last executing test programs: 52.696310759s ago: executing program 0 (id=1326): r0 = socket$caif_seqpacket(0x25, 0x5, 0x5) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x16, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @exit, @generic={0x10, 0x3, 0x0, 0x8000, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xcf, &(0x7f0000000340)=""/207, 0x1e00, 0x1c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x1, 0x10, 0xd88d, 0x1}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000540)=[{0x3, 0x3, 0x5, 0x8}, {0x3, 0x5, 0xe}, {0x1, 0x1, 0x4, 0xb}, {0x1, 0x4, 0x10, 0x3}, {0x4, 0x4, 0xd, 0xc}, {0x4, 0x1, 0x8, 0x3}], 0x10, 0x9, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000002010101000000000000000003000006040002800c00198008000200900c77"], 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x4000) unshare(0x20000400) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003b00)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1b0000009a940000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 52.44638422s ago: executing program 0 (id=1330): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="d2ffdd934517f3e145f228e088a8", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x13, &(0x7f0000001400)=0x3d70, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000240)=0xb, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454ce, 0x18) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={'gretap0\x00', {0x2, 0x4e20, @local}}) 38.97223588s ago: executing program 0 (id=1330): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="d2ffdd934517f3e145f228e088a8", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x13, &(0x7f0000001400)=0x3d70, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000240)=0xb, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454ce, 0x18) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={'gretap0\x00', {0x2, 0x4e20, @local}}) 29.588412804s ago: executing program 0 (id=1330): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="d2ffdd934517f3e145f228e088a8", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x13, &(0x7f0000001400)=0x3d70, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000240)=0xb, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454ce, 0x18) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={'gretap0\x00', {0x2, 0x4e20, @local}}) 19.021815235s ago: executing program 0 (id=1330): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="d2ffdd934517f3e145f228e088a8", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x13, &(0x7f0000001400)=0x3d70, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000240)=0xb, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454ce, 0x18) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={'gretap0\x00', {0x2, 0x4e20, @local}}) 8.251014465s ago: executing program 0 (id=1330): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="d2ffdd934517f3e145f228e088a8", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x13, &(0x7f0000001400)=0x3d70, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000240)=0xb, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454ce, 0x18) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={'gretap0\x00', {0x2, 0x4e20, @local}}) 6.674162279s ago: executing program 4 (id=1666): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000438000480"], 0x8c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c001680080001"], 0x30}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0x5, [@remote, @rand_addr, @rand_addr=0x64010102]}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x0, 0x0]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendto$inet6(r0, &(0x7f0000000080)="1544523d6d41bb8c3c6999d882d6bfe0a03cc557530b7d4779e77e60f4f44008d6fa9b8d4dcee4bc5f95ee7edc175ef5ae93c3146b315e5cdb63473a3e35b63f53e557e68a246d51b95c394fa4fdae39dab9f6fda98544779baa9571d5ed5334fa88d63c13883bfc80f4304aea14fc1e830883cef0f91e", 0x77, 0x0, 0x0, 0x0) 4.84476457s ago: executing program 4 (id=1672): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) recvmmsg(r5, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000070000000000000000d71e6d81e840ae0b000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90f24fc60", 0x14}], 0x1}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_emit_ethernet(0x33a, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0], 0x0) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r8, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r4]) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x800442d2, &(0x7f0000000400)={0x2, &(0x7f0000000300)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}]}) syz_emit_ethernet(0x7b, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6865e7f90045067e20010000000000000000000000000001ff010000000000000000000000000001670008483d1600005e00f711680000003c0005c9680000000000000000000000000000000000000000004e2200004e20000000020000000200000002000000030000000000"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.647633813s ago: executing program 1 (id=1674): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x200, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048040) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x200, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x98, r3, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x79}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7c16fed173f5428e48c94d667f1099da5f6cb0b2c1da31ea"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x98}, 0x1, 0x0, 0x0, 0xc0}, 0x20002080) r4 = accept(r0, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f0000000580)=0x80) connect$l2tp6(r4, &(0x7f00000005c0)={0xa, 0x0, 0x6, @loopback, 0x3, 0x4}, 0x20) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) write$tun(r0, &(0x7f0000000600)={@val={0x0, 0x88a8}, @void, @ipv4=@generic={{0x53, 0x4, 0x1, 0xb, 0x1f8, 0x65, 0x0, 0x3, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x19}, {[@timestamp_prespec={0x44, 0x24, 0x67, 0x3, 0x7, [{@local, 0x2}, {@rand_addr=0x64010102, 0x2}, {@multicast2, 0x9}, {@remote, 0x9}]}, @cipso={0x86, 0x65, 0x1, [{0x2, 0xe, "818c078fe3e257741336e2d1"}, {0x0, 0x9, "ca415f6967d5e3"}, {0x0, 0xf, "ad68c40b68216f95fc4bf2337f"}, {0x0, 0x8, "c003f0ee872b"}, {0x6, 0xf, "f0756612fcb372d533deb74e90"}, {0x0, 0x5, "dc84e7"}, {0x7, 0xc, "5e4d5e1f81d8564ac131"}, {0x6, 0x11, "68bd33a23e7989f7fc4ab830723087"}]}, @rr={0x7, 0xf, 0x3a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010101]}, @noop, @generic={0xe54342d1c6156d3e, 0x9, "fec3465b13f36b"}, @timestamp_addr={0x44, 0x2c, 0x90, 0x1, 0x3, [{@loopback, 0x3a}, {@private=0xa010100, 0x6}, {@private=0xa010102, 0x5}, {@local, 0x78a698}, {@multicast1, 0x92}]}, @generic={0x94, 0x10, "effa7b13185d2c8ab6b33dd19e9f"}, @timestamp_addr={0x44, 0x14, 0x3f, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@empty, 0x1200000}]}, @timestamp_prespec={0x44, 0x44, 0x34, 0x3, 0x9, [{@remote, 0x1}, {@empty, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@multicast1, 0x8}, {@multicast1, 0xc}, {@empty, 0x2}, {@rand_addr=0x64010102, 0x3}, {@broadcast, 0x7}]}]}}, "1880c91b9e5f1c8b3c42ac119d7ddc07305a80da429970c440078642ec76d79d2021814c42f085dd3dc9cc8cc25f83613e821c904adce9c22bbc90fd8f64d32f477a2f4b93f339486dee9a40d8173514a6af64b7217c8d9cf28ec7f7bca1202173df71907eefcc4a68fd18e5665dd14c82fa93c0c3483f06ae065afb3f7beba0399702fb4f606f760e1ab2a2622b201d837853e2f8fe91f948f1d94e610eccbeb8f1ebbd3039bb282b5271f1"}}, 0x1fc) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000800)={0x0, 0xb18, 0xfffffff9, 0x800}, &(0x7f0000000840)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000880)={r5, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x6, 0x2}, &(0x7f0000000940)=0x90) setsockopt$RDS_RECVERR(r4, 0x114, 0x5, &(0x7f0000000980)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f00000009c0)={'erspan0\x00', 0x0, 0x1, 0x7800, 0x1, 0x6, {{0x25, 0x4, 0x0, 0x3e, 0x94, 0x68, 0x0, 0x5e, 0x29, 0x0, @empty, @private=0xa010101, {[@timestamp_prespec={0x44, 0x24, 0xc8, 0x3, 0x1, [{@multicast1, 0xda}, {@multicast2, 0x5}, {@multicast1, 0x3290}, {@remote, 0x60}]}, @lsrr={0x83, 0x7, 0x11, [@broadcast]}, @timestamp_prespec={0x44, 0x54, 0xbc, 0x3, 0x3, [{@rand_addr=0x64010102, 0xc85}, {@loopback, 0x46a0}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@multicast2, 0x1}, {@broadcast, 0x3}, {@loopback, 0xa}, {@empty, 0x3}, {@local, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@remote, 0x16a2ab9c}]}]}}}}}) sendmsg$xdp(r0, &(0x7f0000003000)={&(0x7f0000000ac0)={0x2c, 0x0, r7, 0x10}, 0x10, &(0x7f0000002f40)=[{&(0x7f0000000b00)="42c3704e6c64a439d82b0c7b4a4a8ff668006b0094cee96e0c75916affa4fea1b4ed65ed77c559fedfb95c067b0cec186c1c651085bd8ad7c8fa436277dcc63eb0544bc84d4958f2c0fd1ac450a54d56265356d8bab85852bf8c5bf094939c1092e5803ac2c256e7772bd6c5965c27612f9a6845579b624a2e1c0a5efca6c779b75cd4964eddcae28e711121987d6a5df9402711e4d0a8540de1f52e8242ec3945b488002acffdcc634303f9083ec041cd6dc1c7173807593e4ea5aefcd9bd5ca2ec69990f32f39c6359414c74af302c9f124611a5b7d566499f3287978b622e", 0xe0}, {&(0x7f0000000c00)}, {&(0x7f0000000c40)="4d23f8608038d563bb9b4676527d401d2b95b585f3eb6079ab19a918367f", 0x1e}, {&(0x7f0000000c80)="8a60b0c4910f2082e676fdb6c5b92c754c9a0d287df6b68d106490622024f42cec78ce34b5540818a3e1855627cb84d40df7a4d74834789d534908a4101863a7e67f6a17bae6db474aeb5c2cf525ddfab454732433f0418a7d1e574964474488914d46116f2c4cea34ea832122fa62da28d96a7492aae7939100df3f6f1c824cdcc475f58707af1ad8186e0c9f11396c6c7c787f1dfe2b63b62e8e0e68", 0x9d}, {&(0x7f0000000d40)="122eb1349845b59607edf3b5ebd3b109a68697908237a7429e191535f857321faa3451b7583c2d232b96f762302ede1ab548cdd1422a36b6e28cb93a7599d852d7eae7a286a78668199ea8ce5fc024ff979331a577ba0f832202124e0f9af921e23868326c39470c7dd0a1c53d52ac", 0x6f}, {&(0x7f0000000dc0)="cb2d75304278a35238415fce61bd239465757b23fc17458b072b14c263cd3a2be6f44ffca8e5a679a0b648d13d8787e9b714068098336469f8e3135cfd4b0de96dc3f333bebc8a0e5bab9959c917d3df60ee6e7d8038f37e8958de3330b39506deb010142bed9e22507099e85461b9e23571f09e97ff00ae65f0c52ca75a14d707d76d63cdeecb2d63375ae9692c2c69963ccfc24b81890a8467c820ebeb2e9f89a1c82be2c629ed6d2d77ad299981d25c5d26de5e097139815a8d93ba7d4ec73eafb4ff04a6da876b8db00df9c1a92759ef69c09493af22b3ca1e46412d5fb9df1625c894c0aece26a9f82fbdf162db962badb67b505090c4d96648a1526030dd172e46f7a4ae693a3bd56f464942d8ba18a125606e17b69849e717a4c806c3c6ec0c06862aa44f799ccf330f87c69bac1fc9b3b7442b1ccb1df665fdd33c0cdca3757f2cb1dd7da0771112f987acbdadfed214b5a43287c42164c6cf15b1e108dde5240a909c83e0aa7dd25f1d2c633b9304192dcfcf2478783c1dbd61585db97da5693bea490952750829d48dd97feec1be48aa18d9285a585c38e41e81a08dc92d104dc9a0e153e8ae0da87c3875b0f9ce151516b0ac0e9028da875272eb47ef070d72f0095079f17710df9642c3bcc5b7641addbe49940b9fea7a653d21a677ed94234bc23e301c5db7b5545b11ee775bda5f9bada184117caa386378fa6b196254f81a6966c6bc3198674c87b1e736545c6a223ba6cc6a6ab38afc9110a9fd42d7db42fad1f00ee2bf697cb2ee664d94936fa0c84d1dd85cf432a61bf84023d9d936da473d6bdab8ef87df0ba43e49ddbc8ca9827e42ddcabef1780078eb232e148c59f76bc823efc684f2a916568301e13c501ca4aff56ce0a09a4912588a90adfed3486fdac1497aa4444a1072c0fe3d9ca05441ed66d20574e2774642e2f57c04352735d4f4b2254fb7fde28efc47ad494047293a311bdec03e831725c10dfa02b439001da7787c3c4134a85c378d9e0d739e6f413e1e1e6af46d499a29298552e60a2280eff40917a7cfd45d753a3916ad5546a5f93c48a2e4f3e5b3b6a23da088891acffbbfa643b936d55791f8c15d6953ebc05450eb16b613c5619b36580344a9a6347d7763743323ebff13bed76b8b65ad9b0e5424edc83591048b1628531e6feef616071ae69581b223edd9542a866b0b17d1225a42e80fe9bc6c90d4603b13bcb9174d10073451bb908d488f83a40f90b4af3a938e8ab57003638a870be09f95407f287c686735f531223d48f22af0148dd127464ee05027b3e8402aef791ef5b9fe79cb8d219f254515f6aa2137bceb5638ba813b019906bf7421523ee6c428d3b7047bfceca1beab2ada3ac9d2d8b1785ac535de949fed2602a0c989577cf0e54967f3ac44745c0b5971d49d2c0e647bdd27d82799475d9e8b868703b68ea92f5306e5c5db59a4de81ccb854513597aaf8d647f8b6a57dc45f9f6ab167bacddd386430825879cf8b18ff5035c28e3eb1d368f2c9b154ca63eda8e2222dca96c9f8c6097948da2309606575c401bff30073c0407e5e8fedcc8641d26f94ec31c848698aa6c99af62010c9faf69be2df2624cad70d9944fab9d26524d27d76009e976fa40f40791bbe98f6fa27d32ebd6e9d735a23845f75190bfb732339675bef45c1af255a858f7091a4ccd371f860d284bd6a448e998b48742a830318a2840f45ff3e74e518ef89c1555da25a8a731e4098a51645fef9483cd8d80e1241b372c2d4697a28a512ae243f3d6ade996957b74fdcd5238bb73e00d57609c461e3582e037690257bd65ae538d0c84be0c8db4b32c62348f37f65ec7ccf6c8d52523f237412882c5e02b451feadde50d6fb0bfb56cf24f0a214f9b59d52373fe40f2da6dd7f999986b23f9d27be8f78746f90064169ed6c2e8ddaac9d06fe4d1b8fefbf1904fab433e77fc4479f3cc27fad8518348040b98ffb925768cc3fa042165c9e873f0b3185430e78aad0b0382b110ef2bc5c6d45d27da7d4c0491896c224d376b75af0a5368262f36026fa8e447f2c129f0397344441fc01650508e62db2771f95c49e954a29189103ad2813a957344ad98dc92a561b521349603e41f0cbf246bd000c4b3b301b8684ca02fe27cf849a09224acb5059faee4f2eb788d35267d082ddfe7549d0cc34abf6aec5b0b71b13af3f78292b3b4a7b3777b68c74b47fe0c72fb3c5079ea93f2746a1453fcbac045953a7281a8505551a88045a40bb4573ee0314994cae6d6b893b7e45a460ec547f0418e0f6243ec6252a751e22a4c396ec064447110d0fa764f25733e5c687c50712baa031f8461e2ff907f7905de6ea48b7d8ba891b1491a89d8ecddef4eac49051f060fbe830b65acdfe7acef50ad5fc35a54769dcde0d49854ad78ac29794b636b880920308a4c6cfbae7bf0cc8969d46cd312b6451c5fb5ca1eac653d642f7a25ee29004fc7db5d62a9e1348efa4eee9ce424514b4480d71346cfe5e6866a1e0846bc1553c17faa8036a59161446492e7cd05ac1ea9ebb23a0afe8a6d6253bc76c97009144f6b8af0f514ac0fd1a5124249019b5fc9fd8d9d1410092f41885dd75b2bf4fda82183559e2f8b18d816dd37c4c3ac8aa449384669dc398729550c4269f508aaf43e193ffdf29fc8ef0cb102994b751097697ed7555e7fdeff65d104f37c676f98b76d17fa98524eafcd8903e19a2e64a45cc0d49ddf29b583cba6da77bce82d0b1e3dfdd73dc0c9bc74429ea76123a855775e94573ea5ffb4b3eeaa2d3d544887b1348d266677982b198b1eaec6711c7504402923a954525fc16ddff5d2dbdbcba923bfce40122f15d8102d3e3269e7ca74e650e55b0223bab015c2fa0c0ede874922608f791d2d420c09186bbee24489c3df43648e98529b44ae063c01256c250a4c30acd6160c66bead95cb6c1182348a4e0c2b9a87f0bd7a81b4e7bac6bc84600171bc10cf3d8b2189228b0e3dbd65f4c1b3480b17d4b96a4b89fcca534b7f9734a0c3af02b68f5734e3970701cbf5a3a9058b097440f3e2f433a55cf01cc40ee4d7aea0967ddb62510d656d670b621d11716bf743228434f7fb8599fa83b64cdd1678a99380f473fce06f4293bed5aec622581d4c9611acc5c0ae19b5001aa82ea086717adf5e8528331b3e0e4ebec6e6b7bb72dee3e89c353511be5ae30f7494bf922977b2f6db4ef988879414f64572108dbd8ebe782ae7262cecb5754d6744cdfdd4abaf737e1a6a3997c9efa32f9ddfd92ba28668b56791118bef7c90e6cf7dcf655b21cc6fa17128e25641bbeac46aed02137a3bd0e48bcecbabe95d81ece7fd5019824f9c1765d948f60b4d6b734831a20755979939dfeea061ff2d00750858d97c6c395c52188f98d90d3721d13faf5e0c750a3bcdfe53901b51378094ae1a370955f616254d4530acba1a51abf8e7a7cfe7f63939bc395a6b0f2cf562bfa0f7002b49617cbcbf32249eccee9336f2b220bce600c666e567fd97ecfedec424e7e62b92d2bf6f0c132a4c79897f840ef6506a352f9a2baf82ada7061beee1501db17ea161a026df4022ff3fd049229ecbef0b8e9db5b6a660a4af333433495e5e873b32bab99e9750950afcac0bac0c93c46053522837a78dd051a0d7acc44650b3cdaff3c4166782a86470d11fe31723b7bae32a4fa75404be11eaef9a92aaff3139525c0e12be38a3765e43e2d242ff83c442556f0171e8178d547fcc02c14ecf5951a0b1959ec0e4ebc30c53d996f13c07b0d7528e29b504fe0783627e15b55a6333a7d1996a75225fdb859cc038a237b6c087cb0cf80bfd312a1bc35819a6d55b197f6bc4ca6707d103eea8aabac8cbc98584eb6977128d9436019f66d60568a0141ae45d6de733f34b95f469dd9928ea1e871654bc0c3fee5b6e612e24a5643bdc963cff99168e1fb4279d4ad8a34045a3a96d35b0c9c3d94c0ce6c1dc225cd38f8b8e15094a2f8a4e09568b669ae498e7f88b67a84c60bfb31b4c821d777322f58b854365b5dc9f28979f58471534ac69d538e5d4b275a7d90590a20c9ed6be863223c82ee829b4675cf0284039bda95449723b0f73adf0ed9301e0b6fe9ef7425ccf98993bd7babce24fa52e63d5380ec931c3218e3d75d2828a233ee212f87752588b708ff6c0e8dbee4f80293f96441833a055165e8fe1c87d8a2052247752e7eda445ee173aac9d6404fa10fc7cf4435f4a652c6634d178f7018437250515e7ad7b02402fb4c607413eb4e27a72ebe21947fd89387b73d0340e90d6ff2ef043d45b9558c64a4ff75748c5f49d5a751642764a0425bb0526d73e31e8ce89a720562c67e56890c7df43d973fcef32e445e2638cf6d21c791cdd7b634cc6877b9757977ac298ea4932af5b787de1b8528fa734c6135cd2bb0778ef75f893e61e09fc0835f7a1b58812382f7deb9a554c4be8ca28d3875ce89aa64e76c764e0541dd8198b948e9aace93f1e848b6ef2597a846726798d789259b695f5e221852bd2dfa955c9e2be56e265a146f69d0622b6f9bc803ea1d1a0736e993eb15281e2523ae1d9088cacc3c4aab089a42666ccb1e95f9c6d7b6baa68a02553c97a5e1da5d8ee0b5a08294135528df2c04ed5ec7865c730074e3748288556f41f55ae1abd7b73bd1fd913f110a06ca0d89dcfa6cb40cc678299e066034f70ffab4fa6c9d0db0cdd51d52999add181f70db2541e9289dd4ee5899ea2674629deecacf35dc893505ab0fa1da27d86ab149c26d50e81fc1393bab0e448aa50c3f0dca9be5e8f7f405b542310fa48424182b64e478f7b3fbcd1f9c0edb26ee41441dacf19d0da50f214586dd5663f160cd96b605ce8df757065fc5431b5f97b5c85f7ae548deebdfa1cf308b60021b1fdab3a8e9b5a54c8a45bcb71cbb3e79472301da52338468f2894a9e3093e90abaec2fc5aa6cb548d3a6577096a3fd5b551af289b78c39c5a829b6418285dfa1dce8928f179275f690a6c48cfdaabcb58917015c8b6384503d64726c827032668058023a599c64e5dd08a0bafbaec6eaac0ced54ff0a7947f96ba7ecd368dca084991fc2833fa191b40293396b69290bf65c92c12d83bbc1d8c1d6eaa4fa5f3960b1c595f88d5771090e9932c6dfdd68c278213bb2718d2ed817c59f4f0dbaff326b89e272ec49105c944710f2847d186843a513fe567d597a7a23a9a98cd06485801211da35fc34ddde8f664d6f233ba7959afe2dbf44066f032fed69d645544f3ca77bff0e43513740d79d5b3bd891127f64f10aca5566cfe9c0d80f9edfc17026dda72f16f2110b80c2c06cb93e4df127637dcbeb4a37e18dee411a6537ee439dd1e1ae4e347f380fc28ecaa82048013a0baae2d5bf6f8ced45ef726bd016caf881d2beb7d31f18404e90868aa61cfa6c6d2b597ebf13026e906b8638f872f2464e54c1cb290f40c0425da67af2dff5c030c5a35d9d307269a316cd7fbf51eb2260801ff50a1834d936b95e2683b4a8a2a62077a4650eacda0b2b72d8eae433cf02fd361f269af4504063a5af42b10e2c20834f0ffafadd32b299aa8d629638d91ecb55e87f1a2d68d2bd93cf003302734be246b7bf313989ed314175478eedf157074f16de0540aaaf3d32f37c51945c074260e8063757ed8209adffc0fda93ee3486a017e5133ef86ceb4368c20058dd2ce453cbc01335006a017cfaa9e1a88de684b58e3a13d4052325c79fcedb7a317b6298c391421083f4defcdc44023b5e3f56088224ab549a461ab", 0x1000}, {&(0x7f0000001dc0)="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", 0x1000}, {&(0x7f0000002dc0)="b350fd5de764ece80d26d259a8c335e465bbe5acf5bc2f42b872980aabd374da7ee1d0f1c687d6cfc4bf8302dea3ed073cef7a350dfad5e92494ae944f3763d49ce91dd09b01b2a713fe3b5e543dd2aa851f52f01ec18be663ce4a010f807e0e2406cbecd3ccf0f5933898181d172f75927b15c9f67fec327718b935d0c15c04ed6d1eae59d50ca1d22ee17781e87a53388ff58eede84a0c7a26f8ee9104bb2930a6f29f323b8682a34b7c", 0xab}, {&(0x7f0000002e80)="7a6037b50586cbfdae4dd369ab91180fa4ab820a7db6598847669c4e446ad28433d4da486e376eef4cea416d3e01d97792eca9451934e96c91d2ae30b171c88c346cdf78eb660b24292ed37c226bfc8f8f32a35de4a0a872d493fa1e1023d322a0c8a824587e146ca8f77632024a776a13e1e0331acbaf4afc86f133d55d0f2f6a68372862efdfaba1c62ef847", 0x8d}], 0x9, 0x0, 0x0, 0x4000000}, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003080), r0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000030c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000003200)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000031c0)={&(0x7f0000003100)={0xb0, r8, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7fff, 0x9}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x30}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc5}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x96}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1cd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}], @NL80211_ATTR_CSA_IES={0x4, 0xb9, 0x0, 0x1, [@beacon_params]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x6}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) recvmsg$unix(r0, &(0x7f00000033c0)={&(0x7f0000003240)=@abs, 0x6e, &(0x7f0000003340)=[{&(0x7f00000032c0)=""/89, 0x59}], 0x1, &(0x7f0000003380)=[@cred={{0x1c}}], 0x20}, 0x102) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000003400)=@assoc_value, &(0x7f0000003440)=0x8) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000003540)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003500)={&(0x7f00000034c0)={0x20, r3, 0x406, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0xfffffc01, 0x4f}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008840}, 0x20000040) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000003580)={r6, 0xac, "400ec923e7b0e1a9a3bc9aa552b87ea35b2f0be4a59dd01fb50bc492964af2f2400904e13d3ac848392ce383f9117295af7237a097eaadadaa64577f9a7c22a01d567c7dfa6fe72c6bae7c52798cc516203c13b5d2bb123f738efaa9f513868574337cb3c88af15b01b1f1d32e8b544987763d12c1ef7ff1c38986aa7da0a19171783992ab0427f98928c261d80f4732d107c271473b99ac2eef6c36878f0045bdd9fd1c059c43fd17bf8e1a"}, &(0x7f0000003640)=0xb4) recvmmsg(r4, &(0x7f0000009280)=[{{&(0x7f0000003680)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000003b00)=[{&(0x7f0000003700)=""/174, 0xae}, {&(0x7f00000037c0)=""/255, 0xff}, {&(0x7f00000038c0)=""/57, 0x39}, {&(0x7f0000003900)=""/125, 0x7d}, {&(0x7f0000003980)=""/67, 0x43}, {&(0x7f0000003a00)=""/232, 0xe8}], 0x6, &(0x7f0000003b80)=""/143, 0x8f}}, {{&(0x7f0000003c40)=@phonet, 0x80, &(0x7f0000003d00)=[{&(0x7f0000003cc0)=""/57, 0x39}], 0x1, &(0x7f0000003d40)=""/155, 0x9b}, 0x9}, {{&(0x7f0000003e00)=@nfc_llcp, 0x80, &(0x7f0000004100)=[{&(0x7f0000003e80)=""/250, 0xfa}, {&(0x7f0000003f80)=""/15, 0xf}, {&(0x7f0000003fc0)=""/157, 0x9d}, {&(0x7f0000004080)=""/109, 0x6d}], 0x4, &(0x7f0000004140)=""/109, 0x6d}, 0x6}, {{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f00000041c0)=""/206, 0xce}, {&(0x7f00000042c0)=""/22, 0x16}, {&(0x7f0000004300)=""/4096, 0x1000}], 0x3, &(0x7f0000005340)}, 0x7af}, {{&(0x7f0000005380)=@phonet, 0x80, &(0x7f0000005500)=[{&(0x7f0000005400)=""/112, 0x70}, {&(0x7f0000005480)=""/70, 0x46}], 0x2, &(0x7f0000005540)=""/158, 0x9e}, 0x885}, {{&(0x7f0000005600)=@x25, 0x80, &(0x7f0000006c80)=[{&(0x7f0000005680)=""/138, 0x8a}, {&(0x7f0000005740)=""/80, 0x50}, {&(0x7f00000057c0)=""/233, 0xe9}, {&(0x7f00000058c0)=""/228, 0xe4}, {&(0x7f00000059c0)=""/202, 0xca}, {&(0x7f0000005ac0)=""/4096, 0x1000}, {&(0x7f0000006ac0)=""/39, 0x27}, {&(0x7f0000006b00)=""/201, 0xc9}, {&(0x7f0000006c00)=""/2, 0x2}, {&(0x7f0000006c40)=""/3, 0x3}], 0xa, &(0x7f0000006d40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000007d40)=@hci, 0x80, &(0x7f0000008000)=[{&(0x7f0000007dc0)=""/117, 0x75}, {&(0x7f0000007e40)=""/191, 0xbf}, {&(0x7f0000007f00)=""/194, 0xc2}], 0x3, &(0x7f0000008040)=""/151, 0x97}, 0x7}, {{&(0x7f0000008100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000009180)=[{&(0x7f0000008180)=""/4096, 0x1000}], 0x1, &(0x7f00000091c0)=""/149, 0x95}, 0x2}], 0x8, 0x40012020, &(0x7f0000009480)) accept$inet6(r0, &(0x7f00000094c0), &(0x7f0000009500)=0x1c) accept4$unix(r0, 0x0, &(0x7f0000009540), 0x0) 4.302323588s ago: executing program 1 (id=1677): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) (async) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073"], 0x7c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000380)=ANY=[], 0x32600) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x41f, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x38, 0x0, 0x1, 0x1, 0x10000, @value=r5}, 0x28) (async) write$cgroup_type(r5, &(0x7f0000000500), 0x9) r7 = socket(0x10, 0x3, 0x0) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) recvmmsg(r8, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffde1, 0x0}}], 0x1, 0x2140, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x44, r1, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40905}, 0x0) r9 = socket(0x10, 0x3, 0x0) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='cachefiles_mark_inactive\x00', r10, 0x0, 0x7}, 0x18) (async) r12 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r12, r11, 0x0, 0x16, 0xfffffffffffffffe}, 0x30) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000400)={0x0, 0x4}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f00000004c0)={r13, 0x8, 0x0, 0x8, 0x100, 0x5}, 0x14) (async) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000027c0)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="04009800c213088008001e0064010101653c2866264fdc29d343d309be8d907c916575c2dd6d63ff789a1215f81af661ba955f81b1b22d51397fe3f7f35fbd0af3db8e9aa614066f41b13005e662559e604c9e1c61f303d5e9c0ab0cae48e7513567b48c7314f238d9d5e7683ea00800e000", @ANYRES32=0x0, @ANYBLOB="4e13fb800400f100c902268008005800", @ANYRES32=r12, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="897a22072687e1d29eb84b27bdf276e019dccc0376ab6e080009005c2e2d0000"], 0x1468}, 0x1, 0x0, 0x0, 0x5}, 0x8004) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x40) 4.086296686s ago: executing program 1 (id=1678): syz_emit_ethernet(0x2e, &(0x7f0000000040)={@broadcast, @random="f3810100", @val={@val={0x88a8, 0x7, 0x0, 0x3}, {0x8100, 0x3, 0x0, 0x3}}, {@generic={0x22eb, "f0d179e3378cee31fd78595c5bb4e2ca2d1ae4861edb0c7a"}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.894586308s ago: executing program 1 (id=1679): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xcd, 0x0, 0x5c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x20, 0x6, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x5104eec89c600d4b) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "e9c9cf623465aab2"}, 0x28) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008010}, 0x90) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) 3.805050184s ago: executing program 4 (id=1681): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x8}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x27) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000008000000000000005805000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r4, r6, 0x4, r3}, 0x10) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000040000000200000004"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x2, 0x4, 0x4, 0x1, 0x1100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r10, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x5c, 0x2, 0x7, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x10001}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x44184) r11 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r11, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000000), 0xffffff6a) 3.583195595s ago: executing program 3 (id=1682): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, r4, 0x301, 0x0, 0x25dfdbfc, {0x24}}, 0x14}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffff000, 0x8, 0xec, 0xefe4}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x6c}}, 0x0) r5 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) 3.188164041s ago: executing program 3 (id=1683): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0xb}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0x4, 0x2}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) unshare(0x20040600) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="130000001000000008"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r4, &(0x7f0000000300), 0x0}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x40) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x80, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x44, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_STATE={0x5}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xffffff91}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0xffffffffffffff59, 0x3, 0x1, 0x0, 0x10}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x200}]}}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x17}}, {0x8, 0x2, @private=0xa010102}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 2.557799805s ago: executing program 2 (id=1684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="20002c9d7000fbdbdf257a00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x284}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x16}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x2000000) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x3, 0x4000, @empty, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", '\x00', "89b06aff130000fd"}, 0x38) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c000100020000000000000007000000", @ANYRES32=r5, @ANYBLOB="030004070a000200aa"], 0x28}, 0x1, 0x0, 0x0, 0x20040051}, 0x40c0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x48}, 0x0) unshare(0x8050200) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_drvinfo={0x3, "437590744ad03798d361ec56984753076a8819a6babac1f6bbd312bad88e64df", "4968802b926ad12cf4275ebd4fd3046cafc15116da12cc8c0c51a846235c1a1a", "a5f343ad4e5957c0de03b0f9fdbea5bb759f8f18a008d031e179815cfd494b39", "95c67c5afce7da085952de10b44a6be3e74440b2b7c45e7e333cf48bee901b48", "f13ac29829b1594c4fd5e9840516ac145639d90254d1d2055651388fa92b11a4", "48a3c5e1911285b817f76cc9", 0x1, 0x4, 0x401, 0x10001, 0x1}}) accept4$vsock_stream(r6, &(0x7f00000002c0)={0x28, 0x0, 0x2711, @local}, 0x10, 0x80000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000000000000000020000000900010073797a30000000003800048034000180090001007866726d00000000240002800800044000000005080001400000000105000300000000000800024000000003140000001100010000000000000000000000000a"], 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x24048800) 2.443469038s ago: executing program 4 (id=1685): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}], 0x1, 0x4000c000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) 2.352777592s ago: executing program 3 (id=1686): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f00000001c0)=@framed={{}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}], {0x95, 0x0, 0x80ff, 0x1000000}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%-010d \x00'}, 0x20) r1 = socket(0x6, 0x800, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) getsockname$llc(r1, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000380)=0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x40, 0x24, 0xf0b, 0x4, 0x25dfdc03, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x2}, @TCA_PIE_ECN={0x8}]}}]}, 0x40}}, 0x84) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x1000, 'syz0\x00', @null, 0x3, 0x4, [@null, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) 2.262505286s ago: executing program 2 (id=1687): syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010184}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80800) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080), 0x4) 2.132132536s ago: executing program 3 (id=1688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_int(r3, 0x0, 0xe, 0x0, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080211000001080211000000080211000000000000e3ffffffffffff63822f07c13b1974f100010000060202020202020108"], 0x36) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r4, 0x2000000, 0x36, 0x0, &(0x7f0000000280)="130200d3781ec47f3ec6df5c379d6963c8b45f3170485ffde61a28423497ef6c3dae15b9856018a3a52b4ca9ae227e4266ee5b791055", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r7, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r8], 0xfc}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x4bc}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r9], 0x44}}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8931, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r10, 0x400452c8, &(0x7f0000000100)) 2.093577876s ago: executing program 2 (id=1689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090a010400000000000000000700000008000a40fffffffc0900020073797a30000000000900010073797a3000000000080005400000000d1000098008000140005d32072b830ae1a806000a6804000280"], 0x74}}, 0x20050800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, 0x0, 0x0) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'veth1_to_hsr\x00', &(0x7f00000015c0)=@ethtool_drvinfo={0x3, "03f9e2e2e8dad936490a7bafa81988451c2705e8ae54fe0c5b06dac67a95ac09", "2c149330f4696a62d5f8828df1c2cfb3ae6dd58ce34cbe622000", "485b1eff0f064b8105c382f27b1a001d8a94bb168ee4c1289088f71539390b8a", "1ea602ce835752ea923ea888a17f599b505add462fc3d156f0b7026694703559", "4090a99ab9ac870cc8282237ad6f5d46d4775522ab65d473235d7e036c13552e", "1220dcc5b0a67cbb6695876e", 0xc, 0x5, 0x9c4c, 0x5, 0x9}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) connect$vsock_stream(r2, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x3, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x4800) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="1802000040000000000000000000000085000000d100000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000801, @void, @value}, 0x94) 1.791400926s ago: executing program 1 (id=1690): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) (async, rerun: 32) r1 = openat$cgroup(r0, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) (rerun: 32) r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x90, 0x1, 0x3, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFQA_EXP={0x54, 0xf, 0x0, 0x1, [@CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}]}, @NFQA_PAYLOAD={0x25, 0xa, "9c1b3198424f36fcb671cdfdc445deeb374a165dd3989979ad48640d17d66be70a"}]}, 0x90}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async, rerun: 64) r5 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 32) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0xbb8) (rerun: 32) r6 = socket(0x28, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000380), &(0x7f0000000440)=0x4) (async) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) listen(r6, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}]}]}, @NFTA_IMMEDIATE_DREG={0x60}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 1.707745445s ago: executing program 2 (id=1691): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x401, 0x0, 0x0, {0xa, 0x1f}}, 0x18}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000600)=@framed={{}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r4, 0x0, 0xffffffff000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0xcc}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r4, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe4, &(0x7f0000000840)=[{}], 0x8, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x400000c4}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) close(r7) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r8, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x81, @mcast2, 0x7}}, 0x3, 0x7}, 0x90) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r12, 0x84, 0x10, 0x0, &(0x7f0000000800)) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f8008000140000000000800034000000000080002"], 0x88}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x2c004000) 1.563494973s ago: executing program 1 (id=1692): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x80000001}, 0x18) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x807}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xd}}}, 0x64}, 0x1, 0x0, 0x0, 0x4048004}, 0x8000) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32, @ANYRESHEX], 0x40}}, 0x4000) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000001300000829bd7000fcdb000000ab0000378d00000e000000b9070000026b6299006316e26ff5451d45d2ee88fcfa021744bd3f611c73beca951c07a2ccf3f905739c5fe5d61a50f5e98ef1444e24", @ANYRES32, @ANYBLOB="0400000008000000090000000800000004000100"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x8850) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) 877.797824ms ago: executing program 3 (id=1693): r0 = socket$inet(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d40)=ANY=[@ANYBLOB="14000468dad83379392c2c00001582df6191066aa774755ccf849cf0e7a2bc5547322b05eafe69adbb85c85d2083777f0779fc60dbc626ef8effdb601027e5ac0b764f90bd01cc8ce49906906d783e0a2c732a1777bfba0c2b641bf6be8a8d3d39587359a413db69cbb0d9142356db427b3999a28fee704ff546010abf40ee8a4f7d2108421ae1f3d296a4329514c77d7f6258360a1c0eed74ab2a5bc7bf4e54e76939ef0076608d8b9fa8cb1feb3b190f9dadb26451ac4a5f2b2b49", @ANYRES16=r3, @ANYBLOB="01002abd7000000000000c000000"], 0x14}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @loopback, 0x2, 0x3, 'sh\x00', 0x24, 0x88, 0x4000069}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000002"], 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000090) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) sendmsg$inet(r0, &(0x7f0000000c00)={&(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000840)=[{&(0x7f00000004c0)="97f6b932786e9facfb638b72d3ddc12aa1a2f99586dbfa43c667d190d5ef0e9b96181d44be510230b7f38df42b781564e42f3062f40f809e02cc9a10b29741ec439aefeb8ebbeb356ac0234aa60807f6cbf12da81eb7dbbd9837b9215aaf0b0b5bbadc4a26ce2d33a9995210efef531b71d86dd3715bc19a73cc3369ec0485c4a5a42312823699e63ed5b87c92118d6b6d5388f457295a", 0x97}, {&(0x7f0000000180)="5033571ac434a9248bf888a978", 0xd}, {&(0x7f0000000580)="2f5337690004b5abe4448c42dd467ae83579e9e8811fcb38ec6b2930c571d4e4fccf77e878b92c89c6c3471245082b64e31993ba21dd90aaccfff36a38850273f3241c91d1ff9c4e4e8d9e99", 0x4c}, {&(0x7f0000000780)="fc34b4a912a860c26836bd5b9ccb0fadd7647a673888cf41938a734e03fcb0b31fa10f9880b01233e8e077b0f1af9051791dbcf2099d67491ba68f2c6a92408d6f7c8fef5665f826250059d0712b044a45946a02e5b349adf29533981c6be05014535be062a9be1aa5e75e89ac9372d1830697360cfaf729c1d2a36bfde23708b3f1a001e374f1bae2e7bda5d70709b59350c2d2a938a7c8ad045adb", 0x9c}, {&(0x7f0000000c40)="48e20dde80320895dd921014930754877bb9876622f2d43347e7cfadc0755cd2a1490641ab0da36b39d9ac0aedc196b4c15c96fb61a0ea336f1f9a154b9a0e54870d4f68e2822ae55eae8ff57430bf690dd29e5ee8d37c30201e784b0142340d1effd42832a969267d497815452f9f9200209f7871ee71bc30a8ceebdcbe990300c81425e863ab5f07361df77c02bf16186ecb754a317e937fbc94366c18dedf9176d394700ad83fc207b5efe47d50931eaeaffcf4e1fc612016c02674fc938fe98d64192489e202acc11bad0923fde2914dbf0454410af2a95c60110133e58d6b7bcd915f9c53fea3437738ac05bfadb2d10ec79e123f59d047", 0xfa}, {&(0x7f00000006c0)="02b02355bcc6f06867e536c2b43416fd493fbc81cf575d3abf6475d6ef4d9fa6ca7a4eef95f5f91fc4b1b790d409c8eeff87eb543ae7084f2d139afdc3713f03b00f016c7a28a9e871f7f5444e3bf83d6a5cf16eb60b50a6cdde5b679ae99c196ac1b737411c1fefc231d1a288b599cb8b264436d722c8314e", 0x79}, {&(0x7f0000000380)="a4c8dc1edad6d426dd31cf9265bac643922fe2", 0x13}, {&(0x7f0000000900)="af02312880b8ee9648df36aaef00907b19b5c8532a1d554a61967b1699cb2aac845887794fb6ed1852ab41b16eac929ec246114d1431eae5b05a998860f20e3cf41c14f81ca12f6de7fc988b0e601cd8e9cefa6509c10aea7afb885e2f5f0e0f3d4bbc87a0a59e9a52859bf025420a748d10945389ad6bed8f5262596f5adac51959121862bc7715bc9b3c1b6c9fcc8bd347f41e5b59ea728317e687ce4fb8fe632f", 0xa2}, {&(0x7f00000009c0)="a9af152ad44ca392e466519a90bb83168cb2c8a4fbd63502c64a9ad4ecbb3c8aae5021ac87174f87a14e28bc861df2aec27a4b45d784669e96cac8b36194b4d83abec194c2b4e816da4220ab69577e98b3a5ac501094b8bce38209d69c1b4d170665d91b473d4fb35c0c04306b377856bdb7dcf7956d0d2aca5c5b7ea5d004e9fd9e096dfe7193540547eeac898f6258ececbf1117cb776f51fe0eaae6ab414756fb294b267d5c8f315f922af6b67a36647a0e39457b8679c36f96c92a18bc19597032ab902f2db596bdcad5b2bc9926adcd9a8e6987be0626d98328406b0d2ecbd4", 0xe7}, {&(0x7f0000000600)="0a6ee745efd6fcbf77ddd1c1247f18fed4c2f03e70201a", 0x17}], 0xa, &(0x7f0000000ac0)=[@ip_pktinfo={{0xffffffffffffffd7, 0x0, 0x8, {r9, @private=0xa010102, @loopback}}}], 0x20}, 0x2004000c) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000900000048000380050008007f000000060007004e21000014000200626174616476300000000200000000000800010002000000080003"], 0x5c}}, 0x80) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 592.185455ms ago: executing program 2 (id=1694): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @mcast2, 0x5}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000080)={r3, 0x1}, 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={r3, 0x38, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x0, @mcast2, 0xfffffff7}, @in6={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0xfc}, 0x8}]}, &(0x7f0000000300)=0x10) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="835a", 0x2}, {&(0x7f0000000100)="236fec4e3164242d11c6f14437851f0a2db7", 0x12}], 0x2}}], 0x1, 0x4000c000) sendto$inet6(r0, &(0x7f00000002c0)="f6584496", 0x4, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r4, 0x8) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket(0x10, 0x803, 0x0) (async) r6 = socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$SO_TIMESTAMP(r8, 0x1, 0x4c, 0x0, &(0x7f0000000000)=0x58) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 419.642125ms ago: executing program 4 (id=1695): connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x2c, 0x68, 0x5fb9a818fb7378e9, 0x70bd2d, 0x0, {}, [@NHA_GROUP={0x14, 0x2, [{0x0, 0x5}, {0x2, 0xf}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$inet(0x2, 0x80000, 0x6) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0xffffff7ffffffffc, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r4}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 156.282183ms ago: executing program 3 (id=1696): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000300)="ebe3a0e9796cfd1647e299f4e376fd2b8a6129ba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d74fe6cb55b5bb900ed35849e6098ed88229efdf99645a930db0737bb27c06ac6b2576dac63c30e", 0x55}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x40800) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r2, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r5, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0xe, 0x7, @l2={'eth', 0x3a, 'ipvlan1\x00'}}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x44805) 404.058µs ago: executing program 2 (id=1697): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/3112], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b076859268cb89e14f088a847", 0x0, 0xf00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_int(r2, 0x0, 0x16, &(0x7f0000000040)=0x1, 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x1, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 0s ago: executing program 4 (id=1698): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES16=0x0], 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001100)=@mangle={'mangle\x00', 0x10, 0x6, 0x520, 0x380, 0x380, 0x290, 0x0, 0x0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x380}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x380}}, {{@ipv6={@local, @loopback, [0x0, 0xff, 0xff000000, 0xffffff00], [0xffffffff, 0x0, 0xffffffff, 0xff], 'ip6gre0\x00', 'syzkaller1\x00', {0xff}, {}, 0x4, 0x6, 0x0, 0x30}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, @ipv6=@empty, 0xd, 0x25, 0x162b}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@broadcast}}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) sendmsg$tipc(r2, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000786c6c0a00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000040)={'ip6_vti0\x00', @broadcast}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 89] ? __pfx___alloc_skb+0x10/0x10 [ 148.850640][ T7889] ? netlink_autobind+0xd6/0x2f0 [ 148.850657][ T7889] ? netlink_autobind+0x2b0/0x2f0 [ 148.850681][ T7889] netlink_sendmsg+0x638/0xcd0 [ 148.850726][ T7889] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.850762][ T7889] ? aa_sock_msg_perm+0x91/0x160 [ 148.850798][ T7889] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.850828][ T7889] __sock_sendmsg+0x221/0x270 [ 148.850860][ T7889] ____sys_sendmsg+0x523/0x860 [ 148.850892][ T7889] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.850912][ T7889] ? __fget_files+0x2a/0x420 [ 148.850935][ T7889] ? __fget_files+0x2a/0x420 [ 148.850964][ T7889] __sys_sendmsg+0x271/0x360 [ 148.850992][ T7889] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.851081][ T7889] ? do_syscall_64+0xb6/0x230 [ 148.851113][ T7889] do_syscall_64+0xf3/0x230 [ 148.851141][ T7889] ? clear_bhb_loop+0x45/0xa0 [ 148.851165][ T7889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.851185][ T7889] RIP: 0033:0x7f184f58d169 [ 148.851204][ T7889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.851221][ T7889] RSP: 002b:00007f1850379038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.851243][ T7889] RAX: ffffffffffffffda RBX: 00007f184f7a5fa0 RCX: 00007f184f58d169 [ 148.851276][ T7889] RDX: 0000000000008000 RSI: 0000200000000300 RDI: 0000000000000003 [ 148.851290][ T7889] RBP: 00007f1850379090 R08: 0000000000000000 R09: 0000000000000000 [ 148.851302][ T7889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.851314][ T7889] R13: 0000000000000000 R14: 00007f184f7a5fa0 R15: 00007ffcec380828 [ 148.851346][ T7889] [ 150.416477][ T7927] lo speed is unknown, defaulting to 1000 [ 150.954672][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'. [ 151.039916][ T7941] netlink: 'syz.1.612': attribute type 3 has an invalid length. [ 151.067113][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.612'. [ 151.116303][ T7941] nbd: must specify a device to reconfigure [ 151.219543][ T7945] SET target dimension over the limit! [ 151.630084][ T7967] FAULT_INJECTION: forcing a failure. [ 151.630084][ T7967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.672961][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.617'. [ 151.698996][ T7967] CPU: 0 UID: 0 PID: 7967 Comm: syz.0.620 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 151.699027][ T7967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 151.699044][ T7967] Call Trace: [ 151.699052][ T7967] [ 151.699061][ T7967] dump_stack_lvl+0x241/0x360 [ 151.699101][ T7967] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.699133][ T7967] ? __pfx__printk+0x10/0x10 [ 151.699180][ T7967] should_fail_ex+0x424/0x570 [ 151.699209][ T7967] _copy_from_iter+0x211/0x1c70 [ 151.699246][ T7967] ? __build_skb_around+0x247/0x3d0 [ 151.699287][ T7967] ? __alloc_skb+0x298/0x480 [ 151.699306][ T7967] ? __pfx__copy_from_iter+0x10/0x10 [ 151.699338][ T7967] ? __pfx___alloc_skb+0x10/0x10 [ 151.699362][ T7967] ? skb_put+0x114/0x1f0 [ 151.699387][ T7967] netlink_sendmsg+0x73c/0xcd0 [ 151.699436][ T7967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.699474][ T7967] ? aa_sock_msg_perm+0x91/0x160 [ 151.699512][ T7967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.699555][ T7967] __sock_sendmsg+0x221/0x270 [ 151.699588][ T7967] ____sys_sendmsg+0x523/0x860 [ 151.699622][ T7967] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.699643][ T7967] ? __fget_files+0x2a/0x420 [ 151.699667][ T7967] ? __fget_files+0x2a/0x420 [ 151.699698][ T7967] __sys_sendmsg+0x271/0x360 [ 151.699728][ T7967] ? __pfx___sys_sendmsg+0x10/0x10 [ 151.699813][ T7967] ? do_syscall_64+0xb6/0x230 [ 151.699846][ T7967] do_syscall_64+0xf3/0x230 [ 151.699875][ T7967] ? clear_bhb_loop+0x45/0xa0 [ 151.699900][ T7967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.699919][ T7967] RIP: 0033:0x7f184f58d169 [ 151.699937][ T7967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.699954][ T7967] RSP: 002b:00007f1850379038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.699975][ T7967] RAX: ffffffffffffffda RBX: 00007f184f7a5fa0 RCX: 00007f184f58d169 [ 151.699991][ T7967] RDX: 0000000000008000 RSI: 0000200000000300 RDI: 0000000000000003 [ 151.700004][ T7967] RBP: 00007f1850379090 R08: 0000000000000000 R09: 0000000000000000 [ 151.700017][ T7967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.700029][ T7967] R13: 0000000000000000 R14: 00007f184f7a5fa0 R15: 00007ffcec380828 [ 151.700061][ T7967] [ 152.664017][ T7980] syzkaller1: entered promiscuous mode [ 152.669735][ T7980] syzkaller1: entered allmulticast mode [ 153.120825][ T7997] xt_limit: Overflow, try lower: 262144/524288 [ 153.154799][ T7998] netlink: 48 bytes leftover after parsing attributes in process `syz.0.628'. [ 153.286849][ T8006] netlink: 24 bytes leftover after parsing attributes in process `syz.0.628'. [ 153.311149][ T8007] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 153.474512][ T8016] lo speed is unknown, defaulting to 1000 [ 153.492203][ T8018] FAULT_INJECTION: forcing a failure. [ 153.492203][ T8018] name failslab, interval 1, probability 0, space 0, times 0 [ 153.505255][ T8018] CPU: 0 UID: 0 PID: 8018 Comm: syz.4.634 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 153.505283][ T8018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 153.505296][ T8018] Call Trace: [ 153.505305][ T8018] [ 153.505313][ T8018] dump_stack_lvl+0x241/0x360 [ 153.505353][ T8018] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.505384][ T8018] ? __pfx__printk+0x10/0x10 [ 153.505427][ T8018] should_fail_ex+0x424/0x570 [ 153.505456][ T8018] should_failslab+0xac/0x100 [ 153.505488][ T8018] kmem_cache_alloc_noprof+0x78/0x390 [ 153.505518][ T8018] ? __send_signal_locked+0x228/0xe90 [ 153.505545][ T8018] ? sig_get_ucounts+0x3de/0x450 [ 153.505581][ T8018] __send_signal_locked+0x228/0xe90 [ 153.505627][ T8018] force_sig_info_to_task+0x302/0x580 [ 153.505668][ T8018] force_sig_fault+0x13a/0x1e0 [ 153.505700][ T8018] ? 0xffffffff81000000 [ 153.505718][ T8018] ? __pfx_force_sig_fault+0x10/0x10 [ 153.505749][ T8018] ? 0xffffffff81000000 [ 153.505770][ T8018] ? fixup_vdso_exception+0x2d4/0x310 [ 153.505796][ T8018] ? 0xffffffff81000000 [ 153.505813][ T8018] ? 0xffffffff81000000 [ 153.505831][ T8018] __bad_area_nosemaphore+0x3e1/0x770 [ 153.505856][ T8018] ? 0xffffffff81000000 [ 153.505876][ T8018] ? ksys_write+0x275/0x2d0 [ 153.505900][ T8018] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 153.505923][ T8018] ? 0xffffffff81000000 [ 153.505939][ T8018] ? spurious_kernel_fault+0x119/0x5a0 [ 153.505963][ T8018] ? 0xffffffff81000000 [ 153.505983][ T8018] ? 0xffffffff81000000 [ 153.505997][ T8018] exc_page_fault+0x62b/0x920 [ 153.506021][ T8018] ? 0xffffffff81000000 [ 153.506038][ T8018] ? do_syscall_64+0x100/0x230 [ 153.506070][ T8018] asm_exc_page_fault+0x26/0x30 [ 153.506090][ T8018] RIP: 0033:0x7ff526365cb9 [ 153.506108][ T8018] Code: f8 77 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 fd 74 0f c5 fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 [ 153.506124][ T8018] RSP: 002b:00007ff52718b7c8 EFLAGS: 00010283 [ 153.506142][ T8018] RAX: 0000000000000000 RBX: 00007ff52718bd30 RCX: 00007ff52656e120 [ 153.506157][ T8018] RDX: ffffffff81000000 RSI: 00007ff52640e69c RDI: ffffffff81000000 [ 153.506171][ T8018] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 153.506183][ T8018] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000073 [ 153.506196][ T8018] R13: 00007ff52718beb0 R14: ffffffff81000000 R15: 0000000000000000 [ 153.506211][ T8018] ? 0xffffffff81000000 [ 153.506235][ T8018] ? 0xffffffff81000000 [ 153.506250][ T8018] ? 0xffffffff81000000 [ 153.506271][ T8018] [ 154.080031][ T8030] FAULT_INJECTION: forcing a failure. [ 154.080031][ T8030] name failslab, interval 1, probability 0, space 0, times 0 [ 154.106972][ T8030] CPU: 0 UID: 0 PID: 8030 Comm: syz.1.638 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 154.107003][ T8030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 154.107016][ T8030] Call Trace: [ 154.107025][ T8030] [ 154.107034][ T8030] dump_stack_lvl+0x241/0x360 [ 154.107073][ T8030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.107105][ T8030] ? __pfx__printk+0x10/0x10 [ 154.107133][ T8030] ? __lock_acquire+0xad5/0xd80 [ 154.107167][ T8030] should_fail_ex+0x424/0x570 [ 154.107196][ T8030] should_failslab+0xac/0x100 [ 154.107227][ T8030] kmem_cache_alloc_noprof+0x78/0x390 [ 154.107256][ T8030] ? skb_clone+0x20c/0x390 [ 154.107295][ T8030] skb_clone+0x20c/0x390 [ 154.107323][ T8030] __netlink_deliver_tap+0x3c4/0x7f0 [ 154.107367][ T8030] ? netlink_deliver_tap+0x2e/0x1b0 [ 154.107397][ T8030] netlink_deliver_tap+0x19d/0x1b0 [ 154.107430][ T8030] netlink_unicast+0x7c6/0x9a0 [ 154.107467][ T8030] ? __pfx_netlink_unicast+0x10/0x10 [ 154.107498][ T8030] ? skb_put+0x114/0x1f0 [ 154.107523][ T8030] netlink_sendmsg+0x8c3/0xcd0 [ 154.107570][ T8030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.107606][ T8030] ? aa_sock_msg_perm+0x91/0x160 [ 154.107642][ T8030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.107670][ T8030] __sock_sendmsg+0x221/0x270 [ 154.107702][ T8030] ____sys_sendmsg+0x523/0x860 [ 154.107735][ T8030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.107755][ T8030] ? __fget_files+0x2a/0x420 [ 154.107778][ T8030] ? __fget_files+0x2a/0x420 [ 154.107808][ T8030] __sys_sendmsg+0x271/0x360 [ 154.107837][ T8030] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.107919][ T8030] ? do_syscall_64+0xb6/0x230 [ 154.107951][ T8030] do_syscall_64+0xf3/0x230 [ 154.107978][ T8030] ? clear_bhb_loop+0x45/0xa0 [ 154.108003][ T8030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.108024][ T8030] RIP: 0033:0x7f814a98d169 [ 154.108042][ T8030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.108059][ T8030] RSP: 002b:00007f814b7ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.108081][ T8030] RAX: ffffffffffffffda RBX: 00007f814aba5fa0 RCX: 00007f814a98d169 [ 154.108096][ T8030] RDX: 0000000000008000 RSI: 0000200000000300 RDI: 0000000000000003 [ 154.108108][ T8030] RBP: 00007f814b7ed090 R08: 0000000000000000 R09: 0000000000000000 [ 154.108121][ T8030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.108133][ T8030] R13: 0000000000000000 R14: 00007f814aba5fa0 R15: 00007ffee22f8ed8 [ 154.108165][ T8030] [ 154.962057][ T8054] netlink: 176 bytes leftover after parsing attributes in process `syz.3.647'. [ 155.178037][ T8066] FAULT_INJECTION: forcing a failure. [ 155.178037][ T8066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.199508][ T8066] CPU: 1 UID: 0 PID: 8066 Comm: syz.2.650 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 155.199538][ T8066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.199551][ T8066] Call Trace: [ 155.199559][ T8066] [ 155.199568][ T8066] dump_stack_lvl+0x241/0x360 [ 155.199607][ T8066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.199638][ T8066] ? __pfx__printk+0x10/0x10 [ 155.199683][ T8066] should_fail_ex+0x424/0x570 [ 155.199711][ T8066] copy_fpstate_to_sigframe+0xae4/0xdc0 [ 155.199749][ T8066] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 155.199769][ T8066] ? kmem_cache_free+0x197/0x410 [ 155.199825][ T8066] ? fpu__alloc_mathframe+0xab/0x130 [ 155.199850][ T8066] get_sigframe+0x5de/0x810 [ 155.199893][ T8066] ? __pfx_get_sigframe+0x10/0x10 [ 155.199941][ T8066] x64_setup_rt_frame+0x17d/0xda0 [ 155.199978][ T8066] ? get_signal+0x1442/0x1730 [ 155.200016][ T8066] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 155.200049][ T8066] ? 0xffffffff81000000 [ 155.200076][ T8066] arch_do_signal_or_restart+0x428/0x840 [ 155.200108][ T8066] ? rcu_is_watching+0x15/0xb0 [ 155.200138][ T8066] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 155.200177][ T8066] ? __bad_area_nosemaphore+0x451/0x770 [ 155.200204][ T8066] ? 0xffffffff81000000 [ 155.200232][ T8066] ? irqentry_exit_to_user_mode+0x53/0x250 [ 155.200262][ T8066] ? 0xffffffff81000000 [ 155.200277][ T8066] irqentry_exit_to_user_mode+0x7e/0x250 [ 155.200307][ T8066] exc_page_fault+0x5f8/0x920 [ 155.200330][ T8066] ? 0xffffffff81000000 [ 155.200347][ T8066] ? do_syscall_64+0x100/0x230 [ 155.200379][ T8066] asm_exc_page_fault+0x26/0x30 [ 155.200399][ T8066] RIP: 0033:0x7fc504765cb9 [ 155.200416][ T8066] Code: f8 77 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 fd 74 0f c5 fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 [ 155.200433][ T8066] RSP: 002b:00007fc5055b87c8 EFLAGS: 00010283 [ 155.200452][ T8066] RAX: 0000000000000000 RBX: 00007fc5055b8d30 RCX: 00007fc50496e120 [ 155.200466][ T8066] RDX: ffffffff81000000 RSI: 00007fc50480e69c RDI: ffffffff81000000 [ 155.200481][ T8066] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 155.200492][ T8066] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000073 [ 155.200505][ T8066] R13: 00007fc5055b8eb0 R14: ffffffff81000000 R15: 0000000000000000 [ 155.200519][ T8066] ? 0xffffffff81000000 [ 155.200544][ T8066] ? 0xffffffff81000000 [ 155.200560][ T8066] ? 0xffffffff81000000 [ 155.200580][ T8066] [ 155.684476][ T8065] team_slave_0: entered promiscuous mode [ 155.690640][ T8065] team_slave_1: entered promiscuous mode [ 155.696534][ T8065] syz_tun: entered promiscuous mode [ 155.745331][ T8065] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 155.776831][ T8065] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 156.070697][ T8076] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 156.094428][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.653'. [ 156.123229][ T8076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.653'. [ 156.284942][ T8081] FAULT_INJECTION: forcing a failure. [ 156.284942][ T8081] name failslab, interval 1, probability 0, space 0, times 0 [ 156.322325][ T8081] CPU: 1 UID: 0 PID: 8081 Comm: syz.3.655 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 156.322358][ T8081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.322371][ T8081] Call Trace: [ 156.322379][ T8081] [ 156.322389][ T8081] dump_stack_lvl+0x241/0x360 [ 156.322428][ T8081] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.322459][ T8081] ? __pfx__printk+0x10/0x10 [ 156.322495][ T8081] ? __pfx___might_resched+0x10/0x10 [ 156.322527][ T8081] should_fail_ex+0x424/0x570 [ 156.322556][ T8081] should_failslab+0xac/0x100 [ 156.322588][ T8081] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 156.322627][ T8081] ? __alloc_skb+0x1c2/0x480 [ 156.322645][ T8081] ? stack_trace_save+0x11a/0x1d0 [ 156.322680][ T8081] __alloc_skb+0x1c2/0x480 [ 156.322706][ T8081] ? __pfx___alloc_skb+0x10/0x10 [ 156.322734][ T8081] ? netlink_ack_tlv_len+0x6e/0x200 [ 156.322769][ T8081] netlink_ack+0x147/0xa70 [ 156.322798][ T8081] ? __pfx_nl80211_set_multicast_to_unicast+0x10/0x10 [ 156.322846][ T8081] netlink_rcv_skb+0x296/0x480 [ 156.322878][ T8081] ? __pfx_genl_rcv_msg+0x10/0x10 [ 156.322904][ T8081] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 156.323028][ T8081] ? netlink_deliver_tap+0x2e/0x1b0 [ 156.323074][ T8081] genl_rcv+0x28/0x40 [ 156.323097][ T8081] netlink_unicast+0x7f8/0x9a0 [ 156.323138][ T8081] ? __pfx_netlink_unicast+0x10/0x10 [ 156.323169][ T8081] ? skb_put+0x114/0x1f0 [ 156.323197][ T8081] netlink_sendmsg+0x8c3/0xcd0 [ 156.323244][ T8081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.323282][ T8081] ? aa_sock_msg_perm+0x91/0x160 [ 156.323327][ T8081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.323358][ T8081] __sock_sendmsg+0x221/0x270 [ 156.323391][ T8081] ____sys_sendmsg+0x523/0x860 [ 156.323426][ T8081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.323446][ T8081] ? __fget_files+0x2a/0x420 [ 156.323470][ T8081] ? __fget_files+0x2a/0x420 [ 156.323501][ T8081] __sys_sendmsg+0x271/0x360 [ 156.323531][ T8081] ? __pfx___sys_sendmsg+0x10/0x10 [ 156.323616][ T8081] ? do_syscall_64+0xb6/0x230 [ 156.323650][ T8081] do_syscall_64+0xf3/0x230 [ 156.323677][ T8081] ? clear_bhb_loop+0x45/0xa0 [ 156.323705][ T8081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.323726][ T8081] RIP: 0033:0x7f6115f8d169 [ 156.323745][ T8081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.323762][ T8081] RSP: 002b:00007f6116cfe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.323785][ T8081] RAX: ffffffffffffffda RBX: 00007f61161a5fa0 RCX: 00007f6115f8d169 [ 156.323800][ T8081] RDX: 0000000000008000 RSI: 0000200000000300 RDI: 0000000000000003 [ 156.323813][ T8081] RBP: 00007f6116cfe090 R08: 0000000000000000 R09: 0000000000000000 [ 156.323826][ T8081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.323838][ T8081] R13: 0000000000000000 R14: 00007f61161a5fa0 R15: 00007ffff6a9f1a8 [ 156.323872][ T8081] [ 157.148015][ T8103] netlink: 192 bytes leftover after parsing attributes in process `syz.1.664'. [ 157.175654][ T8097] lo speed is unknown, defaulting to 1000 [ 158.081736][ T8130] syz_tun: entered allmulticast mode [ 158.109710][ T8129] dvmrp1: entered allmulticast mode [ 158.133688][ T8129] x_tables: duplicate underflow at hook 2 [ 158.180439][ T8134] netlink: 'syz.1.674': attribute type 4 has an invalid length. [ 158.320186][ T8139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.676'. [ 158.487637][ T8142] vxcan3: entered allmulticast mode [ 159.041794][ T8158] lo speed is unknown, defaulting to 1000 [ 159.169166][ T8170] netlink: del zone limit has 4 unknown bytes [ 159.374956][ T8176] Bluetooth: MGMT ver 1.23 [ 159.384930][ T8178] netlink: 'syz.1.689': attribute type 3 has an invalid length. [ 159.399914][ T8178] netlink: 666 bytes leftover after parsing attributes in process `syz.1.689'. [ 159.707510][ T8191] netlink: 20 bytes leftover after parsing attributes in process `syz.1.691'. [ 159.716767][ T8191] nbd: must specify at least one socket [ 159.928618][ T8194] FAULT_INJECTION: forcing a failure. [ 159.928618][ T8194] name failslab, interval 1, probability 0, space 0, times 0 [ 159.959010][ T8194] CPU: 0 UID: 0 PID: 8194 Comm: syz.1.692 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 159.959041][ T8194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 159.959053][ T8194] Call Trace: [ 159.959061][ T8194] [ 159.959071][ T8194] dump_stack_lvl+0x241/0x360 [ 159.959111][ T8194] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.959142][ T8194] ? __pfx__printk+0x10/0x10 [ 159.959177][ T8194] ? ref_tracker_alloc+0x316/0x4c0 [ 159.959205][ T8194] should_fail_ex+0x424/0x570 [ 159.959233][ T8194] should_failslab+0xac/0x100 [ 159.959264][ T8194] kmem_cache_alloc_noprof+0x78/0x390 [ 159.959292][ T8194] ? skb_clone+0x20c/0x390 [ 159.959322][ T8194] skb_clone+0x20c/0x390 [ 159.959349][ T8194] __netlink_deliver_tap+0x3c4/0x7f0 [ 159.959398][ T8194] ? netlink_deliver_tap+0x2e/0x1b0 [ 159.959427][ T8194] netlink_deliver_tap+0x19d/0x1b0 [ 159.959459][ T8194] netlink_sendskb+0x68/0x140 [ 159.959488][ T8194] netlink_unicast+0x39f/0x9a0 [ 159.959513][ T8194] ? __asan_memcpy+0x40/0x70 [ 159.959544][ T8194] ? __pfx_netlink_unicast+0x10/0x10 [ 159.959583][ T8194] netlink_rcv_skb+0x296/0x480 [ 159.959614][ T8194] ? __pfx_genl_rcv_msg+0x10/0x10 [ 159.959640][ T8194] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 159.959692][ T8194] ? netlink_deliver_tap+0x2e/0x1b0 [ 159.959730][ T8194] genl_rcv+0x28/0x40 [ 159.959751][ T8194] netlink_unicast+0x7f8/0x9a0 [ 159.959788][ T8194] ? __pfx_netlink_unicast+0x10/0x10 [ 159.959818][ T8194] ? skb_put+0x114/0x1f0 [ 159.959844][ T8194] netlink_sendmsg+0x8c3/0xcd0 [ 159.959889][ T8194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.959925][ T8194] ? aa_sock_msg_perm+0x91/0x160 [ 159.959968][ T8194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.959996][ T8194] __sock_sendmsg+0x221/0x270 [ 159.960029][ T8194] ____sys_sendmsg+0x523/0x860 [ 159.960062][ T8194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.960081][ T8194] ? __fget_files+0x2a/0x420 [ 159.960104][ T8194] ? __fget_files+0x2a/0x420 [ 159.960134][ T8194] __sys_sendmsg+0x271/0x360 [ 159.960162][ T8194] ? __pfx___sys_sendmsg+0x10/0x10 [ 159.960240][ T8194] ? rcu_is_watching+0x15/0xb0 [ 159.960269][ T8194] ? trace_sys_enter+0x25/0x120 [ 159.960299][ T8194] do_syscall_64+0xf3/0x230 [ 159.960327][ T8194] ? clear_bhb_loop+0x45/0xa0 [ 159.960351][ T8194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.960371][ T8194] RIP: 0033:0x7f814a98d169 [ 159.960389][ T8194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.960405][ T8194] RSP: 002b:00007f814b7ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.960427][ T8194] RAX: ffffffffffffffda RBX: 00007f814aba5fa0 RCX: 00007f814a98d169 [ 159.960442][ T8194] RDX: 0000000000008000 RSI: 0000200000000300 RDI: 0000000000000003 [ 159.960455][ T8194] RBP: 00007f814b7ed090 R08: 0000000000000000 R09: 0000000000000000 [ 159.960467][ T8194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.960478][ T8194] R13: 0000000000000000 R14: 00007f814aba5fa0 R15: 00007ffee22f8ed8 [ 159.960511][ T8194] [ 160.912477][ T8219] sctp: [Deprecated]: syz.4.701 (pid 8219) Use of struct sctp_assoc_value in delayed_ack socket option. [ 160.912477][ T8219] Use struct sctp_sack_info instead [ 160.936572][ T8219] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 161.207818][ T8232] lo speed is unknown, defaulting to 1000 [ 161.850187][ T8251] lo speed is unknown, defaulting to 1000 [ 161.929584][ T8253] netlink: 'syz.4.710': attribute type 1 has an invalid length. [ 161.935847][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.711'. [ 162.002964][ T8253] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.045160][ T8254] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.052802][ T8254] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 162.065341][ T8254] bond2: (slave vcan1): Error -95 calling set_mac_address [ 162.084731][ T8263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.712'. [ 162.101367][ T8259] netlink: 32 bytes leftover after parsing attributes in process `syz.0.712'. [ 162.261249][ T8267] ip6gretap0: entered promiscuous mode [ 162.308367][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.715'. [ 162.310429][ T8267] batadv0: entered promiscuous mode [ 162.399123][ T8267] ip6gretap0: left promiscuous mode [ 162.418714][ T8267] batadv0: left promiscuous mode [ 162.547235][ T8274] lo speed is unknown, defaulting to 1000 [ 162.820627][ T8279] lo speed is unknown, defaulting to 1000 [ 163.380427][ T8308] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 163.531888][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.729'. [ 163.560792][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.729'. [ 164.483910][ T8352] netlink: 'syz.1.741': attribute type 160 has an invalid length. [ 164.497015][ T8352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.741'. [ 164.668329][ T8358] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 164.723134][ T8362] lo speed is unknown, defaulting to 1000 [ 164.840999][ T8368] netlink: 'syz.0.745': attribute type 11 has an invalid length. [ 165.115741][ T8377] bond0: entered promiscuous mode [ 165.121058][ T8377] bond_slave_0: entered promiscuous mode [ 165.127093][ T8377] bond_slave_1: entered promiscuous mode [ 165.253705][ T8385] xt_TPROXY: Can be used only with -p tcp or -p udp [ 165.396799][ T8385] infiniband s9z1: RDMA CMA: cma_listen_on_dev, error -98 [ 165.518484][ T8390] netlink: 'syz.4.751': attribute type 4 has an invalid length. [ 165.543701][ T8391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.752'. [ 165.703578][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'. [ 165.725392][ T8395] netlink: 40 bytes leftover after parsing attributes in process `syz.4.754'. [ 165.755355][ T8400] lo speed is unknown, defaulting to 1000 [ 165.757181][ T8395] netlink: 'syz.4.754': attribute type 32 has an invalid length. [ 165.958296][ T8376] bond0: left promiscuous mode [ 165.963338][ T8376] bond_slave_0: left promiscuous mode [ 165.990972][ T8376] bond_slave_1: left promiscuous mode [ 166.192384][ T8417] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.760'. [ 166.719611][ T8424] lo speed is unknown, defaulting to 1000 [ 167.206435][ T30] audit: type=1800 audit(1744467638.606:2): pid=8442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.768" name="memory.events" dev="tmpfs" ino=848 res=0 errno=0 [ 167.308973][ T30] audit: type=1804 audit(1744467638.656:3): pid=8449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.768" name="/newroot/164/memory.events" dev="tmpfs" ino=848 res=1 errno=0 [ 167.468138][ T8456] netlink: 104 bytes leftover after parsing attributes in process `syz.0.773'. [ 167.820712][ T8474] netlink: 'syz.4.777': attribute type 1 has an invalid length. [ 167.948927][ T8481] netlink: 20 bytes leftover after parsing attributes in process `syz.2.781'. [ 167.966392][ T8484] netlink: 20 bytes leftover after parsing attributes in process `syz.3.782'. [ 167.976041][ T8481] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 167.998402][ T8484] nbd: must specify at least one socket [ 168.215338][ T8498] netlink: 'syz.2.784': attribute type 10 has an invalid length. [ 168.545144][ T8508] netlink: 1680 bytes leftover after parsing attributes in process `syz.4.785'. [ 168.561513][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.785'. [ 168.597580][ T8508] netlink: 24 bytes leftover after parsing attributes in process `syz.4.785'. [ 168.711763][ T8512] netlink: 'syz.2.789': attribute type 10 has an invalid length. [ 168.747560][ T8512] bridge0: port 3(team0) entered disabled state [ 168.756249][ T8512] team0: left allmulticast mode [ 168.792987][ T8512] team_slave_0: left allmulticast mode [ 168.819388][ T8512] team_slave_1: left allmulticast mode [ 168.825012][ T8512] team0: left promiscuous mode [ 168.873514][ T8512] team_slave_0: left promiscuous mode [ 168.883740][ T8512] team_slave_1: left promiscuous mode [ 168.894388][ T8512] bridge0: port 3(team0) entered disabled state [ 168.912465][ T8512] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.926256][ T8512] bond0: (slave team0): Enslaving as an active interface with an up link [ 169.066399][ T8536] lo speed is unknown, defaulting to 1000 [ 169.198107][ T8544] netlink: 64 bytes leftover after parsing attributes in process `syz.2.795'. [ 169.858991][ T8570] netlink: 'syz.4.800': attribute type 74 has an invalid length. [ 170.231174][ T8579] x_tables: ip_tables: osf match: only valid for protocol 6 [ 170.407595][ T8591] lo speed is unknown, defaulting to 1000 [ 170.806220][ T8612] lo speed is unknown, defaulting to 1000 [ 171.135975][ T8622] netlink: 'syz.2.817': attribute type 1 has an invalid length. [ 171.144133][ T8622] netlink: 'syz.2.817': attribute type 2 has an invalid length. [ 171.295400][ T8628] netlink: 16 bytes leftover after parsing attributes in process `syz.1.818'. [ 171.305295][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.818'. [ 171.525101][ T8639] sctp: [Deprecated]: syz.2.821 (pid 8639) Use of int in maxseg socket option. [ 171.525101][ T8639] Use struct sctp_assoc_value instead [ 171.958923][ T8649] lo speed is unknown, defaulting to 1000 [ 172.000421][ T8647] lo speed is unknown, defaulting to 1000 [ 172.243610][ T8664] netlink: 36 bytes leftover after parsing attributes in process `syz.3.827'. [ 172.289034][ T8664] netlink: 'syz.3.827': attribute type 21 has an invalid length. [ 172.580477][ T8671] __nla_validate_parse: 1 callbacks suppressed [ 172.580499][ T8671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.829'. [ 172.783818][ T8684] netlink: 'syz.0.833': attribute type 1 has an invalid length. [ 172.928514][ T8691] vlan2: entered promiscuous mode [ 172.935021][ T8691] bridge0: entered promiscuous mode [ 172.959652][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.835'. [ 172.974629][ T8697] netlink: 36 bytes leftover after parsing attributes in process `syz.3.834'. [ 172.986033][ T8694] lo speed is unknown, defaulting to 1000 [ 173.466758][ T8710] netlink: 76 bytes leftover after parsing attributes in process `syz.3.841'. [ 173.489572][ T8713] netlink: 'syz.2.842': attribute type 2 has an invalid length. [ 173.503479][ T8713] netlink: 'syz.2.842': attribute type 2 has an invalid length. [ 173.812685][ T8721] netlink: 16 bytes leftover after parsing attributes in process `syz.4.844'. [ 173.859247][ T8721] netlink: 27 bytes leftover after parsing attributes in process `syz.4.844'. [ 173.909299][ T8723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.844'. [ 173.933830][ T8723] netlink: 27 bytes leftover after parsing attributes in process `syz.4.844'. [ 174.317470][ T8738] netlink: 48 bytes leftover after parsing attributes in process `syz.3.851'. [ 174.337037][ T8733] veth0_to_bond: entered promiscuous mode [ 174.351007][ T8733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.849'. [ 174.427186][ T8733] veth0_to_bond (unregistering): left promiscuous mode [ 174.500918][ T8733] bond0: (slave bond_slave_0): Releasing backup interface [ 174.524758][ T8748] netlink: 'syz.1.853': attribute type 3 has an invalid length. [ 174.533605][ T8733] bond_slave_0 (unregistering): left allmulticast mode [ 174.827112][ T8757] lo speed is unknown, defaulting to 1000 [ 176.002594][ T8800] veth0_to_hsr: entered promiscuous mode [ 176.008339][ T8800] veth0_to_hsr: entered allmulticast mode [ 176.922856][ T8841] lo speed is unknown, defaulting to 1000 [ 177.251414][ T8863] veth0: entered promiscuous mode [ 177.276390][ T8863] macsec1: entered promiscuous mode [ 177.304875][ T8863] veth0: left promiscuous mode [ 177.333998][ T8868] netlink: 'syz.2.892': attribute type 2 has an invalid length. [ 177.343354][ T8868] netlink: 'syz.2.892': attribute type 8 has an invalid length. [ 177.592100][ T8878] __nla_validate_parse: 8 callbacks suppressed [ 177.592121][ T8878] netlink: 256 bytes leftover after parsing attributes in process `syz.2.895'. [ 177.613307][ T8880] netlink: 256 bytes leftover after parsing attributes in process `syz.2.895'. [ 177.663808][ T8882] netlink: 'syz.0.896': attribute type 13 has an invalid length. [ 177.772107][ T8882] gretap0: refused to change device tx_queue_len [ 177.787179][ T8882] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 177.845490][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'. [ 177.944277][ T8882] netlink: 'syz.0.896': attribute type 12 has an invalid length. [ 178.022912][ T8882] netlink: 132 bytes leftover after parsing attributes in process `syz.0.896'. [ 178.212648][ T8900] netlink: 'syz.3.901': attribute type 4 has an invalid length. [ 178.651896][ T8911] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 178.674475][ T8911] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 178.788070][ T8920] netlink: 'syz.3.907': attribute type 1 has an invalid length. [ 178.837634][ T8923] netlink: 40 bytes leftover after parsing attributes in process `syz.0.908'. [ 178.876479][ T8920] bond2: entered promiscuous mode [ 178.909328][ T8920] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.002083][ T8925] lo speed is unknown, defaulting to 1000 [ 179.093948][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.910'. [ 179.256558][ T8937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.359051][ T8943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.913'. [ 179.381957][ T8943] tc_dump_action: action bad kind [ 179.431910][ T8943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.913'. [ 179.446113][ T8943] tc_dump_action: action bad kind [ 179.717254][ T9] hid-generic 0005:16C4:5505.0001: unknown main item tag 0x0 [ 179.729785][ T9] hid-generic 0005:16C4:5505.0001: unknown main item tag 0x0 [ 179.741524][ T9] hid-generic 0005:16C4:5505.0001: unknown main item tag 0x0 [ 179.746683][ T8961] netlink: 60 bytes leftover after parsing attributes in process `syz.1.917'. [ 179.761223][ T9] hid-generic 0005:16C4:5505.0001: unknown main item tag 0x0 [ 179.778554][ T9] hid-generic 0005:16C4:5505.0001: unknown main item tag 0x0 [ 179.789864][ T9] hid-generic 0005:16C4:5505.0001: unknown main item tag 0x0 [ 179.798478][ T9] hid-generic 0005:16C4:5505.0001: unknown main item tag 0x3 [ 179.806836][ T9] hid-generic 0005:16C4:5505.0001: unknown main item tag 0x1 [ 179.873629][ T9] hid-generic 0005:16C4:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 180.177983][ T8971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.402457][ T8982] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 180.514854][ T8984] netlink: 16 bytes leftover after parsing attributes in process `syz.3.924'. [ 180.827248][ T9002] lo speed is unknown, defaulting to 1000 [ 180.887836][ T9006] netlink: 'syz.0.929': attribute type 16 has an invalid length. [ 180.976968][ T9008] netlink: 'syz.2.933': attribute type 11 has an invalid length. [ 180.999208][ T9008] netlink: 'syz.2.933': attribute type 13 has an invalid length. [ 182.461946][ T9062] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 182.752087][ T9071] __nla_validate_parse: 70 callbacks suppressed [ 182.752110][ T9071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.952'. [ 182.872456][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.954'. [ 183.262724][ T9087] lo speed is unknown, defaulting to 1000 [ 183.633475][ T9103] netlink: 72 bytes leftover after parsing attributes in process `syz.0.962'. [ 183.976562][ T9111] netlink: 'syz.2.965': attribute type 21 has an invalid length. [ 184.048998][ T9111] IPv6: NLM_F_CREATE should be specified when creating new route [ 184.135551][ T9107] lo speed is unknown, defaulting to 1000 [ 184.255302][ T9109] lo speed is unknown, defaulting to 1000 [ 184.414664][ T9126] netlink: 24 bytes leftover after parsing attributes in process `syz.1.969'. [ 184.529447][ T5862] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 184.586769][ T9128] netlink: 'syz.3.970': attribute type 11 has an invalid length. [ 184.624606][ T9128] netlink: 224 bytes leftover after parsing attributes in process `syz.3.970'. [ 185.010364][ T9139] lo speed is unknown, defaulting to 1000 [ 185.749175][ T9171] trusted_key: syz.4.983 sent an empty control message without MSG_MORE. [ 185.910276][ T9177] Cannot find add_set index 0 as target [ 185.976374][ T9177] lo speed is unknown, defaulting to 1000 [ 186.009153][ T9177] lo speed is unknown, defaulting to 1000 [ 186.080940][ T9177] lo speed is unknown, defaulting to 1000 [ 186.153572][ T9185] netlink: 52 bytes leftover after parsing attributes in process `syz.3.989'. [ 186.196941][ T9177] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 186.300347][ T9177] lo speed is unknown, defaulting to 1000 [ 186.361641][ T9177] lo speed is unknown, defaulting to 1000 [ 186.412290][ T9177] lo speed is unknown, defaulting to 1000 [ 186.440951][ T9177] lo speed is unknown, defaulting to 1000 [ 186.463912][ T9177] lo speed is unknown, defaulting to 1000 [ 186.578662][ T9200] syzkaller1: entered promiscuous mode [ 186.595285][ T9200] syzkaller1: entered allmulticast mode [ 186.606566][ T9205] netlink: 'syz.0.995': attribute type 8 has an invalid length. [ 186.622407][ T9206] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20002 [ 186.676428][ T9198] lo speed is unknown, defaulting to 1000 [ 186.687682][ T9198] lo speed is unknown, defaulting to 1000 [ 187.255136][ T9233] netlink: 'syz.3.1004': attribute type 3 has an invalid length. [ 187.527595][ T9243] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1007'. [ 187.923620][ T9260] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 188.129143][ T9274] netem: change failed [ 188.360531][ T9283] netlink: 'syz.2.1019': attribute type 21 has an invalid length. [ 188.381585][ T9283] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1019'. [ 188.403655][ T9283] netlink: 'syz.2.1019': attribute type 4 has an invalid length. [ 188.421279][ T9283] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1019'. [ 188.703719][ T9296] tipc: Started in network mode [ 188.732797][ T9296] tipc: Node identity 724d29d6, cluster identity 4711 [ 188.760872][ T9296] tipc: Node number set to 1917659606 [ 188.924632][ T9310] netlink: 'syz.1.1027': attribute type 3 has an invalid length. [ 188.934125][ T9310] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1027'. [ 189.704628][ T9331] netlink: 'syz.1.1035': attribute type 8 has an invalid length. [ 189.892782][ T9344] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1038'. [ 189.942690][ T9344] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1038'. [ 190.402204][ T9365] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1045'. [ 190.557464][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 190.647756][ T9368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1047'. [ 190.734077][ T9374] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1048'. [ 190.836161][ T9378] xt_hashlimit: size too large, truncated to 1048576 [ 191.807415][ T9405] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1057'. [ 193.448691][ T9411] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1059'. [ 193.542254][ T9414] veth1_macvtap: left promiscuous mode [ 193.566045][ T9414] macsec0: entered promiscuous mode [ 193.594986][ T9414] macsec0: entered allmulticast mode [ 193.617699][ T9415] veth1_macvtap: entered promiscuous mode [ 193.628096][ T9415] veth1_macvtap: entered allmulticast mode [ 193.643135][ T9415] macsec0: left promiscuous mode [ 193.652037][ T9415] macsec0: left allmulticast mode [ 193.658018][ T9415] veth1_macvtap: left allmulticast mode [ 193.714692][ T9419] vlan4: entered promiscuous mode [ 193.720331][ T9419] vlan4: entered allmulticast mode [ 193.725570][ T9419] hsr_slave_1: entered allmulticast mode [ 194.129949][ T9441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1067'. [ 194.155077][ T9441] netlink: 'syz.2.1067': attribute type 7 has an invalid length. [ 194.192054][ T9441] netlink: 'syz.2.1067': attribute type 8 has an invalid length. [ 194.219733][ T9441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1067'. [ 194.277834][ T9445] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1070'. [ 194.293652][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.419767][ T9450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1070'. [ 194.533286][ T9443] lo speed is unknown, defaulting to 1000 [ 194.555091][ T9443] lo speed is unknown, defaulting to 1000 [ 195.203814][ T9482] lo speed is unknown, defaulting to 1000 [ 195.530896][ T9482] lo speed is unknown, defaulting to 1000 [ 195.567752][ T9489] syzkaller1: entered allmulticast mode [ 195.849239][ T9509] netlink: 'syz.1.1085': attribute type 1 has an invalid length. [ 195.901101][ T9508] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1085'. [ 195.975369][ T9515] netlink: 'syz.0.1087': attribute type 21 has an invalid length. [ 196.020858][ T9509] 8021q: adding VLAN 0 to HW filter on device bond4 [ 196.046118][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1087'. [ 196.137357][ T9515] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1087'. [ 196.378351][ T9520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1088'. [ 196.684475][ T9541] lo speed is unknown, defaulting to 1000 [ 196.745618][ T9541] lo speed is unknown, defaulting to 1000 [ 197.079492][ T9551] xt_hashlimit: Unknown mode mask 40030000, kernel too old? [ 197.171319][ T9550] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535) [ 197.219004][ T9550] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 197.367638][ T9560] dummy0: left allmulticast mode [ 197.411265][ T9560] bridge0: port 3(dummy0) entered disabled state [ 197.439348][ T9560] batman_adv: batadv0: Adding interface: dummy0 [ 197.446203][ T9560] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.504943][ T9560] batman_adv: batadv0: Interface activated: dummy0 [ 197.544273][ T9564] batadv0: mtu less than device minimum [ 197.602088][ T9564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 197.615688][ T9564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 197.628392][ T9564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 197.640722][ T9564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 197.652873][ T9564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 197.665040][ T9564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 197.677215][ T9564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 197.689563][ T9564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 197.701735][ T9564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 198.169816][ T9580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1106'. [ 198.262092][ T9590] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 198.288040][ T9582] lo speed is unknown, defaulting to 1000 [ 198.302701][ T9589] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.397715][ T9589] bridge_slave_1 (unregistering): left allmulticast mode [ 198.427491][ T9589] bridge_slave_1 (unregistering): left promiscuous mode [ 198.447742][ T9589] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.526576][ T9582] lo speed is unknown, defaulting to 1000 [ 198.687276][ T9608] lo speed is unknown, defaulting to 1000 [ 198.697347][ T9608] lo speed is unknown, defaulting to 1000 [ 199.005036][ T9622] netlink: 'syz.4.1119': attribute type 5 has an invalid length. [ 199.043525][ T9622] netlink: 'syz.4.1119': attribute type 5 has an invalid length. [ 199.202579][ T9635] Cannot find del_set index 4 as target [ 199.543988][ T5903] IPVS: starting estimator thread 0... [ 199.595479][ T9650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.652227][ T9648] __nla_validate_parse: 1 callbacks suppressed [ 199.652248][ T9648] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1125'. [ 199.663559][ T9649] IPVS: using max 26 ests per chain, 62400 per kthread [ 199.861512][ T9664] netlink: 'syz.0.1128': attribute type 27 has an invalid length. [ 199.985064][ T9664] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.993636][ T9664] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.073420][ T9664] team_slave_0: left promiscuous mode [ 200.080030][ T9664] team_slave_1: left promiscuous mode [ 200.303134][ T9673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1131'. [ 200.315986][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1132'. [ 200.316757][ T9664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.344459][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1132'. [ 200.367179][ T9672] netlink: 'syz.4.1132': attribute type 37 has an invalid length. [ 200.385909][ T9664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.611158][ T9664] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.709417][ T9664] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.727674][ T9664] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.740229][ T9664] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.858030][ T9664] tipc: Resetting bearer [ 200.886785][ T9664] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 200.894955][ T9664] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 200.927302][ T9664] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 200.955323][ T9669] veth0: entered promiscuous mode [ 201.232289][ T9686] bridge_slave_0: left allmulticast mode [ 201.242820][ T9686] bridge_slave_0: left promiscuous mode [ 201.268953][ T9686] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.293902][ T9686] bridge_slave_1: left allmulticast mode [ 201.323411][ T9686] bridge_slave_1: left promiscuous mode [ 201.354280][ T9686] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.383420][ T9686] bond0: (slave bond_slave_0): Releasing backup interface [ 201.417751][ T9686] bond0: (slave bond_slave_1): Releasing backup interface [ 201.447163][ T9686] team0: Port device team_slave_0 removed [ 201.471541][ T9686] team0: Port device team_slave_1 removed [ 201.477818][ T9686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.510529][ T9686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.532096][ T9686] bond1: (slave macvlan2): Removing an active aggregator [ 201.550563][ T9686] bond1: (slave macvlan2): Releasing backup interface [ 201.629299][ T9692] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 201.653819][ T9692] team0: Port device batadv1 added [ 201.702866][ T9690] lo speed is unknown, defaulting to 1000 [ 201.705520][ T9703] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1141'. [ 201.754487][ T9690] lo speed is unknown, defaulting to 1000 [ 201.804071][ T9705] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 202.419196][ T9723] netlink: 'syz.3.1149': attribute type 2 has an invalid length. [ 202.481880][ T9729] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1150'. [ 202.682840][ T9737] netlink: 'syz.3.1151': attribute type 5 has an invalid length. [ 202.720926][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1151'. [ 202.746445][ T9724] lo speed is unknown, defaulting to 1000 [ 202.778108][ T9746] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1152'. [ 202.808627][ T9724] lo speed is unknown, defaulting to 1000 [ 203.022157][ T9755] netlink: 'syz.3.1155': attribute type 2 has an invalid length. [ 203.352128][ T9770] netlink: 'syz.2.1162': attribute type 1 has an invalid length. [ 203.447743][ T9778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1162'. [ 203.654935][ T9778] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.728237][ T9778] bridge_slave_1 (unregistering): left allmulticast mode [ 203.741913][ T9778] bridge_slave_1 (unregistering): left promiscuous mode [ 203.761212][ T9778] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.809005][ T5862] Bluetooth: hci0: command tx timeout [ 203.948988][ T9784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1166'. [ 203.991675][ T9785] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 204.015607][ T9785] net_ratelimit: 10 callbacks suppressed [ 204.015629][ T9785] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 204.109700][ T9775] lo speed is unknown, defaulting to 1000 [ 204.125166][ T9775] lo speed is unknown, defaulting to 1000 [ 204.422177][ T9797] x_tables: duplicate underflow at hook 1 [ 204.463120][ T9801] netlink: 'syz.1.1172': attribute type 21 has an invalid length. [ 204.715739][ T9806] __nla_validate_parse: 2 callbacks suppressed [ 204.715765][ T9806] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1173'. [ 204.739042][ T9806] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 204.787913][ T9809] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1174'. [ 204.957975][ T9820] lo speed is unknown, defaulting to 1000 [ 204.996865][ T9820] lo speed is unknown, defaulting to 1000 [ 205.294777][ T9823] netlink: 'syz.3.1178': attribute type 2 has an invalid length. [ 205.325403][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1177'. [ 205.372847][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1177'. [ 206.036534][ T9856] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 206.106668][ T9863] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1188'. [ 206.193866][ T9861] lo speed is unknown, defaulting to 1000 [ 206.233382][ T9861] lo speed is unknown, defaulting to 1000 [ 206.249664][ T9872] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1189'. [ 206.651130][ T9892] sctp: [Deprecated]: syz.2.1193 (pid 9892) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.651130][ T9892] Use struct sctp_sack_info instead [ 206.739466][ T9895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1194'. [ 206.749940][ T9895] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1194'. [ 207.062711][ T9887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.073521][ T9887] bond_slave_1: left allmulticast mode [ 207.101785][ T9887] bond0 (unregistering): Released all slaves [ 207.167626][ T9907] IPv6: sit2: Disabled Multicast RS [ 207.637621][ T9923] lo speed is unknown, defaulting to 1000 [ 207.741430][ T9923] lo speed is unknown, defaulting to 1000 [ 208.026553][ T9944] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1209'. [ 208.051891][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1209'. [ 208.075335][ T9943] netlink: 'syz.0.1209': attribute type 1 has an invalid length. [ 208.133802][ T9943] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 208.988086][ T9990] lo speed is unknown, defaulting to 1000 [ 209.023294][ T9990] lo speed is unknown, defaulting to 1000 [ 209.906339][T10027] __nla_validate_parse: 3 callbacks suppressed [ 209.906364][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1227'. [ 210.228982][T10039] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.236664][T10039] IPv6: NLM_F_CREATE should be set when creating new route [ 210.244144][T10039] IPv6: NLM_F_CREATE should be set when creating new route [ 210.251788][T10039] IPv6: NLM_F_CREATE should be set when creating new route [ 210.341696][T10045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1234'. [ 210.361091][T10046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1232'. [ 210.379415][T10045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1234'. [ 210.428031][T10045] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1234'. [ 210.527804][T10053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1236'. [ 210.571268][T10053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1236'. [ 210.607505][T10049] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 210.956133][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1240'. [ 210.967746][T10070] lo speed is unknown, defaulting to 1000 [ 210.977394][T10072] netlink: 'syz.1.1240': attribute type 3 has an invalid length. [ 210.985611][T10070] lo speed is unknown, defaulting to 1000 [ 211.151542][T10077] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 211.467546][T10088] netlink: 'syz.0.1244': attribute type 3 has an invalid length. [ 211.730193][ T5155] Bluetooth: hci2: command 0x0406 tx timeout [ 211.730214][ T5864] Bluetooth: hci1: command 0x0406 tx timeout [ 211.730329][ T5864] Bluetooth: hci3: command 0x0406 tx timeout [ 211.908370][T10093] wg2: entered promiscuous mode [ 211.929259][T10093] wg2: entered allmulticast mode [ 212.094980][T10113] IPVS: Error joining to the multicast group [ 212.120730][T10115] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 212.207223][T10120] xt_hashlimit: size too large, truncated to 1048576 [ 212.270285][T10120] syz.1.1252: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 212.308536][T10120] CPU: 1 UID: 0 PID: 10120 Comm: syz.1.1252 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 212.308569][T10120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 212.308582][T10120] Call Trace: [ 212.308592][T10120] [ 212.308608][T10120] dump_stack_lvl+0x241/0x360 [ 212.308649][T10120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.308680][T10120] ? __pfx__printk+0x10/0x10 [ 212.308708][T10120] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 212.308743][T10120] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 212.308777][T10120] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 212.308809][T10120] warn_alloc+0x27c/0x410 [ 212.308837][T10120] ? __pfx_warn_alloc+0x10/0x10 [ 212.308865][T10120] ? htable_create+0x10c/0x890 [ 212.308884][T10120] ? __get_vm_area_node+0x1c8/0x2d0 [ 212.308915][T10120] ? __get_vm_area_node+0x25c/0x2d0 [ 212.308952][T10120] __vmalloc_node_range_noprof+0x634/0x1390 [ 212.309007][T10120] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 212.309029][T10120] ? __kasan_kmalloc_large+0x1a/0xa0 [ 212.309062][T10120] ? htable_create+0x10c/0x890 [ 212.309084][T10120] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 212.309117][T10120] ? htable_create+0x10c/0x890 [ 212.309135][T10120] ? htable_create+0x10c/0x890 [ 212.309154][T10120] ? hashlimit_pernet+0x23/0x240 [ 212.309180][T10120] htable_create+0x10c/0x890 [ 212.309210][T10120] hashlimit_mt_check_common+0x763/0xa50 [ 212.309242][T10120] xt_check_match+0x36a/0xa40 [ 212.309278][T10120] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 212.309308][T10120] ? __pfx_xt_check_match+0x10/0x10 [ 212.309356][T10120] ? xt_find_match+0x1e5/0x240 [ 212.309397][T10120] translate_table+0x1721/0x24b0 [ 212.309425][T10120] ? __x64_sys_setsockopt+0x1ee/0x280 [ 212.309445][T10120] ? do_syscall_64+0xf3/0x230 [ 212.309470][T10120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.309523][T10120] ? __pfx_translate_table+0x10/0x10 [ 212.309584][T10120] ? copy_from_sockptr_offset+0x60/0xb0 [ 212.309626][T10120] do_ip6t_set_ctl+0xe53/0x1270 [ 212.309663][T10120] ? __pfx___mutex_trylock_common+0x10/0x10 [ 212.309693][T10120] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 212.309744][T10120] ? __mutex_unlock_slowpath+0x229/0x800 [ 212.309783][T10120] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 212.309817][T10120] ? futex_wake+0x525/0x5d0 [ 212.309850][T10120] nf_setsockopt+0x295/0x2c0 [ 212.309891][T10120] rawv6_setsockopt+0x2b3/0x6d0 [ 212.309915][T10120] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 212.309937][T10120] ? aa_sock_opt_perm+0x79/0x120 [ 212.309967][T10120] ? sock_common_setsockopt+0x37/0xc0 [ 212.310000][T10120] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 212.310029][T10120] do_sock_setsockopt+0x3b1/0x710 [ 212.310059][T10120] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 212.310077][T10120] ? __fget_files+0x2a/0x420 [ 212.310102][T10120] ? __fget_files+0x39d/0x420 [ 212.310120][T10120] ? __fget_files+0x2a/0x420 [ 212.310149][T10120] __x64_sys_setsockopt+0x1ee/0x280 [ 212.310179][T10120] do_syscall_64+0xf3/0x230 [ 212.310207][T10120] ? clear_bhb_loop+0x45/0xa0 [ 212.310232][T10120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.310272][T10120] RIP: 0033:0x7f814a98d169 [ 212.310292][T10120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.310309][T10120] RSP: 002b:00007f814b7ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 212.310332][T10120] RAX: ffffffffffffffda RBX: 00007f814aba5fa0 RCX: 00007f814a98d169 [ 212.310348][T10120] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000044 [ 212.310361][T10120] RBP: 00007f814aa0e990 R08: 0000000000000588 R09: 0000000000000000 [ 212.310374][T10120] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 212.310388][T10120] R13: 0000000000000000 R14: 00007f814aba5fa0 R15: 00007ffee22f8ed8 [ 212.310423][T10120] [ 212.720266][T10120] Mem-Info: [ 212.723493][T10120] active_anon:6524 inactive_anon:0 isolated_anon:0 [ 212.723493][T10120] active_file:9359 inactive_file:38352 isolated_file:0 [ 212.723493][T10120] unevictable:768 dirty:117 writeback:0 [ 212.723493][T10120] slab_reclaimable:10308 slab_unreclaimable:97495 [ 212.723493][T10120] mapped:28630 shmem:1414 pagetables:716 [ 212.723493][T10120] sec_pagetables:0 bounce:0 [ 212.723493][T10120] kernel_misc_reclaimable:0 [ 212.723493][T10120] free:1323354 free_pcp:396 free_cma:0 [ 212.897871][T10128] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1254'. [ 212.958506][T10120] Node 0 active_anon:28776kB inactive_anon:0kB active_file:37436kB inactive_file:153332kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114452kB dirty:472kB writeback:0kB shmem:4128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11004kB pagetables:2884kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 213.064373][T10120] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 213.110515][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1255'. [ 213.148759][T10120] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.223997][T10120] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 213.243559][T10120] Node 0 DMA32 free:1362088kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:31584kB inactive_anon:0kB active_file:37436kB inactive_file:153232kB unevictable:1536kB writepending:484kB present:3129332kB managed:2547224kB mlocked:0kB bounce:0kB free_pcp:4428kB local_pcp:1692kB free_cma:0kB [ 213.296536][T10120] lowmem_reserve[]: 0 0 0 0 0 [ 213.302545][T10120] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.329964][T10120] lowmem_reserve[]: 0 0 0 0 0 [ 213.350165][T10120] Node 1 Normal free:3906016kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:104kB local_pcp:104kB free_cma:0kB [ 213.449114][T10120] lowmem_reserve[]: 0 0 0 0 0 [ 213.453944][T10120] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 213.471669][T10120] Node 0 DMA32: 1*4kB (M) 1*8kB (M) 1*16kB (U) 380*32kB (UME) 459*64kB (UM) 106*128kB (UME) 40*256kB (UM) 24*512kB (UM) 16*1024kB (UM) 13*2048kB (UME) 303*4096kB (UM) = 1361756kB [ 213.492224][T10120] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 213.526392][T10120] Node 1 Normal: 190*4kB (UE) 63*8kB (UME) 43*16kB (UME) 174*32kB (UME) 100*64kB (UME) 31*128kB (UME) 14*256kB (UME) 9*512kB (UME) 3*1024kB (UME) 3*2048kB (UE) 945*4096kB (M) = 3906016kB [ 213.530521][T10139] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 213.551307][T10120] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 213.593348][T10120] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 213.617504][T10120] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 213.635758][T10120] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 213.645946][T10120] 49127 total pagecache pages [ 213.655312][T10120] 0 pages in swap cache [ 213.693826][T10120] Free swap = 124996kB [ 213.703710][T10120] Total swap = 124996kB [ 213.708879][T10120] 2097051 pages RAM [ 213.718578][T10120] 0 pages HighMem/MovableOnly [ 213.726955][T10143] lo speed is unknown, defaulting to 1000 [ 213.739383][T10120] 428587 pages reserved [ 213.744110][T10120] 0 pages cma reserved [ 213.763060][T10143] lo speed is unknown, defaulting to 1000 [ 215.356003][T10162] 8021q: VLANs not supported on ip6tnl0 [ 215.523821][T10164] __nla_validate_parse: 1 callbacks suppressed [ 215.523841][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1263'. [ 215.695189][T10175] lo speed is unknown, defaulting to 1000 [ 215.801135][T10175] lo speed is unknown, defaulting to 1000 [ 215.917433][T10189] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1270'. [ 216.044432][T10192] vlan3: entered allmulticast mode [ 216.099948][T10192] veth0_to_batadv: entered allmulticast mode [ 216.113962][T10192] bridge0: port 2(vlan3) entered blocking state [ 216.132662][T10192] bridge0: port 2(vlan3) entered disabled state [ 216.151569][T10192] vlan3: entered promiscuous mode [ 216.156836][T10192] veth0_to_batadv: entered promiscuous mode [ 216.170064][T10192] bridge0: port 2(vlan3) entered blocking state [ 216.178316][T10192] bridge0: port 2(vlan3) entered forwarding state [ 216.678372][T10209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1277'. [ 216.732261][T10213] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1279'. [ 216.994957][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1281'. [ 217.049267][T10222] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1281'. [ 217.278305][T10230] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1284'. [ 217.522039][T10238] lo speed is unknown, defaulting to 1000 [ 217.553800][T10238] lo speed is unknown, defaulting to 1000 [ 217.565439][T10236] netlink: 'syz.3.1286': attribute type 2 has an invalid length. [ 217.599470][T10236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1286'. [ 218.221735][T10254] lo speed is unknown, defaulting to 1000 [ 218.255841][T10254] lo speed is unknown, defaulting to 1000 [ 218.423621][T10259] netlink: 'syz.2.1293': attribute type 29 has an invalid length. [ 218.692193][T10268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1295'. [ 218.710137][T10268] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1295'. [ 219.619220][T10299] ipt_ECN: cannot use operation on non-tcp rule [ 219.778653][T10308] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 220.307430][T10331] netlink: 'syz.0.1315': attribute type 1 has an invalid length. [ 220.317724][T10331] netlink: 'syz.0.1315': attribute type 2 has an invalid length. [ 220.550837][T10338] bond5: entered promiscuous mode [ 220.581157][T10338] bond5: entered allmulticast mode [ 220.597694][T10338] 8021q: adding VLAN 0 to HW filter on device bond5 [ 220.608307][T10345] __nla_validate_parse: 4 callbacks suppressed [ 220.608326][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1318'. [ 220.911421][T10358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1323'. [ 221.078726][T10365] xt_addrtype: ipv6 does not support BROADCAST matching [ 221.187215][ T5848] team0: Port device syz_tun removed [ 221.261943][T10372] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1328'. [ 221.276516][T10372] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 221.865755][T10385] sctp: [Deprecated]: syz.2.1332 (pid 10385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.865755][T10385] Use struct sctp_sack_info instead [ 221.942632][ T2963] bridge_slave_1: left allmulticast mode [ 221.970655][ T2963] bridge_slave_1: left promiscuous mode [ 221.982248][ T2963] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.027339][ T2963] bridge_slave_0: left allmulticast mode [ 222.045481][T10388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1334'. [ 222.059882][ T2963] bridge_slave_0: left promiscuous mode [ 222.071522][ T2963] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.081707][T10388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1334'. [ 222.112755][T10391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1334'. [ 222.141727][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1334'. [ 222.144540][T10392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1335'. [ 222.165297][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1334'. [ 222.206950][T10391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1334'. [ 222.292472][ T2963] batman_adv: batadv0: Removing interface: ip6gretap1 [ 222.485005][T10398] netlink: 'syz.4.1337': attribute type 8 has an invalid length. [ 222.599869][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 222.614099][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 222.623543][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 222.632795][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 222.641960][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 222.670548][ T2963] gretap0 (unregistering): left promiscuous mode [ 223.247347][ T2963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.275526][ T2963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.289669][ T2963] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 223.305197][ T2963] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 223.315273][ T2963] bond0 (unregistering): Released all slaves [ 223.346876][T10391] batadv0: entered promiscuous mode [ 223.353595][T10391] syz_tun: entered promiscuous mode [ 223.364503][T10391] hsr2: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 223.384558][T10391] hsr2: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 223.433898][ T2963] tipc: Disabling bearer [ 223.448513][ T2963] tipc: Left network mode [ 223.481551][ T2963] IPVS: stopping master sync thread 8308 ... [ 223.924917][T10401] lo speed is unknown, defaulting to 1000 [ 223.948612][T10401] lo speed is unknown, defaulting to 1000 [ 224.212023][ T2963] batadv_slave_1: left promiscuous mode [ 224.270321][ T2963] hsr_slave_0: left promiscuous mode [ 224.285957][ T2963] hsr_slave_1: left promiscuous mode [ 224.308165][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.339259][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.689256][ T5857] Bluetooth: hci2: command tx timeout [ 225.143782][ T2963] team0 (unregistering): Port device team_slave_1 removed [ 225.188481][ T2963] team0 (unregistering): Port device team_slave_0 removed [ 225.656655][T10446] lo speed is unknown, defaulting to 1000 [ 225.727395][T10446] lo speed is unknown, defaulting to 1000 [ 225.879779][T10484] __nla_validate_parse: 4 callbacks suppressed [ 225.879802][T10484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1358'. [ 225.894508][T10477] team0: Port device gtp1 added [ 226.014006][T10488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1358'. [ 226.314013][T10401] chnl_net:caif_netlink_parms(): no params data found [ 226.440903][T10504] netlink: zone id is out of range [ 226.455911][T10504] netlink: zone id is out of range [ 226.468597][T10504] netlink: set zone limit has 4 unknown bytes [ 226.595730][T10509] netlink: 404 bytes leftover after parsing attributes in process `syz.4.1364'. [ 226.605409][T10509] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1364'. [ 226.616417][T10509] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1364'. [ 226.628369][T10401] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.636633][T10401] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.644337][T10401] bridge_slave_0: entered allmulticast mode [ 226.652456][T10401] bridge_slave_0: entered promiscuous mode [ 226.668227][T10401] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.675843][T10401] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.683220][T10401] bridge_slave_1: entered allmulticast mode [ 226.691374][T10401] bridge_slave_1: entered promiscuous mode [ 226.769722][ T5857] Bluetooth: hci2: command 0x041b tx timeout [ 226.884661][T10520] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1368'. [ 226.904352][T10520] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1368'. [ 226.992547][T10401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.021016][T10401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.032923][T10522] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1368'. [ 227.291420][T10401] team0: Port device team_slave_0 added [ 227.370415][T10401] team0: Port device team_slave_1 added [ 227.500691][T10523] lo speed is unknown, defaulting to 1000 [ 227.673800][T10401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.693355][T10401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.765033][T10401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.800028][T10543] syzkaller1: entered promiscuous mode [ 227.805601][T10543] syzkaller1: entered allmulticast mode [ 227.822105][T10401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.844242][T10401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.909159][T10401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.137936][T10556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1374'. [ 228.227051][T10562] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 228.275849][T10556] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 228.299208][T10556] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 228.311493][T10401] hsr_slave_0: entered promiscuous mode [ 228.318417][T10401] hsr_slave_1: entered promiscuous mode [ 228.328415][T10401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.337006][T10401] Cannot create hsr debugfs directory [ 228.850286][ T5857] Bluetooth: hci2: command 0x041b tx timeout [ 228.916676][T10584] lo speed is unknown, defaulting to 1000 [ 228.941524][T10587] batman_adv: batadv0: Adding interface: macvlan2 [ 228.950950][T10587] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.009936][T10587] batman_adv: batadv0: Interface activated: macvlan2 [ 229.089665][T10589] netlink: 'syz.3.1383': attribute type 5 has an invalid length. [ 229.244539][T10593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1384'. [ 229.441523][T10599] netlink: 'syz.1.1386': attribute type 27 has an invalid length. [ 229.598855][T10599] bridge0: port 2(vlan3) entered disabled state [ 229.605421][T10599] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.664835][T10599] batman_adv: batadv0: Interface deactivated: dummy0 [ 229.679799][T10613] netlink: 'syz.4.1389': attribute type 2 has an invalid length. [ 229.700331][T10599] dummy0: left promiscuous mode [ 229.838531][T10599] bond_slave_0: left allmulticast mode [ 229.877822][T10599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.895571][T10599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.982614][T10599] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.992577][T10599] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.003497][T10599] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.012936][T10599] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.027340][T10599] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 230.109152][T10599] bond2: left promiscuous mode [ 230.114272][T10599] veth3: left promiscuous mode [ 230.213623][T10599] bond5: left promiscuous mode [ 230.218703][T10599] bond5: left allmulticast mode [ 230.339131][T10401] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 230.384937][T10621] lo speed is unknown, defaulting to 1000 [ 230.385381][T10401] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 230.411577][T10401] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 230.449864][T10401] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 230.509801][T10633] netlink: 'syz.1.1393': attribute type 1 has an invalid length. [ 230.585645][T10633] 8021q: adding VLAN 0 to HW filter on device bond6 [ 230.635897][T10626] lo speed is unknown, defaulting to 1000 [ 230.696324][T10624] netlink: 'syz.3.1392': attribute type 1 has an invalid length. [ 230.821821][T10628] lo speed is unknown, defaulting to 1000 [ 230.929593][ T5857] Bluetooth: hci2: command 0x041b tx timeout [ 230.956396][T10630] FAULT_INJECTION: forcing a failure. [ 230.956396][T10630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.970941][T10630] CPU: 1 UID: 0 PID: 10630 Comm: syz.4.1391 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 230.970971][T10630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 230.970985][T10630] Call Trace: [ 230.970994][T10630] [ 230.971003][T10630] dump_stack_lvl+0x241/0x360 [ 230.971043][T10630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.971074][T10630] ? __pfx__printk+0x10/0x10 [ 230.971120][T10630] should_fail_ex+0x424/0x570 [ 230.971148][T10630] _copy_from_user+0x2d/0xb0 [ 230.971180][T10630] do_ip_getsockopt+0x1f8/0x2ba0 [ 230.971215][T10630] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 230.971262][T10630] ? __pfx_handle_mm_fault+0x10/0x10 [ 230.971304][T10630] ? __up_read+0x2c4/0x6b0 [ 230.971343][T10630] ? irqentry_exit+0x63/0x90 [ 230.971367][T10630] ? lockdep_hardirqs_on+0x9d/0x150 [ 230.971395][T10630] ? irqentry_exit+0x63/0x90 [ 230.971418][T10630] ? exc_page_fault+0x5f8/0x920 [ 230.971449][T10630] ip_getsockopt+0xef/0x2e0 [ 230.971494][T10630] ? __pfx_ip_getsockopt+0x10/0x10 [ 230.971528][T10630] ? rep_movs_alternative+0xf/0x90 [ 230.971547][T10630] ? sock_common_getsockopt+0x2e/0xb0 [ 230.971575][T10630] ? raw_getsockopt+0xca/0x1f0 [ 230.971593][T10630] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 230.971625][T10630] do_sock_getsockopt+0x391/0x740 [ 230.971655][T10630] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 230.971674][T10630] ? __fget_files+0x2a/0x420 [ 230.971695][T10630] ? __fget_files+0x39d/0x420 [ 230.971713][T10630] ? __fget_files+0x2a/0x420 [ 230.971742][T10630] __x64_sys_getsockopt+0x2a3/0x370 [ 230.971773][T10630] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 230.971803][T10630] ? do_syscall_64+0xb6/0x230 [ 230.971834][T10630] do_syscall_64+0xf3/0x230 [ 230.971861][T10630] ? clear_bhb_loop+0x45/0xa0 [ 230.971887][T10630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.971907][T10630] RIP: 0033:0x7ff52638d169 [ 230.971926][T10630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.971943][T10630] RSP: 002b:00007ff52716b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 230.971966][T10630] RAX: ffffffffffffffda RBX: 00007ff5265a6080 RCX: 00007ff52638d169 [ 230.971982][T10630] RDX: 0000000000000083 RSI: 0000000000000000 RDI: 0000000000000003 [ 230.971994][T10630] RBP: 00007ff52716b090 R08: 0000200000000140 R09: 0000000000000000 [ 230.972008][T10630] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 230.972021][T10630] R13: 0000000000000000 R14: 00007ff5265a6080 R15: 00007fff990b4628 [ 230.972055][T10630] [ 231.716441][T10401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.778062][T10648] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 231.799008][T10401] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.854583][ T2913] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.861967][ T2913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.902049][ T2913] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.909408][ T2913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.963064][T10401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.306522][T10670] netlink: 'syz.4.1400': attribute type 1 has an invalid length. [ 232.314436][T10670] netlink: 'syz.4.1400': attribute type 11 has an invalid length. [ 232.350548][T10670] __nla_validate_parse: 2 callbacks suppressed [ 232.350568][T10670] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1400'. [ 232.430662][T10401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.595577][T10401] veth0_vlan: entered promiscuous mode [ 232.641099][T10401] veth1_vlan: entered promiscuous mode [ 232.744689][T10401] veth0_macvtap: entered promiscuous mode [ 232.772461][T10401] veth1_macvtap: entered promiscuous mode [ 232.820990][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.837954][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.849134][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.860550][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.871356][T10701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1408'. [ 232.873389][T10401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.917771][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.943514][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.967430][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.978870][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.992677][T10401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.009296][ T5859] Bluetooth: hci2: command 0x041b tx timeout [ 233.028478][T10401] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.049244][T10401] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.058011][T10401] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.078868][T10401] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.140785][T10703] lo speed is unknown, defaulting to 1000 [ 233.260705][ T2949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.283598][ T2949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.354454][ T2913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.374630][ T2913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.566077][T10703] FAULT_INJECTION: forcing a failure. [ 233.566077][T10703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.639808][T10703] CPU: 1 UID: 0 PID: 10703 Comm: syz.2.1410 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 233.639840][T10703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 233.639853][T10703] Call Trace: [ 233.639861][T10703] [ 233.639869][T10703] dump_stack_lvl+0x241/0x360 [ 233.639910][T10703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.639941][T10703] ? __pfx__printk+0x10/0x10 [ 233.639985][T10703] should_fail_ex+0x424/0x570 [ 233.640014][T10703] _copy_from_user+0x2d/0xb0 [ 233.640045][T10703] do_ebt_get_ctl+0x2eb/0x2d30 [ 233.640084][T10703] ? ip4_datagram_release_cb+0x9f/0x10c0 [ 233.640133][T10703] ? __lock_acquire+0xad5/0xd80 [ 233.640159][T10703] ? __pfx_do_ebt_get_ctl+0x10/0x10 [ 233.640196][T10703] ? __local_bh_enable_ip+0x168/0x200 [ 233.640216][T10703] ? lockdep_hardirqs_on+0x9d/0x150 [ 233.640254][T10703] ? __lock_acquire+0xad5/0xd80 [ 233.640279][T10703] ? __mutex_trylock_common+0x184/0x2e0 [ 233.640315][T10703] ? __pfx___mutex_trylock_common+0x10/0x10 [ 233.640358][T10703] ? nf_getsockopt+0x248/0x2c0 [ 233.640409][T10703] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 233.640459][T10703] nf_getsockopt+0x299/0x2c0 [ 233.640497][T10703] ip_getsockopt+0x226/0x2e0 [ 233.640528][T10703] ? __pfx_ip_getsockopt+0x10/0x10 [ 233.640562][T10703] ? rep_movs_alternative+0xf/0x90 [ 233.640581][T10703] ? sock_common_getsockopt+0x2e/0xb0 [ 233.640608][T10703] ? raw_getsockopt+0xca/0x1f0 [ 233.640626][T10703] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 233.640658][T10703] do_sock_getsockopt+0x391/0x740 [ 233.640687][T10703] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 233.640706][T10703] ? __fget_files+0x2a/0x420 [ 233.640728][T10703] ? __fget_files+0x39d/0x420 [ 233.640745][T10703] ? __fget_files+0x2a/0x420 [ 233.640772][T10703] __x64_sys_getsockopt+0x2a3/0x370 [ 233.640802][T10703] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 233.640835][T10703] ? do_syscall_64+0xb6/0x230 [ 233.640865][T10703] do_syscall_64+0xf3/0x230 [ 233.640892][T10703] ? clear_bhb_loop+0x45/0xa0 [ 233.640915][T10703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.640935][T10703] RIP: 0033:0x7fc50478d169 [ 233.640953][T10703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.640971][T10703] RSP: 002b:00007fc5055b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 233.640993][T10703] RAX: ffffffffffffffda RBX: 00007fc5049a5fa0 RCX: 00007fc50478d169 [ 233.641009][T10703] RDX: 0000000000000083 RSI: 0000000000000000 RDI: 0000000000000003 [ 233.641021][T10703] RBP: 00007fc5055b9090 R08: 0000200000000140 R09: 0000000000000000 [ 233.641036][T10703] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 233.641049][T10703] R13: 0000000000000000 R14: 00007fc5049a5fa0 R15: 00007ffd9aa2b928 [ 233.641080][T10703] [ 234.102816][T10713] lo speed is unknown, defaulting to 1000 [ 234.257316][T10718] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 234.471573][T10723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1416'. [ 235.455399][T10734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1419'. [ 235.488639][T10734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1419'. [ 235.770468][T10742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1422'. [ 235.795416][T10742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1422'. [ 236.043233][T10745] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1424'. [ 236.064753][T10750] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1426'. [ 236.102685][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 236.112263][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 236.124372][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1426'. [ 236.134732][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 236.147595][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 236.156654][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.365746][T10753] lo speed is unknown, defaulting to 1000 [ 236.508817][T10759] erspan0: entered promiscuous mode [ 236.515400][T10759] vlan0: entered promiscuous mode [ 237.212015][T10753] chnl_net:caif_netlink_parms(): no params data found [ 237.304587][T10785] netlink: 'syz.3.1433': attribute type 6 has an invalid length. [ 237.505796][T10787] lo speed is unknown, defaulting to 1000 [ 237.706199][T10753] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.729427][T10753] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.736976][T10753] bridge_slave_0: entered allmulticast mode [ 237.762546][T10753] bridge_slave_0: entered promiscuous mode [ 237.820934][T10753] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.828224][T10753] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.832941][T10807] __nla_validate_parse: 2 callbacks suppressed [ 237.832962][T10807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1440'. [ 237.838092][T10753] bridge_slave_1: entered allmulticast mode [ 237.859104][T10753] bridge_slave_1: entered promiscuous mode [ 238.004104][T10753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.057957][T10753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.210016][ T5859] Bluetooth: hci2: command tx timeout [ 238.282004][T10753] team0: Port device team_slave_0 added [ 238.321234][T10753] team0: Port device team_slave_1 added [ 238.475482][T10753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.483859][T10753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.519317][T10753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.549200][T10753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.567033][T10753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.618830][T10753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.666239][T10830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1448'. [ 238.706543][T10830] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1448'. [ 238.802255][T10753] hsr_slave_0: entered promiscuous mode [ 238.822149][T10753] hsr_slave_1: entered promiscuous mode [ 238.837869][T10753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.854054][T10753] Cannot create hsr debugfs directory [ 239.444162][ T9] IPVS: starting estimator thread 0... [ 239.493279][T10753] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.551361][T10840] IPVS: using max 32 ests per chain, 76800 per kthread [ 239.677172][T10753] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.729169][T10850] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1451'. [ 239.783070][T10848] lo speed is unknown, defaulting to 1000 [ 239.850915][T10753] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.945494][T10853] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1455'. [ 239.957458][T10853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1455'. [ 239.973909][T10853] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1455'. [ 239.985911][T10853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1455'. [ 240.003423][T10853] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1455'. [ 240.018513][T10753] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.260050][T10861] lo speed is unknown, defaulting to 1000 [ 240.289348][ T5859] Bluetooth: hci2: command tx timeout [ 240.620133][T10753] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 240.670919][T10753] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 240.742778][T10753] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 240.799834][T10753] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 240.958075][T10753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.986453][T10753] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.026210][ T2913] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.033891][ T2913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.104211][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.111762][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.743527][T10753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.932507][T10753] veth0_vlan: entered promiscuous mode [ 241.987006][T10753] veth1_vlan: entered promiscuous mode [ 242.006702][T10895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1466'. [ 242.038726][T10895] 8021q: VLANs not supported on nlmon0 [ 242.173261][T10753] veth0_macvtap: entered promiscuous mode [ 242.194768][T10753] veth1_macvtap: entered promiscuous mode [ 242.266431][T10753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.298082][T10753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.349928][T10753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.362673][T10753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.374338][ T5859] Bluetooth: hci2: command tx timeout [ 242.381071][T10753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.393397][T10753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.405555][T10753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.417214][T10753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.429894][T10753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.445453][T10753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.460091][T10753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.470687][T10753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.487120][T10753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.503882][T10753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.574112][T10910] dummy0: entered promiscuous mode [ 242.590393][T10910] macsec1: entered promiscuous mode [ 242.610828][T10910] dummy0: left promiscuous mode [ 242.683591][T10753] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.703566][T10753] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.713158][T10753] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.728909][T10753] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.944961][T10924] xt_hashlimit: size too large, truncated to 1048576 [ 242.948514][ T2913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.959419][T10924] xt_hashlimit: max too large, truncated to 1048576 [ 242.972360][ T2913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.998346][T10921] lo speed is unknown, defaulting to 1000 [ 243.128996][ T2913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.146207][ T2913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.914564][T10941] netlink: 'syz.3.1480': attribute type 11 has an invalid length. [ 243.946076][T10941] __nla_validate_parse: 2 callbacks suppressed [ 243.946099][T10941] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1480'. [ 244.364127][T10947] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1483'. [ 244.400747][T10952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1486'. [ 244.421966][T10958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1485'. [ 244.491102][T10954] netlink: 'syz.4.1486': attribute type 3 has an invalid length. [ 244.616628][T10947] lo: entered allmulticast mode [ 244.657695][T10947] lo: left allmulticast mode [ 245.188382][T10976] lo speed is unknown, defaulting to 1000 [ 245.196768][T10980] netlink: 37 bytes leftover after parsing attributes in process `syz.4.1493'. [ 245.299449][T10981] xt_hashlimit: max too large, truncated to 1048576 [ 245.352899][T10981] No such timeout policy "syz1" [ 245.679967][T10964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1489'. [ 245.702893][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.719166][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.739279][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.764263][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.774061][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.872026][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1496'. [ 245.908050][T10987] lo speed is unknown, defaulting to 1000 [ 246.071142][T10990] netlink: 'syz.4.1496': attribute type 11 has an invalid length. [ 246.339838][T10987] chnl_net:caif_netlink_parms(): no params data found [ 246.545453][T11005] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1498'. [ 246.574606][T11005] lo: entered allmulticast mode [ 246.636070][T11010] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1500'. [ 246.725642][T10987] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.743541][T10987] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.761800][T10987] bridge_slave_0: entered allmulticast mode [ 246.784499][T10987] bridge_slave_0: entered promiscuous mode [ 246.814945][T10987] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.832817][T10987] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.860971][T10987] bridge_slave_1: entered allmulticast mode [ 246.889346][T10987] bridge_slave_1: entered promiscuous mode [ 247.013564][T11017] netlink: 'syz.4.1502': attribute type 2 has an invalid length. [ 247.024418][T10987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.052934][T10987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.098031][T11017] þ: entered promiscuous mode [ 247.194952][T11022] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 247.268631][T11005] lo: left allmulticast mode [ 247.285750][T10987] team0: Port device team_slave_0 added [ 247.326606][T10987] team0: Port device team_slave_1 added [ 247.447256][T11028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1507'. [ 247.538085][T10987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.579329][T10987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.617366][T10987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.638580][T10987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.645923][T10987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.690486][T10987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.771483][T11040] lo speed is unknown, defaulting to 1000 [ 247.891782][ T5859] Bluetooth: hci2: command tx timeout [ 247.977131][T10987] hsr_slave_0: entered promiscuous mode [ 248.002955][T10987] hsr_slave_1: entered promiscuous mode [ 248.020488][T10987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.028405][T10987] Cannot create hsr debugfs directory [ 248.604641][T11063] lo: entered allmulticast mode [ 248.755350][T10987] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.874370][T11081] Cannot find del_set index 4 as target [ 248.926835][T11073] vlan3: left allmulticast mode [ 248.934831][T11073] veth0_to_batadv: left allmulticast mode [ 248.941440][T11073] vlan3: left promiscuous mode [ 248.946509][T11073] veth0_to_batadv: left promiscuous mode [ 248.954304][T11073] bridge0: port 2(vlan3) entered disabled state [ 248.964110][T11073] bridge_slave_0: left allmulticast mode [ 248.970076][T11073] bridge_slave_0: left promiscuous mode [ 248.976090][T11073] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.107538][T11077] __nla_validate_parse: 3 callbacks suppressed [ 249.107560][T11077] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1522'. [ 249.129551][T11077] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1522'. [ 249.180746][T11081] veth7: entered promiscuous mode [ 249.237689][T10987] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.264457][T11077] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1522'. [ 249.279271][T11063] lo: left allmulticast mode [ 249.294207][T11077] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1522'. [ 249.306253][T11077] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1522'. [ 249.361286][T10987] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.396687][T11077] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1522'. [ 249.422781][T11077] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1522'. [ 249.555130][T10987] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.588247][T11077] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1522'. [ 249.604983][T11077] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1522'. [ 249.615710][T11077] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1522'. [ 249.645863][T11094] netlink: 'syz.1.1527': attribute type 13 has an invalid length. [ 249.969080][ T5859] Bluetooth: hci2: command tx timeout [ 250.086829][T10987] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 250.172077][T11101] lo speed is unknown, defaulting to 1000 [ 250.172504][T10987] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 250.241143][T11107] lo speed is unknown, defaulting to 1000 [ 250.293555][T10987] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 250.436362][T10987] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 251.277971][T10987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.306490][T10987] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.389281][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.396759][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.503210][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.510932][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.982533][T11172] lo speed is unknown, defaulting to 1000 [ 252.048967][ T5859] Bluetooth: hci2: command tx timeout [ 252.231798][T10987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.375746][T10987] veth0_vlan: entered promiscuous mode [ 252.442304][T10987] veth1_vlan: entered promiscuous mode [ 252.533438][T10987] veth0_macvtap: entered promiscuous mode [ 252.572105][T10987] veth1_macvtap: entered promiscuous mode [ 252.598701][T11193] nbd: illegal input index -381222912 [ 252.641468][T10987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.670694][T10987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.696559][T10987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.729004][T10987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.748447][T10987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.781840][T10987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.798022][T10987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.815977][T10987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.843922][T10987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.902033][T10987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.956120][T10987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.996770][T10987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.018035][T10987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.036407][T10987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.064708][T10987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.081363][T10987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.100005][T10987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.136425][T10987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.192759][T11199] lo speed is unknown, defaulting to 1000 [ 253.212269][T10987] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.236061][T10987] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.267862][T10987] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.298871][T10987] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.543568][T11222] x_tables: duplicate underflow at hook 1 [ 253.568199][T11219] x_tables: duplicate underflow at hook 1 [ 253.666090][T11214] lo speed is unknown, defaulting to 1000 [ 253.918742][ T2913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.955036][ T2913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.064211][ T2913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.082665][ T2913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.129790][ T5859] Bluetooth: hci2: command tx timeout [ 254.217093][T11238] __nla_validate_parse: 13 callbacks suppressed [ 254.217114][T11238] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1561'. [ 254.280418][T11238] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1561'. [ 254.309143][T11242] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1562'. [ 254.655266][ T30] audit: type=1800 audit(1744467726.056:4): pid=11262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1563" name=363535343120766C656E3D310A0920747970655F69643D32206F66667365743D352073697A653D3130204E6F74206120564152206B696E64206D656D6265720A dev="tmpfs" ino=1656 res=0 errno=0 [ 254.812966][T11267] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1567'. [ 255.611649][T11281] x_tables: duplicate underflow at hook 1 [ 255.737935][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.844409][T11280] lo speed is unknown, defaulting to 1000 [ 256.198335][T11291] lo speed is unknown, defaulting to 1000 [ 256.279727][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.299679][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.307883][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.317556][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.325560][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.625958][T11295] lo speed is unknown, defaulting to 1000 [ 256.925083][ T5905] IPVS: starting estimator thread 0... [ 257.051572][T11319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1577'. [ 257.069263][T11312] IPVS: using max 28 ests per chain, 67200 per kthread [ 257.302949][T11318] lo speed is unknown, defaulting to 1000 [ 257.417317][T11327] nlmon0: Master is either lo or non-ether device [ 257.505934][T11295] chnl_net:caif_netlink_parms(): no params data found [ 257.686244][T11338] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1581'. [ 257.697283][T11338] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1581'. [ 257.736037][T11303] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 257.755971][T11303] tipc: Enabled bearer , priority 10 [ 257.823351][T11347] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 257.869911][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 257.916495][T11348] netlink: 'syz.3.1583': attribute type 4 has an invalid length. [ 257.978486][T11295] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.987172][T11295] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.007728][T11295] bridge_slave_0: entered allmulticast mode [ 258.027311][T11295] bridge_slave_0: entered promiscuous mode [ 258.041028][T11347] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1583'. [ 258.043024][T11295] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.060328][T11347] netlink: 'syz.3.1583': attribute type 4 has an invalid length. [ 258.064773][T11295] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.080571][T11295] bridge_slave_1: entered allmulticast mode [ 258.089035][T11295] bridge_slave_1: entered promiscuous mode [ 258.097142][T11341] lo speed is unknown, defaulting to 1000 [ 258.139191][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 258.282901][T11295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.297912][T11362] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1588'. [ 258.321456][T11295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.369832][ T5859] Bluetooth: hci2: command tx timeout [ 258.500452][T11369] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1589'. [ 258.542029][T11363] lo speed is unknown, defaulting to 1000 [ 258.548395][T11295] team0: Port device team_slave_0 added [ 258.601472][T11295] team0: Port device team_slave_1 added [ 258.668881][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 258.976758][T11295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.984088][T11295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.018261][T11295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.130223][T11295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.138296][T11295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.166702][T11295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.373955][T11295] hsr_slave_0: entered promiscuous mode [ 259.386366][T11295] hsr_slave_1: entered promiscuous mode [ 259.399854][T11295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.417167][T11295] Cannot create hsr debugfs directory [ 259.633042][T11403] vxcan1: entered allmulticast mode [ 259.728993][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 260.110238][T11429] macvlan3: entered promiscuous mode [ 260.127411][T11429] bridge0: port 1(macvlan3) entered blocking state [ 260.144936][T11429] bridge0: port 1(macvlan3) entered disabled state [ 260.169388][T11429] macvlan3: entered allmulticast mode [ 260.178903][T11429] bridge0: entered allmulticast mode [ 260.197978][T11429] macvlan3: left allmulticast mode [ 260.218999][T11429] bridge0: left allmulticast mode [ 260.401335][T11445] lo speed is unknown, defaulting to 1000 [ 260.432438][T11450] __nla_validate_parse: 1 callbacks suppressed [ 260.432459][T11450] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1611'. [ 260.450133][ T5859] Bluetooth: hci2: command tx timeout [ 260.470081][T11450] bond0: entered allmulticast mode [ 260.475258][T11450] bond_slave_0: entered allmulticast mode [ 260.491379][T11450] bond_slave_1: entered allmulticast mode [ 260.597849][T11295] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.754700][T11450] ªªªªªª: renamed from vlan0 [ 260.768843][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 260.818118][T11454] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1611'. [ 260.854929][T11295] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.976097][T11295] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.035909][T11462] wireguard0: entered promiscuous mode [ 261.053819][T11462] wireguard0: entered allmulticast mode [ 261.111900][T11295] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.399085][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1616'. [ 261.437157][T11295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 261.479849][T11295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 261.502837][T11474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1617'. [ 261.513621][T11472] syzkaller1: entered promiscuous mode [ 261.519812][T11474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1617'. [ 261.529355][T11472] syzkaller1: entered allmulticast mode [ 261.536572][T11295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 261.611826][T11295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 261.808964][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 261.954074][T11295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.011018][T11295] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.061338][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.068599][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.142300][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.149822][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.367691][T11506] lo speed is unknown, defaulting to 1000 [ 262.529141][ T5859] Bluetooth: hci2: command tx timeout [ 262.849033][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 263.131604][T11539] x_tables: duplicate underflow at hook 2 [ 263.158559][T11295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.346622][T11295] veth0_vlan: entered promiscuous mode [ 263.385637][T11295] veth1_vlan: entered promiscuous mode [ 263.511748][T11295] veth0_macvtap: entered promiscuous mode [ 263.535328][T11295] veth1_macvtap: entered promiscuous mode [ 263.574345][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.602042][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.629103][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.676473][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.681612][T11546] netlink: 'syz.2.1633': attribute type 21 has an invalid length. [ 263.703241][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.714745][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.745259][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.766932][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.801957][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.821332][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.835846][T11295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.846911][T11546] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1633'. [ 263.888989][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 263.933423][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.952801][T11558] IPVS: set_ctl: invalid protocol: 103 172.30.1.5:20000 [ 263.967803][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.988886][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.015741][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.039026][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.045443][T11563] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1638'. [ 264.068624][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.081874][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.092637][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.103464][T11565] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1638'. [ 264.112583][T11295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.123456][T11295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.150748][T11295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.208560][T11295] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.249038][T11295] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.268090][T11295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.289006][T11295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.315071][T11574] 8021q: VLANs not supported on vxcan1 [ 264.472291][T11582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1644'. [ 264.561240][T11582] batadv2: entered allmulticast mode [ 264.640212][ T5859] Bluetooth: hci2: command tx timeout [ 264.646681][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.656351][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.723407][ T2913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.769289][ T2913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.847167][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1645'. [ 264.928878][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 265.446175][T11627] netlink: 'syz.1.1655': attribute type 3 has an invalid length. [ 265.463831][T11627] __nla_validate_parse: 1 callbacks suppressed [ 265.463850][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1655'. [ 265.621518][T11631] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1656'. [ 265.970013][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 266.651092][T11649] netlink: 'syz.3.1660': attribute type 26 has an invalid length. [ 266.828362][T11656] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1663'. [ 266.924635][T11655] can: request_module (can-proto-3) failed. [ 267.006463][T11660] lo speed is unknown, defaulting to 1000 [ 267.018851][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 267.031966][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1665'. [ 267.497285][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 267.507199][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 267.522579][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 267.531697][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 267.542966][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 267.569470][T11674] lo speed is unknown, defaulting to 1000 [ 267.641932][T11681] lo speed is unknown, defaulting to 1000 [ 268.003106][T11691] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1668'. [ 268.039074][T11691] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1668'. [ 268.048964][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 268.441264][T11681] chnl_net:caif_netlink_parms(): no params data found [ 269.037931][T11681] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.055713][T11681] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.078276][T11681] bridge_slave_0: entered allmulticast mode [ 269.087377][T11681] bridge_slave_0: entered promiscuous mode [ 269.098842][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 269.217486][T11681] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.237407][T11681] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.275772][T11681] bridge_slave_1: entered allmulticast mode [ 269.302847][T11681] bridge_slave_1: entered promiscuous mode [ 269.321220][T11712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.421600][T11681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.445095][T11681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.508180][T11731] x_tables: duplicate underflow at hook 3 [ 269.527017][T11681] team0: Port device team_slave_0 added [ 269.555804][T11681] team0: Port device team_slave_1 added [ 269.579010][ T5862] Bluetooth: hci2: command tx timeout [ 269.646140][T11681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.660144][T11681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.692144][T11681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.705521][T11681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.712931][T11681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.745359][T11681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.848708][T11681] hsr_slave_0: entered promiscuous mode [ 269.860606][T11681] hsr_slave_1: entered promiscuous mode [ 269.880172][T11681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.887907][T11681] Cannot create hsr debugfs directory [ 270.013123][T11737] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1680'. [ 270.128964][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 270.233411][T11736] lo speed is unknown, defaulting to 1000 [ 270.241156][ T1056] lo speed is unknown, defaulting to 1000 [ 270.797318][T11748] netlink: 'syz.3.1683': attribute type 3 has an invalid length. [ 271.136283][T11681] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.148539][T11748] netlink: 'syz.3.1683': attribute type 3 has an invalid length. [ 271.169079][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 271.199829][T11748] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1683'. [ 271.285520][T11753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1684'. [ 271.432887][T11681] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.659069][ T5862] Bluetooth: hci2: command tx timeout [ 271.682839][T11681] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.766004][ T1056] IPVS: starting estimator thread 0... [ 271.778989][T11764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1689'. [ 271.859373][ T2913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.867282][ T2913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.868473][T11762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.879045][T11765] IPVS: using max 25 ests per chain, 60000 per kthread [ 271.891651][T11755] lo speed is unknown, defaulting to 1000 [ 271.905743][T11766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.965651][T11766] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1688'. [ 272.017989][T11767] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1688'. [ 272.063498][T11681] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.118383][T11776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1691'. [ 272.208878][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 272.282410][T11780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1691'. [ 272.350541][T11780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1691'. [ 272.406716][T11779] lo speed is unknown, defaulting to 1000 [ 272.710932][T11681] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 272.820505][T11681] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 272.922558][T11681] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 273.071336][T11788] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1693'. [ 273.084333][T11681] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 273.188393][T11787] netlink: 'syz.3.1693': attribute type 4 has an invalid length. [ 273.249132][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 273.337752][T11791] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 273.388960][T11786] netlink: 'syz.3.1693': attribute type 4 has an invalid length. [ 273.522557][ T2949] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.637650][T11681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.669615][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1692'. [ 273.712865][T11681] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.731424][ T5862] Bluetooth: hci2: command tx timeout [ 273.751864][ T2949] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.759291][ T2949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.794855][ T2949] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.802422][ T2949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.840078][ T2913] [ 273.842459][ T2913] ============================================ [ 273.848801][ T2913] WARNING: possible recursive locking detected [ 273.854970][ T2913] 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 Not tainted [ 273.862138][ T2913] -------------------------------------------- [ 273.868295][ T2913] kworker/u8:6/2913 is trying to acquire lock: [ 273.874488][ T2913] ffffc900035670d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x20e/0x650 [ 273.884098][ T2913] [ 273.884098][ T2913] but task is already holding lock: [ 273.891652][ T2913] ffffc9000b5890d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x20e/0x650 [ 273.901535][ T2913] [ 273.901535][ T2913] other info that might help us debug this: [ 273.909602][ T2913] Possible unsafe locking scenario: [ 273.909602][ T2913] [ 273.917235][ T2913] CPU0 [ 273.920514][ T2913] ---- [ 273.923896][ T2913] lock(&rb->spinlock); [ 273.928334][ T2913] lock(&rb->spinlock); [ 273.932598][ T2913] [ 273.932598][ T2913] *** DEADLOCK *** [ 273.932598][ T2913] [ 273.941528][ T2913] May be due to missing lock nesting notation [ 273.941528][ T2913] [ 273.949862][ T2913] 7 locks held by kworker/u8:6/2913: [ 273.955232][ T2913] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 273.967199][ T2913] #1: ffffc9000bbcfc60 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 273.981934][ T2913] #2: ffff88807e54b250 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb50 [ 273.992840][ T2913] #3: ffff88807e6fe4e0 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1a9/0xb50 [ 274.005223][ T2913] #4: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run3+0x24e/0x5b0 [ 274.014825][ T2913] #5: ffffc9000b5890d8 (&rb->spinlock){-.-.}-{2:2}, at: __bpf_ringbuf_reserve+0x20e/0x650 [ 274.024852][ T2913] #6: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1fe/0x550 [ 274.034358][ T2913] [ 274.034358][ T2913] stack backtrace: [ 274.040249][ T2913] CPU: 1 UID: 0 PID: 2913 Comm: kworker/u8:6 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 274.040277][ T2913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 274.040292][ T2913] Workqueue: events_unbound nsim_dev_trap_report_work [ 274.040342][ T2913] Call Trace: [ 274.040350][ T2913] [ 274.040359][ T2913] dump_stack_lvl+0x241/0x360 [ 274.040386][ T2913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.040411][ T2913] ? __pfx__printk+0x10/0x10 [ 274.040434][ T2913] ? print_lock+0x171/0x1a0 [ 274.040456][ T2913] print_deadlock_bug+0x2be/0x2d0 [ 274.040479][ T2913] validate_chain+0x928/0x24e0 [ 274.040506][ T2913] ? check_buffer+0x37f/0x8f0 [ 274.040526][ T2913] __lock_acquire+0xad5/0xd80 [ 274.040547][ T2913] lock_acquire+0x116/0x2f0 [ 274.040563][ T2913] ? __bpf_ringbuf_reserve+0x20e/0x650 [ 274.040589][ T2913] _raw_spin_lock_irqsave+0xd8/0x130 [ 274.040608][ T2913] ? __bpf_ringbuf_reserve+0x20e/0x650 [ 274.040628][ T2913] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 274.040651][ T2913] __bpf_ringbuf_reserve+0x20e/0x650 [ 274.040679][ T2913] ? __pfx___bpf_ringbuf_reserve+0x10/0x10 [ 274.040702][ T2913] ? __pfx___cant_migrate+0x10/0x10 [ 274.040725][ T2913] bpf_ringbuf_reserve+0x5c/0x70 [ 274.040745][ T2913] ? bpf_trace_run2+0x1fe/0x550 [ 274.040784][ T2913] bpf_prog_0e153dac479590bf+0x35/0x70 [ 274.040800][ T2913] ? bpf_trace_run2+0x1fe/0x550 [ 274.040824][ T2913] ? bpf_trace_run2+0x1fe/0x550 [ 274.040847][ T2913] bpf_trace_run2+0x2ee/0x550 [ 274.040874][ T2913] ? __pfx_bpf_trace_run2+0x10/0x10 [ 274.040901][ T2913] ? __bpf_trace_contention_begin+0x151/0x230 [ 274.040925][ T2913] __bpf_trace_contention_begin+0x172/0x230 [ 274.040948][ T2913] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 274.040977][ T2913] trace_contention_begin+0x11b/0x140 [ 274.041001][ T2913] __pv_queued_spin_lock_slowpath+0x116/0xdc0 [ 274.041023][ T2913] ? unwind_next_frame+0xb8/0x23b0 [ 274.041044][ T2913] ? unwind_next_frame+0x1aa4/0x23b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 274.041067][ T2913] ? unwind_next_frame+0xb8/0x23b0 [ 274.041089][ T2913] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 274.041111][ T2913] ? ret_from_fork_asm+0x1a/0x30 [ 274.041126][ T2913] ? ret_from_fork_asm+0x1a/0x30 [ 274.041142][ T2913] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 274.041171][ T2913] queued_spin_lock_slowpath+0x42/0x50 [ 274.041197][ T2913] do_raw_spin_lock+0x276/0x370 [ 274.041223][ T2913] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 274.041252][ T2913] _raw_spin_lock_irqsave+0xe4/0x130 [ 274.041269][ T2913] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 274.041288][ T2913] ? kasan_save_track+0x51/0x80 [ 274.041307][ T2913] ? kasan_save_free_info+0x40/0x50 [ 274.041326][ T2913] ? __kasan_slab_free+0x59/0x70 [ 274.041345][ T2913] ? kfree+0x198/0x430 [ 274.041365][ T2913] ? skb_release_data+0x6a3/0x8b0 [ 274.041384][ T2913] __bpf_ringbuf_reserve+0x20e/0x650 [ 274.041410][ T2913] ? __pfx___bpf_ringbuf_reserve+0x10/0x10 [ 274.041433][ T2913] ? __pfx___cant_migrate+0x10/0x10 [ 274.041455][ T2913] ? bpf_trace_run3+0x24e/0x5b0 [ 274.041480][ T2913] bpf_ringbuf_reserve+0x5c/0x70 [ 274.041500][ T2913] bpf_prog_fe0ed97373b08409+0x2e/0x4b [ 274.041514][ T2913] bpf_trace_run3+0x33c/0x5b0 [ 274.041538][ T2913] ? lockdep_hardirqs_on+0x9d/0x150 [ 274.041560][ T2913] ? __pfx_bpf_trace_run3+0x10/0x10 [ 274.041585][ T2913] ? kfree+0x198/0x430 [ 274.041605][ T2913] ? nsim_dev_trap_report_work+0x7d1/0xb50 [ 274.041629][ T2913] ? skb_release_data+0x6a3/0x8b0 [ 274.041646][ T2913] ? nsim_dev_trap_report_work+0x7d1/0xb50 [ 274.041669][ T2913] ? nsim_dev_trap_report_work+0x7d1/0xb50 [ 274.041690][ T2913] kmem_cache_free+0x36b/0x410 [ 274.041716][ T2913] nsim_dev_trap_report_work+0x7d1/0xb50 [ 274.041747][ T2913] ? process_scheduled_works+0x9cb/0x18e0 [ 274.041766][ T2913] process_scheduled_works+0xac3/0x18e0 [ 274.041798][ T2913] ? __pfx_process_scheduled_works+0x10/0x10 [ 274.041821][ T2913] ? assign_work+0x367/0x3d0 [ 274.041841][ T2913] worker_thread+0x870/0xd50 [ 274.041867][ T2913] ? __kthread_parkme+0x1a8/0x200 [ 274.041890][ T2913] ? __pfx_worker_thread+0x10/0x10 [ 274.041910][ T2913] kthread+0x7b7/0x940 [ 274.041933][ T2913] ? __pfx_worker_thread+0x10/0x10 [ 274.041953][ T2913] ? __pfx_kthread+0x10/0x10 [ 274.041975][ T2913] ? __pfx_kthread+0x10/0x10 [ 274.041997][ T2913] ? __pfx_kthread+0x10/0x10 [ 274.042019][ T2913] ? __pfx_kthread+0x10/0x10 [ 274.042041][ T2913] ? _raw_spin_unlock_irq+0x23/0x50 [ 274.042058][ T2913] ? lockdep_hardirqs_on+0x9d/0x150 [ 274.042078][ T2913] ? __pfx_kthread+0x10/0x10 [ 274.042101][ T2913] ret_from_fork+0x4b/0x80 [ 274.042118][ T2913] ? __pfx_kthread+0x10/0x10 [ 274.042140][ T2913] ret_from_fork_asm+0x1a/0x30 [ 274.042163][ T2913] [ 274.253567][T11681] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 274.290227][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 274.636839][T11681] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.337300][T11800] syz_tun (unregistering): left allmulticast mode [ 275.338836][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 275.364139][T11800] syz_tun (unregistering): left promiscuous mode [ 276.369032][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 277.408928][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 278.448945][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 279.488946][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 280.529122][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 281.569146][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 282.609692][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 283.649200][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available