last executing test programs: 1m1.498394532s ago: executing program 1 (id=857): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x3, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 50.616093781s ago: executing program 1 (id=857): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x3, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 38.727142674s ago: executing program 1 (id=857): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x3, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 28.044506705s ago: executing program 1 (id=857): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x3, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 17.446074392s ago: executing program 1 (id=857): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x3, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 4.862270026s ago: executing program 4 (id=2164): r0 = socket(0xa, 0x2, 0x4) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x3}, {}, {0x5, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x6}}]}, 0x2c}}, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000700)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r2, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b07, &(0x7f0000000000)={'wlan0\x00'}) shutdown(r2, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x25}}}, 0x499a, 0xa699}, &(0x7f0000000180)=0x90) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0) sendmmsg(r7, &(0x7f0000000180), 0x393, 0x0) getpeername$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtclass={0xb4, 0x28, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff1, 0xe}, {0xe, 0xc}, {0xfff2, 0x3}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x3c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x9}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x9}, @TCA_QFQ_LMAX={0x8, 0x2, 0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xdf}, @TCA_QFQ_LMAX={0x8, 0x2, 0x4}, @TCA_QFQ_LMAX={0x8, 0x2, 0x4a}, @TCA_QFQ_LMAX={0x8, 0x2, 0x1}]}}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x3}, @TCA_QFQ_LMAX={0x8, 0x2, 0x1e2}]}}, @TCA_RATE={0x6, 0x5, {0x9e, 0x94}}, @tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x27}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x800}]}}]}, 0xb4}}, 0x0) sendmsg$sock(r0, &(0x7f0000000240)={&(0x7f00000003c0)=@generic={0x27, "e70aeb55bc1a3f4a327d41b67abab33deb9c3cc02a705b8ab0c7df5a401ff8e5d99a2400f63fae36f3b2953e0510bbe48f49a96c57f3819eebd25421b0b66096faec651a32bbfa6f3fdf36a7f644d8bf7b13f4896c4e12c2cc435551a6ac7183c736abf256f2cc30c0d66274671f466648245ce92e25c5f8e4097c08c07a"}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000440)="fbbe06a246b3eb7f45641a0137920993431f738fec4cf098552652ba4fef07102043f2d2f8623316530859b9f0492506b5955e7e5d77077ac028d11cdb7c46ec2d43ba5a612379cb0a322fa09f7056125963fb9659a507271ee1b2c22ec1f6dc6c6a793ffa9785c10607996da81e9d9be6dc3e40520774f5edcb5419ece08808677b1b2ad85cc714786f9dc619a0001f2a7edd6cbfb2ff27379ec07425bac9b893c7a261f7a2cfd3b48f6b98e5cb54209c17e5b177217601861c7719718532709d53d179feca9d6de33630f08dd4debdadceacd603", 0xd5}, {&(0x7f0000000540)="3b5b55d0955c4828c2a90825c1059e41ba38735035ad64ba7f5a7edf2830c49de38af7216b4e1a088a4c725fe492e43cd82eecb03b4f01de8ee126b4af19026de7b3d71b606b6a8fa9f124e70d63b42020cb3cb3d21eaa89e28974d314376457832f12a2305ea711704087dea44701c1b45c6407b368046b3429f562b216fec6109f8a1406b682d6d9070eeb553585313c031394748cab0d2d2be62fd295a6f3b5b8b66835a773b3f4226e5b46d6ea3536e3c3dabb5297f055dff2d6cb8f2744", 0xc0}], 0x2, &(0x7f0000000600)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0xfc9}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff7}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x7b8}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}], 0xd8}, 0x10) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0xc3072, 0xffffffffffffffff, 0x0) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r10, &(0x7f0000000000)={{0x3, @null, 0xffffff7e}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r11 = socket$packet(0x11, 0x2, 0x300) accept4(r11, 0x0, 0x0, 0x0) 3.977396966s ago: executing program 4 (id=2171): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)={0x73}, 0x8) sendmmsg$inet6(r0, &(0x7f00000051c0)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x6, @mcast2, 0x33}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000500)="51a3e443aacb9bc5c89c592fc1f1fe504247eb51ff78c277ebba322c4f082917c498792eafb28767a109c8fcc849fd444337eb5cf693ffc7183450110969a3a46d0ce05bebf3de22267050918ceaac716af498617d3fe0fcea638c837a288aa1d4c086bb5ff7b30a67c2a82eab6fded28031f8d4758659df041bbf6ab124de24183f32fbde721df76c3248debc9e17fae5bb4d", 0x93}], 0x1}}, {{&(0x7f00000006c0)={0xa, 0x4e23, 0x1d, @ipv4={'\x00', '\xff\xff', @empty}, 0x3b}, 0x1c, 0x0, 0x0, &(0x7f0000000c40)=[@tclass={{0x14, 0x29, 0x43, 0x100}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x40, 0x9100}}], 0x2, 0x4001c00) 3.883914643s ago: executing program 1 (id=857): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x3, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 2.056806177s ago: executing program 2 (id=2173): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x5}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x9c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4}}}}]}, 0x34}}, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)={0x1e4, 0x15, 0x4, 0x70bd2c, 0x25dfdbfb, {0x1d, 0x2}, [@INET_DIAG_REQ_BYTECODE={0xf7, 0x1, "5d95a830300e6d778c36a9fcc6fa9b649f832886fe260249f23584c77936ea5d8bfc2edd5f3e54a40d55d8b69befa6c33ecfaf7ce268566d8a18911fa102287f2eb529088d87f48ec5543e591007ad1d8d20c02a6b01c413f0dda20fe9bafcca0e1c7417d17b962a807913b700717b673e16dc2d4d6f5b3701006b5933ca92292744194b008086347b089c06eb53ddc146dba2f0b4ee40f9c29893dd5380be6f1724f847a04977ca82d763ad08fb7841ab0afd4b252112e06621361b47f8b6bba2726008d0b17c12fd6dd7674b8fd0916641ae4edd82f51c9e7c0c16b8883485d79cd31dd3149248543a8c54147f2cb9ab929e"}, @INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "9611108650b77268b7adbd54fc576a979b1ab59d859ce28764868b13929f6f9136130217b2dd38cd47a441a59eadcac14bf4086eba6a670ac65cc2d87abfa4f3acdb6226ed6795d0432340738df8e0d06d1cfaac609203e1ad6a05b5230cff7fd4d11ae22279d4206518891a09225c13e002e4405f388858a118c328a287c8e919bf7d77fe1e5ab04ec4dff4021831f2d482fd12fed60826168a2996ca753047353e8e9c870345e3d5f4e54620bbb1cd121b4208152b02ad0ddbbaa9eddb3ee87821b0315533c674ed6284d3b53d63a237"}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4008840}, 0x40) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$igmp(0x2, 0x3, 0x2) socket$rds(0x15, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa014102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp_prespec={0x44, 0x3c, 0xf, 0x3, 0xd, [{@rand_addr=0x64010101, 0x10000}, {@broadcast, 0x88000}, {@multicast1, 0xc}, {@loopback}, {@rand_addr=0x64010101, 0x400}, {@private=0xa010102}, {@multicast1, 0x6}]}, @timestamp_addr={0x44, 0x4}]}}}}}}}, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r8, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004ac0)={r5, 0xe0, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000004800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000004840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004880)=[0x0, 0x0, 0x0], 0x0, 0xc3, &(0x7f00000048c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000004900), &(0x7f0000004940), 0x8, 0xcb, 0x8, 0x8, &(0x7f0000004980)}}, 0x10) sendmmsg$inet(r3, &(0x7f0000005180)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000980)=[{&(0x7f00000007c0)="10be7762a27965a70fef21de6be0858552bd036bdc64a48b8eb240746dca21e0487a495b1f99d8aa472de8364863b8d7cbd67ec1cbf7adc68e59cb54ef988ade9b13239b993628d198157e86195848ec17b01c53159197a87b1b2bbdc484877e78027d47951ec2cf5b6d1ec25d295fcba6474b70a34a83f424003a7d04be4f1e17b18a583b85858e4e954aa49166a30060e70b33ac8f6f2105fc05e0391f2124ac353f185bb7fb302221adbc71dd511aaff42fed3f630e91276a7ec3bcd5bef40ecfc6ea65441546ad7bcc6c0afd82dfb14820974c2d9e3e3f2acb4fb3db", 0xde}, {&(0x7f00000004c0)="e65aec74cae2f5684016f6b989d7cecdf8fc97b51b40d29e7c1bc26f94a4b554ab4047851d459f55407978434886b0bc92b393001f867b609823a6b508b3a35967504cbf17f0f89f0edefa1fff6980baf173102db5abe93197e45a9f0010752bc72de8586611636414f6addb541f15f12e", 0x71}, {&(0x7f0000000300)="cf492ae94bf2b65460fc8a92b65ee7146085a016368592c88ae14a57f3c1213a41fa24f648d4b393a14da03e", 0x2c}, {&(0x7f0000000540)="4010677ea084923d5fb22954d33bbe8ad80f56a071710f1fc5f77f2d1a690967478c91536164348d39da37", 0x2b}, {&(0x7f00000008c0)="bd0801757679a82140076cc0a1300eb20d61df13e50ba3264087e9d25fe88ad844f7329b82a4e2357f124fe0f16826d104d2645e49e0475555cefdc0b6cc795fc198d4edeb9327bd74dc6ba6eb5c", 0x4e}, {&(0x7f0000000940)="5f3aed10e1be3811ac6819a3f4f50a967cc0c5de6d8e00049a583246e0905a1c489e610b30894034dac03fd950857b5942ca08773696", 0x36}], 0x6, &(0x7f0000000b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x21}, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_retopts={{0x28, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x6c, 0x3, 0x6, [{@multicast1}, {@local, 0xfffffff7}]}, @end]}}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000d40)="a4aaeccf9420e83b19ba7a763f7e6dca7bb98562c112e2a88e9e1c03f7708dc3b258a0098fd3589b43494b9f08f720fbbc599a4d3df327e2b311da6e69250433b1c0c17992c648c52ff5dce6a65bedcf4d5e335089a954225e8cc5e5a0e20f988a08b32797437beec1696dbdf08a4338c92c8356c8bf1ce7a1b1238da86c9f89abf8793bbaf840249deb89b77cd10814f86fc743e29a3c75e4be1663ed3e38f8e24cf5699bd909c0c708201c688deb", 0xaf}, {&(0x7f0000000e00)="d09bf280c297172518711d409b03ba10daace9ca7248e13f8e256d9a07d5975ba5ca60a4974b573d3dd86ba032f9052f82fcdfe3f75d86fccd9df20827d3eb837194949f6345d463073c266fc2df0b6e76698a6b93d3a2eee77cd3ef1dce50f38ba8e281623a1a98d791c1b896e4876fc4a8519808ba146820f3ed8835f6ba88b0600970c20e8a3b73c2adeb8efe327978932d7200966fd50aec2fc2d6edfe4712e83dd8982e8c13930db232a265296f0edfb390b3600102d10c1f9059aaaebb882fe0c115b51b9b7ae6b0d1dc936bcfdde42a480df933d64011ac8ecfa242", 0xdf}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="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", 0x1000}, {&(0x7f0000000f00)="87c57a7c8f420d243dd55c4180126f9cfa939c0279402aeebf235e476b305abccb8b755eef55ce26c4856292369e8ea4fb9e3624933f42e532cfcb5d02fdf40de031b00e057616b69d0ae2e615513435fcadb79c4c6f9cc4c25ec73312757ad3f8d4b86a5c6a0cae526e9e72827fed6737", 0x71}, {&(0x7f0000000f80)="fb44d200ca450d0e5f6bfc3ad5b0402df8abe973dbb19c156f8c7607cdea00423dcc22ba742bc9408a117c82140a643cb0fd33fd120e907dde871ee653f8588ab280a736dd5f9009c5444e20203f77a60001cc334e9099b1b191ca318c66be79261b12234d8b02f1506e68756b3ae78af924d00a8056645295356f1b55f495a65e068845c5c47fd46c19f91098eb6506a0f67de67c43103d66a06935581c7c370a3ea1da1299231dd97de87842e27493fe1aa1ec2e9f2e6bc8c1d316ac0af78aa533f239a4c89719b63e1f3e09124497fdb056988658d5af5769e00e94bb45e2ce60e1650de9a649", 0xe8}, {&(0x7f0000001080)="02d4da857c55e980188532ec2408e4af8748e8ef966dab88695722e9a72091cc395d66712c581c2c7060c340ee8582d4a80d652e4453e431b33689bb7c13189f5addbac51ef191e00ff1400e3eebee91749a718d6f1f8ec9a7d4ce491a4a12d14743b32d09327206660572d8958df84eda52899caf8e7616418b644ce7dbe3903fe375be5d8a27ce6e39c86bb8f37ba66eb76659a2db6d1e2e6318ace751d5fe7ffb901ab1ae05ea0e0f962a3d1c4c54c160eb913dfefa77d0f23c5843c1fa2cd5feebc0886c", 0xc6}, {&(0x7f0000001180)="af7bcc0a5160d282386b85794007852f567fa8cf83547636d00398300d7f98c130faf3c01afc0f1ebc45afa7c6eb3f279152bf385b0ddb67d30e38d524dc851f3a6a2a275b7acdc19670dcffbc7fd83f3ce479575463a17b12be47dfec3bd24defbab51f45ae35c8d8938b056c9b025e3f2b2142ec798fb4dabd7334ba699acfbe186fd1ce474e9b079456118d8d56a26eb97320b365c2894953dce9da2c3d1c167240cc99387a0889789c294e0573d0ac", 0xb1}, {&(0x7f0000000c40)="008932248b92b6955a78eaf1f22779bc7351ea5d29e3b7fb29ace243990209f6c96ffdbb781ba30a9f0e6a313df4958a6e6fbc5277531b", 0x37}], 0x9}}, {{&(0x7f0000001240)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000004580)=[{&(0x7f00000033c0)="8ced09d48b2cb83bbd64e6a47e32d83cb16c1d79b9d63dbd20f67e9d10120686bbd13e05f270cc2a65a9f63795c55e86afce5fd9130ca709224c509d44d2bb6aa29025d9c44233844f464214c6b797b85e8704a444f20fa30b04db195d6c06de6b", 0x61}, {&(0x7f0000001280)="27794e850a49ec12de75771586d36b5e65ed3fda1c2a88b5c2", 0x19}, {&(0x7f0000003440)="14da79abcd87236f1fa042949bcfa8b864617a02944a22768c11abfb0da6dbd45add7c0563ed0b7238ea49956296953fff1a615e6571d76ffba4f5457b75d394ec0206b9d4323f8abad70a7a8c2b207baea48dd513abc818ef02a98d0abbd483a741f4e45ae3982c058bc29869b63fff870ee09d3fb70006a55d4d3f38bd413b46352ce8d045befe9d872009560cb92aae73c8ed65cb0f2ef91aee0e72ec6ba0a8695f9820278da417c2d1ecbc3f761e32a2231304716b", 0xb7}, {&(0x7f0000003500)="58fc22a4d4f4b1edebab2ed56c929b604a4a1515c4f8c3e5521f059a401e44d8b2519e7766128568d86477c72a7a298444e29e8dc285873ad396905e4a511d3b566baba0a5710847ee686d83a9858ac3f174f5e9c5da764d368687355b31a8f5c41f19bb0a12e38bbdf4cf55e093528bce2bd44ce2c04eb132e0a6de00cab917d68567af854ff41f6010942d496afa01109147dab4ffb62eee8049890cfdfeee9274145ce939eb7f72d523afb35c6e018f36e3ac298df7c8f559a7e42ceb08ef65eed585ccb24053a71817484178a2ceac52b2086955bc7d35b61af4d151b533e198f348ffe1a46ae71ad7c3f5f2e6f5449af1b5866ea99e33cf96dba0a9472162e056ee7c6ab4bd1193d056e9be781248af38ea117493a16e5617a3d644242d9f1577db7751e5cdbade4cbed6fd822b7c318477b4187fa3e1923bb4844b71a72255f5a5137e57c540c5065c89b0fb1373eb310a27554067210174148dccd1da613547b154676b9c26fbc8babaab77ea098ad7b1736899e83001e6def9eb982da42c98db2b4d1090cb595af4630b13a62ab5fadfc40c235f7dc5fdd308669583b7d3c5cf92c9d92fdabc086cf92c9d40832e43bc144d9a6682071f46253f6e1afd9ddcbf81846b73cd5846b35764d55284c7856bc5cbcca1b10c8aeeb73d1d971427c8869d5657c3370ae85a7f8b28bfad6ec314c3ad85313ffbc69fdbe4f48f824e56c5382eaf9d838eb22e07a6340ab9cc9796ed0478945a504bd05c8e1cc652816c7a2657a9c0893f9cd6a174cb4436f622300625c5adbb20a95becd018713aee1ef0175c82de3b02bac8599b0e4393df946bc346207bd9443672b9cec7540f968f05fed8432b124fd7e1a7292c1c24774b0ca9184dbdbb2c9509d9fe832a3ca8023ec4f8d1724da7c811592270dc1043b95b61b388e3275bb8a44680466911d655a050cc5311c7ea48a758932a86f8acbd8aaa081610b561f1639ea12162609ce94dcff8d9585b515d00da78cb3c46d1eabf7fd0359d547436467d117cacd7ec770abab9eb2cb1453ad459b13e2d285b027c85538546438094f5577d79ba34c2caac4daf2df70763aa79fc4ae684c665fb80532ff6a4f72a73de1a109599f98f5263482e571fad72988c48fe5dc8180589d6cfe2d5df76a4346d2757a7addc2a3e2111aa90acc892e39e4ed2c55d0c2ba4a55ec1fab6aed2dd5b71a0bc7123eacd11d57704310faa9b203032e10f034881a17a9279b1822af3ad25cb56cc319c52c25d8ee6089b07ea6b075c2a005cc01fb656439bb305885c4d5dcbca923105e8cdd9b979c8a82db841544294ba5543e07df6913474123cffd673296d8cbc3f5d11f215a43d0b7e1cab0e168c2aed374e5cb669e00959413057ec72a66f69dead160d8f6101f7ae69995190b7a661d2cb3c16dd1868f2af19423aee35f501ed2b94465f835f024ced8d21f5befce8777fdffae815afff26a9d0b96b64e422a2247d04bea3c4fc3ddeca43f0621a617efa172f15cf092c37614fc9659671f0e18c272d26a60dea5fffb3f95016551b9f3e02ce96dccfa88e32bf83426247ac62f1ddd30e5f7e446000e401a5aa763dbb80bb154d0c5f825a7af8ae4cf834906fc2a7f9245203f11e009521f1108dc353cd59e8223ca1284563d73b20cd65ef7bb03712d922d7b5bf50b5e86c0e5e71c670ac14fa34530ddf9f720f1c96a451e549df5539bc46c4ea1da7ffa0459203084b062a3fd36069a087f6aa9240c8d2ef75125587db2db022538a7a5c4fb6b322390eca9672885daf52af1a98fac97db7721c096aeee0533a5671d665752da1be78d59d5c6f38c1f4b08b2e42571e99d2c54ed8d34070015c27834884a7abb60c62a44d3a5cf73833845bdcbf9c3906d888b5d01a42814f660bba010793becdf25d117bb26cea8d7e545730720b4a17e64c8cb1fc8ee43352072f0969c728ada7e3440ccab356a9b73f1af4973fa3068f1ec9e96d6db9d11be6c3f70c1511391a46918ace03c9a8258c27ecc99eecb80175de0478ce04340ce3b1aa007dda9093200ff80d8fd0a9921ac255a5dd32483ed84624182c43fda8ffd0a5f12b99ecd287c372cfeb3f70b8974373556d772f56caa89410476f68530b8f52d5929d88f2a5cc55f13ae1b50d70b15544ee80bc9bf012c7445f1bb516f1a7f2af53500c5d3469ad3ddf011c5310ca9b44f1326cfed06aeb42997ab7de9fbfa1bb6d4556e72e7cb7b8dc9ab232b313f5eef3108963237033ae3b53a5a1ccd5ec9366fd0bd2149f92e982343169a945a936fd94acf887a471fe126f367a0b764cee6ff4c296c64774c7ac8d0adc23c09a6e4ee9cbd225e803b08eb0948782820a57b1a02101a74ddeb97799f0336bb0288d7d05f2c54273b731dced28a7d88577031eba8cf7044475e048779266cb67f40c482a3c8270f31d588cd430aa771c68001b1aedc9faee933077ae9d78a0ae1d9d25bc09af7a80e7c4d3dc5d704db83583e330cbfcafb2cad0b170b4cc2b46af203a81183829b8a678c9f0a006c2581d64a35f472c48040dfc976cfb558800c38854a435553d8aa26a83a3eb3afa0f6ae1d6f43ab704faaabea2021a3ed44a51e2834034cbfa840393e68dbc06bc2d6f44a4a733c271ed06a5369903f851e76de65ce3b57eef1e0981c9d66f87da7fab1e639e5325ce2400e137d363e6063ab8a40d09c688e59e1ab438aeea315f6b44421904f62d7672225fa7c7e318e25e42a790b879aab67767213bc700fbee6cb7bc4c4bf850d7bd25241b696b7cfe09f8824d35a1d883b64004c47bc99a95d4d1bc34f6d120c77dbed0af358c6fc56cb3a8a322aa0b93e35b01ea49ca843b97ba33ae5fd75040054feb8d7b01e9983a82d36f9c3240dab32b99d5e57d987dd5472cfacb15384722c635487382bbc818fdfa96eb9e1f736c1d39409515fb262df2ef224077bc19af598da9f45c827e6d65d858054a0460990af22e0b5626cd271fe47f0b32da984f763e749b9a2cb712725ec5614224d5393165c1ecaff4a04396c1376941eae79c5be882e6297f5176c39d50d09d238fb9669a5ceeb102a6a7f526e963f1f5049c56f74eebe09d45555a3853a3671a9ea9215eb34d69b0eecff1a9a59c8a8e494960ea556c30a94197a3b450f9447ff449bb379352e477f24af8677610cc671ff77dec92cf58ec5b2f421fa6ffc8f708ca2d4d8043bd0ef2d0c36448c5235259729dd39adb7c353463253838a02519c3f8362bd9b622da6f103da08efb93368450947410674b48ff72e29056374d852c657a530a791df9d73118191583b5980e069d94e8dd0db6a944cb17ac2cf0f13d01732d6a0665a93bb3f049082302fab72b6abb63e3d7826d7d47596597445c933ec83f2e14a25d85d57615be0d8e8b28e236c9d2bc4237f564ccea656cbf7e748a06df8c6e21238fbc579a928a88a11d3a78099d772d854df78978661e2feb79082f3c850bf29dcbb49affdf8666d907a44f57f7b746bb975bb54e8c5a1a79ac53ca2ac0c4f30b29edb50653a31e12a3f42af20bf638eab1abef05703d98b1053aacb69a7c01b858a0715c239c2d3f692a2ad514645c9f6c3477531dc26fdac9c193d89a9ad76aa2ec1f718331f0fcd6e91c5195443221e467938ad62fd417ecc55458f0da02e11dd02e178628581403ea362a8896e8e3658ad9bc3bc08f487c690788ddb262484e64777976837c30f68ced01a86cf0fee3bd8760e63b64dcade3c43fa1e07b5558b4aa42247bd08c7e5a7410b3b1cf6b7583cf0d015c2d01f7451c765ee7b76865e854ef2bdc29d82dce17b0d4e8f19f91f594b0a0dd8fe83b272ca715f39dfbac6cdc098499f9c73bf046a3d81f38aab03d13606022aa3b13390a1144a6ace6ff2e1dedb8ce450216083b4c10ea444581ed8a06d7f0c7aecc0a8e86e0bcf9de91a6d2d86861329c4d5c31fba27b1a460db2d9c4ff8bb6cce98b89de237e144a6e5edd1defa751b9232aabe844ca44190145a1706ac7b0e4469121b0a379bc256cdcce0a9ba296f40f6ab1e72848c75d1060f0d4174e1f60df3137b76d46a4dbb328ef22815f12e9bb193da26359e796ab739caf1a9b9c40292cb7c6b7cb46600e215e155b7972e92d4157d5a7ed287bc73a44007a7200fcf2f9ad7e89d0aba79c8e9de590b7f53b0795da04546b9d61ad30ff001b1ccd66daa1fb82b739922d52813f9dd4a2d74714a5e38f8aed760a78f4c641a0c9f58c06032f75b87a7dbe7f2653d16deeaed31e4902dccd87dea14bcb198259774cb98c1de7c8bb310dd401d9881c915f92e4e845132bfd0d4247d61b1f38f7984daba57d98b7069419e5fba8b1b84b6564be7039e280966939aba624ad6a770a21fd0ced546cad38d56d06b74cf41489da54d970842ca7dc646dd15be13f4733549c2fbb214c63290020fe82bc1371448e898b0a064c1bcae5110f2b7c0ce4f139dcaa4ef1d73c3ac48982cbe520e10a987229467d4c0beaec2bc7a2ac344430915eae829a47b0a9ce464cf551cb29d28704e72823361472b41031764ad8a5200072a50f1db7b6b6b3ecc524aa7683984cc4f3c7a3a4eea83876ebdae125d8387f842ad9e484700642cebf2237eabd715573e67a13e32788e5f2414f34552e9befa6193abf60c485f044899fba455e83507a88a3cdbbb1acd19fca958929f92048cd0c15ec281f9b08efb3b224a3d1f05f889cec2171d63f3fc9230e0911dbf6a178f77b4a2727425038dac3126538bc0c3806473a6556f17d575a90bd23e4db37a65e68f764e9a1bbf614a3344aa179d0a2f861b6c3c87d700ed2d747bc9f2811771414e82aca2f14546fed486cb436aa5c06563736a18053c5cf243c4fe891efde044af621c6c710580796ac47d7db25a0c96069c28f7707dfa63cc96819493266351fdf917cb94d67392098cc38b809bb8be2b281119e4c5f5f62d4c41220d876f0ab8d5b6f3508479749ef3d9f4a21acc582ae8b7298810a080423b15dbe6d486c94f89db4d22f8280de34c50c23d6f73bf33e13cc62e79d7489a0d6612cea2a1c842684f543d9242109335dcbd0685c73efa4761595a580e479f4c56dc67c668bcc61daec54fdbef077df76ff89c9bfc1fa5818ae05e49b04f3456bdc85769855ed10f59664c57e30e3ad4f8277c01fec7294f5722be8911133dc2be2ee2575209118bd58e1636bb68490922103e681b0f7957e9304dbba791c58c077d634b64a5bc2e46e77ee5a7d1b1850d8c2e6c94f88779efd2b35e1b4e9d5f47b2c77545cebadcdec9098056263503bada8d3be703c6bfb5b62ca5d93b62c7dbd7194b3097db9efbcd628cf2b4482b5cfab9202bc6ef899455c60cfe9437e346e30a9d02f60ca5f3541dfceff5acf4c83e4c2557090ca0d0f68e361f8cbb7dae50c967b0759abf5c9804eadc11f00236eaef0ddf2bf29142c2dbac4fe032f0b964b5592355874147d586465a31b64b136c23a63e09faf8962d1463e0e24cc0d11ef2fe2fa815b1c9e9e4a6e3bbf38a4ef2d00ff3c23a8c1a168038f14ba0ca66fcb45cc34d89bb4907b1b9c4436d7ad1c4276c1614102eefc97aa877abf956c88c37cdefdfa1fbdc1e43cb57e8b81917d830e3afe84c019d5ebcf49eb3b3efd2c0f69453246ed6040b9214985e833766e4bce70b513af754b5d9e6adda91fef63be1fe8d35966352b6fb73a4adb23e1b367ce9a0a41b35b70109bf7f367946b46bf8a974db38fbe6055b46865968a551093d17330982259d73c20850bc9c3e996b6", 0x1000}, {&(0x7f0000004500)="502147c65cd01d819097ef92efc7215db9dbbc9416e0ad0f95e312444724e1887f1a99493474510ded40cf56b8f81a14e4e4e6adfe626d69c6ccc16fa40aa6f8d93c635b9254c71d43e9d831e8e66bd53994277f853bbef8dc959ad1d9571c8462a79e057b8c25994718d776d727b8bbd94fb14a", 0x74}], 0x5}}, {{&(0x7f0000004600)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000047c0)=[{&(0x7f0000004640)="fe593695f551823dd85513cec3a58041a9c3f75e16f41c64270e79577e9b6aff2c988ac174ec2f55b8c63b608b284b337d6114166494c1ee01cdd00757aec955ee6d3b41f34940d0e068d8fa3a062a3156a39c9ab7e71e18f5cd2522d35e6a19120cb86d2d2d89d920c4518de9953769513b8b058187e82d5edd650fea6f4283e85b0471916a74bb34df4b7ca991ba63d3ae0e546127a3d19f17a8", 0x9b}, {&(0x7f0000004700)="e60bf2924ab3bed749e050801960f5aa045e958b22af000088277ade4319288ccd62c7391250a632f97b37c2e74ccb3ef34c92d51dcfe4c763edc5802f5ea7cd32fddef8000448c1b749dbad77d4cbbf3f8a28c953ae23cb6a5d1030eecc09ae9b9e1b7aeb3207aefc89a13d4c7ec0893864bfca67488425347dbe3372b16c0d14bc00e268e78b16f35987d0d01bbf822b7fba383efa8cb9b8642e537bccdba7c58f69550e3058db55233004bccc9f0235431584d9c4046f283ecbff26", 0xbd}], 0x2, &(0x7f0000004b00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @dev={0xac, 0x14, 0x14, 0x44}}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@noop, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x67, [@empty, @private=0xa010101, @loopback, @private=0xa010100]}, @timestamp={0x44, 0x2c, 0x71, 0x0, 0x5, [0xf, 0x1, 0x3, 0x614, 0xda58, 0x5, 0x3, 0x5, 0x5, 0x100000]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xcb, 0x0, 0x2, [0x5]}, @timestamp={0x44, 0x10, 0x48, 0x0, 0x7, [0x1, 0x5, 0x6af]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80}}], 0xe8}}, {{&(0x7f0000004c00)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000004f00)=[{&(0x7f0000004c40)="d7ffe7cef689fab235b396c0be6c89416785404b51187a926f35102f5164d6227da1deddba09ab8007a5ee96d60317b09698e28e03bc7da0223dbbc3fa885c15f44e6d5ed28e97f3afdd627d59aa2971dcdf221a0a7f8b1bdc77b395f2442197d435179875f49c951c41c4f7d3fc2767df609bf7", 0x74}, {&(0x7f0000004cc0)="573802a6efea9ee94ea42431e8531240b4545cfdadad02984d23708d7cef6069036c3bef5430fd4567766a8c6bf22e300a78286312fa7efa369cca2f90a8aa43e772c0a680bc0ae60b7642241a687198241d2fc430269a2a8d5602590a1eb8c73c6faf3578742c0bd6a8eeebea80342ed7a55a9ebd848255550bf4eec5885639656172c76c7b4987be671280e38f5d8d169f3c858a2cab901c2e585b", 0x9c}, {&(0x7f0000004d80)="f16f99f012297ae7f6016257cc3242c37e6accafe410e389b69e06f75f1368e02a9896fcbde691458c1921a78741f09d536e252fcc4661f16b9fd4ea0d75bae46d277386f8bc4082f6c65669fd4ace031b3e78e9de31652d32b74605ed47b78b05f977edfa467fac8e1bbfc42226a3c726df818bc60631cf3685b1034ccaa817966eb4beaa9c8eabbc8f654b3423c24666542bb96480", 0x96}, {&(0x7f0000004e40)="a212ac2e0919af39cba3129b975b232fd85245483942f36cdfefdc8d736cee393d1b760554c90277da68654657c6d216f7e3e2f971e2eefebbe480ba9736156c51ee05b50256c07b766701f86e2fb109d5f4fa0bae98d374fc57bcca21419576d3efdd3f317a7e02f866a4d101d00fd725186c22ae03b36df699486a033de2c35b4ef6c9c34de335aa39", 0x8a}], 0x4, &(0x7f0000004f40)=[@ip_retopts={{0x18, 0x0, 0x7, {[@end, @lsrr={0x83, 0x7, 0xf8, [@remote]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3cdb}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0x3b, 0x0, 0x9, [0x1, 0x7, 0x100, 0xfffffffd]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x88}}, {{&(0x7f0000005000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000005140)=[{&(0x7f0000005040)="b4a15225e32067491c3c4fc18f8ee42ad31f621e58400b454c173b0447b81c996f87663e", 0x24}, {&(0x7f0000005080)="43cbdf4e57c427395fd82945a3fdb545560c680a6f93838a0f38ed3d32d5df4aa5e195cb7711553ddd624c5f59660ab7cc366512f4595f1f3a68705fe8d14cf16af7d4d5eb947b7ce3bc7a71a83187caf49fca14f3ec2ae8a6a0238ab459dcbae7", 0x61}, {&(0x7f0000005100)="862b27a1ec1513f8a8a312a31f272bd4f89cfb9c2d2772774167cbf0dca6cfc1de2f49b86c493ae14af77bbbdb05d715c86e0f91259af37040cbf1fb", 0x3c}], 0x3}}], 0x6, 0x80) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_GET_COALESCE(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r12, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r13], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x74, r12, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.055409405s ago: executing program 4 (id=2175): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffe74) 1.890339066s ago: executing program 0 (id=2176): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000100010009", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/22], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x200, 0x2a8, 0x2a8, 0x200, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x5, 0x3]}, {0xffffffffffffffff}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ce73ea80519cb6f6356eb1edfc3209b6e70f74c79cf77384d7749c0a4701379c7b013238291a460f26e8bd1f044ee7807c2ae50f0718af8d99b1632e02f8d29bee352f6da56441a6e44e8a5541714d45cda87743c996f4bd71be0852d2920db885c39e74ab961927298f09047c928e3945a4f167a55bb335"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000a80)=ANY=[@ANYRES8=r0, @ANYBLOB="39fd9bb258bcaedf138744d7b965ca3f3f9cdd79d0457f0b7008a3a4147938324fac86e6b2b7e9f77b071d73c9aaad86aee92561a454f378a8f0518baf4e2b239ec3be52b71c286c5c683faacf544d167b8951dbffd657ff57a4fc329277101291de7b7aee495d1f52189288d8ba94c87c78a72cff5d32aa79aaf82d03f3886e961d5e1d4d5076bfe2eda6a9089f91fb350477733106f8f344e1a34627fd3767b0d3248b31ee39f47ec9980846dc0e01e3d8e98cecb54691ce885572597b98e707b1efba062233f068b11e40c989d79ad53fc05b12cba182b475165e81e1b87f908bd7a7aa6a", @ANYRES64, @ANYRES64, @ANYRESDEC, @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r6, 0x0, 0xca2473e1ec34789a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 1.197276617s ago: executing program 2 (id=2177): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.187619189s ago: executing program 3 (id=2178): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x8, 0x0, &(0x7f0000000540)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="00ada08dc8b6659de70d01452272", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x50) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, r4, 0x1, 0x70bd26, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @loopback={0x2e0000000000003a, 0x5f}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}]}]}, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan1\x00'}) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000001600), &(0x7f00000003c0)=0x8) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000100)="acfd4331", 0x4}, {&(0x7f0000000200)="e5974f3c00b2c515931fb6d33f46d4e47db5612a6282df6791c7c81d92", 0x1d}], 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="700000000000000000000000070000004444b6910a010102000000077f010001000000050000000000000009ac1414bb0000000500000000000000030000000000000006ffffffff0000d2006401010046d9d6ef441cad83ac1414bb000000086401010000000006ffffffff00000006240000000000000000000000070000004414da23ac1414180000000e7f00000100000e3e00000000"], 0x98}, 0x0) 1.185656354s ago: executing program 4 (id=2179): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000", @ANYRES32], 0x48) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x100000000002, 0x4) close(0x3) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000080)={r4, 0x3}, 0x8) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r5, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x4004084, 0x0, 0x0) 1.172023655s ago: executing program 0 (id=2180): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x80, 0x10, 0x6, 0x80000001, {{0xa, 0x4, 0x1, 0x1, 0x28, 0x64, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast2, {[@cipso={0x86, 0x14, 0x0, [{0x6, 0xe, "ab6795e93fcbacade99bf0fc"}]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000090) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c4}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0x10000000000002) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020100000000000000000013020000000000"], &(0x7f0000000200)=""/225, 0x26, 0xe1, 0x1, 0x0, 0x0, @void, @value}, 0x28) socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newnexthop={0x2c, 0x68, 0x1, 0x2, 0x25dfdbfd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x6}]}, @NHA_GROUP_TYPE={0x6}]}, 0x2c}}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000380)="049ae8bc07c2", 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x34, 0x4, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000051}, 0x48c0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0202000310000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000000000000000b00000000020009002aa5c8cc"], 0x80}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x20, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x20}}, 0x44) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'veth1_to_bond\x00'}) 847.975026ms ago: executing program 2 (id=2181): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_OFLAGS={0x6}]}}}]}, 0x40}}, 0x0) 785.826865ms ago: executing program 0 (id=2182): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x54) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) (async) close(r3) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, 0x0, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000002580)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000000f80)="ea", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r5, 0x1) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000017000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x18) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000640)="b9ff03076003018cb89608f00800", 0x0, 0x77ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r0) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r10, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x3c}}, 0x0) (async) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) 740.619401ms ago: executing program 2 (id=2183): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 694.79035ms ago: executing program 3 (id=2184): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) 570.402545ms ago: executing program 3 (id=2185): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, &(0x7f0000000000)={0x14, {{0x29, 0x0, 0x4000000, @private2={0xfc, 0x2, '\x00', 0x4}, 0x2}}}, 0x88) 566.693ms ago: executing program 0 (id=2186): socket$inet6(0xa, 0x800000000000002, 0x0) (async) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f00000000c0)=0x7f, 0x4) tee(r0, 0xffffffffffffffff, 0x7, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, r3, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='wlan0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='wlan0\x00', 0x10) write(r0, 0x0, 0x0) 523.479933ms ago: executing program 3 (id=2187): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) r3 = accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@short={0xb, @remote, @null, 0x1, @bcast}, &(0x7f00000000c0)=0x1c, 0x80000) splice(r3, &(0x7f0000000140)=0xfde, r1, &(0x7f0000000180)=0x8, 0x8, 0x2) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) syz_emit_ethernet(0x32, &(0x7f0000000240)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x20, 0x10, 0x2, 0x2000, {{0x6, 0x4, 0x0, 0xe, 0x18, 0x64, 0x0, 0x9, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}, {[@ra={0x94, 0x4, 0x1}]}}}}}) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x5, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r7}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r0, 0x1, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0xc014) 396.890013ms ago: executing program 0 (id=2188): pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r0, 0x0, r0, 0x0, 0x4ffe6, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010fd000225bd70f5ffc0ad71ff04a10fcdeb98d120bcffff00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280080008000b00000006000f0011000000"], 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCGSKNS(r2, 0x894c, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0xf4, 0x0, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x48, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}, @CTA_FILTER={0x44, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x785}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x28}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x208}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa1}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x802}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffffd}]}, @CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}]}, @CTA_TIMEOUT={0x8}]}, 0xf4}, 0x1, 0x0, 0x0, 0x2001}, 0xc011) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xaa8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100000", @ANYRES32=0x0, @ANYRESDEC=r3], 0x48}}, 0x20000809) 317.364895ms ago: executing program 2 (id=2189): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000611148000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 262.248751ms ago: executing program 3 (id=2190): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffe74) 194.8141ms ago: executing program 0 (id=2191): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r2, 0x29, 0xd0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x34, r3, 0x8, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0xa00}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xd0b3f61}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0xce}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004800}, 0x40000001) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x2, 0x4) recvmmsg(r1, &(0x7f0000008f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000053c0)=""/25, 0x19}, 0xfffffffc}], 0x1, 0x45833af92e4b39ff, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001439) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f00000001c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba0000009500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 193.980916ms ago: executing program 4 (id=2192): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000340)=[{&(0x7f0000000180)="cf", 0x1}, {&(0x7f0000000400)="fd", 0x1}, {&(0x7f0000000300)='0', 0x1}, {&(0x7f00000001c0)="d5", 0x1}], 0x4, 0xa) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64a69400050038925a01000000000000008004000000ffe809000000fff5dd000000080003000601ff1f418e01400004fcff", 0x58}], 0x1) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=@getstat={0xe0, 0x15, 0x800, 0x70bd27, 0x25dfdbff, {{'lrw-serpent-sse2\x00'}, '\x00', '\x00', 0x2400, 0x400}, ["", "", "", "", "", "", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x61}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000400)={@private1, @loopback, @mcast1, 0x0, 0xfe, 0x7ff, 0x0, 0x1, 0x200}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00?\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000000000000c4100000003001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r6, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x9}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) 1.294983ms ago: executing program 4 (id=2193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000001100000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000070000000000000000000000000000000000004ede8d641d6ddd811200000000000000"], 0x50) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed}, 0x8) close(r1) pread64(r0, 0x0, 0x0, 0x869) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0003000000000000180012800b00010065727370616e00000800028004001200d9ea4354fd6b6410b317091017205f6260241dcf5fe1b0c66f88b1913cdd7758b63a401a17c1c5126c30529a0cd46f67a6ce54a170eb5910c58e249488bc172d2e80f3b634446caa0880c48484d99bc0241bebd96c1ed8b862ee96b05fcbbc01a92403bab1566ad679784f0932747afe9adcdfa4a22dce28fc16502bd131a242e9"], 0x38}}, 0x0) mmap(&(0x7f0000605000/0x1000)=nil, 0x1000, 0x100000b, 0x8010, r2, 0x56452000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600640006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x20010, 0xffffffffffffffff, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x6c) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 787.618µs ago: executing program 2 (id=2194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000001100000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000070000000000000000000000000000000000004ede8d641d6ddd811200000000000000"], 0x50) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed}, 0x8) close(r1) pread64(r0, 0x0, 0x0, 0x869) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0003000000000000180012800b00010065727370616e00000800028004001200d9ea4354fd6b6410b317091017205f6260241dcf5fe1b0c66f88b1913cdd7758b63a401a17c1c5126c30529a0cd46f67a6ce54a170eb5910c58e249488bc172d2e80f3b634446caa0880c48484d99bc0241bebd96c1ed8b862ee96b05fcbbc01a92403bab1566ad679784f0932747afe9adcdfa4a22dce28fc16502bd131a242e9"], 0x38}}, 0x0) mmap(&(0x7f0000605000/0x1000)=nil, 0x1000, 0x100000b, 0x8010, r2, 0x56452000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600640006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x20010, 0xffffffffffffffff, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x6c) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 0s ago: executing program 3 (id=2195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'macsec0\x00', &(0x7f00000000c0)=@ethtool_eee={0x45, 0x8, 0x8, 0x4, 0x4, 0x1ff, 0x0, 0x5, [0x8001, 0x3]}}) r3 = socket$igmp(0x2, 0x3, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x3, [@type_tag={0x10, 0x0, 0x0, 0x12, 0x5}, @fwd={0xf}, @union={0x7, 0x7, 0x0, 0x5, 0x0, 0x6dc3, [{0xb, 0x0, 0x40000}, {0x9, 0x5, 0xd}, {0xb, 0x5, 0x9}, {0xa, 0x3, 0x5}, {0x5, 0x1, 0x8}, {0x7, 0x2, 0x4}, {0x10, 0x2, 0x9}]}]}, {0x0, [0x0]}}, &(0x7f00000003c0), 0x93, 0x0, 0x0, 0x4, 0x0, @void, @value}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@bloom_filter={0x1e, 0x3, 0x2, 0x4, 0x40221, r2, 0x8, '\x00', r4, r5, 0x2, 0x3, 0x3, 0x1, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x2}, 0x38) syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000000)=ANY=[], 0xb5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$unix(0x1, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r9, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={r13}, 0x4) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x13, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_fd={0x18, 0x8, 0x1, 0x0, r13}, @ldst={0x0, 0x2, 0x0, 0xb, 0x4, 0xfffffffffffffff8, 0x1}, @ldst={0x0, 0x1, 0x6, 0x2, 0x6, 0x6, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0xfffffffe, 0x23, &(0x7f0000000440)=""/35, 0x41000, 0x20, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{0x4, 0x1, 0x4, 0x9}], 0x10, 0x7, @void, @value}, 0x94) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040018230000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r15}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'ip6gre0\x00', 0x1}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'dummy0\x00'}, 0x18) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x10) kernel console output (not intermixed with test programs): 057] sock_ioctl+0x17c/0x8e0 [ 235.732095][T11057] ? __pfx_sock_ioctl+0x10/0x10 [ 235.736956][T11057] ? __fget_files+0x2a/0x410 [ 235.741564][T11057] ? __fget_files+0x2a/0x410 [ 235.746164][T11057] ? __pfx_sock_ioctl+0x10/0x10 [ 235.751028][T11057] __se_sys_ioctl+0xf5/0x170 [ 235.755653][T11057] do_syscall_64+0xf3/0x230 [ 235.760175][T11057] ? clear_bhb_loop+0x35/0x90 [ 235.764861][T11057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.770757][T11057] RIP: 0033:0x7f47f5385d29 [ 235.775177][T11057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.794794][T11057] RSP: 002b:00007f47f31f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.803217][T11057] RAX: ffffffffffffffda RBX: 00007f47f5575fa0 RCX: 00007f47f5385d29 [ 235.811189][T11057] RDX: 0000000020000040 RSI: 0000000000008b2a RDI: 0000000000000003 [ 235.819162][T11057] RBP: 00007f47f31f6090 R08: 0000000000000000 R09: 0000000000000000 [ 235.827138][T11057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.835114][T11057] R13: 0000000000000000 R14: 00007f47f5575fa0 R15: 00007ffc604fcba8 [ 235.843107][T11057] [ 235.971931][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.984441][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.007985][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.017506][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.039650][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 236.047488][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.177965][T11064] lo speed is unknown, defaulting to 1000 [ 236.380127][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.575185][T11097] SET target dimension over the limit! [ 236.620427][T11100] FAULT_INJECTION: forcing a failure. [ 236.620427][T11100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.638311][T11100] CPU: 1 UID: 0 PID: 11100 Comm: syz.2.1522 Not tainted 6.13.0-rc5-syzkaller-00767-g385f186aba3d #0 [ 236.649145][T11100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 236.659214][T11100] Call Trace: [ 236.662508][T11100] [ 236.665448][T11100] dump_stack_lvl+0x241/0x360 [ 236.670147][T11100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.675358][T11100] ? __pfx__printk+0x10/0x10 [ 236.679969][T11100] ? __pfx_lock_release+0x10/0x10 [ 236.685013][T11100] should_fail_ex+0x3b0/0x4e0 [ 236.689712][T11100] _copy_from_user+0x2f/0xc0 [ 236.694321][T11100] ioctl_standard_iw_point+0x588/0xcb0 [ 236.699898][T11100] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 236.705892][T11100] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 236.711881][T11100] ? wext_ioctl_dispatch+0x102/0x530 [ 236.717180][T11100] ? __pfx___mutex_lock+0x10/0x10 [ 236.722220][T11100] ? full_name_hash+0x93/0xe0 [ 236.726911][T11100] ioctl_standard_call+0xbd/0x190 [ 236.731953][T11100] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 236.737943][T11100] ? __pfx_cfg80211_wext_siwencode+0x10/0x10 [ 236.743950][T11100] wext_ioctl_dispatch+0x14f/0x530 [ 236.749098][T11100] ? __lock_acquire+0x1397/0x2100 [ 236.754153][T11100] ? __pfx_ioctl_standard_call+0x10/0x10 [ 236.759812][T11100] ? __pfx_wext_ioctl_dispatch+0x10/0x10 [ 236.765463][T11100] ? __might_fault+0xc6/0x120 [ 236.770159][T11100] wext_handle_ioctl+0x166/0x280 [ 236.775112][T11100] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 236.780606][T11100] sock_ioctl+0x17c/0x8e0 [ 236.784963][T11100] ? __pfx_sock_ioctl+0x10/0x10 [ 236.789838][T11100] ? __fget_files+0x2a/0x410 [ 236.794448][T11100] ? __fget_files+0x2a/0x410 [ 236.799055][T11100] ? __pfx_sock_ioctl+0x10/0x10 [ 236.803923][T11100] __se_sys_ioctl+0xf5/0x170 [ 236.808529][T11100] do_syscall_64+0xf3/0x230 [ 236.813055][T11100] ? clear_bhb_loop+0x35/0x90 [ 236.817751][T11100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.823658][T11100] RIP: 0033:0x7ff68ff85d29 [ 236.828087][T11100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.847714][T11100] RSP: 002b:00007ff690e59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.856144][T11100] RAX: ffffffffffffffda RBX: 00007ff690175fa0 RCX: 00007ff68ff85d29 [ 236.864304][T11100] RDX: 0000000020000040 RSI: 0000000000008b2a RDI: 0000000000000003 [ 236.872402][T11100] RBP: 00007ff690e59090 R08: 0000000000000000 R09: 0000000000000000 [ 236.880403][T11100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.888410][T11100] R13: 0000000000000000 R14: 00007ff690175fa0 R15: 00007fff310d6148 [ 236.896425][T11100] [ 236.902954][T11103] __nla_validate_parse: 3 callbacks suppressed [ 236.902974][T11103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1523'. [ 236.962990][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.024241][T11064] chnl_net:caif_netlink_parms(): no params data found [ 237.074206][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1525'. [ 237.133026][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.220403][T11121] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1529'. [ 237.227541][T11123] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1527'. [ 237.229516][T11121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1529'. [ 237.248539][T11121] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1529'. [ 237.257921][T11121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1529'. [ 237.268748][T11121] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1529'. [ 237.278559][T11121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1529'. [ 237.289534][T11121] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1529'. [ 237.433184][T11064] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.448580][T11064] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.456191][T11064] bridge_slave_0: entered allmulticast mode [ 237.464393][T11128] netlink: 'syz.0.1531': attribute type 10 has an invalid length. [ 237.474520][T11064] bridge_slave_0: entered promiscuous mode [ 237.483937][T11128] batman_adv: batadv0: Adding interface: wlan0 [ 237.491397][T11128] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.517698][T11128] batman_adv: batadv0: Interface activated: wlan0 [ 237.568743][T11064] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.580569][T11064] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.595194][T11064] bridge_slave_1: entered allmulticast mode [ 237.618264][T11064] bridge_slave_1: entered promiscuous mode [ 237.684017][T11135] hsr0: entered promiscuous mode [ 237.751483][T11064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.775964][T11135] hsr_slave_0: left promiscuous mode [ 237.782765][T11135] hsr_slave_1: left promiscuous mode [ 237.822670][T11135] hsr0 (unregistering): left promiscuous mode [ 237.832609][ T61] bridge_slave_1: left allmulticast mode [ 237.848280][ T61] bridge_slave_1: left promiscuous mode [ 237.855490][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.884099][ T61] bridge_slave_0: left allmulticast mode [ 237.895720][ T61] bridge_slave_0: left promiscuous mode [ 237.902664][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.068653][ T5833] Bluetooth: hci0: command tx timeout [ 238.400070][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.411931][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.422945][ T61] bond0 (unregistering): Released all slaves [ 238.437436][T11064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.538635][T11064] team0: Port device team_slave_0 added [ 238.646904][T11064] team0: Port device team_slave_1 added [ 238.725088][T11064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.744327][T11064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.774633][T11064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.855762][T11064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.883435][T11064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.919934][T11064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.219227][T11064] hsr_slave_0: entered promiscuous mode [ 239.240752][T11064] hsr_slave_1: entered promiscuous mode [ 239.264401][T11064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.278661][T11064] Cannot create hsr debugfs directory [ 239.420622][ T61] hsr_slave_0: left promiscuous mode [ 239.455598][ T61] hsr_slave_1: left promiscuous mode [ 239.471272][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.484003][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.494113][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.512141][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.554810][ T61] veth1_macvtap: left promiscuous mode [ 239.568728][ T61] veth0_macvtap: left promiscuous mode [ 239.578591][ T61] veth1_vlan: left promiscuous mode [ 239.594066][ T61] veth0_vlan: left promiscuous mode [ 240.151090][ T5837] Bluetooth: hci0: command tx timeout [ 240.224745][ T61] team0 (unregistering): Port device team_slave_1 removed [ 240.283041][ T61] team0 (unregistering): Port device team_slave_0 removed [ 240.737122][T11211] batadv_slave_1: entered promiscuous mode [ 240.753645][T11214] batadv_slave_1: left promiscuous mode [ 240.895345][T11238] netlink: 'syz.0.1567': attribute type 7 has an invalid length. [ 240.929742][T11238] netlink: 'syz.0.1567': attribute type 3 has an invalid length. [ 241.190369][T11247] lo: entered promiscuous mode [ 241.195425][ T35] wlan0: Trigger new scan to find an IBSS to join [ 241.305418][T11246] lo: left promiscuous mode [ 241.636696][T11064] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 241.663018][T11064] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 241.686495][T11064] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 241.726820][T11064] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 241.864163][T11287] netlink: 'syz.3.1583': attribute type 10 has an invalid length. [ 241.977176][T11064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.006643][T11294] __nla_validate_parse: 142 callbacks suppressed [ 242.006663][T11294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1584'. [ 242.041442][T11064] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.083074][ T7458] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.090265][ T7458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.119863][ T7458] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.127451][ T7458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.233333][ T5837] Bluetooth: hci0: command tx timeout [ 242.341665][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1589'. [ 242.674478][T11313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1592'. [ 243.030573][T11327] netlink: 'syz.3.1595': attribute type 10 has an invalid length. [ 243.100873][T11064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.293296][T11333] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1597'. [ 243.948115][T11343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1600'. [ 244.169049][ T7458] wlan0: Trigger new scan to find an IBSS to join [ 244.308871][ T5837] Bluetooth: hci0: command tx timeout [ 245.225601][T11064] veth0_vlan: entered promiscuous mode [ 245.266212][T11064] veth1_vlan: entered promiscuous mode [ 245.302228][T11352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1603'. [ 245.307027][T11353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1602'. [ 245.356751][T11064] veth0_macvtap: entered promiscuous mode [ 245.383537][T11064] veth1_macvtap: entered promiscuous mode [ 245.435763][T11064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.456689][T11064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.466905][T11064] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.475787][T11064] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.484674][T11064] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.493482][T11064] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.514277][T11357] xt_l2tp: wrong L2TP version: 0 [ 245.537209][T11359] netlink: 'syz.2.1606': attribute type 10 has an invalid length. [ 245.588952][T11359] bond0: (slave netdevsim0): Releasing backup interface [ 245.632283][T11359] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 245.648073][T11359] team0: Failed to send options change via netlink (err -105) [ 245.663501][T11359] team0: Port device netdevsim0 added [ 245.675581][T11064] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 245.698760][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.717550][ T7450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.742751][ T7450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.822667][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.835273][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.848173][T11369] xt_CT: You must specify a L4 protocol and not use inversions on it [ 246.086800][T11383] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 246.106945][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1616'. [ 246.147558][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1617'. [ 246.209465][T11390] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1618'. [ 246.224611][T11390] netlink: 'syz.3.1618': attribute type 6 has an invalid length. [ 246.235983][T11390] netlink: 'syz.3.1618': attribute type 5 has an invalid length. [ 246.360842][T11398] netlink: 'syz.3.1621': attribute type 10 has an invalid length. [ 246.400083][T11400] netlink: zone id is out of range [ 246.400867][T11398] infiniband syz0: set down [ 246.418543][T11400] netlink: zone id is out of range [ 246.419947][ T5829] lo speed is unknown, defaulting to 1000 [ 246.430202][T11400] netlink: zone id is out of range [ 246.435358][T11400] netlink: zone id is out of range [ 246.437042][ T5829] lo speed is unknown, defaulting to 1000 [ 246.966471][T11433] FAULT_INJECTION: forcing a failure. [ 246.966471][T11433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.982405][T11433] CPU: 1 UID: 0 PID: 11433 Comm: syz.0.1630 Not tainted 6.13.0-rc5-syzkaller-00767-g385f186aba3d #0 [ 246.993261][T11433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 247.003437][T11433] Call Trace: [ 247.006757][T11433] [ 247.009721][T11433] dump_stack_lvl+0x241/0x360 [ 247.014447][T11433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.019679][T11433] ? __pfx__printk+0x10/0x10 [ 247.024304][T11433] ? __pfx_lock_release+0x10/0x10 [ 247.029368][T11433] should_fail_ex+0x3b0/0x4e0 [ 247.034092][T11433] _copy_from_iter+0x1e9/0x1c20 [ 247.038989][T11433] ? __virt_addr_valid+0x183/0x530 [ 247.044146][T11433] ? __alloc_skb+0x28f/0x440 [ 247.048766][T11433] ? __pfx__copy_from_iter+0x10/0x10 [ 247.054081][T11433] ? __virt_addr_valid+0x183/0x530 [ 247.059209][T11433] ? __virt_addr_valid+0x183/0x530 [ 247.064341][T11433] ? __virt_addr_valid+0x45f/0x530 [ 247.069466][T11433] ? __phys_addr_symbol+0x2f/0x70 [ 247.074503][T11433] ? __check_object_size+0x47a/0x730 [ 247.079805][T11433] netlink_sendmsg+0x73d/0xcb0 [ 247.084588][T11433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.089883][T11433] ? aa_sock_msg_perm+0x91/0x160 [ 247.094914][T11433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.100201][T11433] __sock_sendmsg+0x221/0x270 [ 247.104896][T11433] ____sys_sendmsg+0x52a/0x7e0 [ 247.109681][T11433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.114981][T11433] ? __fget_files+0x2a/0x410 [ 247.119588][T11433] ? __fget_files+0x2a/0x410 [ 247.124190][T11433] __sys_sendmsg+0x269/0x350 [ 247.128800][T11433] ? __pfx_lock_release+0x10/0x10 [ 247.133930][T11433] ? __pfx___sys_sendmsg+0x10/0x10 [ 247.139059][T11433] ? __pfx_vfs_write+0x10/0x10 [ 247.143849][T11433] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 247.150442][T11433] ? do_syscall_64+0x100/0x230 [ 247.155215][T11433] ? do_syscall_64+0xb6/0x230 [ 247.159903][T11433] do_syscall_64+0xf3/0x230 [ 247.164411][T11433] ? clear_bhb_loop+0x35/0x90 [ 247.169095][T11433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.174995][T11433] RIP: 0033:0x7fa885985d29 [ 247.179500][T11433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.199120][T11433] RSP: 002b:00007fa886777038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.207636][T11433] RAX: ffffffffffffffda RBX: 00007fa885b75fa0 RCX: 00007fa885985d29 [ 247.215883][T11433] RDX: 000000000000c014 RSI: 0000000020000200 RDI: 0000000000000003 [ 247.223862][T11433] RBP: 00007fa886777090 R08: 0000000000000000 R09: 0000000000000000 [ 247.231844][T11433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.239824][T11433] R13: 0000000000000000 R14: 00007fa885b75fa0 R15: 00007ffe57bf2a58 [ 247.247820][T11433] [ 247.254376][ T7458] wlan0: Trigger new scan to find an IBSS to join [ 247.292515][T11437] tipc: Can't bind to reserved service type 0 [ 247.423293][T11442] __nla_validate_parse: 8 callbacks suppressed [ 247.423308][T11442] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1633'. [ 247.452929][ T7458] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.709739][ T7458] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.167513][ T7458] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.213340][ T7458] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.264429][ T7452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.308232][ T7458] bridge_slave_1: left allmulticast mode [ 248.316422][ T7458] bridge_slave_1: left promiscuous mode [ 248.322547][ T7458] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.332762][ T7458] bridge_slave_0: left allmulticast mode [ 248.339139][ T7458] bridge_slave_0: left promiscuous mode [ 248.344841][ T7458] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.566064][T11450] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1637'. [ 248.927356][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.949532][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.961515][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.985916][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 249.005200][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 249.021818][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.036515][ T7458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.059597][ T7458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.080746][ T7458] bond0 (unregistering): Released all slaves [ 249.280664][T11462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1638'. [ 249.339623][T11466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1640'. [ 249.484440][T11446] lo speed is unknown, defaulting to 1000 [ 249.515409][T11474] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1642'. [ 249.556590][T11474] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1642'. [ 249.705267][T11456] lo speed is unknown, defaulting to 1000 [ 249.768262][T11478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1645'. [ 249.788586][T11478] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 249.930988][T11481] FAULT_INJECTION: forcing a failure. [ 249.930988][T11481] name failslab, interval 1, probability 0, space 0, times 0 [ 249.962569][T11481] CPU: 0 UID: 0 PID: 11481 Comm: syz.4.1646 Not tainted 6.13.0-rc5-syzkaller-00767-g385f186aba3d #0 [ 249.973412][T11481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 249.983499][T11481] Call Trace: [ 249.986798][T11481] [ 249.989747][T11481] dump_stack_lvl+0x241/0x360 [ 249.994458][T11481] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.999682][T11481] ? __pfx__printk+0x10/0x10 [ 250.004313][T11481] should_fail_ex+0x3b0/0x4e0 [ 250.009028][T11481] should_failslab+0xac/0x100 [ 250.013732][T11481] ? skb_clone+0x20c/0x390 [ 250.018165][T11481] kmem_cache_alloc_noprof+0x70/0x380 [ 250.023579][T11481] skb_clone+0x20c/0x390 [ 250.027851][T11481] __netlink_deliver_tap+0x3cc/0x7f0 [ 250.033181][T11481] ? netlink_deliver_tap+0x2e/0x1b0 [ 250.038417][T11481] netlink_deliver_tap+0x19d/0x1b0 [ 250.043571][T11481] netlink_unicast+0x7c4/0x990 [ 250.048367][T11481] ? __pfx_netlink_unicast+0x10/0x10 [ 250.053667][T11481] ? __virt_addr_valid+0x45f/0x530 [ 250.058814][T11481] ? __phys_addr_symbol+0x2f/0x70 [ 250.063859][T11481] ? __check_object_size+0x47a/0x730 [ 250.069175][T11481] netlink_sendmsg+0x8e4/0xcb0 [ 250.073977][T11481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.079290][T11481] ? aa_sock_msg_perm+0x91/0x160 [ 250.084252][T11481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.089541][T11481] __sock_sendmsg+0x221/0x270 [ 250.094234][T11481] ____sys_sendmsg+0x52a/0x7e0 [ 250.099011][T11481] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.104303][T11481] ? __fget_files+0x2a/0x410 [ 250.108904][T11481] ? __fget_files+0x2a/0x410 [ 250.113509][T11481] __sys_sendmsg+0x269/0x350 [ 250.118111][T11481] ? __pfx_lock_release+0x10/0x10 [ 250.123146][T11481] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.128272][T11481] ? __pfx_vfs_write+0x10/0x10 [ 250.133066][T11481] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 250.139400][T11481] ? do_syscall_64+0x100/0x230 [ 250.144172][T11481] ? do_syscall_64+0xb6/0x230 [ 250.148859][T11481] do_syscall_64+0xf3/0x230 [ 250.153375][T11481] ? clear_bhb_loop+0x35/0x90 [ 250.158058][T11481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.163957][T11481] RIP: 0033:0x7f8c98b85d29 [ 250.168376][T11481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.187999][T11481] RSP: 002b:00007f8c9992d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.196426][T11481] RAX: ffffffffffffffda RBX: 00007f8c98d75fa0 RCX: 00007f8c98b85d29 [ 250.204412][T11481] RDX: 000000000000c014 RSI: 0000000020000200 RDI: 0000000000000003 [ 250.212391][T11481] RBP: 00007f8c9992d090 R08: 0000000000000000 R09: 0000000000000000 [ 250.220456][T11481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.228432][T11481] R13: 0000000000000000 R14: 00007f8c98d75fa0 R15: 00007ffeea34ef68 [ 250.236426][T11481] [ 250.258262][ T7458] hsr_slave_0: left promiscuous mode [ 250.268744][ T7458] hsr_slave_1: left promiscuous mode [ 250.278190][ T7458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.328631][ T7458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.353410][ T7458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.372654][ T7458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.428147][ T7458] veth1_macvtap: left promiscuous mode [ 250.440807][ T7458] veth0_macvtap: left promiscuous mode [ 250.446628][ T7458] veth1_vlan: left promiscuous mode [ 250.455448][ T7458] veth0_vlan: left promiscuous mode [ 250.541838][T11497] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1651'. [ 250.548664][T11496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1651'. [ 250.890486][T11506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1653'. [ 251.035913][ T7458] team0 (unregistering): Port device team_slave_1 removed [ 251.080811][ T7458] team0 (unregistering): Port device team_slave_0 removed [ 251.114932][ T5837] Bluetooth: hci0: command tx timeout [ 251.516055][T11491] bridge0: port 1(netdevsim1) entered blocking state [ 251.537963][T11491] bridge0: port 1(netdevsim1) entered disabled state [ 251.545670][T11491] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 251.566248][T11491] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 251.584361][T11494] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 251.605529][T11494] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 251.625719][T11494] bridge0: port 1(netdevsim1) entered disabled state [ 251.947724][T11456] chnl_net:caif_netlink_parms(): no params data found [ 252.093407][T11456] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.123579][T11456] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.139596][T11456] bridge_slave_0: entered allmulticast mode [ 252.149172][T11456] bridge_slave_0: entered promiscuous mode [ 252.178322][T11456] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.192175][T11456] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.201958][T11456] bridge_slave_1: entered allmulticast mode [ 252.209840][T11456] bridge_slave_1: entered promiscuous mode [ 252.257958][T11456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.277276][T11456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.435033][T11456] team0: Port device team_slave_0 added [ 252.486688][T11456] team0: Port device team_slave_1 added [ 252.633029][T11456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.639461][T11548] __nla_validate_parse: 2 callbacks suppressed [ 252.639482][T11548] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1666'. [ 252.664608][T11456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.728892][T11456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.814321][T11545] netlink: 'syz.3.1665': attribute type 2 has an invalid length. [ 252.836368][T11540] netlink: 'syz.2.1663': attribute type 21 has an invalid length. [ 252.848756][T11540] netlink: 'syz.2.1663': attribute type 6 has an invalid length. [ 252.862007][T11540] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1663'. [ 252.866429][T11556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1666'. [ 252.924498][T11456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.931766][T11456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.984275][T11456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.129458][T11563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1669'. [ 253.152281][T11565] FAULT_INJECTION: forcing a failure. [ 253.152281][T11565] name failslab, interval 1, probability 0, space 0, times 0 [ 253.178639][T11565] CPU: 1 UID: 0 PID: 11565 Comm: syz.4.1671 Not tainted 6.13.0-rc5-syzkaller-00767-g385f186aba3d #0 [ 253.181650][T11456] hsr_slave_0: entered promiscuous mode [ 253.189445][T11565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 253.189476][T11565] Call Trace: [ 253.189484][T11565] [ 253.189493][T11565] dump_stack_lvl+0x241/0x360 [ 253.189525][T11565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.189547][T11565] ? __pfx__printk+0x10/0x10 [ 253.189572][T11565] ? fs_reclaim_acquire+0x93/0x130 [ 253.189592][T11565] ? __pfx___might_resched+0x10/0x10 [ 253.189614][T11565] should_fail_ex+0x3b0/0x4e0 [ 253.189644][T11565] should_failslab+0xac/0x100 [ 253.189667][T11565] __kmalloc_noprof+0xdd/0x4c0 [ 253.189688][T11565] ? kstrtouint_from_user+0x128/0x190 [ 253.189708][T11565] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 253.189733][T11565] tomoyo_realpath_from_path+0xcf/0x5e0 [ 253.189780][T11565] tomoyo_path_number_perm+0x236/0x860 [ 253.189806][T11565] ? __lock_acquire+0x1397/0x2100 [ 253.189830][T11565] ? tomoyo_path_number_perm+0x206/0x860 [ 253.189858][T11565] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 253.189919][T11565] ? __fget_files+0x2a/0x410 [ 253.280426][T11572] netlink: 'syz.2.1673': attribute type 7 has an invalid length. [ 253.283828][T11565] ? __fget_files+0x2a/0x410 [ 253.283869][T11565] security_file_ioctl+0xc6/0x2a0 [ 253.283898][T11565] __se_sys_ioctl+0x46/0x170 [ 253.316437][T11565] do_syscall_64+0xf3/0x230 [ 253.320998][T11565] ? clear_bhb_loop+0x35/0x90 [ 253.325709][T11565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.331663][T11565] RIP: 0033:0x7f8c98b85d29 [ 253.336122][T11565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.355860][T11565] RSP: 002b:00007f8c9992d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.364341][T11565] RAX: ffffffffffffffda RBX: 00007f8c98d75fa0 RCX: 00007f8c98b85d29 [ 253.372319][T11565] RDX: 0000000000000000 RSI: 0000000080044944 RDI: 0000000000000004 [ 253.372336][T11565] RBP: 00007f8c9992d090 R08: 0000000000000000 R09: 0000000000000000 [ 253.372347][T11565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.372358][T11565] R13: 0000000000000000 R14: 00007f8c98d75fa0 R15: 00007ffeea34ef68 [ 253.372385][T11565] [ 253.379524][ T5833] Bluetooth: hci0: command tx timeout [ 253.421917][T11456] hsr_slave_1: entered promiscuous mode [ 253.438739][T11565] ERROR: Out of memory at tomoyo_realpath_from_path. [ 253.506977][T11456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.508276][T11583] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1674'. [ 253.515255][T11456] Cannot create hsr debugfs directory [ 253.585710][T11579] bridge0: entered promiscuous mode [ 253.609117][T11579] bridge0: entered allmulticast mode [ 253.619857][T11585] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1674'. [ 253.652376][T11579] team0: Port device bridge0 added [ 253.666892][T11585] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1674'. [ 253.751057][T11579] bridge0: port 1(ip6gretap0) entered blocking state [ 253.769134][T11579] bridge0: port 1(ip6gretap0) entered disabled state [ 253.774541][T11593] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1680'. [ 253.786144][T11579] ip6gretap0: entered allmulticast mode [ 253.792612][T11594] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1679'. [ 253.810808][T11579] ip6gretap0: entered promiscuous mode [ 253.817398][T11579] bridge0: port 1(ip6gretap0) entered blocking state [ 253.824238][T11579] bridge0: port 1(ip6gretap0) entered listening state [ 253.847220][T11598] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1679'. [ 253.851931][T11596] netlink: 'syz.2.1681': attribute type 10 has an invalid length. [ 254.222572][T11615] FAULT_INJECTION: forcing a failure. [ 254.222572][T11615] name failslab, interval 1, probability 0, space 0, times 0 [ 254.235696][T11615] CPU: 1 UID: 0 PID: 11615 Comm: syz.2.1688 Not tainted 6.13.0-rc5-syzkaller-00767-g385f186aba3d #0 [ 254.246582][T11615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 254.256674][T11615] Call Trace: [ 254.259987][T11615] [ 254.262955][T11615] dump_stack_lvl+0x241/0x360 [ 254.267680][T11615] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.272917][T11615] ? __pfx__printk+0x10/0x10 [ 254.277549][T11615] should_fail_ex+0x3b0/0x4e0 [ 254.282277][T11615] should_failslab+0xac/0x100 [ 254.287003][T11615] ? skb_clone+0x20c/0x390 [ 254.291454][T11615] kmem_cache_alloc_noprof+0x70/0x380 [ 254.296863][T11615] skb_clone+0x20c/0x390 [ 254.301144][T11615] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 254.306381][T11615] dev_queue_xmit_nit+0x249/0xca0 [ 254.311451][T11615] ? dev_queue_xmit_nit+0x2b/0xca0 [ 254.316599][T11615] ? validate_xmit_skb+0x9b8/0xff0 [ 254.321750][T11615] dev_hard_start_xmit+0x15f/0x7d0 [ 254.326898][T11615] ? __pfx_validate_xmit_skb+0x10/0x10 [ 254.332412][T11615] __dev_queue_xmit+0x1b73/0x3f50 [ 254.337478][T11615] ? kasan_save_track+0x51/0x80 [ 254.342373][T11615] ? ____sys_sendmsg+0x52a/0x7e0 [ 254.347358][T11615] ? __dev_queue_xmit+0x2f4/0x3f50 [ 254.352520][T11615] ? __pfx___dev_queue_xmit+0x10/0x10 [ 254.357942][T11615] ? __copy_skb_header+0x437/0x5b0 [ 254.363104][T11615] ? __asan_memcpy+0x40/0x70 [ 254.367753][T11615] ? skb_clone+0x240/0x390 [ 254.372207][T11615] __netlink_deliver_tap+0x56b/0x7f0 [ 254.377543][T11615] ? netlink_deliver_tap+0x2e/0x1b0 [ 254.382779][T11615] netlink_deliver_tap+0x19d/0x1b0 [ 254.387918][T11615] netlink_unicast+0x7c4/0x990 [ 254.392715][T11615] ? __pfx_netlink_unicast+0x10/0x10 [ 254.398031][T11615] ? __virt_addr_valid+0x45f/0x530 [ 254.403182][T11615] ? __phys_addr_symbol+0x2f/0x70 [ 254.408255][T11615] ? __check_object_size+0x47a/0x730 [ 254.413577][T11615] netlink_sendmsg+0x8e4/0xcb0 [ 254.418384][T11615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.423707][T11615] ? aa_sock_msg_perm+0x91/0x160 [ 254.428778][T11615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.434099][T11615] __sock_sendmsg+0x221/0x270 [ 254.438819][T11615] ____sys_sendmsg+0x52a/0x7e0 [ 254.443624][T11615] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.448942][T11615] ? __fget_files+0x2a/0x410 [ 254.453578][T11615] ? __fget_files+0x2a/0x410 [ 254.458233][T11615] __sys_sendmsg+0x269/0x350 [ 254.462855][T11615] ? __pfx_lock_release+0x10/0x10 [ 254.467944][T11615] ? __pfx___sys_sendmsg+0x10/0x10 [ 254.473108][T11615] ? __pfx_vfs_write+0x10/0x10 [ 254.477928][T11615] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 254.484301][T11615] ? do_syscall_64+0x100/0x230 [ 254.489108][T11615] ? do_syscall_64+0xb6/0x230 [ 254.493819][T11615] do_syscall_64+0xf3/0x230 [ 254.498350][T11615] ? clear_bhb_loop+0x35/0x90 [ 254.503057][T11615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.508994][T11615] RIP: 0033:0x7ff68ff85d29 [ 254.513454][T11615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.533122][T11615] RSP: 002b:00007ff690e59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.541584][T11615] RAX: ffffffffffffffda RBX: 00007ff690175fa0 RCX: 00007ff68ff85d29 [ 254.549599][T11615] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 254.557601][T11615] RBP: 00007ff690e59090 R08: 0000000000000000 R09: 0000000000000000 [ 254.565639][T11615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.573644][T11615] R13: 0000000000000000 R14: 00007ff690175fa0 R15: 00007fff310d6148 [ 254.581667][T11615] [ 254.662272][T11627] netlink: 'syz.3.1693': attribute type 10 has an invalid length. [ 254.720779][T11629] syz.2.1694: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 254.745714][T11456] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 254.752884][T11629] CPU: 0 UID: 0 PID: 11629 Comm: syz.2.1694 Not tainted 6.13.0-rc5-syzkaller-00767-g385f186aba3d #0 [ 254.763876][T11629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 254.773979][T11629] Call Trace: [ 254.777285][T11629] [ 254.780238][T11629] dump_stack_lvl+0x241/0x360 [ 254.785042][T11629] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.790279][T11629] ? __pfx__printk+0x10/0x10 [ 254.795007][T11629] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 254.801480][T11629] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 254.808032][T11629] warn_alloc+0x278/0x410 [ 254.812402][T11629] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 254.818517][T11629] ? __pfx_warn_alloc+0x10/0x10 [ 254.823491][T11629] ? kasan_save_track+0x3f/0x80 [ 254.828371][T11629] ? __kasan_kmalloc+0x98/0xb0 [ 254.833158][T11629] ? xsk_setsockopt+0x4ea/0x950 [ 254.838021][T11629] ? do_sock_setsockopt+0x3af/0x720 [ 254.843262][T11629] ? __x64_sys_setsockopt+0x1ee/0x280 [ 254.848634][T11629] ? do_syscall_64+0xf3/0x230 [ 254.853318][T11629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.859406][T11629] __vmalloc_node_range_noprof+0x126/0x1380 [ 254.865339][T11629] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 254.871673][T11629] ? __kasan_kmalloc+0x98/0xb0 [ 254.876447][T11629] vmalloc_user_noprof+0x74/0x80 [ 254.881389][T11629] ? xskq_create+0xb6/0x170 [ 254.885914][T11629] xskq_create+0xb6/0x170 [ 254.890437][T11629] xsk_init_queue+0xa1/0x100 [ 254.895041][T11629] xsk_setsockopt+0x4ea/0x950 [ 254.899735][T11629] ? __pfx_xsk_setsockopt+0x10/0x10 [ 254.904937][T11629] ? __pfx_aa_sk_perm+0x10/0x10 [ 254.909802][T11629] ? aa_sock_opt_perm+0x79/0x120 [ 254.914743][T11629] ? __pfx_xsk_setsockopt+0x10/0x10 [ 254.919969][T11629] do_sock_setsockopt+0x3af/0x720 [ 254.925010][T11629] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 254.930563][T11629] ? __fget_files+0x395/0x410 [ 254.935253][T11629] ? __fget_files+0x2a/0x410 [ 254.939858][T11629] __x64_sys_setsockopt+0x1ee/0x280 [ 254.945074][T11629] do_syscall_64+0xf3/0x230 [ 254.949587][T11629] ? clear_bhb_loop+0x35/0x90 [ 254.954280][T11629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.960182][T11629] RIP: 0033:0x7ff68ff85d29 [ 254.964603][T11629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.984217][T11629] RSP: 002b:00007ff690e59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 254.992641][T11629] RAX: ffffffffffffffda RBX: 00007ff690175fa0 RCX: 00007ff68ff85d29 [ 255.000619][T11629] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 255.008631][T11629] RBP: 00007ff690001b08 R08: 0000000000000004 R09: 0000000000000000 [ 255.016607][T11629] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.024583][T11629] R13: 0000000000000000 R14: 00007ff690175fa0 R15: 00007fff310d6148 [ 255.032580][T11629] [ 255.045857][T11629] Mem-Info: [ 255.052231][T11629] active_anon:7598 inactive_anon:0 isolated_anon:0 [ 255.052231][T11629] active_file:1540 inactive_file:38346 isolated_file:0 [ 255.052231][T11629] unevictable:768 dirty:252 writeback:0 [ 255.052231][T11629] slab_reclaimable:11216 slab_unreclaimable:105406 [ 255.052231][T11629] mapped:29414 shmem:2262 pagetables:640 [ 255.052231][T11629] sec_pagetables:0 bounce:0 [ 255.052231][T11629] kernel_misc_reclaimable:0 [ 255.052231][T11629] free:1324725 free_pcp:532 free_cma:0 [ 255.118128][T11629] Node 0 active_anon:31656kB inactive_anon:0kB active_file:6160kB inactive_file:153308kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118876kB dirty:1008kB writeback:0kB shmem:8724kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11616kB pagetables:2628kB sec_pagetables:0kB all_unreclaimable? no [ 255.120947][T11456] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 255.181136][T11456] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 255.188182][T11637] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 255.216681][T11629] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 255.250411][T11456] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 255.292225][T11629] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 255.320779][T11456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.338135][T11456] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.350904][ T7460] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.358018][ T7460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.382929][T11629] lowmem_reserve[]: 0 2465 2466 0 0 [ 255.392154][T11642] FAULT_INJECTION: forcing a failure. [ 255.392154][T11642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.393047][T11629] Node 0 [ 255.405737][T11642] CPU: 0 UID: 0 PID: 11642 Comm: syz.3.1697 Not tainted 6.13.0-rc5-syzkaller-00767-g385f186aba3d #0 [ 255.405770][T11642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 255.405783][T11642] Call Trace: [ 255.405790][T11642] [ 255.405799][T11642] dump_stack_lvl+0x241/0x360 [ 255.430607][T11629] DMA32 free:1374176kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:36904kB inactive_anon:0kB active_file:6160kB inactive_file:152472kB unevictable:1536kB writepending:808kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:2152kB local_pcp:1224kB free_cma:0kB [ 255.432960][T11642] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.433081][T11642] ? __pfx__printk+0x10/0x10 [ 255.480171][T11642] ? __pfx_lock_release+0x10/0x10 [ 255.485212][T11642] should_fail_ex+0x3b0/0x4e0 [ 255.489900][T11642] _copy_from_user+0x2f/0xc0 [ 255.494496][T11642] __sys_bpf+0x1a4/0x810 [ 255.498745][T11642] ? __pfx___sys_bpf+0x10/0x10 [ 255.503524][T11642] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 255.509515][T11642] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 255.515845][T11642] ? do_syscall_64+0x100/0x230 [ 255.520645][T11642] __x64_sys_bpf+0x7c/0x90 [ 255.525072][T11642] do_syscall_64+0xf3/0x230 [ 255.529605][T11642] ? clear_bhb_loop+0x35/0x90 [ 255.534288][T11642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.540188][T11642] RIP: 0033:0x7f47f5385d29 [ 255.544604][T11642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.564234][T11642] RSP: 002b:00007f47f31f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 255.572664][T11642] RAX: ffffffffffffffda RBX: 00007f47f5575fa0 RCX: 00007f47f5385d29 [ 255.580642][T11642] RDX: 0000000000000094 RSI: 0000000020000a00 RDI: 0000000000000005 [ 255.588620][T11642] RBP: 00007f47f31f6090 R08: 0000000000000000 R09: 0000000000000000 [ 255.596594][T11642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.604570][T11642] R13: 0000000000000001 R14: 00007f47f5575fa0 R15: 00007ffc604fcba8 [ 255.612570][T11642] [ 255.624324][ T7450] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.631526][ T7450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.659450][ T5833] Bluetooth: hci0: command 0x040f tx timeout [ 255.765633][T11629] lowmem_reserve[]: 0 0 0 0 0 [ 255.771593][T11625] netlink: 'syz.0.1689': attribute type 21 has an invalid length. [ 255.779920][T11629] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 255.781231][T11625] netlink: 'syz.0.1689': attribute type 6 has an invalid length. [ 255.821328][T11629] lowmem_reserve[]: 0 0 0 0 0 [ 255.826698][T11629] Node 1 Normal free:3903356kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 255.868028][T11629] lowmem_reserve[]: 0 0 0 0 0 [ 255.898812][T11629] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 255.936256][T11629] Node 0 DMA32: 7*4kB (U) 160*8kB (UME) 14*16kB (UE) 654*32kB (UME) 508*64kB (UME) 525*128kB (UE) 348*256kB (UME) 334*512kB (UM) 276*1024kB (UME) 12*2048kB (UME) 167*4096kB (UM) = 1373500kB [ 255.971877][T11629] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 255.994217][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.008949][T11629] Node 1 Normal: 203*4kB (U) 62*8kB (UME) 36*16kB (UME) 227*32kB (UME) 101*64kB (UME) 21*128kB (UME) 16*256kB (UME) 10*512kB (UM) 5*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3903356kB [ 256.038686][T11629] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 256.056179][T11629] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 256.067192][T11629] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 256.071311][T11456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.077441][T11629] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 256.094618][T11629] 44187 total pagecache pages [ 256.105372][T11456] veth0_vlan: entered promiscuous mode [ 256.106404][T11629] 0 pages in swap cache [ 256.118294][T11456] veth1_vlan: entered promiscuous mode [ 256.122465][T11629] Free swap = 124744kB [ 256.132588][T11629] Total swap = 124996kB [ 256.140246][T11629] 2097051 pages RAM [ 256.141424][T11456] veth0_macvtap: entered promiscuous mode [ 256.146885][T11629] 0 pages HighMem/MovableOnly [ 256.153058][T11456] veth1_macvtap: entered promiscuous mode [ 256.160722][T11629] 427011 pages reserved [ 256.168000][T11629] 0 pages cma reserved [ 256.170896][T11456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.182930][T11456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.214779][T11456] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.225976][T11456] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.258540][T11456] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.285289][T11456] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.447994][T11456] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 256.467715][T11456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.496278][T11671] netlink: 'syz.0.1706': attribute type 10 has an invalid length. [ 256.517222][ T7460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.536163][ T7460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.582997][T11674] netlink: 'syz.2.1707': attribute type 6 has an invalid length. [ 256.592637][ T7460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.601637][ T7460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.149623][T11705] pimreg: entered allmulticast mode [ 257.166638][T11705] batadv_slave_1: entered promiscuous mode [ 257.603366][T11707] lo speed is unknown, defaulting to 1000 [ 258.002366][T11742] __nla_validate_parse: 10 callbacks suppressed [ 258.002380][T11742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1728'. [ 258.049676][T11742] netlink: 'syz.3.1728': attribute type 9 has an invalid length. [ 258.057637][T11742] macvlan1: entered promiscuous mode [ 258.338256][ T7462] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.396112][T11750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1729'. [ 258.427628][T11730] lo speed is unknown, defaulting to 1000 [ 258.696348][T11740] lo speed is unknown, defaulting to 1000 [ 259.486147][T11764] infiniband syz!: set active [ 259.763740][ T7462] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.775990][T11778] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1734'. [ 259.822776][T11778] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1734'. [ 259.839044][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.850758][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.868754][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.886419][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.894355][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 259.903047][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 259.924049][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1739'. [ 259.933271][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1739'. [ 259.942316][T11786] netlink: 'syz.2.1739': attribute type 13 has an invalid length. [ 259.950398][T11786] netlink: 'syz.2.1739': attribute type 11 has an invalid length. [ 259.965945][ T7462] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.093714][ T7462] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.154162][T11779] lo speed is unknown, defaulting to 1000 [ 260.177964][T11793] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1741'. [ 260.282802][ T7462] bridge_slave_1: left allmulticast mode [ 260.294072][ T7462] bridge_slave_1: left promiscuous mode [ 260.305142][ T7462] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.326377][ T7462] bridge_slave_0: left allmulticast mode [ 260.344454][ T7462] bridge_slave_0: left promiscuous mode [ 260.357393][ T7462] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.874025][ T7462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.893224][ T7462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.905648][ T7462] bond0 (unregistering): Released all slaves [ 260.936067][T11810] IPVS: length: 212 != 24 [ 261.323556][T11820] netlink: 'syz.0.1752': attribute type 10 has an invalid length. [ 261.334533][T11821] openvswitch: netlink: Message has 8 unknown bytes. [ 261.353753][T11823] FAULT_INJECTION: forcing a failure. [ 261.353753][T11823] name failslab, interval 1, probability 0, space 0, times 0 [ 261.388836][T11823] CPU: 0 UID: 0 PID: 11823 Comm: syz.4.1753 Not tainted 6.13.0-rc5-syzkaller-00767-g385f186aba3d #0 [ 261.399665][T11823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 261.409725][T11823] Call Trace: [ 261.413004][T11823] [ 261.415932][T11823] dump_stack_lvl+0x241/0x360 [ 261.420623][T11823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.425848][T11823] ? __pfx__printk+0x10/0x10 [ 261.430463][T11823] ? __kmalloc_noprof+0xb5/0x4c0 [ 261.435438][T11823] ? __pfx___might_resched+0x10/0x10 [ 261.440751][T11823] should_fail_ex+0x3b0/0x4e0 [ 261.445458][T11823] should_failslab+0xac/0x100 [ 261.450245][T11823] __kmalloc_noprof+0xdd/0x4c0 [ 261.455190][T11823] ? ethnl_default_start+0x13e/0x570 [ 261.460486][T11823] ethnl_default_start+0x13e/0x570 [ 261.465658][T11823] genl_start+0x4dc/0x6d0 [ 261.470003][T11823] __netlink_dump_start+0x45c/0x790 [ 261.475213][T11823] genl_rcv_msg+0x88c/0xec0 [ 261.479727][T11823] ? __pfx_genl_rcv_msg+0x10/0x10 [ 261.484770][T11823] ? __pfx_genl_start+0x10/0x10 [ 261.489657][T11823] ? __pfx_genl_dumpit+0x10/0x10 [ 261.494599][T11823] ? __pfx_genl_done+0x10/0x10 [ 261.499388][T11823] ? __pfx_lock_acquire+0x10/0x10 [ 261.504427][T11823] ? __pfx_ethnl_default_start+0x10/0x10 [ 261.510062][T11823] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 261.515801][T11823] ? __pfx_ethnl_default_done+0x10/0x10 [ 261.521368][T11823] ? __pfx___might_resched+0x10/0x10 [ 261.526695][T11823] netlink_rcv_skb+0x1e3/0x430 [ 261.531474][T11823] ? __pfx_genl_rcv_msg+0x10/0x10 [ 261.536724][T11823] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 261.542018][T11823] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 261.547495][T11823] genl_rcv+0x28/0x40 [ 261.551508][T11823] netlink_unicast+0x7f6/0x990 [ 261.556293][T11823] ? __pfx_netlink_unicast+0x10/0x10 [ 261.561596][T11823] ? __virt_addr_valid+0x45f/0x530 [ 261.566722][T11823] ? __phys_addr_symbol+0x2f/0x70 [ 261.571752][T11823] ? __check_object_size+0x47a/0x730 [ 261.577042][T11823] netlink_sendmsg+0x8e4/0xcb0 [ 261.581821][T11823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.587110][T11823] ? aa_sock_msg_perm+0x91/0x160 [ 261.592050][T11823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.597335][T11823] __sock_sendmsg+0x221/0x270 [ 261.602023][T11823] ____sys_sendmsg+0x52a/0x7e0 [ 261.606795][T11823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.612079][T11823] ? __fget_files+0x2a/0x410 [ 261.616678][T11823] ? __fget_files+0x2a/0x410 [ 261.621277][T11823] __sys_sendmsg+0x269/0x350 [ 261.625871][T11823] ? __pfx_lock_release+0x10/0x10 [ 261.630899][T11823] ? __pfx___sys_sendmsg+0x10/0x10 [ 261.636020][T11823] ? __pfx_vfs_write+0x10/0x10 [ 261.640806][T11823] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 261.647137][T11823] ? do_syscall_64+0x100/0x230 [ 261.651909][T11823] ? do_syscall_64+0xb6/0x230 [ 261.656588][T11823] do_syscall_64+0xf3/0x230 [ 261.661095][T11823] ? clear_bhb_loop+0x35/0x90 [ 261.665778][T11823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.671673][T11823] RIP: 0033:0x7f8c98b85d29 [ 261.676091][T11823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.696221][T11823] RSP: 002b:00007f8c9992d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.704688][T11823] RAX: ffffffffffffffda RBX: 00007f8c98d75fa0 RCX: 00007f8c98b85d29 [ 261.712768][T11823] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 261.720747][T11823] RBP: 00007f8c9992d090 R08: 0000000000000000 R09: 0000000000000000 [ 261.728723][T11823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 261.736696][T11823] R13: 0000000000000000 R14: 00007f8c98d75fa0 R15: 00007ffeea34ef68 [ 261.744686][T11823] [ 261.931426][T11821] netlink: 'syz.2.1751': attribute type 12 has an invalid length. [ 261.984108][T11812] lo speed is unknown, defaulting to 1000 [ 262.005125][ T5837] Bluetooth: hci0: command tx timeout [ 262.025493][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1751'. [ 262.092637][T11833] netlink: 'syz.0.1754': attribute type 13 has an invalid length. [ 262.100982][T11779] chnl_net:caif_netlink_parms(): no params data found [ 262.481512][T11848] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1757'. [ 262.493776][T11853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1758'. [ 262.503895][T11848] netlink: 'syz.4.1757': attribute type 6 has an invalid length. [ 262.915202][T11779] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.930018][T11867] netlink: 'syz.4.1760': attribute type 10 has an invalid length. [ 262.969786][T11779] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.992045][T11779] bridge_slave_0: entered allmulticast mode [ 263.011552][T11779] bridge_slave_0: entered promiscuous mode [ 263.030963][T11779] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.044436][T11779] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.053634][T11779] bridge_slave_1: entered allmulticast mode [ 263.061104][T11779] bridge_slave_1: entered promiscuous mode [ 263.079185][ T7462] hsr_slave_0: left promiscuous mode [ 263.085659][ T7462] hsr_slave_1: left promiscuous mode [ 263.093383][ T7462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.101027][ T7462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.112505][ T7462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.121539][ T7462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.125750][T11870] __nla_validate_parse: 1 callbacks suppressed [ 263.125767][T11870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1762'. [ 263.165401][ T7462] veth1_macvtap: left promiscuous mode [ 263.172028][ T7462] veth0_macvtap: left promiscuous mode [ 263.177856][ T7462] veth1_vlan: left promiscuous mode [ 263.183692][ T7462] veth0_vlan: left promiscuous mode [ 263.523455][ T972] hid-generic 0005:0458:0059.0001: item fetching failed at offset 0/1 [ 263.532902][ T972] hid-generic 0005:0458:0059.0001: probe with driver hid-generic failed with error -22 [ 263.612615][T11875] xt_TPROXY: Can be used only with -p tcp or -p udp [ 263.806640][ T7462] team0 (unregistering): Port device team_slave_1 removed [ 263.856271][ T7462] team0 (unregistering): Port device team_slave_0 removed [ 264.076754][ T5837] Bluetooth: hci0: command tx timeout [ 264.344057][T11878] netlink: 'syz.4.1765': attribute type 1 has an invalid length. [ 264.366708][T11878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1765'. [ 264.413004][T11779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.454562][T11779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.506363][T11879] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1765'. [ 264.614901][T11779] team0: Port device team_slave_0 added [ 264.651861][T11779] team0: Port device team_slave_1 added [ 264.761590][T11779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.778082][T11779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.811402][T11779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.828365][T11893] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 264.838756][T11893] bridge0: entered allmulticast mode [ 264.848909][T11889] netlink: 'syz.0.1768': attribute type 1 has an invalid length. [ 264.856687][T11889] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1768'. [ 264.867896][T11894] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 264.922430][T11779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.932732][T11779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.979469][T11779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.074228][T11896] bridge4: entered promiscuous mode [ 265.080045][T11896] bridge4: entered allmulticast mode [ 265.113380][T11896] team0: Port device bridge4 added [ 265.172988][T11900] bridge0: port 1(ip6gretap0) entered blocking state [ 265.189644][T11900] bridge0: port 1(ip6gretap0) entered disabled state [ 265.198966][T11900] ip6gretap0: entered allmulticast mode [ 265.215519][T11900] ip6gretap0: left allmulticast mode [ 265.261922][T11779] hsr_slave_0: entered promiscuous mode [ 265.310467][T11779] hsr_slave_1: entered promiscuous mode [ 265.364599][T11779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.372341][T11779] Cannot create hsr debugfs directory [ 265.767433][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1784'. [ 265.859979][T11938] batadv_slave_1: entered promiscuous mode [ 265.924514][T11937] batadv_slave_1: left promiscuous mode [ 266.030514][T11943] 8021q: adding VLAN 0 to HW filter on device bond2 [ 266.043032][T11943] bond0: (slave bond2): Enslaving as an active interface with an up link [ 266.063015][T11941] FAULT_INJECTION: forcing a failure. [ 266.063015][T11941] name failslab, interval 1, probability 0, space 0, times 0 [ 266.138789][T11941] CPU: 0 UID: 0 PID: 11941 Comm: syz.4.1785 Not tainted 6.13.0-rc5-syzkaller-00767-g385f186aba3d #0 [ 266.149623][T11941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 266.159712][T11941] Call Trace: [ 266.163012][T11941] [ 266.165962][T11941] dump_stack_lvl+0x241/0x360 [ 266.170679][T11941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.175907][T11941] ? __pfx__printk+0x10/0x10 [ 266.180527][T11941] ? ref_tracker_alloc+0x332/0x490 [ 266.185662][T11941] should_fail_ex+0x3b0/0x4e0 [ 266.190384][T11941] should_failslab+0xac/0x100 [ 266.195086][T11941] ? skb_clone+0x20c/0x390 [ 266.198740][ T5837] Bluetooth: hci0: command tx timeout [ 266.199505][T11941] kmem_cache_alloc_noprof+0x70/0x380 [ 266.210280][T11941] skb_clone+0x20c/0x390 [ 266.214554][T11941] __netlink_deliver_tap+0x3cc/0x7f0 [ 266.219875][T11941] ? netlink_deliver_tap+0x2e/0x1b0 [ 266.225098][T11941] netlink_deliver_tap+0x19d/0x1b0 [ 266.230240][T11941] __netlink_sendskb+0x60/0xd0 [ 266.235035][T11941] netlink_dump+0x9f0/0xe10 [ 266.239581][T11941] ? __pfx_netlink_dump+0x10/0x10 [ 266.244663][T11941] ? genl_start+0x59d/0x6d0 [ 266.249208][T11941] __netlink_dump_start+0x5a2/0x790 [ 266.254444][T11941] genl_rcv_msg+0x88c/0xec0 [ 266.258982][T11941] ? __pfx_genl_rcv_msg+0x10/0x10 [ 266.264042][T11941] ? __pfx_genl_start+0x10/0x10 [ 266.268919][T11941] ? __pfx_genl_dumpit+0x10/0x10 [ 266.273882][T11941] ? __pfx_genl_done+0x10/0x10 [ 266.278697][T11941] ? __pfx_lock_acquire+0x10/0x10 [ 266.283745][T11941] ? __pfx_ethnl_default_start+0x10/0x10 [ 266.289402][T11941] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 266.295143][T11941] ? __pfx_ethnl_default_done+0x10/0x10 [ 266.300720][T11941] ? __pfx___might_resched+0x10/0x10 [ 266.306044][T11941] netlink_rcv_skb+0x1e3/0x430 [ 266.310833][T11941] ? __pfx_genl_rcv_msg+0x10/0x10 [ 266.315887][T11941] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 266.321213][T11941] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 266.326710][T11941] genl_rcv+0x28/0x40 [ 266.330715][T11941] netlink_unicast+0x7f6/0x990 [ 266.335603][T11941] ? __pfx_netlink_unicast+0x10/0x10 [ 266.340918][T11941] ? __virt_addr_valid+0x45f/0x530 [ 266.346070][T11941] ? __phys_addr_symbol+0x2f/0x70 [ 266.351126][T11941] ? __check_object_size+0x47a/0x730 [ 266.356457][T11941] netlink_sendmsg+0x8e4/0xcb0 [ 266.361352][T11941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.366677][T11941] ? aa_sock_msg_perm+0x91/0x160 [ 266.371653][T11941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.376998][T11941] __sock_sendmsg+0x221/0x270 [ 266.382007][T11941] ____sys_sendmsg+0x52a/0x7e0 [ 266.386793][T11941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.392104][T11941] ? __fget_files+0x2a/0x410 [ 266.396721][T11941] ? __fget_files+0x2a/0x410 [ 266.401320][T11941] __sys_sendmsg+0x269/0x350 [ 266.405921][T11941] ? __pfx_lock_release+0x10/0x10 [ 266.410958][T11941] ? __pfx___sys_sendmsg+0x10/0x10 [ 266.416098][T11941] ? __pfx_vfs_write+0x10/0x10 [ 266.420880][T11941] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 266.427221][T11941] ? do_syscall_64+0x100/0x230 [ 266.432003][T11941] ? do_syscall_64+0xb6/0x230 [ 266.436688][T11941] do_syscall_64+0xf3/0x230 [ 266.441210][T11941] ? clear_bhb_loop+0x35/0x90 [ 266.445908][T11941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.451799][T11941] RIP: 0033:0x7f8c98b85d29 [ 266.456224][T11941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.475887][T11941] RSP: 002b:00007f8c9992d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.484315][T11941] RAX: ffffffffffffffda RBX: 00007f8c98d75fa0 RCX: 00007f8c98b85d29 [ 266.492319][T11941] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 266.500308][T11941] RBP: 00007f8c9992d090 R08: 0000000000000000 R09: 0000000000000000 [ 266.508297][T11941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 266.516283][T11941] R13: 0000000000000000 R14: 00007f8c98d75fa0 R15: 00007ffeea34ef68 [ 266.524272][T11941] [ 266.668930][T11952] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1791'. [ 266.767384][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1792'. [ 266.840020][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1792'. [ 266.953596][T11972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1798'. [ 266.963312][T11971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1798'. [ 267.069519][T11779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 267.076130][T11977] dccp_v4_rcv: dropped packet with invalid checksum [ 267.115909][T11779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 267.126829][T11779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 267.176336][T11779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 267.229555][T11983] FAULT_INJECTION: forcing a failure. [ 267.229555][T11983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.233101][T11985] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 267.272685][T11985] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.278161][T11983] CPU: 0 UID: 0 PID: 11983 Comm: syz.2.1802 Not tainted 6.13.0-rc5-syzkaller-00767-g385f186aba3d #0 [ 267.291585][T11983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 267.301674][T11983] Call Trace: [ 267.305066][T11983] [ 267.308023][T11983] dump_stack_lvl+0x241/0x360 [ 267.312752][T11983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.317990][T11983] ? __pfx__printk+0x10/0x10 [ 267.322619][T11983] ? __pfx_lock_release+0x10/0x10 [ 267.327673][T11983] ? __lock_acquire+0x1397/0x2100 [ 267.332719][T11983] should_fail_ex+0x3b0/0x4e0 [ 267.337401][T11983] _copy_from_user+0x2f/0xc0 [ 267.342022][T11983] kstrtouint_from_user+0xc6/0x190 [ 267.347168][T11983] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 267.352926][T11983] ? __pfx_lock_acquire+0x10/0x10 [ 267.358000][T11983] proc_fail_nth_write+0xaa/0x2d0 [ 267.363064][T11983] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 267.369005][T11983] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 267.374681][T11983] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 267.380348][T11983] vfs_write+0x2a3/0xd30 [ 267.383386][T11779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.384695][T11983] ? __pfx_vfs_write+0x10/0x10 [ 267.384725][T11983] ? __fget_files+0x2a/0x410 [ 267.400700][T11983] ? __fget_files+0x395/0x410 [ 267.401700][T11779] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.405390][T11983] ? __fget_files+0x2a/0x410 [ 267.405429][T11983] ksys_write+0x18f/0x2b0 [ 267.420945][T11983] ? __pfx_ksys_write+0x10/0x10 [ 267.425834][T11983] ? do_syscall_64+0x100/0x230 [ 267.430641][T11983] ? do_syscall_64+0xb6/0x230 [ 267.435363][T11983] do_syscall_64+0xf3/0x230 [ 267.439905][T11983] ? clear_bhb_loop+0x35/0x90 [ 267.444618][T11983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.446182][T11779] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 267.450526][T11983] RIP: 0033:0x7ff68ff847df [ 267.450548][T11983] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 267.450565][T11983] RSP: 002b:00007ff690e59030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 267.450586][T11983] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff68ff847df [ 267.450601][T11983] RDX: 0000000000000001 RSI: 00007ff690e590a0 RDI: 0000000000000005 [ 267.461198][T11779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.465305][T11983] RBP: 00007ff690e59090 R08: 0000000000000000 R09: 0000000000000000 [ 267.465322][T11983] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 267.465336][T11983] R13: 0000000000000000 R14: 00007ff690175fa0 R15: 00007fff310d6148 [ 267.465365][T11983] [ 267.492050][ T7444] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.554293][ T7444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.571178][ T7444] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.578357][ T7444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.754806][T11995] netlink: 'syz.0.1807': attribute type 6 has an invalid length. [ 267.951240][T11779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.985755][T12015] netlink: 'syz.0.1813': attribute type 10 has an invalid length. [ 268.042381][T11779] veth0_vlan: entered promiscuous mode [ 268.099497][T11779] veth1_vlan: entered promiscuous mode [ 268.142731][T11779] veth0_macvtap: entered promiscuous mode [ 268.172282][T11779] veth1_macvtap: entered promiscuous mode [ 268.197980][T11779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.227278][T11779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.234626][ T5837] Bluetooth: hci0: command tx timeout [ 268.257296][T12026] syzkaller1: entered promiscuous mode [ 268.269678][T12026] syzkaller1: entered allmulticast mode [ 268.270402][T12028] __nla_validate_parse: 7 callbacks suppressed [ 268.270417][T12028] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1815'. [ 268.280928][T11779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.301415][T11779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.307190][T12026] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1818'. [ 268.325670][T11779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.338245][T11779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.359874][T12028] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1815'. [ 268.434513][T12034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1820'. [ 268.471714][T11779] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 268.482341][T11779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.495823][T12034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1820'. [ 268.508331][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1821'. [ 268.523133][ T7452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.535090][ T7452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.594660][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1821'. [ 268.604171][ T7458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.618674][ T7458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.711699][T12042] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1823'. [ 268.748533][T12042] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1823'. [ 268.758273][T12042] netlink: 'syz.3.1823': attribute type 6 has an invalid length. [ 268.803066][T12045] netpci0: tun_chr_ioctl cmd 1074025672 [ 268.816228][T12045] netpci0: ignored: set checksum disabled [ 268.907024][T12047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1825'. [ 269.245053][T12063] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20000 [ 269.431402][ C1] bridge0: port 1(ip6gretap0) entered learning state [ 270.250915][ T7462] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.356346][ T7462] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.454146][ T7462] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.835605][T12139] netlink: 'syz.0.1853': attribute type 11 has an invalid length. [ 271.855228][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.876107][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.898712][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.928335][T12135] netlink: 'syz.3.1855': attribute type 1 has an invalid length. [ 271.950864][ T7462] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.969250][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.994914][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.995974][ T7458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.004663][T12139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.012032][ T7458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.033355][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.172772][ T7462] bridge_slave_1: left allmulticast mode [ 272.178985][ T7462] bridge_slave_1: left promiscuous mode [ 272.187100][ T7462] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.196730][ T7462] bridge_slave_0: left allmulticast mode [ 272.205111][ T7462] bridge_slave_0: left promiscuous mode [ 272.211360][ T7462] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.622885][T12173] syz0: rxe_newlink: already configured on lo [ 272.832293][ T7462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.845527][ T7462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.857878][ T7462] bond0 (unregistering): Released all slaves [ 272.875265][T12136] lo speed is unknown, defaulting to 1000 [ 273.295341][T12190] __nla_validate_parse: 15 callbacks suppressed [ 273.295361][T12190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1871'. [ 273.385763][T12190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1871'. [ 273.484814][ T7462] hsr_slave_0: left promiscuous mode [ 273.561563][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1874'. [ 273.581192][ T7462] hsr_slave_1: left promiscuous mode [ 273.615714][ T7462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.624094][ T7462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.648616][ T7462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.663297][ T7462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.694991][ T7462] veth1_macvtap: left promiscuous mode [ 273.700856][ T7462] veth0_macvtap: left promiscuous mode [ 273.706656][ T7462] veth1_vlan: left promiscuous mode [ 273.712156][ T7462] veth0_vlan: left promiscuous mode [ 274.156094][ T5833] Bluetooth: hci0: command tx timeout [ 274.243134][T12221] openvswitch: netlink: IP tunnel dst address not specified [ 274.540138][ T7462] team0 (unregistering): Port device team_slave_1 removed [ 274.585098][ T7462] team0 (unregistering): Port device team_slave_0 removed [ 275.013078][T12206] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 275.026211][T12215] bridge5: entered promiscuous mode [ 275.038750][T12215] bridge5: entered allmulticast mode [ 275.075686][T12215] team0: Port device bridge5 added [ 275.176744][T12233] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1883'. [ 275.272599][T12239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1885'. [ 275.295859][T12240] x_tables: duplicate underflow at hook 3 [ 275.363457][T12224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.379912][T12224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.396412][T12242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1885'. [ 275.407471][T12224] bond0 (unregistering): (slave bond3): Releasing backup interface [ 275.421835][T12224] bond0 (unregistering): Released all slaves [ 275.663731][T12245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1886'. [ 275.679689][T12247] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 275.698200][T12136] chnl_net:caif_netlink_parms(): no params data found [ 275.795459][T12197] lo speed is unknown, defaulting to 1000 [ 275.806343][T12247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1887'. [ 275.966143][T12136] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.995386][T12136] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.016865][T12136] bridge_slave_0: entered allmulticast mode [ 276.035781][T12136] bridge_slave_0: entered promiscuous mode [ 276.051017][T12136] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.078785][T12136] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.089424][T12136] bridge_slave_1: entered allmulticast mode [ 276.096925][T12136] bridge_slave_1: entered promiscuous mode [ 276.154581][T12136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.192587][T12136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.229277][ T5833] Bluetooth: hci0: command tx timeout [ 276.254033][T12267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1892'. [ 276.313595][T12136] team0: Port device team_slave_0 added [ 276.335353][T12136] team0: Port device team_slave_1 added [ 276.374743][T12273] bridge6: entered promiscuous mode [ 276.386932][T12273] bridge6: entered allmulticast mode [ 276.416693][T12273] team0: Port device bridge6 added [ 276.504026][T12136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.523455][T12136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.555990][T12136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.604897][T12279] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1896'. [ 276.618725][T12279] netlink: 'syz.4.1896': attribute type 6 has an invalid length. [ 276.667698][T12136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.687446][T12136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.752365][T12136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.853502][T12136] hsr_slave_0: entered promiscuous mode [ 276.862677][T12136] hsr_slave_1: entered promiscuous mode [ 276.888922][T12136] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.904715][T12136] Cannot create hsr debugfs directory [ 277.527126][T12314] bridge6: entered promiscuous mode [ 277.537594][T12314] bridge6: entered allmulticast mode [ 277.553043][T12314] team0: Port device bridge6 added [ 277.669676][T12324] macvlan1: entered promiscuous mode [ 277.700117][T12324] team0: Port device macvlan1 added [ 277.871229][T12136] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 277.884885][T12136] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 277.895519][T12136] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 277.909390][T12136] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 277.993952][T12333] netlink: 'syz.3.1915': attribute type 6 has an invalid length. [ 278.146942][T12337] netlink: 'syz.0.1917': attribute type 1 has an invalid length. [ 278.160968][T12136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.211452][T12341] netlink: 'syz.4.1919': attribute type 6 has an invalid length. [ 278.244714][T12339] netlink: 'syz.2.1918': attribute type 6 has an invalid length. [ 278.285647][T12136] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.308982][ T5833] Bluetooth: hci0: command tx timeout [ 278.324244][ T7452] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.331424][ T7452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.440010][ T7462] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.447167][ T7462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.474953][T12355] bridge7: entered promiscuous mode [ 278.480379][T12355] bridge7: entered allmulticast mode [ 278.487331][T12355] team0: Port device bridge7 added [ 278.515003][T12358] __nla_validate_parse: 14 callbacks suppressed [ 278.515024][T12358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1925'. [ 278.594716][T12358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1925'. [ 278.610923][T12136] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.776611][T12372] x_tables: duplicate underflow at hook 1 [ 278.836733][T12136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.907319][T12378] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1931'. [ 278.956598][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1932'. [ 278.962829][T12136] veth0_vlan: entered promiscuous mode [ 278.994505][T12136] veth1_vlan: entered promiscuous mode [ 279.077382][T12136] veth0_macvtap: entered promiscuous mode [ 279.091609][T12136] veth1_macvtap: entered promiscuous mode [ 279.115594][T12136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.126307][T12384] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1934'. [ 279.150668][T12136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.171563][T12389] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1933'. [ 279.181103][T12389] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1933'. [ 279.205643][T12136] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.230843][T12136] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.243685][T12396] netlink: 'syz.4.1938': attribute type 4 has an invalid length. [ 279.249572][T12136] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.263081][T12136] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.360183][T12398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1939'. [ 279.364318][T12136] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 279.381502][T12136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.397697][ T7456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.406353][T12398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1939'. [ 279.417518][ T7456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.473931][T12400] netlink: 'syz.4.1940': attribute type 2 has an invalid length. [ 279.478603][ T7456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.489886][ T7456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.793712][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1946'. [ 280.033201][T12429] nft_compat: unsupported protocol 0 [ 280.079804][T12431] netlink: 'syz.2.1952': attribute type 10 has an invalid length. [ 280.131080][T12435] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.159735][T12435] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.214415][T12440] tipc: Enabled bearer , priority 10 [ 280.309268][ T7458] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 280.320488][T12435] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.330966][T12435] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.387657][T12435] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.408166][T12435] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.463921][T12435] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.487868][T12435] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.655989][T12435] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.674219][T12435] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.688153][T12461] bridge7: entered promiscuous mode [ 280.696007][T12461] bridge7: entered allmulticast mode [ 280.743494][T12435] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.763963][T12435] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.804695][T12435] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.823242][T12435] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.872003][T12435] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.888587][T12435] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.006797][ T7458] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.053509][T12455] team0: Port device netdevsim0 removed [ 282.220183][ T7458] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.263374][T12472] FAULT_INJECTION: forcing a failure. [ 282.263374][T12472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.293024][T12472] CPU: 0 UID: 0 PID: 12472 Comm: syz.3.1968 Not tainted 6.13.0-rc5-syzkaller-00767-g385f186aba3d #0 [ 282.303861][T12472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 282.313952][T12472] Call Trace: [ 282.317247][T12472] [ 282.320198][T12472] dump_stack_lvl+0x241/0x360 [ 282.324909][T12472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.330135][T12472] ? __pfx__printk+0x10/0x10 [ 282.334753][T12472] ? __pfx_lock_release+0x10/0x10 [ 282.339820][T12472] should_fail_ex+0x3b0/0x4e0 [ 282.344538][T12472] _copy_from_user+0x2f/0xc0 [ 282.349161][T12472] copy_msghdr_from_user+0xae/0x680 [ 282.354408][T12472] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 282.360254][T12472] ? __fget_files+0x2a/0x410 [ 282.364880][T12472] ? __fget_files+0x2a/0x410 [ 282.369503][T12472] __sys_sendmsg+0x209/0x350 [ 282.374124][T12472] ? __pfx_lock_release+0x10/0x10 [ 282.379180][T12472] ? __pfx___sys_sendmsg+0x10/0x10 [ 282.384334][T12472] ? __pfx_vfs_write+0x10/0x10 [ 282.389156][T12472] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 282.395518][T12472] ? do_syscall_64+0x100/0x230 [ 282.400312][T12472] ? do_syscall_64+0xb6/0x230 [ 282.405018][T12472] do_syscall_64+0xf3/0x230 [ 282.409548][T12472] ? clear_bhb_loop+0x35/0x90 [ 282.414305][T12472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.420230][T12472] RIP: 0033:0x7f47f5385d29 [ 282.424664][T12472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.444302][T12472] RSP: 002b:00007f47f31f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.452751][T12472] RAX: ffffffffffffffda RBX: 00007f47f5575fa0 RCX: 00007f47f5385d29 [ 282.460864][T12472] RDX: 0000000000000080 RSI: 0000000020000580 RDI: 0000000000000004 [ 282.468870][T12472] RBP: 00007f47f31f6090 R08: 0000000000000000 R09: 0000000000000000 [ 282.476916][T12472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.484922][T12472] R13: 0000000000000000 R14: 00007f47f5575fa0 R15: 00007ffc604fcba8 [ 282.492948][T12472] [ 282.624413][ T7458] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.701881][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.726154][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.736441][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.774556][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.792084][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 282.800728][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.819826][ T7458] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.916911][T12493] netlink: 'syz.4.1974': attribute type 6 has an invalid length. [ 283.057413][T12476] lo speed is unknown, defaulting to 1000 [ 283.195282][T12502] bridge6: entered promiscuous mode [ 283.241398][T12502] bridge6: entered allmulticast mode [ 283.267500][T12502] team0: Port device bridge6 added [ 283.361972][ T7458] bridge_slave_1: left allmulticast mode [ 283.368004][ T7458] bridge_slave_1: left promiscuous mode [ 283.378265][ T7458] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.411768][ T7458] bridge_slave_0: left allmulticast mode [ 283.417543][ T7458] bridge_slave_0: left promiscuous mode [ 283.430068][ T7458] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.452632][T12519] netlink: 'syz.0.1983': attribute type 10 has an invalid length. [ 283.795145][ T7458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.806351][ T7458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.816836][ T7458] bond0 (unregistering): Released all slaves [ 283.833899][T12486] lo speed is unknown, defaulting to 1000 [ 284.095659][T12527] __nla_validate_parse: 11 callbacks suppressed [ 284.095677][T12527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1986'. [ 284.133641][T12525] IPVS: length: 212 != 24 [ 284.323095][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1990'. [ 284.328296][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1989'. [ 284.536691][T12542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1989'. [ 284.615114][T12547] bridge8: entered promiscuous mode [ 284.627285][T12547] bridge8: entered allmulticast mode [ 284.633389][T12549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1993'. [ 284.709085][T12547] team0: Port device bridge8 added [ 284.751166][T12486] chnl_net:caif_netlink_parms(): no params data found [ 284.789135][ C1] bridge0: port 1(ip6gretap0) entered forwarding state [ 284.796093][ C1] bridge0: topology change detected, propagating [ 284.814552][T12555] netlink: 'syz.3.1994': attribute type 10 has an invalid length. [ 284.886230][ T5833] Bluetooth: hci0: command tx timeout [ 284.994491][ T7458] hsr_slave_0: left promiscuous mode [ 285.000579][ T7458] hsr_slave_1: left promiscuous mode [ 285.006620][ T7458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.014692][ T7458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.022919][ T7458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.034544][ T7458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.075130][ T7458] veth1_macvtap: left promiscuous mode [ 285.081084][ T7458] veth0_macvtap: left promiscuous mode [ 285.087989][ T7458] veth1_vlan: left promiscuous mode [ 285.093788][ T7458] veth0_vlan: left promiscuous mode [ 285.162937][T12566] x_tables: duplicate underflow at hook 1 [ 285.196541][T12566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1998'. [ 285.257150][T12567] netlink: 'syz.0.1998': attribute type 2 has an invalid length. [ 285.586984][ T7458] team0 (unregistering): Port device team_slave_1 removed [ 285.637378][ T7458] team0 (unregistering): Port device team_slave_0 removed [ 286.075434][T12558] FAULT_INJECTION: forcing a failure. [ 286.075434][T12558] name failslab, interval 1, probability 0, space 0, times 0 [ 286.075460][T12559] netlink: 'syz.3.1997': attribute type 6 has an invalid length. [ 286.100887][T12558] CPU: 0 UID: 0 PID: 12558 Comm: syz.4.1995 Not tainted 6.13.0-rc5-syzkaller-00767-g385f186aba3d #0 [ 286.111680][T12558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 286.121748][T12558] Call Trace: [ 286.125041][T12558] [ 286.127976][T12558] dump_stack_lvl+0x241/0x360 [ 286.132657][T12558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.137870][T12558] ? __pfx__printk+0x10/0x10 [ 286.142483][T12558] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 286.148483][T12558] ? __pfx___might_resched+0x10/0x10 [ 286.153815][T12558] should_fail_ex+0x3b0/0x4e0 [ 286.158503][T12558] should_failslab+0xac/0x100 [ 286.163201][T12558] kmem_cache_alloc_node_noprof+0x77/0x380 [ 286.169007][T12558] ? __alloc_skb+0x1c3/0x440 [ 286.173595][T12558] __alloc_skb+0x1c3/0x440 [ 286.178004][T12558] ? __pfx___alloc_skb+0x10/0x10 [ 286.182965][T12558] ? netlink_ack_tlv_len+0x6e/0x200 [ 286.188337][T12558] netlink_ack+0x145/0xa50 [ 286.192752][T12558] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 286.198123][T12558] ? __pfx_nl80211_post_doit+0x10/0x10 [ 286.203680][T12558] ? __pfx___might_resched+0x10/0x10 [ 286.208976][T12558] netlink_rcv_skb+0x262/0x430 [ 286.213737][T12558] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.218846][T12558] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.224260][T12558] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 286.229724][T12558] genl_rcv+0x28/0x40 [ 286.233705][T12558] netlink_unicast+0x7f6/0x990 [ 286.238475][T12558] ? __pfx_netlink_unicast+0x10/0x10 [ 286.243765][T12558] ? __virt_addr_valid+0x45f/0x530 [ 286.248872][T12558] ? __phys_addr_symbol+0x2f/0x70 [ 286.253890][T12558] ? __check_object_size+0x47a/0x730 [ 286.259172][T12558] netlink_sendmsg+0x8e4/0xcb0 [ 286.263937][T12558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.269218][T12558] ? aa_sock_msg_perm+0x91/0x160 [ 286.274154][T12558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.279437][T12558] __sock_sendmsg+0x221/0x270 [ 286.284205][T12558] ____sys_sendmsg+0x52a/0x7e0 [ 286.288971][T12558] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.294260][T12558] ? __fget_files+0x2a/0x410 [ 286.298859][T12558] ? __fget_files+0x2a/0x410 [ 286.303473][T12558] __sys_sendmsg+0x269/0x350 [ 286.308059][T12558] ? __pfx_lock_release+0x10/0x10 [ 286.313084][T12558] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.318201][T12558] ? __pfx_vfs_write+0x10/0x10 [ 286.322974][T12558] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.329409][T12558] ? do_syscall_64+0x100/0x230 [ 286.334180][T12558] ? do_syscall_64+0xb6/0x230 [ 286.338856][T12558] do_syscall_64+0xf3/0x230 [ 286.343357][T12558] ? clear_bhb_loop+0x35/0x90 [ 286.348034][T12558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.353939][T12558] RIP: 0033:0x7f8c98b85d29 [ 286.358366][T12558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.378082][T12558] RSP: 002b:00007f8c9992d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.386500][T12558] RAX: ffffffffffffffda RBX: 00007f8c98d75fa0 RCX: 00007f8c98b85d29 [ 286.394476][T12558] RDX: 000000000000c014 RSI: 0000000020000200 RDI: 0000000000000003 [ 286.402442][T12558] RBP: 00007f8c9992d090 R08: 0000000000000000 R09: 0000000000000000 [ 286.410416][T12558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.418391][T12558] R13: 0000000000000000 R14: 00007f8c98d75fa0 R15: 00007ffeea34ef68 [ 286.426749][T12558] [ 286.612155][T12486] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.641959][T12486] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.652026][T12486] bridge_slave_0: entered allmulticast mode [ 286.659806][T12486] bridge_slave_0: entered promiscuous mode [ 286.682681][T12579] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 286.691735][T12486] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.713884][T12486] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.736040][T12486] bridge_slave_1: entered allmulticast mode [ 286.744195][T12486] bridge_slave_1: entered promiscuous mode [ 286.803335][T12585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2004'. [ 286.823235][T12486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.852780][T12486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.861737][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2005'. [ 286.865913][T12585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2004'. [ 286.914203][T12587] bond0: (slave bond2): Error -95 calling ndo_bpf [ 286.923765][T12587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2005'. [ 286.949089][ T5833] Bluetooth: hci0: command tx timeout [ 287.015323][T12590] netlink: 'syz.4.2007': attribute type 10 has an invalid length. [ 287.110969][T12587] bond0 (unregistering): (slave bond2): Releasing backup interface [ 287.121360][T12587] bond0 (unregistering): Released all slaves [ 287.140057][T12486] team0: Port device team_slave_0 added [ 287.162537][T12486] team0: Port device team_slave_1 added [ 287.239148][T12486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.268772][T12486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.319463][T12486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.339716][T12486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.357015][T12486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.391311][T12602] netlink: 'syz.2.2011': attribute type 3 has an invalid length. [ 287.404680][T12486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.478411][T12597] netlink: 'syz.4.2010': attribute type 3 has an invalid length. [ 287.486286][T12597] netlink: 'syz.4.2010': attribute type 3 has an invalid length. [ 287.570042][T12486] hsr_slave_0: entered promiscuous mode [ 287.586195][T12486] hsr_slave_1: entered promiscuous mode [ 287.595152][T12486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.614049][T12486] Cannot create hsr debugfs directory [ 287.914232][T12631] netlink: 'syz.3.2020': attribute type 10 has an invalid length. [ 288.156173][T12645] IPVS: length: 212 != 24 [ 288.350019][T12486] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 288.370191][T12486] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 288.405012][T12486] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 288.424965][T12486] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 288.497788][T12486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.532254][T12486] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.561526][ T7462] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.568742][ T7462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.618221][ T7462] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.625426][ T7462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.686877][T12486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.732608][T12666] netlink: 'syz.2.2034': attribute type 10 has an invalid length. [ 288.999968][T12689] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.009425][T12486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.042384][ T5833] Bluetooth: hci0: command tx timeout [ 289.077777][T12486] veth0_vlan: entered promiscuous mode [ 289.087180][T12692] IPVS: length: 212 != 24 [ 289.105513][T12486] veth1_vlan: entered promiscuous mode [ 289.232559][T12486] veth0_macvtap: entered promiscuous mode [ 289.263767][T12486] veth1_macvtap: entered promiscuous mode [ 289.305425][T12486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.331759][T12486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.353296][T12695] bridge8: entered promiscuous mode [ 289.359150][T12695] bridge8: entered allmulticast mode [ 289.367704][T12695] team0: Port device bridge8 added [ 289.374532][T12697] __nla_validate_parse: 8 callbacks suppressed [ 289.374566][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2043'. [ 289.392768][T12486] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.402203][T12486] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.411745][T12486] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.420680][T12486] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.514927][T12486] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 289.548474][T12486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.618596][T12703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2045'. [ 289.630039][ T7444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.654406][T12703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2045'. [ 289.665118][ T7444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.672911][T12705] netlink: 'syz.4.2047': attribute type 2 has an invalid length. [ 289.677879][T12703] netlink: 'syz.2.2045': attribute type 6 has an invalid length. [ 289.747389][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.769892][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.817620][T12711] netlink: 'syz.0.2049': attribute type 10 has an invalid length. [ 290.054305][T12723] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2050'. [ 290.199468][T12729] IPVS: length: 212 != 24 [ 290.273862][T12736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2055'. [ 290.343442][T12738] bridge9: entered promiscuous mode [ 290.351120][T12738] bridge9: entered allmulticast mode [ 290.359827][T12738] team0: Port device bridge9 added [ 290.523915][T12746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2060'. [ 290.536517][T12746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2060'. [ 290.553437][T12746] netlink: 'syz.2.2060': attribute type 6 has an invalid length. [ 290.573030][T12752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2059'. [ 290.599140][T12750] netlink: 'syz.4.2061': attribute type 10 has an invalid length. [ 290.610004][T12752] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2059'. [ 290.693963][T12755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2062'. [ 290.712161][T12756] gre2: entered promiscuous mode [ 290.718256][T12756] gre2: entered allmulticast mode [ 291.140049][T12758] tipc: Started in network mode [ 291.145367][T12758] tipc: Node identity ac14142f, cluster identity 4711 [ 291.152727][T12758] tipc: New replicast peer: 0.0.0.0 [ 291.158627][T12758] tipc: Enabled bearer , priority 10 [ 291.170165][T12758] netlink: 'syz.4.2064': attribute type 21 has an invalid length. [ 291.178253][T12758] netlink: 'syz.4.2064': attribute type 6 has an invalid length. [ 291.208734][T12764] IPVS: length: 212 != 24 [ 291.481637][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.507173][T12775] bridge7: entered promiscuous mode [ 291.515674][T12775] bridge7: entered allmulticast mode [ 291.526396][T12779] netlink: 'syz.2.2071': attribute type 9 has an invalid length. [ 291.535830][T12775] team0: Port device bridge7 added [ 291.544817][T12777] netlink: 'syz.0.2072': attribute type 6 has an invalid length. [ 292.268531][ T5881] tipc: Node number set to 2886997039 [ 293.075082][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.140869][T12785] siw: device registration error -23 [ 293.239520][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.393479][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 293.404547][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 293.416439][T12801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.426011][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 293.445785][T12802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.455305][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 293.474924][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.477432][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 293.494457][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 293.723337][T12798] lo speed is unknown, defaulting to 1000 [ 293.957531][ T35] bridge_slave_1: left allmulticast mode [ 293.963736][ T35] bridge_slave_1: left promiscuous mode [ 293.970889][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.984833][ T35] bridge_slave_0: left allmulticast mode [ 293.993984][ T35] bridge_slave_0: left promiscuous mode [ 294.000465][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.380730][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.396213][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.406938][ T35] bond0 (unregistering): Released all slaves [ 294.420587][T12824] __nla_validate_parse: 14 callbacks suppressed [ 294.420610][T12824] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2086'. [ 294.436431][T12824] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2086'. [ 294.445496][T12824] validate_nla: 3 callbacks suppressed [ 294.445512][T12824] netlink: 'syz.3.2086': attribute type 6 has an invalid length. [ 294.473711][T12822] bridge9: entered promiscuous mode [ 294.480792][T12822] bridge9: entered allmulticast mode [ 294.497044][T12822] team0: Port device bridge9 added [ 294.644009][T12834] netlink: 'syz.0.2088': attribute type 3 has an invalid length. [ 294.907113][T12845] tipc: Enabled bearer , priority 0 [ 294.988678][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2094'. [ 295.035848][T12845] syzkaller0: entered promiscuous mode [ 295.051317][T12845] syzkaller0: entered allmulticast mode [ 295.067909][T12845] tipc: Resetting bearer [ 295.094964][T12863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2097'. [ 295.109231][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2094'. [ 295.148809][T12844] tipc: Resetting bearer [ 295.670422][ T5837] Bluetooth: hci0: command tx timeout [ 297.104473][T12844] tipc: Disabling bearer [ 297.132632][ T35] hsr_slave_0: left promiscuous mode [ 297.149708][ T35] hsr_slave_1: left promiscuous mode [ 297.156371][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.179586][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.195785][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.203931][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.232010][ T35] veth1_macvtap: left promiscuous mode [ 297.234744][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2099'. [ 297.238361][ T35] veth0_macvtap: left promiscuous mode [ 297.253352][ T35] veth1_vlan: left promiscuous mode [ 297.258911][ T35] veth0_vlan: left promiscuous mode [ 297.704284][ T35] team0 (unregistering): Port device team_slave_1 removed [ 297.749161][ T5837] Bluetooth: hci0: command tx timeout [ 297.760056][ T35] team0 (unregistering): Port device team_slave_0 removed [ 298.198892][T12798] chnl_net:caif_netlink_parms(): no params data found [ 298.224619][T12870] bridge10: entered promiscuous mode [ 298.243573][T12870] bridge10: entered allmulticast mode [ 298.253165][T12870] team0: Port device bridge10 added [ 298.505097][T12798] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.527258][T12798] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.551712][T12892] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2105'. [ 298.552246][T12798] bridge_slave_0: entered allmulticast mode [ 298.575059][T12798] bridge_slave_0: entered promiscuous mode [ 298.584905][T12798] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.598390][T12798] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.606347][T12798] bridge_slave_1: entered allmulticast mode [ 298.621860][T12798] bridge_slave_1: entered promiscuous mode [ 298.681338][T12897] FAULT_INJECTION: forcing a failure. [ 298.681338][T12897] name failslab, interval 1, probability 0, space 0, times 0 [ 298.702186][T12897] CPU: 1 UID: 0 PID: 12897 Comm: syz.4.2107 Not tainted 6.13.0-rc5-syzkaller-00767-g385f186aba3d #0 [ 298.713017][T12897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 298.723108][T12897] Call Trace: [ 298.726414][T12897] [ 298.729482][T12897] dump_stack_lvl+0x241/0x360 [ 298.734221][T12897] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.739451][T12897] ? __pfx__printk+0x10/0x10 [ 298.742129][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2108'. [ 298.744151][T12897] should_fail_ex+0x3b0/0x4e0 [ 298.757697][T12897] should_failslab+0xac/0x100 [ 298.762413][T12897] ? skb_clone+0x20c/0x390 [ 298.766843][T12897] kmem_cache_alloc_noprof+0x70/0x380 [ 298.772229][T12897] skb_clone+0x20c/0x390 [ 298.776524][T12897] __netlink_deliver_tap+0x3cc/0x7f0 [ 298.781851][T12897] ? netlink_deliver_tap+0x2e/0x1b0 [ 298.787115][T12897] netlink_deliver_tap+0x19d/0x1b0 [ 298.792259][T12897] netlink_unicast+0x7c4/0x990 [ 298.797045][T12897] ? __pfx_netlink_unicast+0x10/0x10 [ 298.802351][T12897] ? __virt_addr_valid+0x45f/0x530 [ 298.807547][T12897] ? __phys_addr_symbol+0x2f/0x70 [ 298.812595][T12897] ? __check_object_size+0x47a/0x730 [ 298.817928][T12897] netlink_sendmsg+0x8e4/0xcb0 [ 298.822747][T12897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.828069][T12897] ? aa_sock_msg_perm+0x91/0x160 [ 298.833051][T12897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.838452][T12897] __sock_sendmsg+0x221/0x270 [ 298.843166][T12897] ____sys_sendmsg+0x52a/0x7e0 [ 298.847976][T12897] ? __pfx_____sys_sendmsg+0x10/0x10 [ 298.853288][T12897] ? __fget_files+0x2a/0x410 [ 298.857888][T12897] ? __fget_files+0x2a/0x410 [ 298.862487][T12897] __sys_sendmsg+0x269/0x350 [ 298.867077][T12897] ? __pfx_lock_release+0x10/0x10 [ 298.872108][T12897] ? __pfx___sys_sendmsg+0x10/0x10 [ 298.877224][T12897] ? __pfx_vfs_write+0x10/0x10 [ 298.882020][T12897] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 298.888347][T12897] ? do_syscall_64+0x100/0x230 [ 298.893149][T12897] ? do_syscall_64+0xb6/0x230 [ 298.897861][T12897] do_syscall_64+0xf3/0x230 [ 298.902391][T12897] ? clear_bhb_loop+0x35/0x90 [ 298.907120][T12897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.909090][T12904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2108'. [ 298.913007][T12897] RIP: 0033:0x7f8c98b85d29 [ 298.926288][T12897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.945918][T12897] RSP: 002b:00007f8c9992d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.954345][T12897] RAX: ffffffffffffffda RBX: 00007f8c98d75fa0 RCX: 00007f8c98b85d29 [ 298.962320][T12897] RDX: 000000000000c014 RSI: 0000000020000200 RDI: 0000000000000003 [ 298.970300][T12897] RBP: 00007f8c9992d090 R08: 0000000000000000 R09: 0000000000000000 [ 298.978268][T12897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.986273][T12897] R13: 0000000000000000 R14: 00007f8c98d75fa0 R15: 00007ffeea34ef68 [ 298.994283][T12897] [ 299.021232][T12798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.042663][T12798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.131646][T12910] bridge10: entered promiscuous mode [ 299.137135][T12910] bridge10: entered allmulticast mode [ 299.149707][T12910] team0: Port device bridge10 added [ 299.166377][T12798] team0: Port device team_slave_0 added [ 299.174015][T12907] syzkaller0: entered allmulticast mode [ 299.207247][T12798] team0: Port device team_slave_1 added [ 299.293775][T12917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2113'. [ 299.353723][T12798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.387735][T12798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.438652][T12798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.464671][T12917] __nla_validate_parse: 1 callbacks suppressed [ 299.464690][T12917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2113'. [ 299.465046][T12798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.492910][T12798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.540654][T12798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.717189][T12798] hsr_slave_0: entered promiscuous mode [ 299.744479][T12798] hsr_slave_1: entered promiscuous mode [ 299.764705][T12940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2122'. [ 299.776698][T12798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.784850][T12798] Cannot create hsr debugfs directory [ 299.804789][T12940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2122'. [ 299.838102][ T5837] Bluetooth: hci0: command tx timeout [ 300.070370][T12942] x_tables: unsorted entry at hook 1 [ 300.094056][T12954] netlink: 'syz.3.2128': attribute type 10 has an invalid length. [ 300.118321][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2129'. [ 300.151525][T12958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2127'. [ 300.200071][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2129'. [ 300.200389][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2130'. [ 300.276069][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2130'. [ 300.413101][T12969] netlink: 'syz.0.2134': attribute type 15 has an invalid length. [ 300.425778][T12969] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2134'. [ 300.527087][T12798] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 300.561746][T12798] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 300.579154][T12798] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 300.591626][T12798] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 300.695780][T12979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2136'. [ 300.751803][T12798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.791047][T12798] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.816147][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.823341][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.877237][T12798] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 300.887704][T12798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.901614][ T7458] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.908811][ T7458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.963578][T12985] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 300.994866][T12992] netlink: 'syz.0.2141': attribute type 10 has an invalid length. [ 301.168328][T12798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.193896][T12999] tipc: Enabling of bearer rejected, already enabled [ 301.332150][T12798] veth0_vlan: entered promiscuous mode [ 301.354364][T12798] veth1_vlan: entered promiscuous mode [ 301.373552][T13014] xt_hashlimit: size too large, truncated to 1048576 [ 301.436650][T12798] veth0_macvtap: entered promiscuous mode [ 301.466997][T12798] veth1_macvtap: entered promiscuous mode [ 301.533538][T12798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.578274][T12798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.620767][T12798] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.648249][T12798] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.662851][T12798] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.671951][T12798] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.739775][T13026] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 301.782644][T12798] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 301.793459][T12798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.835470][ T7452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.857994][ T7452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.909563][ T5833] Bluetooth: hci0: command tx timeout [ 301.937147][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.977197][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.490925][T13035] vlan2: entered promiscuous mode [ 302.496181][T13035] vlan2: entered allmulticast mode [ 302.883506][T13039] syzkaller0: entered allmulticast mode [ 303.203283][T13049] tipc: Started in network mode [ 303.210868][T13049] tipc: Node identity , cluster identity 4711 [ 303.222726][T13049] tipc: Failed to obtain node identity [ 303.228860][T13049] tipc: Enabling of bearer rejected, failed to enable media [ 303.387300][T13051] netlink: 'syz.2.2157': attribute type 39 has an invalid length. [ 303.409587][T13052] netlink: 'syz.2.2157': attribute type 39 has an invalid length. [ 303.876367][T13071] bridge11: entered promiscuous mode [ 303.888647][T13071] bridge11: entered allmulticast mode [ 303.989418][ T5839] Bluetooth: hci0: command 0x0405 tx timeout [ 304.116037][T13079] netlink: 'syz.2.2165': attribute type 10 has an invalid length. [ 304.289353][T13085] tipc: Started in network mode [ 304.294300][T13085] tipc: Node identity , cluster identity 4711 [ 304.318438][T13085] tipc: Failed to obtain node identity [ 304.323972][T13085] tipc: Enabling of bearer rejected, failed to enable media [ 304.462646][T13087] netlink: 'syz.2.2168': attribute type 10 has an invalid length. [ 304.492893][T13087] netlink: 'syz.2.2168': attribute type 10 has an invalid length. [ 304.502808][T13087] __nla_validate_parse: 7 callbacks suppressed [ 304.502827][T13087] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2168'. [ 304.524206][T13087] team0: entered promiscuous mode [ 304.529628][T13087] team_slave_0: entered promiscuous mode [ 304.535636][T13087] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 304.555506][T13087] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.805099][T13097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2169'. [ 304.830954][T13097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2169'. [ 305.044752][ T7458] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.196376][ T7458] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.310651][ T7458] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.368069][ T7458] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.470810][ T7458] bridge_slave_1: left allmulticast mode [ 305.477115][ T7458] bridge_slave_1: left promiscuous mode [ 305.484544][ T7458] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.493035][ T7458] bridge_slave_0: left allmulticast mode [ 305.499024][ T7458] bridge_slave_0: left promiscuous mode [ 305.504769][ T7458] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.863609][ T7458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.875603][ T7458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.886344][ T7458] bond0 (unregistering): Released all slaves [ 305.988685][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 306.209727][ T7458] hsr_slave_0: left promiscuous mode [ 306.215511][ T7458] hsr_slave_1: left promiscuous mode [ 306.221646][ T7458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.229440][ T7458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.237169][ T7458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.244843][ T7458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.265051][ T7458] veth1_macvtap: left promiscuous mode [ 306.271141][ T7458] veth0_macvtap: left promiscuous mode [ 306.276701][ T7458] veth1_vlan: left promiscuous mode [ 306.282145][ T7458] veth0_vlan: left promiscuous mode [ 306.887118][T13115] netlink: 'syz.0.2176': attribute type 10 has an invalid length. [ 306.933198][ T7458] team0 (unregistering): Port device team_slave_1 removed [ 306.946483][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 306.973027][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 306.991159][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.001923][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.010580][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 307.013887][ T7458] team0 (unregistering): Port device team_slave_0 removed [ 307.018102][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.488555][T13102] bridge5: entered promiscuous mode [ 307.493986][T13102] bridge5: entered allmulticast mode [ 307.691961][T13117] lo speed is unknown, defaulting to 1000 [ 307.751962][T13126] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 307.797570][T13127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2180'. [ 307.942485][T13132] tipc: Enabled bearer , priority 10 [ 307.987085][T13117] chnl_net:caif_netlink_parms(): no params data found [ 308.142222][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2183'. [ 308.256586][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2183'. [ 308.267012][T13117] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.298662][T13117] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.305966][T13117] bridge_slave_0: entered allmulticast mode [ 308.329511][T13117] bridge_slave_0: entered promiscuous mode [ 308.350565][T13117] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.357783][T13117] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.374488][T13117] bridge_slave_1: entered allmulticast mode [ 308.382230][T13117] bridge_slave_1: entered promiscuous mode [ 308.399325][T13161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2188'. [ 308.426940][T13161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2188'. [ 308.464736][T13117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.484944][T13117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.552255][T13164] netlink: 'syz.2.2189': attribute type 4 has an invalid length. [ 308.574745][T13117] team0: Port device team_slave_0 added [ 308.589955][T13117] team0: Port device team_slave_1 added [ 308.603337][T13168] netlink: 'syz.2.2189': attribute type 4 has an invalid length. [ 308.650129][T13166] bridge9: entered promiscuous mode [ 308.655399][T13166] bridge9: entered allmulticast mode [ 308.808911][T13117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.815913][T13117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.848260][T13117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.871740][ T5837] ------------[ cut here ]------------ [ 308.877630][ T5837] WARNING: CPU: 1 PID: 5837 at net/bluetooth/hci_conn.c:567 hci_conn_timeout+0xfb/0x290 [ 308.887550][ T5837] Modules linked in: [ 308.891778][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: kworker/u9:3 Not tainted 6.13.0-rc5-syzkaller-00767-g385f186aba3d #0 [ 308.900200][T13117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.903067][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 308.920228][ T5837] Workqueue: hci0 hci_conn_timeout [ 308.925412][ T5837] RIP: 0010:hci_conn_timeout+0xfb/0x290 [ 308.931454][ T5837] Code: 4c 89 f7 e8 07 c2 09 00 eb 07 e8 20 e8 e3 f6 b0 13 0f b6 f0 4c 89 f7 5b 41 5c 41 5e 41 5f 5d e9 5b b3 fe ff e8 06 e8 e3 f6 90 <0f> 0b 90 eb 8f 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 36 ff ff ff 48 [ 308.936782][T13183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.951513][ T5837] RSP: 0018:ffffc90003f17b90 EFLAGS: 00010293 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 308.968141][ T5837] RAX: ffffffff8abb8bda RBX: ffff888011cac8e8 RCX: ffff88805fbc1e00 [ 308.976769][ T5837] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 308.985149][ T5837] RBP: 00000000ffffffff R08: ffffffff8abb8b43 R09: 1ffff11002395802 [ 308.993431][ T5837] R10: dffffc0000000000 R11: ffffed1002395803 R12: dffffc0000000000 [ 309.001774][ T5837] R13: ffffffff8168eed6 R14: ffff888011cac000 R15: 0000000002400000 [ 309.010190][ T5837] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 309.019535][ T5837] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.026243][ T5837] CR2: 0000000020016038 CR3: 000000005fb5c000 CR4: 00000000003526f0 [ 309.033894][T13117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.034443][ T5837] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 309.069110][ T5837] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 309.077146][ T5837] Call Trace: [ 309.080611][ T5837] [ 309.083567][ T5837] ? __warn+0x165/0x4d0 [ 309.087845][ T5837] ? hci_conn_timeout+0xfb/0x290 [ 309.092908][ T5837] ? report_bug+0x2b3/0x500 [ 309.097441][ T5837] ? hci_conn_timeout+0xfb/0x290 [ 309.102519][ T5837] ? handle_bug+0x60/0x90 [ 309.106983][ T5837] ? exc_invalid_op+0x1a/0x50 [ 309.111888][ T5837] ? asm_exc_invalid_op+0x1a/0x20 [ 309.116971][ T5837] ? process_scheduled_works+0x976/0x1840 [ 309.122852][ T5837] ? hci_conn_timeout+0x63/0x290 [ 309.127832][ T5837] ? hci_conn_timeout+0xfa/0x290 [ 309.132931][ T5837] ? hci_conn_timeout+0xfb/0x290 [ 309.137917][ T5837] process_scheduled_works+0xa66/0x1840 [ 309.143631][ T5837] ? __pfx_process_scheduled_works+0x10/0x10 [ 309.149796][ T5837] ? assign_work+0x364/0x3d0 [ 309.154446][ T5837] worker_thread+0x870/0xd30 [ 309.159166][ T5837] ? __kthread_parkme+0x169/0x1d0 [ 309.164469][ T5837] ? __pfx_worker_thread+0x10/0x10 [ 309.170068][ T5837] kthread+0x2f0/0x390 [ 309.174181][ T5837] ? __pfx_worker_thread+0x10/0x10 [ 309.179484][ T5837] ? __pfx_kthread+0x10/0x10 [ 309.184121][ T5837] ret_from_fork+0x4b/0x80 [ 309.188786][ T5837] ? __pfx_kthread+0x10/0x10 [ 309.193517][ T5837] ret_from_fork_asm+0x1a/0x30 [ 309.198339][ T5837] [ 309.201570][ T5837] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 309.208975][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: kworker/u9:3 Not tainted 6.13.0-rc5-syzkaller-00767-g385f186aba3d #0 [ 309.219853][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 309.229945][ T5837] Workqueue: hci0 hci_conn_timeout [ 309.235365][ T5837] Call Trace: [ 309.238678][ T5837] [ 309.241719][ T5837] dump_stack_lvl+0x241/0x360 [ 309.246443][ T5837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.251678][ T5837] ? __pfx__printk+0x10/0x10 [ 309.256321][ T5837] ? vscnprintf+0x5d/0x90 [ 309.260770][ T5837] panic+0x349/0x880 [ 309.264694][ T5837] ? __warn+0x174/0x4d0 [ 309.268868][ T5837] ? __pfx_panic+0x10/0x10 [ 309.273306][ T5837] ? ret_from_fork_asm+0x1a/0x30 [ 309.278248][ T5837] __warn+0x344/0x4d0 [ 309.282241][ T5837] ? hci_conn_timeout+0xfb/0x290 [ 309.287183][ T5837] report_bug+0x2b3/0x500 [ 309.291515][ T5837] ? hci_conn_timeout+0xfb/0x290 [ 309.296456][ T5837] handle_bug+0x60/0x90 [ 309.300884][ T5837] exc_invalid_op+0x1a/0x50 [ 309.305402][ T5837] asm_exc_invalid_op+0x1a/0x20 [ 309.310260][ T5837] RIP: 0010:hci_conn_timeout+0xfb/0x290 [ 309.315814][ T5837] Code: 4c 89 f7 e8 07 c2 09 00 eb 07 e8 20 e8 e3 f6 b0 13 0f b6 f0 4c 89 f7 5b 41 5c 41 5e 41 5f 5d e9 5b b3 fe ff e8 06 e8 e3 f6 90 <0f> 0b 90 eb 8f 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 36 ff ff ff 48 [ 309.335515][ T5837] RSP: 0018:ffffc90003f17b90 EFLAGS: 00010293 [ 309.341623][ T5837] RAX: ffffffff8abb8bda RBX: ffff888011cac8e8 RCX: ffff88805fbc1e00 [ 309.349597][ T5837] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 309.357620][ T5837] RBP: 00000000ffffffff R08: ffffffff8abb8b43 R09: 1ffff11002395802 [ 309.365653][ T5837] R10: dffffc0000000000 R11: ffffed1002395803 R12: dffffc0000000000 [ 309.373663][ T5837] R13: ffffffff8168eed6 R14: ffff888011cac000 R15: 0000000002400000 [ 309.381654][ T5837] ? process_scheduled_works+0x976/0x1840 [ 309.387410][ T5837] ? hci_conn_timeout+0x63/0x290 [ 309.392369][ T5837] ? hci_conn_timeout+0xfa/0x290 [ 309.397334][ T5837] process_scheduled_works+0xa66/0x1840 [ 309.402906][ T5837] ? __pfx_process_scheduled_works+0x10/0x10 [ 309.408909][ T5837] ? assign_work+0x364/0x3d0 [ 309.413524][ T5837] worker_thread+0x870/0xd30 [ 309.418225][ T5837] ? __kthread_parkme+0x169/0x1d0 [ 309.423260][ T5837] ? __pfx_worker_thread+0x10/0x10 [ 309.428507][ T5837] kthread+0x2f0/0x390 [ 309.432677][ T5837] ? __pfx_worker_thread+0x10/0x10 [ 309.437790][ T5837] ? __pfx_kthread+0x10/0x10 [ 309.442385][ T5837] ret_from_fork+0x4b/0x80 [ 309.446806][ T5837] ? __pfx_kthread+0x10/0x10 [ 309.451401][ T5837] ret_from_fork_asm+0x1a/0x30 [ 309.456270][ T5837] [ 309.459837][ T5837] Kernel Offset: disabled [ 309.464304][ T5837] Rebooting in 86400 seconds..