][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.283187][ T6553] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.292177][ T6553] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.302559][ T6553] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.317561][ T6553] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.345973][ T2509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.360291][ T2509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.459308][ T6557] veth0_macvtap: entered promiscuous mode [ 134.488041][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.491562][ T6561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.530869][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.543499][ T6557] veth1_macvtap: entered promiscuous mode [ 134.642785][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.682456][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.713513][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.738367][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.762971][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.782889][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.806646][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.873486][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.906295][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.925207][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.940215][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.971481][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.000726][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.025307][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.036301][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.053543][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.080248][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.344'. [ 135.097242][ T6716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.344'. [ 135.148518][ T6557] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.168149][ T6557] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.183752][ T6557] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.200182][ T6557] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.230722][ T1071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.268711][ T1071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.310173][ T6722] lo speed is unknown, defaulting to 1000 [ 135.399967][ T6722] lo speed is unknown, defaulting to 1000 [ 135.453481][ T6729] netlink: 80 bytes leftover after parsing attributes in process `syz.2.354'. [ 135.486096][ T6722] lo speed is unknown, defaulting to 1000 [ 135.527593][ T6725] syz.1.353 (6725) used obsolete PPPIOCDETACH ioctl [ 135.543388][ T6561] veth0_vlan: entered promiscuous mode [ 135.567397][ T2509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.570557][ T6722] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 135.608381][ T2509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.657182][ T6561] veth1_vlan: entered promiscuous mode [ 135.674098][ T6722] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 135.753327][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.813651][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.826594][ T6561] veth0_macvtap: entered promiscuous mode [ 135.871405][ T6561] veth1_macvtap: entered promiscuous mode [ 135.896652][ T6722] lo speed is unknown, defaulting to 1000 [ 135.939066][ T6722] lo speed is unknown, defaulting to 1000 [ 135.984766][ T6743] netlink: 16090 bytes leftover after parsing attributes in process `syz.3.345'. [ 135.994102][ T6743] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.345'. [ 136.020088][ T6561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.034016][ T6743] netlink: 16090 bytes leftover after parsing attributes in process `syz.3.345'. [ 136.056422][ T6561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.082679][ T6561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.110137][ T6561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.134584][ T6561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.154629][ T6561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.177277][ T6561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.224577][ T6561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.249378][ T6561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.277800][ T6561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.306120][ T6561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.334521][ T6561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.355700][ T6561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.374511][ T6561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.406333][ T6561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.435725][ T6561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.464667][ T6561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.486799][ T6561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.503266][ T6722] lo speed is unknown, defaulting to 1000 [ 136.567741][ T6722] lo speed is unknown, defaulting to 1000 [ 136.581620][ T6561] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.613815][ T6561] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.640763][ T6561] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.664693][ T6561] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.694136][ T6736] lo speed is unknown, defaulting to 1000 [ 136.739587][ T6722] lo speed is unknown, defaulting to 1000 [ 137.048760][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.076941][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.372466][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 137.389461][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.409763][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.420482][ T6758] netlink: 28 bytes leftover after parsing attributes in process `syz.0.360'. [ 137.727170][ T6765] netlink: 40 bytes leftover after parsing attributes in process `syz.1.362'. [ 137.743119][ T6768] FAULT_INJECTION: forcing a failure. [ 137.743119][ T6768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.777596][ T6760] netlink: 'syz.3.361': attribute type 5 has an invalid length. [ 137.791055][ T6768] CPU: 1 UID: 0 PID: 6768 Comm: syz.4.346 Not tainted 6.11.0-rc3-syzkaller-00542-gbfc52deef5ed #0 [ 137.801690][ T6768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 137.811761][ T6768] Call Trace: [ 137.815053][ T6768] [ 137.817990][ T6768] dump_stack_lvl+0x241/0x360 [ 137.822948][ T6768] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.828162][ T6768] ? __pfx__printk+0x10/0x10 [ 137.832773][ T6768] ? __pfx_lock_release+0x10/0x10 [ 137.837821][ T6768] should_fail_ex+0x3b0/0x4e0 [ 137.842515][ T6768] _copy_from_user+0x2f/0xe0 [ 137.847125][ T6768] copy_msghdr_from_user+0xae/0x680 [ 137.852351][ T6768] ? __pfx___might_resched+0x10/0x10 [ 137.857665][ T6768] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 137.863597][ T6768] ? __might_fault+0xaa/0x120 [ 137.868306][ T6768] do_recvmmsg+0x40f/0xae0 [ 137.872747][ T6768] ? __pfx_lock_release+0x10/0x10 [ 137.877793][ T6768] ? __pfx_do_recvmmsg+0x10/0x10 [ 137.882767][ T6768] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 137.889245][ T6768] ? ksys_write+0x23e/0x2c0 [ 137.893759][ T6768] ? __pfx_lock_release+0x10/0x10 [ 137.898814][ T6768] ? vfs_write+0x7c4/0xc90 [ 137.903337][ T6768] ? __mutex_unlock_slowpath+0x21d/0x750 [ 137.908990][ T6768] ? __fget_files+0x3f6/0x470 [ 137.913708][ T6768] __x64_sys_recvmmsg+0x199/0x250 [ 137.918757][ T6768] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 137.924319][ T6768] ? do_syscall_64+0x100/0x230 [ 137.929098][ T6768] ? do_syscall_64+0xb6/0x230 [ 137.933787][ T6768] do_syscall_64+0xf3/0x230 [ 137.938298][ T6768] ? clear_bhb_loop+0x35/0x90 [ 137.942988][ T6768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.948894][ T6768] RIP: 0033:0x7f65fe179e79 [ 137.953338][ T6768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.972962][ T6768] RSP: 002b:00007f65fdbff038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 137.981420][ T6768] RAX: ffffffffffffffda RBX: 00007f65fe315f80 RCX: 00007f65fe179e79 [ 137.989430][ T6768] RDX: 03fffffffffffec3 RSI: 0000000020004400 RDI: 0000000000000004 [ 137.997438][ T6768] RBP: 00007f65fdbff090 R08: 0000000000000000 R09: 0000000000000000 [ 138.005437][ T6768] R10: 0000000000000121 R11: 0000000000000246 R12: 0000000000000002 [ 138.013434][ T6768] R13: 0000000000000000 R14: 00007f65fe315f80 R15: 00007ffedac90678 [ 138.021454][ T6768] [ 138.186568][ T6777] No such timeout policy "syz0" [ 138.241493][ T6777] No such timeout policy "syz0" [ 139.690854][ T6805] netlink: 32 bytes leftover after parsing attributes in process `syz.4.372'. [ 140.438231][ T6837] FAULT_INJECTION: forcing a failure. [ 140.438231][ T6837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.484543][ T6837] CPU: 0 UID: 0 PID: 6837 Comm: syz.3.377 Not tainted 6.11.0-rc3-syzkaller-00542-gbfc52deef5ed #0 [ 140.495230][ T6837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 140.505299][ T6837] Call Trace: [ 140.508591][ T6837] [ 140.511528][ T6837] dump_stack_lvl+0x241/0x360 [ 140.516239][ T6837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.521469][ T6837] ? __pfx__printk+0x10/0x10 [ 140.526089][ T6837] ? __pfx_lock_release+0x10/0x10 [ 140.531141][ T6837] should_fail_ex+0x3b0/0x4e0 [ 140.535844][ T6837] _copy_from_user+0x2f/0xe0 [ 140.540460][ T6837] copy_msghdr_from_user+0xae/0x680 [ 140.545683][ T6837] ? __pfx___might_resched+0x10/0x10 [ 140.550990][ T6837] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 140.556838][ T6837] ? __might_fault+0xaa/0x120 [ 140.561544][ T6837] do_recvmmsg+0x40f/0xae0 [ 140.565988][ T6837] ? __pfx_lock_release+0x10/0x10 [ 140.571036][ T6837] ? __pfx_do_recvmmsg+0x10/0x10 [ 140.576021][ T6837] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 140.581955][ T6837] ? ksys_write+0x23e/0x2c0 [ 140.586483][ T6837] ? __pfx_lock_release+0x10/0x10 [ 140.591618][ T6837] ? vfs_write+0x7c4/0xc90 [ 140.596060][ T6837] ? __mutex_unlock_slowpath+0x21d/0x750 [ 140.601716][ T6837] ? __fget_files+0x3f6/0x470 [ 140.606431][ T6837] __x64_sys_recvmmsg+0x199/0x250 [ 140.611480][ T6837] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 140.617044][ T6837] ? do_syscall_64+0x100/0x230 [ 140.621822][ T6837] ? do_syscall_64+0xb6/0x230 [ 140.626519][ T6837] do_syscall_64+0xf3/0x230 [ 140.631039][ T6837] ? clear_bhb_loop+0x35/0x90 [ 140.635741][ T6837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.641654][ T6837] RIP: 0033:0x7fbf99379e79 [ 140.646083][ T6837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.665715][ T6837] RSP: 002b:00007fbf9a159038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 140.674156][ T6837] RAX: ffffffffffffffda RBX: 00007fbf99515f80 RCX: 00007fbf99379e79 [ 140.682156][ T6837] RDX: 03fffffffffffec3 RSI: 0000000020004400 RDI: 0000000000000004 [ 140.690148][ T6837] RBP: 00007fbf9a159090 R08: 0000000000000000 R09: 0000000000000000 [ 140.698141][ T6837] R10: 0000000000000121 R11: 0000000000000246 R12: 0000000000000002 [ 140.706391][ T6837] R13: 0000000000000000 R14: 00007fbf99515f80 R15: 00007ffc1a487c58 [ 140.714396][ T6837] [ 141.147445][ T6851] netlink: 28 bytes leftover after parsing attributes in process `syz.0.384'. [ 141.199518][ T6851] netlink: 28 bytes leftover after parsing attributes in process `syz.0.384'. [ 142.563751][ T6901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.400'. [ 142.606401][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.400'. [ 142.705358][ T6907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.401'. [ 142.758419][ T6909] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.402'. [ 142.800222][ T6906] lo speed is unknown, defaulting to 1000 [ 143.577261][ T6924] pimreg: entered allmulticast mode [ 143.777582][ T6923] pimreg: left allmulticast mode [ 143.858351][ T6935] xt_connbytes: Forcing CT accounting to be enabled [ 143.869992][ T6935] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 143.882494][ T6935] xt_bpf: check failed: parse error [ 143.896371][ T6935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.410'. [ 143.934586][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.410'. [ 144.762964][ T6976] bridge0: entered promiscuous mode [ 144.792967][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.420'. [ 144.965881][ T6982] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 145.271589][ T6999] ieee802154 phy0 wpan0: encryption failed: -22 [ 145.291444][ T6976] bridge0: left promiscuous mode [ 145.300986][ T6999] netlink: 76 bytes leftover after parsing attributes in process `syz.1.424'. [ 145.352389][ T6999] Êü: entered promiscuous mode [ 145.462645][ T7002] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20002 [ 145.559381][ T7006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.427'. [ 145.587614][ T7006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.427'. [ 145.651012][ T7003] syz.3.426 (7003) used greatest stack depth: 17232 bytes left [ 145.866638][ T7018] netlink: 20 bytes leftover after parsing attributes in process `syz.4.430'. [ 146.114958][ T7033] netlink: 'syz.0.433': attribute type 10 has an invalid length. [ 146.201571][ T7036] netlink: 32 bytes leftover after parsing attributes in process `syz.4.434'. [ 146.214144][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'. [ 146.441444][ T7041] vlan2: entered promiscuous mode [ 146.471251][ T7041] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 146.493904][ T7046] netlink: 'syz.3.439': attribute type 1 has an invalid length. [ 146.523077][ T7041] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 146.524390][ T7046] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.439'. [ 146.565075][ T7046] netlink: 'syz.3.439': attribute type 1 has an invalid length. [ 146.575973][ T5230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.601474][ T5230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.609267][ T5230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.638383][ T5230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.646153][ T5230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 146.655920][ T5230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.897192][ T7051] lo speed is unknown, defaulting to 1000 [ 147.108940][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.190889][ T7071] tipc: Started in network mode [ 147.209849][ T7071] tipc: Node identity 6, cluster identity 4711 [ 147.220664][ T7071] tipc: Node number set to 6 [ 147.271102][ T7076] netlink: 'syz.4.446': attribute type 11 has an invalid length. [ 147.359189][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.381800][ T7087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.449'. [ 147.381817][ T7084] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.448'. [ 147.413992][ T7084] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 147.481823][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.671231][ T7100] trusted_key: syz.4.453 sent an empty control message without MSG_MORE. [ 147.771324][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.973950][ T7110] netlink: 'syz.3.455': attribute type 1 has an invalid length. [ 148.138257][ T7051] chnl_net:caif_netlink_parms(): no params data found [ 148.207670][ T11] bridge_slave_1: left allmulticast mode [ 148.213358][ T11] bridge_slave_1: left promiscuous mode [ 148.231234][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.241999][ T11] bridge_slave_0: left allmulticast mode [ 148.248920][ T11] bridge_slave_0: left promiscuous mode [ 148.254957][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.488069][ T7142] netlink: 'syz.0.458': attribute type 9 has an invalid length. [ 148.624067][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.639736][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.650222][ T11] bond0 (unregistering): Released all slaves [ 148.755701][ T5230] Bluetooth: hci3: command tx timeout [ 148.929776][ T7149] pim6reg1: entered promiscuous mode [ 148.941930][ T7149] pim6reg1: entered allmulticast mode [ 148.986791][ T7149] Bluetooth: MGMT ver 1.23 [ 149.091036][ T7051] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.098394][ T7051] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.106811][ T7051] bridge_slave_0: entered allmulticast mode [ 149.114272][ T7051] bridge_slave_0: entered promiscuous mode [ 149.136581][ T7051] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.145079][ T7051] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.170609][ T7051] bridge_slave_1: entered allmulticast mode [ 149.198773][ T7051] bridge_slave_1: entered promiscuous mode [ 149.529664][ T11] hsr_slave_0: left promiscuous mode [ 149.598853][ T11] hsr_slave_1: left promiscuous mode [ 149.630184][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.656213][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.665359][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.686983][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.744246][ T11] veth1_macvtap: left promiscuous mode [ 149.780392][ T11] veth0_macvtap: left promiscuous mode [ 149.786287][ T11] veth1_vlan: left promiscuous mode [ 149.800130][ T11] veth0_vlan: left promiscuous mode [ 150.386830][ T11] team0 (unregistering): Port device team_slave_1 removed [ 150.431428][ T11] team0 (unregistering): Port device team_slave_0 removed [ 150.809687][ T7051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.834657][ T5230] Bluetooth: hci3: command tx timeout [ 150.870599][ T7051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.072952][ T7051] team0: Port device team_slave_0 added [ 151.112131][ T7051] team0: Port device team_slave_1 added [ 151.219159][ T7051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.235910][ T7051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.280285][ T7051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.305461][ T7051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.342151][ T7051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.417352][ T7051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.440234][ T7233] __nla_validate_parse: 4 callbacks suppressed [ 151.440251][ T7233] netlink: 28 bytes leftover after parsing attributes in process `syz.0.481'. [ 151.512867][ T7236] netlink: 'syz.1.482': attribute type 1 has an invalid length. [ 151.564132][ T7051] hsr_slave_0: entered promiscuous mode [ 151.584898][ T7051] hsr_slave_1: entered promiscuous mode [ 151.596100][ T7238] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 152.140493][ T7262] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 152.597108][ T7051] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 152.673750][ T7051] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 152.745368][ T7051] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 152.764868][ T7051] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 152.914589][ T5230] Bluetooth: hci3: command tx timeout [ 152.998563][ T7051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.036959][ T7306] team0: Device wg2 is of different type [ 153.076774][ T7051] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.106281][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.113450][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.138052][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.145260][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.401654][ T7326] bond0: entered promiscuous mode [ 153.420503][ T7326] bond_slave_0: entered promiscuous mode [ 153.439670][ T7326] bond_slave_1: entered promiscuous mode [ 153.549374][ T7336] netlink: 'syz.0.506': attribute type 7 has an invalid length. [ 153.566908][ T7338] Cannot find set identified by id 0 to match [ 153.770645][ T7051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.896150][ T7051] veth0_vlan: entered promiscuous mode [ 153.933881][ T7051] veth1_vlan: entered promiscuous mode [ 153.949775][ T7349] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.967367][ T7357] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.513'. [ 153.981973][ T7359] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.513'. [ 154.013468][ T7051] veth0_macvtap: entered promiscuous mode [ 154.050341][ T7051] veth1_macvtap: entered promiscuous mode [ 154.137417][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.164516][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.174368][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.199570][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.209812][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.220545][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.232798][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.246563][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.259513][ T7051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.308183][ T7367] netlink: 'syz.0.515': attribute type 4 has an invalid length. [ 154.334840][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.347075][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.358786][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.382237][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.402143][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.425639][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.452475][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.478997][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.512937][ T7051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.571603][ T7051] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.598396][ T7051] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.632710][ T7051] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.674786][ T7051] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.711724][ T7376] lo speed is unknown, defaulting to 1000 [ 154.996695][ T5230] Bluetooth: hci3: command tx timeout [ 155.128738][ T7410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.525'. [ 155.147139][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.155940][ T7410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.525'. [ 155.182265][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.301537][ T7427] FAULT_INJECTION: forcing a failure. [ 155.301537][ T7427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.316452][ T7427] CPU: 0 UID: 0 PID: 7427 Comm: syz.3.527 Not tainted 6.11.0-rc3-syzkaller-00542-gbfc52deef5ed #0 [ 155.327072][ T7427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 155.337139][ T7427] Call Trace: [ 155.340429][ T7427] [ 155.343376][ T7427] dump_stack_lvl+0x241/0x360 [ 155.348081][ T7427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.353294][ T7427] ? __pfx__printk+0x10/0x10 [ 155.357917][ T7427] ? __pfx_lock_release+0x10/0x10 [ 155.362979][ T7427] should_fail_ex+0x3b0/0x4e0 [ 155.367679][ T7427] _copy_from_user+0x2f/0xe0 [ 155.372299][ T7427] copy_msghdr_from_user+0xae/0x680 [ 155.377546][ T7427] ? __pfx___might_resched+0x10/0x10 [ 155.382850][ T7427] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 155.388688][ T7427] ? __might_fault+0xaa/0x120 [ 155.393370][ T7427] do_recvmmsg+0x40f/0xae0 [ 155.397785][ T7427] ? __pfx_lock_release+0x10/0x10 [ 155.402805][ T7427] ? __pfx_do_recvmmsg+0x10/0x10 [ 155.407749][ T7427] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 155.413644][ T7427] ? ksys_write+0x23e/0x2c0 [ 155.418141][ T7427] ? __pfx_lock_release+0x10/0x10 [ 155.423161][ T7427] ? vfs_write+0x7c4/0xc90 [ 155.427576][ T7427] ? __mutex_unlock_slowpath+0x21d/0x750 [ 155.433205][ T7427] ? __fget_files+0x3f6/0x470 [ 155.437888][ T7427] __x64_sys_recvmmsg+0x199/0x250 [ 155.442920][ T7427] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 155.448461][ T7427] ? do_syscall_64+0x100/0x230 [ 155.453214][ T7427] ? do_syscall_64+0xb6/0x230 [ 155.457880][ T7427] do_syscall_64+0xf3/0x230 [ 155.462373][ T7427] ? clear_bhb_loop+0x35/0x90 [ 155.467049][ T7427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.472934][ T7427] RIP: 0033:0x7fbf99379e79 [ 155.477342][ T7427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.496938][ T7427] RSP: 002b:00007fbf9a159038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 155.505344][ T7427] RAX: ffffffffffffffda RBX: 00007fbf99515f80 RCX: 00007fbf99379e79 [ 155.513302][ T7427] RDX: 03fffffffffffec3 RSI: 0000000020004400 RDI: 0000000000000004 [ 155.521261][ T7427] RBP: 00007fbf9a159090 R08: 0000000000000000 R09: 0000000000000000 [ 155.529219][ T7427] R10: 0000000000000121 R11: 0000000000000246 R12: 0000000000000002 [ 155.537181][ T7427] R13: 0000000000000000 R14: 00007fbf99515f80 R15: 00007ffc1a487c58 [ 155.545155][ T7427] [ 155.569606][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.577683][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.036019][ T7447] netlink: 'syz.4.531': attribute type 21 has an invalid length. [ 156.141020][ T7451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.531'. [ 156.266101][ T7452] netlink: 9 bytes leftover after parsing attributes in process `syz.2.532'. [ 156.295510][ T7452] 0·: renamed from hsr0 (while UP) [ 156.319560][ T7452] 0·: entered allmulticast mode [ 156.346063][ T7452] hsr_slave_0: entered allmulticast mode [ 156.364877][ T7452] hsr_slave_1: entered allmulticast mode [ 156.382749][ T7452] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 156.478351][ T7462] ip6gretap0: entered promiscuous mode [ 156.538173][ T7462] ip6gretap0: left promiscuous mode [ 157.208296][ T7489] netlink: 'syz.2.540': attribute type 10 has an invalid length. [ 157.258865][ T7489] batman_adv: batadv0: Adding interface: team0 [ 157.283044][ T7489] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.322518][ T7489] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 157.341983][ T7493] netlink: 'syz.2.540': attribute type 10 has an invalid length. [ 157.353304][ T7493] netlink: 2 bytes leftover after parsing attributes in process `syz.2.540'. [ 157.392531][ T7493] team0: entered promiscuous mode [ 157.420610][ T7493] team_slave_0: entered promiscuous mode [ 157.430384][ T7493] team_slave_1: entered promiscuous mode [ 157.440252][ T7493] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.452739][ T7493] batman_adv: batadv0: Interface activated: team0 [ 157.460573][ T7493] batman_adv: batadv0: Interface deactivated: team0 [ 157.483685][ T7493] batman_adv: batadv0: Removing interface: team0 [ 157.492119][ T7493] bridge0: port 3(team0) entered blocking state [ 157.503637][ T7493] bridge0: port 3(team0) entered disabled state [ 157.510179][ T7493] team0: entered allmulticast mode [ 157.518270][ T7493] team_slave_0: entered allmulticast mode [ 157.524074][ T7493] team_slave_1: entered allmulticast mode [ 157.535897][ T7493] bridge0: port 3(team0) entered blocking state [ 157.542288][ T7493] bridge0: port 3(team0) entered forwarding state [ 157.789446][ T51] IPVS: starting estimator thread 0... [ 157.823118][ T7512] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 157.904903][ T7513] IPVS: using max 21 ests per chain, 50400 per kthread [ 158.072218][ T7524] syz.4.548[7524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.072393][ T7524] syz.4.548[7524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.462299][ T7543] netlink: 28 bytes leftover after parsing attributes in process `syz.4.557'. [ 158.543255][ T7548] x_tables: duplicate underflow at hook 2 [ 158.779557][ T7560] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.787677][ T7562] delete_channel: no stack [ 158.840119][ T7560] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.860929][ T7572] x_tables: duplicate underflow at hook 3 [ 158.896799][ T7568] : renamed from bridge_slave_0 (while UP) [ 159.144703][ T7582] netlink: 68 bytes leftover after parsing attributes in process `syz.2.567'. [ 159.375560][ T7586] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 159.434640][ T7586] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 159.775814][ T7610] lo speed is unknown, defaulting to 1000 [ 160.251392][ T7631] netlink: 'syz.4.585': attribute type 11 has an invalid length. [ 160.284768][ T7631] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.585'. [ 160.342188][ T7625] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 160.511746][ T7643] atomic_op ffff88805fab5998 conn xmit_atomic 0000000000000000 [ 160.762832][ T7654] syzkaller1: entered promiscuous mode [ 160.773290][ T7654] syzkaller1: entered allmulticast mode [ 160.790217][ T7653] C: renamed from team_slave_0 (while UP) [ 160.814002][ T7653] netlink: 'syz.0.592': attribute type 1 has an invalid length. [ 160.833459][ T7653] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 160.913985][ T7660] netlink: 32 bytes leftover after parsing attributes in process `syz.3.593'. [ 161.102227][ T7666] netlink: 'syz.3.596': attribute type 10 has an invalid length. [ 161.176394][ T7666] team0: Port device netdevsim0 added [ 161.250862][ T7664] veth3: entered promiscuous mode [ 161.344578][ T7683] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 161.388868][ T7685] netlink: 'syz.1.600': attribute type 1 has an invalid length. [ 161.425200][ T7685] netlink: 224 bytes leftover after parsing attributes in process `syz.1.600'. [ 161.452450][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.601'. [ 161.483636][ T7689] netlink: 20 bytes leftover after parsing attributes in process `syz.2.601'. [ 161.503111][ T7689] netlink: 28 bytes leftover after parsing attributes in process `syz.2.601'. [ 161.608072][ T7697] x_tables: duplicate underflow at hook 1 [ 161.692619][ T7691] netlink: 'syz.0.602': attribute type 9 has an invalid length. [ 161.704985][ T7691] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.602'. [ 161.884751][ T7704] lo speed is unknown, defaulting to 1000 [ 162.055674][ T7712] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 162.321254][ T7721] IPv6: sit1: Disabled Multicast RS [ 162.493302][ T7731] netlink: 36 bytes leftover after parsing attributes in process `syz.0.614'. [ 162.523868][ T7721] netlink: 'syz.2.612': attribute type 2 has an invalid length. [ 162.534898][ T7721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.612'. [ 162.750504][ T7741] tipc: Started in network mode [ 162.774598][ T7741] tipc: Node identity ffffffff, cluster identity 4711 [ 162.800453][ T7741] tipc: Node number set to 4294967295 [ 163.655391][ T7777] tap0: tun_chr_ioctl cmd 1074025673 [ 163.817758][ T7789] x_tables: duplicate underflow at hook 1 [ 163.855756][ T2492] tipc: Subscription rejected, illegal request [ 164.188916][ T7806] netlink: 60 bytes leftover after parsing attributes in process `syz.3.635'. [ 164.193566][ T7805] unsupported nla_type 40 [ 164.599531][ T7821] netlink: 92 bytes leftover after parsing attributes in process `syz.1.639'. [ 165.117981][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.643'. [ 165.866374][ T7870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.917760][ T7873] SET target dimension over the limit! [ 165.929199][ T7877] Cannot find add_set index 0 as target [ 165.947652][ T7879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.003154][ T7879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.107187][ T7870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.181444][ T7870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.225942][ T7870] netlink: 'syz.3.654': attribute type 10 has an invalid length. [ 166.251463][ T7870] netlink: 40 bytes leftover after parsing attributes in process `syz.3.654'. [ 166.499938][ T7901] xt_CT: No such helper "netbios-ns" [ 166.785490][ T7917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.664'. [ 167.196103][ T7929] netlink: 92 bytes leftover after parsing attributes in process `syz.2.671'. [ 167.382218][ T7936] netlink: 24 bytes leftover after parsing attributes in process `syz.3.673'. [ 167.461335][ T7939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.674'. [ 167.577700][ T7949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.677'. [ 167.626551][ T7947] netlink: 40 bytes leftover after parsing attributes in process `syz.0.678'. [ 167.810331][ T7963] netlink: 'syz.4.683': attribute type 10 has an invalid length. [ 167.851867][ T7965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.684'. [ 167.860708][ T7963] batman_adv: batadv0: Adding interface: team0 [ 167.860724][ T7963] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.860745][ T7963] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 167.880621][ T7964] netlink: 'syz.4.683': attribute type 10 has an invalid length. [ 167.913145][ T7965] x_tables: unsorted entry at hook 3 [ 168.075986][ T7975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.688'. [ 168.099774][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.685'. [ 168.212281][ T7987] netlink: 16 bytes leftover after parsing attributes in process `syz.2.688'. [ 168.288831][ T7995] netlink: 76 bytes leftover after parsing attributes in process `syz.4.691'. [ 168.298813][ T7997] dvmrp1: entered allmulticast mode [ 168.342213][ T7995] ÊüðÿG!: entered promiscuous mode [ 168.891338][ T8028] netlink: 4104 bytes leftover after parsing attributes in process `syz.3.700'. [ 168.894734][ T8026] netlink: 176 bytes leftover after parsing attributes in process `syz.4.697'. [ 168.956153][ T8033] tipc: Enabling of bearer rejected, failed to enable media [ 168.992768][ T8034] netlink: 'syz.4.697': attribute type 1 has an invalid length. [ 169.064508][ T8038] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 169.085536][ T8037] Bluetooth: MGMT ver 1.23 [ 169.090016][ T8037] Bluetooth: hci3: unsupported parameter 65535 [ 169.104574][ T8037] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 169.219732][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 169.482327][ T8045] vlan2: entered promiscuous mode [ 169.726359][ T8060] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 169.939684][ T8074] wireguard: wg2: Could not create IPv4 socket [ 170.105752][ T8079] sctp: [Deprecated]: syz.0.715 (pid 8079) Use of int in max_burst socket option deprecated. [ 170.105752][ T8079] Use struct sctp_assoc_value instead [ 170.205490][ T8095] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.215422][ T8095] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.224225][ T8095] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.233567][ T8095] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.254612][ T8095] vxlan0: entered promiscuous mode [ 170.428657][ T8103] netlink: 'syz.1.722': attribute type 2 has an invalid length. [ 170.771788][ T8119] x_tables: duplicate underflow at hook 3 [ 171.041775][ T8130] netlink: 'syz.3.729': attribute type 1 has an invalid length. [ 171.059775][ T8130] NCSI netlink: No device for ifindex 458760 [ 171.289397][ T8146] netlink: 'syz.4.734': attribute type 63 has an invalid length. [ 171.308797][ T8146] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.882229][ T8175] lo speed is unknown, defaulting to 1000 [ 172.135119][ T8187] sctp: [Deprecated]: syz.0.748 (pid 8187) Use of int in maxseg socket option. [ 172.135119][ T8187] Use struct sctp_assoc_value instead [ 172.352657][ T8196] FAULT_INJECTION: forcing a failure. [ 172.352657][ T8196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.381702][ T8196] CPU: 1 UID: 0 PID: 8196 Comm: syz.4.753 Not tainted 6.11.0-rc3-syzkaller-00542-gbfc52deef5ed #0 [ 172.392418][ T8196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 172.402486][ T8196] Call Trace: [ 172.405778][ T8196] [ 172.408726][ T8196] dump_stack_lvl+0x241/0x360 [ 172.413427][ T8196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.418644][ T8196] ? __pfx__printk+0x10/0x10 [ 172.423260][ T8196] ? __pfx_lock_release+0x10/0x10 [ 172.428311][ T8196] should_fail_ex+0x3b0/0x4e0 [ 172.433002][ T8196] _copy_from_user+0x2f/0xe0 [ 172.437605][ T8196] copy_msghdr_from_user+0xae/0x680 [ 172.442825][ T8196] ? __pfx___might_resched+0x10/0x10 [ 172.448132][ T8196] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 172.453961][ T8196] ? __might_fault+0xaa/0x120 [ 172.458664][ T8196] do_recvmmsg+0x40f/0xae0 [ 172.463104][ T8196] ? __pfx_lock_release+0x10/0x10 [ 172.468153][ T8196] ? __pfx_do_recvmmsg+0x10/0x10 [ 172.473126][ T8196] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 172.479038][ T8196] ? ksys_write+0x23e/0x2c0 [ 172.483554][ T8196] ? __pfx_lock_release+0x10/0x10 [ 172.488603][ T8196] ? vfs_write+0x7c4/0xc90 [ 172.493041][ T8196] ? __mutex_unlock_slowpath+0x21d/0x750 [ 172.498697][ T8196] ? __fget_files+0x3f6/0x470 [ 172.503403][ T8196] __x64_sys_recvmmsg+0x199/0x250 [ 172.508448][ T8196] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 172.514014][ T8196] ? do_syscall_64+0x100/0x230 [ 172.518801][ T8196] ? do_syscall_64+0xb6/0x230 [ 172.523496][ T8196] do_syscall_64+0xf3/0x230 [ 172.528007][ T8196] ? clear_bhb_loop+0x35/0x90 [ 172.532696][ T8196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.538597][ T8196] RIP: 0033:0x7f65fe179e79 [ 172.543110][ T8196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.562730][ T8196] RSP: 002b:00007f65fdbff038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 172.571166][ T8196] RAX: ffffffffffffffda RBX: 00007f65fe315f80 RCX: 00007f65fe179e79 [ 172.579153][ T8196] RDX: 03fffffffffffec3 RSI: 0000000020004400 RDI: 0000000000000004 [ 172.587137][ T8196] RBP: 00007f65fdbff090 R08: 0000000000000000 R09: 0000000000000000 [ 172.595118][ T8196] R10: 0000000000000121 R11: 0000000000000246 R12: 0000000000000002 [ 172.603097][ T8196] R13: 0000000000000000 R14: 00007f65fe315f80 R15: 00007ffedac90678 [ 172.611101][ T8196] [ 172.645299][ T8175] __nla_validate_parse: 14 callbacks suppressed [ 172.645316][ T8175] netlink: 20 bytes leftover after parsing attributes in process `syz.1.744'. [ 172.659129][ T8209] delete_channel: no stack [ 172.681047][ T8209] delete_channel: no stack [ 172.689012][ T8209] delete_channel: no stack [ 172.693580][ T8209] delete_channel: no stack [ 172.701746][ T8209] delete_channel: no stack [ 172.722979][ T8175] netlink: 32 bytes leftover after parsing attributes in process `syz.1.744'. [ 172.746066][ T8209] delete_channel: no stack [ 172.771257][ T8209] delete_channel: no stack [ 172.783550][ T8215] FAULT_INJECTION: forcing a failure. [ 172.783550][ T8215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.798418][ T8209] delete_channel: no stack [ 172.803072][ T8209] delete_channel: no stack [ 172.818319][ T8217] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 172.836878][ T8209] delete_channel: no stack [ 172.841457][ T8209] delete_channel: no stack [ 172.854665][ T8215] CPU: 1 UID: 0 PID: 8215 Comm: syz.2.764 Not tainted 6.11.0-rc3-syzkaller-00542-gbfc52deef5ed #0 [ 172.865360][ T8215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 172.875411][ T8215] Call Trace: [ 172.878683][ T8215] [ 172.881605][ T8215] dump_stack_lvl+0x241/0x360 [ 172.886279][ T8215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.891470][ T8215] ? __pfx__printk+0x10/0x10 [ 172.896056][ T8215] ? __pfx_lock_release+0x10/0x10 [ 172.901076][ T8215] should_fail_ex+0x3b0/0x4e0 [ 172.905751][ T8215] _copy_from_user+0x2f/0xe0 [ 172.910339][ T8215] copy_msghdr_from_user+0xae/0x680 [ 172.915535][ T8215] ? __pfx___might_resched+0x10/0x10 [ 172.920814][ T8215] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 172.926620][ T8215] ? __might_fault+0xaa/0x120 [ 172.931295][ T8215] do_recvmmsg+0x40f/0xae0 [ 172.935709][ T8215] ? __pfx_lock_release+0x10/0x10 [ 172.940730][ T8215] ? __pfx_do_recvmmsg+0x10/0x10 [ 172.945690][ T8215] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 172.951664][ T8215] ? ksys_write+0x23e/0x2c0 [ 172.956333][ T8215] ? __pfx_lock_release+0x10/0x10 [ 172.961352][ T8215] ? vfs_write+0x7c4/0xc90 [ 172.965770][ T8215] ? __mutex_unlock_slowpath+0x21d/0x750 [ 172.971398][ T8215] ? __fget_files+0x3f6/0x470 [ 172.976079][ T8215] __x64_sys_recvmmsg+0x199/0x250 [ 172.981360][ T8215] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 172.986923][ T8215] ? do_syscall_64+0x100/0x230 [ 172.991691][ T8215] ? do_syscall_64+0xb6/0x230 [ 172.996364][ T8215] do_syscall_64+0xf3/0x230 [ 173.000866][ T8215] ? clear_bhb_loop+0x35/0x90 [ 173.005542][ T8215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.011431][ T8215] RIP: 0033:0x7f7896779e79 [ 173.015843][ T8215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.035887][ T8215] RSP: 002b:00007f78974c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 173.044294][ T8215] RAX: ffffffffffffffda RBX: 00007f7896915f80 RCX: 00007f7896779e79 [ 173.052272][ T8215] RDX: 03fffffffffffec3 RSI: 0000000020004400 RDI: 0000000000000004 [ 173.060242][ T8215] RBP: 00007f78974c2090 R08: 0000000000000000 R09: 0000000000000000 [ 173.068207][ T8215] R10: 0000000000000121 R11: 0000000000000246 R12: 0000000000000002 [ 173.076172][ T8215] R13: 0000000000000000 R14: 00007f7896915f80 R15: 00007ffdf89ce748 [ 173.084156][ T8215] [ 173.090077][ T8209] delete_channel: no stack [ 173.114865][ T8209] delete_channel: no stack [ 173.119738][ T8209] delete_channel: no stack [ 173.139907][ T8209] delete_channel: no stack [ 173.156027][ T8209] delete_channel: no stack [ 173.160803][ T8209] delete_channel: no stack [ 173.171075][ T8209] delete_channel: no stack [ 173.176286][ T8209] delete_channel: no stack [ 173.197198][ T8209] delete_channel: no stack [ 173.201795][ T8209] delete_channel: no stack [ 173.235268][ T8209] delete_channel: no stack [ 173.239868][ T8209] delete_channel: no stack [ 173.245052][ T8209] delete_channel: no stack [ 173.249635][ T8209] delete_channel: no stack [ 173.254197][ T8209] delete_channel: no stack [ 173.259218][ T8209] delete_channel: no stack [ 173.263796][ T8209] delete_channel: no stack [ 173.268505][ T8209] delete_channel: no stack [ 173.273588][ T8209] delete_channel: no stack [ 173.278643][ T8209] delete_channel: no stack [ 173.284221][ T8209] delete_channel: no stack [ 173.288910][ T8209] delete_channel: no stack [ 173.320117][ T8229] netlink: 84 bytes leftover after parsing attributes in process `syz.2.757'. [ 173.592528][ T8241] netlink: 28 bytes leftover after parsing attributes in process `syz.1.761'. [ 173.867353][ T8262] FAULT_INJECTION: forcing a failure. [ 173.867353][ T8262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.880706][ T8262] CPU: 1 UID: 0 PID: 8262 Comm: syz.4.768 Not tainted 6.11.0-rc3-syzkaller-00542-gbfc52deef5ed #0 [ 173.891307][ T8262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 173.901355][ T8262] Call Trace: [ 173.904628][ T8262] [ 173.907549][ T8262] dump_stack_lvl+0x241/0x360 [ 173.912228][ T8262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.917432][ T8262] ? __pfx__printk+0x10/0x10 [ 173.922059][ T8262] ? __pfx_lock_release+0x10/0x10 [ 173.927124][ T8262] should_fail_ex+0x3b0/0x4e0 [ 173.931829][ T8262] _copy_from_user+0x2f/0xe0 [ 173.936688][ T8262] copy_msghdr_from_user+0xae/0x680 [ 173.941906][ T8262] ? __pfx___might_resched+0x10/0x10 [ 173.947298][ T8262] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 173.953116][ T8262] ? __might_fault+0xaa/0x120 [ 173.957796][ T8262] do_recvmmsg+0x40f/0xae0 [ 173.962219][ T8262] ? __pfx_lock_release+0x10/0x10 [ 173.967249][ T8262] ? __pfx_do_recvmmsg+0x10/0x10 [ 173.972197][ T8262] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 173.978088][ T8262] ? ksys_write+0x23e/0x2c0 [ 173.982588][ T8262] ? __pfx_lock_release+0x10/0x10 [ 173.987613][ T8262] ? vfs_write+0x7c4/0xc90 [ 173.992028][ T8262] ? __mutex_unlock_slowpath+0x21d/0x750 [ 173.997661][ T8262] ? __fget_files+0x3f6/0x470 [ 174.002522][ T8262] __x64_sys_recvmmsg+0x199/0x250 [ 174.008073][ T8262] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 174.013625][ T8262] ? do_syscall_64+0x100/0x230 [ 174.018382][ T8262] ? do_syscall_64+0xb6/0x230 [ 174.023049][ T8262] do_syscall_64+0xf3/0x230 [ 174.027543][ T8262] ? clear_bhb_loop+0x35/0x90 [ 174.032214][ T8262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.038098][ T8262] RIP: 0033:0x7f65fe179e79 [ 174.042503][ T8262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.062130][ T8262] RSP: 002b:00007f65fdbff038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 174.070534][ T8262] RAX: ffffffffffffffda RBX: 00007f65fe315f80 RCX: 00007f65fe179e79 [ 174.078495][ T8262] RDX: 03fffffffffffec3 RSI: 0000000020004400 RDI: 0000000000000004 [ 174.086455][ T8262] RBP: 00007f65fdbff090 R08: 0000000000000000 R09: 0000000000000000 [ 174.094413][ T8262] R10: 0000000000000121 R11: 0000000000000246 R12: 0000000000000002 [ 174.102375][ T8262] R13: 0000000000000000 R14: 00007f65fe315f80 R15: 00007ffedac90678 [ 174.110350][ T8262] [ 174.314373][ T8274] netlink: 80 bytes leftover after parsing attributes in process `syz.3.770'. [ 174.325431][ T8271] netlink: 'syz.3.770': attribute type 1 has an invalid length. [ 174.340489][ T8271] netlink: 'syz.3.770': attribute type 2 has an invalid length. [ 174.349535][ T8271] netlink: 'syz.3.770': attribute type 2 has an invalid length. [ 174.364302][ T8271] netlink: 'syz.3.770': attribute type 2 has an invalid length. [ 174.374335][ T8271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.770'. [ 174.388751][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.772'. [ 174.440141][ T8278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.772'. [ 174.474698][ T8278] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 174.524784][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.775'. [ 174.667472][ T8290] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode [ 174.677910][ T8290] macvlan2: entered allmulticast mode [ 174.683330][ T8290] mac80211_hwsim hwsim13 wlan0: entered allmulticast mode [ 174.732338][ T8290] mac80211_hwsim hwsim13 wlan0: left promiscuous mode [ 174.788063][ T8299] FAULT_INJECTION: forcing a failure. [ 174.788063][ T8299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.820000][ T8299] CPU: 0 UID: 0 PID: 8299 Comm: syz.2.779 Not tainted 6.11.0-rc3-syzkaller-00542-gbfc52deef5ed #0 [ 174.830629][ T8299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 174.840691][ T8299] Call Trace: [ 174.843969][ T8299] [ 174.846899][ T8299] dump_stack_lvl+0x241/0x360 [ 174.851578][ T8299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.856766][ T8299] ? __pfx__printk+0x10/0x10 [ 174.861353][ T8299] ? __pfx_lock_release+0x10/0x10 [ 174.866375][ T8299] should_fail_ex+0x3b0/0x4e0 [ 174.871047][ T8299] _copy_from_user+0x2f/0xe0 [ 174.875633][ T8299] copy_msghdr_from_user+0xae/0x680 [ 174.880832][ T8299] ? __pfx___might_resched+0x10/0x10 [ 174.886113][ T8299] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 174.891917][ T8299] ? __might_fault+0xaa/0x120 [ 174.896594][ T8299] do_recvmmsg+0x40f/0xae0 [ 174.901007][ T8299] ? __pfx_lock_release+0x10/0x10 [ 174.906025][ T8299] ? __pfx_do_recvmmsg+0x10/0x10 [ 174.910965][ T8299] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 174.916855][ T8299] ? ksys_write+0x23e/0x2c0 [ 174.921351][ T8299] ? __pfx_lock_release+0x10/0x10 [ 174.926375][ T8299] ? vfs_write+0x7c4/0xc90 [ 174.930787][ T8299] ? __mutex_unlock_slowpath+0x21d/0x750 [ 174.936424][ T8299] ? __fget_files+0x3f6/0x470 [ 174.941191][ T8299] __x64_sys_recvmmsg+0x199/0x250 [ 174.946213][ T8299] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 174.951749][ T8299] ? do_syscall_64+0x100/0x230 [ 174.956505][ T8299] ? do_syscall_64+0xb6/0x230 [ 174.961170][ T8299] do_syscall_64+0xf3/0x230 [ 174.965661][ T8299] ? clear_bhb_loop+0x35/0x90 [ 174.970332][ T8299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.976227][ T8299] RIP: 0033:0x7f7896779e79 [ 174.980640][ T8299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.000241][ T8299] RSP: 002b:00007f78974c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 175.008658][ T8299] RAX: ffffffffffffffda RBX: 00007f7896915f80 RCX: 00007f7896779e79 [ 175.016624][ T8299] RDX: 03fffffffffffec3 RSI: 0000000020004400 RDI: 0000000000000004 [ 175.024664][ T8299] RBP: 00007f78974c2090 R08: 0000000000000000 R09: 0000000000000000 [ 175.032636][ T8299] R10: 0000000000000121 R11: 0000000000000246 R12: 0000000000000002 [ 175.040597][ T8299] R13: 0000000000000000 R14: 00007f7896915f80 R15: 00007ffdf89ce748 [ 175.048570][ T8299] [ 175.086040][ T8301] netlink: 'syz.3.780': attribute type 1 has an invalid length. [ 175.097124][ T8301] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.780'. [ 175.339625][ T8316] netlink: 'syz.2.784': attribute type 10 has an invalid length. [ 175.372547][ T8316] bridge0: port 3(team0) entered disabled state [ 175.403196][ T8316] team0: left allmulticast mode [ 175.421481][ T8316] team_slave_0: left allmulticast mode [ 175.442085][ T8316] team_slave_1: left allmulticast mode [ 175.460876][ T8316] team0: left promiscuous mode [ 175.471147][ T8316] team_slave_0: left promiscuous mode [ 175.487181][ T8316] team_slave_1: left promiscuous mode [ 175.503254][ T8316] bridge0: port 3(team0) entered disabled state [ 175.555906][ T8316] batman_adv: batadv0: Adding interface: team0 [ 175.562103][ T8316] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.593381][ T8316] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 175.607013][ T8313] tipc: Started in network mode [ 175.611906][ T8313] tipc: Node identity 82f512566b96, cluster identity 4711 [ 175.619557][ T8313] tipc: Enabled bearer , priority 0 [ 175.628966][ T8319] netlink: 'syz.2.784': attribute type 10 has an invalid length. [ 175.642559][ T8319] team0: entered promiscuous mode [ 175.653892][ T8319] team_slave_0: entered promiscuous mode [ 175.660246][ T8319] team_slave_1: entered promiscuous mode [ 175.670404][ T8319] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.677646][ T8319] batman_adv: batadv0: Interface activated: team0 [ 175.684220][ T8319] batman_adv: batadv0: Interface deactivated: team0 [ 175.691437][ T8319] batman_adv: batadv0: Removing interface: team0 [ 175.699130][ T8319] bridge0: port 3(team0) entered blocking state [ 175.712584][ T8319] bridge0: port 3(team0) entered disabled state [ 175.730404][ T8319] team0: entered allmulticast mode [ 175.744063][ T8319] team_slave_0: entered allmulticast mode [ 175.760397][ T8319] team_slave_1: entered allmulticast mode [ 175.777722][ T8319] bridge0: port 3(team0) entered blocking state [ 175.784125][ T8319] bridge0: port 3(team0) entered forwarding state [ 175.819995][ T8332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.988696][ T6678] lo speed is unknown, defaulting to 1000 [ 176.082284][ T8342] netlink: 'syz.3.788': attribute type 1 has an invalid length. [ 176.156056][ T8311] tipc: Disabling bearer [ 176.335108][ T8353] FAULT_INJECTION: forcing a failure. [ 176.335108][ T8353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.355971][ T8353] CPU: 0 UID: 0 PID: 8353 Comm: syz.3.794 Not tainted 6.11.0-rc3-syzkaller-00542-gbfc52deef5ed #0 [ 176.366586][ T8353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 176.376638][ T8353] Call Trace: [ 176.379912][ T8353] [ 176.382832][ T8353] dump_stack_lvl+0x241/0x360 [ 176.387508][ T8353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.392697][ T8353] ? __pfx__printk+0x10/0x10 [ 176.397285][ T8353] ? __pfx_lock_release+0x10/0x10 [ 176.402310][ T8353] should_fail_ex+0x3b0/0x4e0 [ 176.406983][ T8353] _copy_from_user+0x2f/0xe0 [ 176.411568][ T8353] copy_msghdr_from_user+0xae/0x680 [ 176.416762][ T8353] ? __pfx___might_resched+0x10/0x10 [ 176.422041][ T8353] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 176.427854][ T8353] ? __might_fault+0xaa/0x120 [ 176.432527][ T8353] do_recvmmsg+0x40f/0xae0 [ 176.436939][ T8353] ? __pfx_lock_release+0x10/0x10 [ 176.441957][ T8353] ? __pfx_do_recvmmsg+0x10/0x10 [ 176.446898][ T8353] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 176.452787][ T8353] ? ksys_write+0x23e/0x2c0 [ 176.457282][ T8353] ? __pfx_lock_release+0x10/0x10 [ 176.462392][ T8353] ? vfs_write+0x7c4/0xc90 [ 176.466808][ T8353] ? __mutex_unlock_slowpath+0x21d/0x750 [ 176.472612][ T8353] ? __fget_files+0x3f6/0x470 [ 176.477298][ T8353] __x64_sys_recvmmsg+0x199/0x250 [ 176.482318][ T8353] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 176.487860][ T8353] ? do_syscall_64+0x100/0x230 [ 176.492616][ T8353] ? do_syscall_64+0xb6/0x230 [ 176.497286][ T8353] do_syscall_64+0xf3/0x230 [ 176.501780][ T8353] ? clear_bhb_loop+0x35/0x90 [ 176.506452][ T8353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.512334][ T8353] RIP: 0033:0x7fbf99379e79 [ 176.516739][ T8353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.536336][ T8353] RSP: 002b:00007fbf9a159038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 176.544740][ T8353] RAX: ffffffffffffffda RBX: 00007fbf99515f80 RCX: 00007fbf99379e79 [ 176.552700][ T8353] RDX: 03fffffffffffec3 RSI: 0000000020004400 RDI: 0000000000000004 [ 176.560658][ T8353] RBP: 00007fbf9a159090 R08: 0000000000000000 R09: 0000000000000000 [ 176.568623][ T8353] R10: 0000000000000121 R11: 0000000000000246 R12: 0000000000000002 [ 176.576588][ T8353] R13: 0000000000000000 R14: 00007fbf99515f80 R15: 00007ffc1a487c58 [ 176.584561][ T8353] [ 176.659202][ T8355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.707633][ T8351] netlink: 'syz.1.793': attribute type 1 has an invalid length. [ 176.888808][ T8377] lo: entered promiscuous mode [ 176.909109][ T8375] lo: left promiscuous mode [ 177.201955][ T8393] netlink: 'syz.2.806': attribute type 4 has an invalid length. [ 177.281907][ T8396] FAULT_INJECTION: forcing a failure. [ 177.281907][ T8396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.332706][ T8396] CPU: 0 UID: 0 PID: 8396 Comm: syz.4.807 Not tainted 6.11.0-rc3-syzkaller-00542-gbfc52deef5ed #0 [ 177.343337][ T8396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 177.353409][ T8396] Call Trace: [ 177.356693][ T8396] [ 177.359622][ T8396] dump_stack_lvl+0x241/0x360 [ 177.364304][ T8396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.369496][ T8396] ? __pfx__printk+0x10/0x10 [ 177.374175][ T8396] ? __pfx_lock_release+0x10/0x10 [ 177.379202][ T8396] should_fail_ex+0x3b0/0x4e0 [ 177.383875][ T8396] _copy_from_user+0x2f/0xe0 [ 177.388462][ T8396] copy_msghdr_from_user+0xae/0x680 [ 177.393655][ T8396] ? __pfx___might_resched+0x10/0x10 [ 177.398937][ T8396] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 177.404747][ T8396] ? __might_fault+0xaa/0x120 [ 177.409424][ T8396] do_recvmmsg+0x40f/0xae0 [ 177.413839][ T8396] ? __pfx_lock_release+0x10/0x10 [ 177.418861][ T8396] ? __pfx_do_recvmmsg+0x10/0x10 [ 177.423803][ T8396] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 177.429690][ T8396] ? ksys_write+0x23e/0x2c0 [ 177.434185][ T8396] ? __pfx_lock_release+0x10/0x10 [ 177.439206][ T8396] ? vfs_write+0x7c4/0xc90 [ 177.443618][ T8396] ? __mutex_unlock_slowpath+0x21d/0x750 [ 177.449248][ T8396] ? __fget_files+0x3f6/0x470 [ 177.453929][ T8396] __x64_sys_recvmmsg+0x199/0x250 [ 177.458949][ T8396] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 177.464495][ T8396] ? do_syscall_64+0x100/0x230 [ 177.469251][ T8396] ? do_syscall_64+0xb6/0x230 [ 177.473917][ T8396] do_syscall_64+0xf3/0x230 [ 177.478419][ T8396] ? clear_bhb_loop+0x35/0x90 [ 177.483094][ T8396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.488982][ T8396] RIP: 0033:0x7f65fe179e79 [ 177.493390][ T8396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.512985][ T8396] RSP: 002b:00007f65fdbff038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 177.521390][ T8396] RAX: ffffffffffffffda RBX: 00007f65fe315f80 RCX: 00007f65fe179e79 [ 177.529352][ T8396] RDX: 03fffffffffffec3 RSI: 0000000020004400 RDI: 0000000000000004 [ 177.537313][ T8396] RBP: 00007f65fdbff090 R08: 0000000000000000 R09: 0000000000000000 [ 177.545271][ T8396] R10: 0000000000000121 R11: 0000000000000246 R12: 0000000000000002 [ 177.553230][ T8396] R13: 0000000000000000 R14: 00007f65fe315f80 R15: 00007ffedac90678 [ 177.561205][ T8396] [ 177.809784][ T8405] __nla_validate_parse: 10 callbacks suppressed [ 177.809805][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 178.009567][ T8421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.017715][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.812'. [ 178.050323][ T8421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.055629][ T8429] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 178.091037][ T8425] lo speed is unknown, defaulting to 1000 [ 178.332836][ T8447] FAULT_INJECTION: forcing a failure. [ 178.332836][ T8447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.385552][ T8447] CPU: 0 UID: 0 PID: 8447 Comm: syz.2.819 Not tainted 6.11.0-rc3-syzkaller-00542-gbfc52deef5ed #0 [ 178.396186][ T8447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 178.406267][ T8447] Call Trace: [ 178.409559][ T8447] [ 178.412501][ T8447] dump_stack_lvl+0x241/0x360 [ 178.417207][ T8447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.422419][ T8447] ? __pfx__printk+0x10/0x10 [ 178.427038][ T8447] ? __pfx_lock_release+0x10/0x10 [ 178.432094][ T8447] should_fail_ex+0x3b0/0x4e0 [ 178.436794][ T8447] _copy_from_user+0x2f/0xe0 [ 178.441402][ T8447] copy_msghdr_from_user+0xae/0x680 [ 178.446623][ T8447] ? __pfx___might_resched+0x10/0x10 [ 178.451931][ T8447] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 178.457768][ T8447] ? __might_fault+0xaa/0x120 [ 178.462471][ T8447] do_recvmmsg+0x40f/0xae0 [ 178.466909][ T8447] ? __pfx_lock_release+0x10/0x10 [ 178.471926][ T8447] ? __pfx_do_recvmmsg+0x10/0x10 [ 178.476969][ T8447] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 178.482870][ T8447] ? ksys_write+0x23e/0x2c0 [ 178.487364][ T8447] ? __pfx_lock_release+0x10/0x10 [ 178.492392][ T8447] ? vfs_write+0x7c4/0xc90 [ 178.496806][ T8447] ? __mutex_unlock_slowpath+0x21d/0x750 [ 178.502434][ T8447] ? __fget_files+0x3f6/0x470 [ 178.507120][ T8447] __x64_sys_recvmmsg+0x199/0x250 [ 178.512143][ T8447] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 178.517685][ T8447] ? do_syscall_64+0x100/0x230 [ 178.522442][ T8447] ? do_syscall_64+0xb6/0x230 [ 178.527110][ T8447] do_syscall_64+0xf3/0x230 [ 178.531602][ T8447] ? clear_bhb_loop+0x35/0x90 [ 178.536272][ T8447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.542158][ T8447] RIP: 0033:0x7f7896779e79 [ 178.546571][ T8447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.566165][ T8447] RSP: 002b:00007f78974c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 178.574574][ T8447] RAX: ffffffffffffffda RBX: 00007f7896915f80 RCX: 00007f7896779e79 [ 178.582535][ T8447] RDX: 03fffffffffffec3 RSI: 0000000020004400 RDI: 0000000000000004 [ 178.590493][ T8447] RBP: 00007f78974c2090 R08: 0000000000000000 R09: 0000000000000000 [ 178.598457][ T8447] R10: 0000000000000121 R11: 0000000000000246 R12: 0000000000000002 [ 178.606417][ T8447] R13: 0000000000000000 R14: 00007f7896915f80 R15: 00007ffdf89ce748 [ 178.614392][ T8447] [ 178.680276][ T8457] netlink: 236 bytes leftover after parsing attributes in process `syz.4.820'. [ 178.762429][ T8461] netlink: 52 bytes leftover after parsing attributes in process `syz.2.821'. [ 178.781973][ T8461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.821'. [ 178.792341][ T8461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.821'. [ 178.937179][ T8469] sctp: [Deprecated]: syz.2.825 (pid 8469) Use of int in max_burst socket option deprecated. [ 178.937179][ T8469] Use struct sctp_assoc_value instead [ 179.016333][ T8472] netlink: 132 bytes leftover after parsing attributes in process `syz.3.826'. [ 179.143492][ T8475] veth0_vlan: entered allmulticast mode [ 179.317226][ T8490] FAULT_INJECTION: forcing a failure. [ 179.317226][ T8490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.331593][ T8490] CPU: 0 UID: 0 PID: 8490 Comm: syz.1.831 Not tainted 6.11.0-rc3-syzkaller-00542-gbfc52deef5ed #0 [ 179.342209][ T8490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 179.352280][ T8490] Call Trace: [ 179.355570][ T8490] [ 179.358516][ T8490] dump_stack_lvl+0x241/0x360 [ 179.363217][ T8490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.368437][ T8490] ? __pfx__printk+0x10/0x10 [ 179.373056][ T8490] ? __pfx_lock_release+0x10/0x10 [ 179.378112][ T8490] should_fail_ex+0x3b0/0x4e0 [ 179.382810][ T8490] _copy_from_user+0x2f/0xe0 [ 179.387421][ T8490] copy_msghdr_from_user+0xae/0x680 [ 179.392643][ T8490] ? __pfx___might_resched+0x10/0x10 [ 179.397950][ T8490] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 179.403773][ T8490] ? __might_fault+0xaa/0x120 [ 179.408450][ T8490] do_recvmmsg+0x40f/0xae0 [ 179.412872][ T8490] ? __pfx_lock_release+0x10/0x10 [ 179.417895][ T8490] ? __pfx_do_recvmmsg+0x10/0x10 [ 179.422837][ T8490] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 179.428728][ T8490] ? ksys_write+0x23e/0x2c0 [ 179.433224][ T8490] ? __pfx_lock_release+0x10/0x10 [ 179.438247][ T8490] ? vfs_write+0x7c4/0xc90 [ 179.442660][ T8490] ? __mutex_unlock_slowpath+0x21d/0x750 [ 179.448291][ T8490] ? __fget_files+0x3f6/0x470 [ 179.452972][ T8490] __x64_sys_recvmmsg+0x199/0x250 [ 179.457995][ T8490] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 179.463536][ T8490] ? do_syscall_64+0x100/0x230 [ 179.468290][ T8490] ? do_syscall_64+0xb6/0x230 [ 179.472957][ T8490] do_syscall_64+0xf3/0x230 [ 179.477450][ T8490] ? clear_bhb_loop+0x35/0x90 [ 179.482121][ T8490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.488004][ T8490] RIP: 0033:0x7f62fcf79e79 [ 179.492410][ T8490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.512005][ T8490] RSP: 002b:00007f62fdd05038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 179.520411][ T8490] RAX: ffffffffffffffda RBX: 00007f62fd115f80 RCX: 00007f62fcf79e79 [ 179.528372][ T8490] RDX: 03fffffffffffec3 RSI: 0000000020004400 RDI: 0000000000000004 [ 179.536335][ T8490] RBP: 00007f62fdd05090 R08: 0000000000000000 R09: 0000000000000000 [ 179.544298][ T8490] R10: 0000000000000121 R11: 0000000000000246 R12: 0000000000000003 [ 179.552256][ T8490] R13: 0000000000000000 R14: 00007f62fd115f80 R15: 00007ffd2c2d32d8 [ 179.560227][ T8490] [ 179.676512][ T8500] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 179.823296][ T8503] siw: device registration error -23 [ 180.091844][ T8539] netlink: 4272 bytes leftover after parsing attributes in process `syz.3.843'. [ 180.113496][ T8539] validate_nla: 2 callbacks suppressed [ 180.113512][ T8539] netlink: 'syz.3.843': attribute type 1 has an invalid length. [ 180.139751][ T8539] netlink: 121 bytes leftover after parsing attributes in process `syz.3.843'. [ 180.147433][ T8541] netlink: 5300 bytes leftover after parsing attributes in process `syz.4.845'. [ 180.168964][ T8541] openvswitch: netlink: IP tunnel dst address not specified [ 180.675618][ T8562] netlink: 'syz.4.854': attribute type 9 has an invalid length. [ 180.714939][ T8562] bond0: entered promiscuous mode [ 180.725586][ T8562] bond_slave_0: entered promiscuous mode [ 180.744782][ T8562] bond_slave_1: entered promiscuous mode [ 180.763948][ T8562] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 180.790424][ T8562] bond0: left promiscuous mode [ 180.838020][ T8562] bond_slave_0: left promiscuous mode [ 180.843616][ T8562] bond_slave_1: left promiscuous mode [ 185.145617][ T8602] lo speed is unknown, defaulting to 1000 [ 185.253839][ T8618] __nla_validate_parse: 6 callbacks suppressed [ 185.253857][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.867'. [ 185.462967][ T8626] Bluetooth: MGMT ver 1.23 [ 185.594702][ T8635] lo speed is unknown, defaulting to 1000 [ 186.394697][ T8674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.927957][ T8717] netlink: 'syz.2.885': attribute type 1 has an invalid length. [ 186.975499][ T8717] netlink: 224 bytes leftover after parsing attributes in process `syz.2.885'. [ 187.071319][ T8721] netlink: 'syz.3.890': attribute type 1 has an invalid length. [ 187.143201][ T8724] netlink: 40 bytes leftover after parsing attributes in process `syz.3.890'. [ 187.179874][ T8724] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.384149][ T8721] bond1 (unregistering): Released all slaves [ 187.432228][ T8728] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 187.576545][ T8734] tap0: tun_chr_ioctl cmd 1074025677 [ 187.581981][ T8734] tap0: linktype set to 780 [ 187.602228][ T8730] netlink: 'syz.0.892': attribute type 8 has an invalid length. [ 187.796667][ T8744] pim6reg: entered allmulticast mode [ 192.864715][ T8753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.898'. [ 192.887478][ T8757] netlink: 28 bytes leftover after parsing attributes in process `syz.1.899'. [ 192.903312][ T8753] netlink: 24 bytes leftover after parsing attributes in process `syz.0.898'. [ 192.937702][ T8764] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 192.966401][ T8759] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.994739][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.900'. [ 193.003682][ T8757] netlink: 'syz.1.899': attribute type 2 has an invalid length. [ 193.003850][ T8759] team0: left allmulticast mode [ 193.048156][ T8759] team_slave_0: left allmulticast mode [ 193.053654][ T8759] team_slave_1: left allmulticast mode [ 193.066549][ T8759] bridge0: port 3(team0) entered disabled state [ 193.090918][ T8759] bridge_slave_1: left allmulticast mode [ 193.112988][ T8759] bridge_slave_1: left promiscuous mode [ 193.123380][ T8759] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.156550][ T8759] : left allmulticast mode [ 193.161692][ T8759] : left promiscuous mode [ 193.167820][ T8759] bridge0: port 1() entered disabled state [ 193.278648][ T8768] netlink: 40 bytes leftover after parsing attributes in process `syz.2.900'. [ 193.298428][ T8771] netlink: 24 bytes leftover after parsing attributes in process `syz.4.903'. [ 193.990234][ T8799] tipc: Cannot configure node identity twice [ 194.160894][ T8801] netlink: 20 bytes leftover after parsing attributes in process `syz.1.914'. [ 194.361153][ T8807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.916'. [ 194.549605][ T8824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.919'. [ 194.560803][ T8827] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 194.627174][ T8827] netlink: 84 bytes leftover after parsing attributes in process `syz.4.921'. [ 194.899505][ T8848] sctp: [Deprecated]: syz.3.927 (pid 8848) Use of int in maxseg socket option. [ 194.899505][ T8848] Use struct sctp_assoc_value instead [ 194.985357][ T8853] batman_adv: batadv0: Adding interface: wlan1 [ 195.014236][ T8853] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.070119][ T8853] batman_adv: batadv0: Interface activated: wlan1 [ 195.116402][ T8853] batman_adv: batadv0: Interface deactivated: wlan1 [ 195.222104][ T8867] batman_adv: batadv0: Removing interface: wlan1 [ 195.499638][ T8895] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 195.519930][ T8889] netlink: 'syz.2.935': attribute type 5 has an invalid length. [ 196.063070][ T8928] bridge0: port 3(vlan2) entered blocking state [ 196.073362][ T8928] bridge0: port 3(vlan2) entered disabled state [ 196.080873][ T8928] vlan2: entered allmulticast mode [ 196.105439][ T8928] vlan2: left allmulticast mode [ 196.181392][ T8941] Cannot find add_set index 0 as target [ 196.410747][ T8949] IPv6: sit1: Disabled Multicast RS [ 196.468027][ T8949] netlink: 'syz.0.950': attribute type 2 has an invalid length. [ 196.911984][ T8977] lo speed is unknown, defaulting to 1000 [ 196.957209][ T8988] x_tables: duplicate underflow at hook 1 [ 196.981896][ T8984] team0: left promiscuous mode [ 196.995325][ T8984] team_slave_0: left promiscuous mode [ 197.014825][ T8984] team_slave_1: left promiscuous mode [ 197.053668][ T8984] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.321047][ T9008] netlink: 'syz.1.964': attribute type 10 has an invalid length. [ 197.392174][ T9008] team0: Port device netdevsim0 added [ 198.017706][ T9052] tap0: tun_chr_ioctl cmd 2147767507 [ 198.042846][ T9052] __nla_validate_parse: 5 callbacks suppressed [ 198.042864][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.978'. [ 198.065621][ T9055] team0: entered promiscuous mode [ 198.083370][ T9055] team_slave_0: entered promiscuous mode [ 198.091393][ T9055] team_slave_1: entered promiscuous mode [ 198.098607][ T9055] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 198.418252][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.983'. [ 198.660273][ T9054] team0: left promiscuous mode [ 198.685584][ T9054] team_slave_0: left promiscuous mode [ 198.703363][ T9054] team_slave_1: left promiscuous mode [ 198.713552][ T9054] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 198.734343][ T9090] ip6gretap1: entered allmulticast mode [ 198.949983][ T9114] netlink: 20 bytes leftover after parsing attributes in process `syz.1.994'. [ 199.210873][ T9130] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1000'. [ 199.282201][ T5230] Bluetooth: hci3: link tx timeout [ 199.288308][ T5230] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 199.469315][ T54] Bluetooth: hci3: link tx timeout [ 199.475751][ T54] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 199.821262][ T9190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1010'. [ 199.822052][ T9187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.920666][ T9193] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 199.944654][ T9196] netlink: 'syz.4.1014': attribute type 1 has an invalid length. [ 199.987739][ T54] ================================================================== [ 199.995828][ T54] BUG: KASAN: slab-use-after-free in set_powered_sync+0x3a/0xc0 [ 200.003451][ T54] Read of size 8 at addr ffff888022807818 by task kworker/u9:0/54 [ 200.011242][ T54] [ 200.013555][ T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.11.0-rc3-syzkaller-00542-gbfc52deef5ed #0 [ 200.024389][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 200.034443][ T54] Workqueue: hci0 hci_cmd_sync_work [ 200.039654][ T54] Call Trace: [ 200.042923][ T54] [ 200.045843][ T54] dump_stack_lvl+0x241/0x360 [ 200.050512][ T54] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.055729][ T54] ? __pfx__printk+0x10/0x10 [ 200.060315][ T54] ? _printk+0xd5/0x120 [ 200.064457][ T54] ? __virt_addr_valid+0x183/0x530 [ 200.069563][ T54] ? __virt_addr_valid+0x183/0x530 [ 200.074660][ T54] print_report+0x169/0x550 [ 200.079156][ T54] ? __virt_addr_valid+0x183/0x530 [ 200.084259][ T54] ? __virt_addr_valid+0x183/0x530 [ 200.089353][ T54] ? __virt_addr_valid+0x45f/0x530 [ 200.094463][ T54] ? __phys_addr+0xba/0x170 [ 200.098979][ T54] ? set_powered_sync+0x3a/0xc0 [ 200.103821][ T54] kasan_report+0x143/0x180 [ 200.108321][ T54] ? set_powered_sync+0x3a/0xc0 [ 200.113162][ T54] set_powered_sync+0x3a/0xc0 [ 200.117828][ T54] ? __pfx_set_powered_sync+0x10/0x10 [ 200.123191][ T54] hci_cmd_sync_work+0x22b/0x400 [ 200.128136][ T54] ? process_scheduled_works+0x945/0x1830 [ 200.133851][ T54] process_scheduled_works+0xa2c/0x1830 [ 200.139403][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 200.145378][ T54] ? assign_work+0x364/0x3d0 [ 200.149960][ T54] worker_thread+0x86d/0xd40 [ 200.154545][ T54] ? __kthread_parkme+0x169/0x1d0 [ 200.159576][ T54] ? __pfx_worker_thread+0x10/0x10 [ 200.164679][ T54] kthread+0x2f0/0x390 [ 200.168738][ T54] ? __pfx_worker_thread+0x10/0x10 [ 200.173836][ T54] ? __pfx_kthread+0x10/0x10 [ 200.178417][ T54] ret_from_fork+0x4b/0x80 [ 200.182910][ T54] ? __pfx_kthread+0x10/0x10 [ 200.187490][ T54] ret_from_fork_asm+0x1a/0x30 [ 200.192251][ T54] [ 200.195255][ T54] [ 200.197560][ T54] Allocated by task 9196: [ 200.201866][ T54] kasan_save_track+0x3f/0x80 [ 200.206532][ T54] __kasan_kmalloc+0x98/0xb0 [ 200.211123][ T54] __kmalloc_cache_noprof+0x19c/0x2c0 [ 200.216588][ T54] mgmt_pending_new+0x65/0x250 [ 200.221352][ T54] mgmt_pending_add+0x36/0x120 [ 200.226103][ T54] set_powered+0x3cd/0x5e0 [ 200.230508][ T54] hci_mgmt_cmd+0xc47/0x11d0 [ 200.235077][ T54] hci_sock_sendmsg+0x7b8/0x11c0 [ 200.240003][ T54] __sock_sendmsg+0x221/0x270 [ 200.244665][ T54] sock_write_iter+0x2dd/0x400 [ 200.249427][ T54] vfs_write+0xa72/0xc90 [ 200.253664][ T54] ksys_write+0x1a0/0x2c0 [ 200.257997][ T54] do_syscall_64+0xf3/0x230 [ 200.262490][ T54] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.268372][ T54] [ 200.270681][ T54] Freed by task 9187: [ 200.274642][ T54] kasan_save_track+0x3f/0x80 [ 200.279310][ T54] kasan_save_free_info+0x40/0x50 [ 200.284320][ T54] poison_slab_object+0xe0/0x150 [ 200.289248][ T54] __kasan_slab_free+0x37/0x60 [ 200.294000][ T54] kfree+0x149/0x360 [ 200.297881][ T54] settings_rsp+0x2bc/0x390 [ 200.302374][ T54] mgmt_pending_foreach+0xd1/0x130 [ 200.307474][ T54] __mgmt_power_off+0x112/0x420 [ 200.312320][ T54] hci_dev_close_sync+0x665/0x11a0 [ 200.317425][ T54] hci_dev_close+0x112/0x210 [ 200.322007][ T54] sock_do_ioctl+0x158/0x460 [ 200.326587][ T54] sock_ioctl+0x629/0x8e0 [ 200.330903][ T54] __se_sys_ioctl+0xfc/0x170 [ 200.335479][ T54] do_syscall_64+0xf3/0x230 [ 200.339973][ T54] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.345856][ T54] [ 200.348170][ T54] The buggy address belongs to the object at ffff888022807800 [ 200.348170][ T54] which belongs to the cache kmalloc-96 of size 96 [ 200.362037][ T54] The buggy address is located 24 bytes inside of [ 200.362037][ T54] freed 96-byte region [ffff888022807800, ffff888022807860) [ 200.375658][ T54] [ 200.377970][ T54] The buggy address belongs to the physical page: [ 200.384372][ T54] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22807 [ 200.393126][ T54] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 200.400659][ T54] page_type: 0xfdffffff(slab) [ 200.405326][ T54] raw: 00fff00000000000 ffff888015841280 ffffea0000567a40 dead000000000005 [ 200.413894][ T54] raw: 0000000000000000 0000000000200020 00000001fdffffff 0000000000000000 [ 200.422460][ T54] page dumped because: kasan: bad access detected [ 200.428862][ T54] page_owner tracks the page as allocated [ 200.434562][ T54] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5233, tgid 5233 (syz-executor), ts 58619893306, free_ts 58614380262 [ 200.453826][ T54] post_alloc_hook+0x1f3/0x230 [ 200.458582][ T54] get_page_from_freelist+0x2e4c/0x2f10 [ 200.464116][ T54] __alloc_pages_noprof+0x256/0x6c0 [ 200.469300][ T54] alloc_slab_page+0x5f/0x120 [ 200.473966][ T54] allocate_slab+0x5a/0x2f0 [ 200.478454][ T54] ___slab_alloc+0xcd1/0x14b0 [ 200.483116][ T54] __slab_alloc+0x58/0xa0 [ 200.487430][ T54] __kmalloc_noprof+0x25a/0x400 [ 200.492263][ T54] tnode_new+0xcd/0x340 [ 200.496402][ T54] resize+0x884/0x2740 [ 200.500460][ T54] fib_insert_alias+0xd24/0x1280 [ 200.505382][ T54] fib_table_insert+0x7ff/0x1f30 [ 200.510302][ T54] fib_magic+0x3d8/0x620 [ 200.514542][ T54] fib_add_ifaddr+0x14c/0x5e0 [ 200.519208][ T54] fib_inetaddr_event+0x167/0x1f0 [ 200.524221][ T54] notifier_call_chain+0x19f/0x3e0 [ 200.529321][ T54] page last free pid 5296 tgid 5296 stack trace: [ 200.535626][ T54] free_unref_folios+0x103a/0x1b00 [ 200.540724][ T54] folios_put_refs+0x76e/0x860 [ 200.545476][ T54] free_pages_and_swap_cache+0x5c8/0x690 [ 200.551093][ T54] tlb_flush_mmu+0x3a3/0x680 [ 200.555667][ T54] tlb_finish_mmu+0xd4/0x200 [ 200.560241][ T54] exit_mmap+0x44f/0xc80 [ 200.564471][ T54] __mmput+0x115/0x390 [ 200.568529][ T54] exit_mm+0x220/0x310 [ 200.572579][ T54] do_exit+0x9b2/0x27f0 [ 200.576714][ T54] do_group_exit+0x207/0x2c0 [ 200.581285][ T54] __x64_sys_exit_group+0x3f/0x40 [ 200.586292][ T54] x64_sys_call+0x2634/0x2640 [ 200.590962][ T54] do_syscall_64+0xf3/0x230 [ 200.595450][ T54] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.601332][ T54] [ 200.603637][ T54] Memory state around the buggy address: [ 200.609250][ T54] ffff888022807700: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 200.617292][ T54] ffff888022807780: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 200.625432][ T54] >ffff888022807800: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 200.633470][ T54] ^ [ 200.638299][ T54] ffff888022807880: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 200.646342][ T54] ffff888022807900: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 200.654383][ T54] ================================================================== [ 200.665475][ T54] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 200.672689][ T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.11.0-rc3-syzkaller-00542-gbfc52deef5ed #0 [ 200.683369][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 200.693440][ T54] Workqueue: hci0 hci_cmd_sync_work [ 200.699390][ T54] Call Trace: [ 200.702673][ T54] [ 200.705608][ T54] dump_stack_lvl+0x241/0x360 [ 200.710294][ T54] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.715499][ T54] ? __pfx__printk+0x10/0x10 [ 200.720109][ T54] ? preempt_schedule+0xe1/0xf0 [ 200.724981][ T54] ? vscnprintf+0x5d/0x90 [ 200.729321][ T54] panic+0x349/0x860 [ 200.733234][ T54] ? check_panic_on_warn+0x21/0xb0 [ 200.738360][ T54] ? __pfx_panic+0x10/0x10 [ 200.742800][ T54] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 200.748797][ T54] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 200.755147][ T54] ? print_report+0x502/0x550 [ 200.759843][ T54] check_panic_on_warn+0x86/0xb0 [ 200.764877][ T54] ? set_powered_sync+0x3a/0xc0 [ 200.769736][ T54] end_report+0x77/0x160 [ 200.773994][ T54] kasan_report+0x154/0x180 [ 200.778510][ T54] ? set_powered_sync+0x3a/0xc0 [ 200.783371][ T54] set_powered_sync+0x3a/0xc0 [ 200.788059][ T54] ? __pfx_set_powered_sync+0x10/0x10 [ 200.793437][ T54] hci_cmd_sync_work+0x22b/0x400 [ 200.798398][ T54] ? process_scheduled_works+0x945/0x1830 [ 200.804129][ T54] process_scheduled_works+0xa2c/0x1830 [ 200.809804][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 200.815803][ T54] ? assign_work+0x364/0x3d0 [ 200.820414][ T54] worker_thread+0x86d/0xd40 [ 200.825030][ T54] ? __kthread_parkme+0x169/0x1d0 [ 200.830073][ T54] ? __pfx_worker_thread+0x10/0x10 [ 200.835197][ T54] kthread+0x2f0/0x390 [ 200.839283][ T54] ? __pfx_worker_thread+0x10/0x10 [ 200.844407][ T54] ? __pfx_kthread+0x10/0x10 [ 200.849011][ T54] ret_from_fork+0x4b/0x80 [ 200.853438][ T54] ? __pfx_kthread+0x10/0x10 [ 200.858040][ T54] ret_from_fork_asm+0x1a/0x30 [ 200.862826][ T54] [ 200.866056][ T54] Kernel Offset: disabled [ 200.870371][ T54] Rebooting in 86400 seconds..