last executing test programs: 1m7.268497506s ago: executing program 3 (id=24): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303, 0x36}, "7b8bdfd668e040b5", "89e73c8e9aa7e7aa844ee902749b141eb57bda9660b3567988c3ddb6cb7405a4", "e01bfca4", "b914d9d2ad0d05dc"}, 0x38) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)=0x100) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) unshare(0x400) bpf$PROG_LOAD(0x23, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x48, 0x3, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x48}}, 0x0) 57.263877969s ago: executing program 3 (id=24): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303, 0x36}, "7b8bdfd668e040b5", "89e73c8e9aa7e7aa844ee902749b141eb57bda9660b3567988c3ddb6cb7405a4", "e01bfca4", "b914d9d2ad0d05dc"}, 0x38) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)=0x100) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) unshare(0x400) bpf$PROG_LOAD(0x23, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x48, 0x3, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x48}}, 0x0) 44.49660922s ago: executing program 3 (id=24): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303, 0x36}, "7b8bdfd668e040b5", "89e73c8e9aa7e7aa844ee902749b141eb57bda9660b3567988c3ddb6cb7405a4", "e01bfca4", "b914d9d2ad0d05dc"}, 0x38) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)=0x100) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef641ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b17cf9e68ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000669b2c57f96aefff7549bb498c8e5b0c0081f386a64d3a628c88e554fc70e6fb21639f7e680b0ffb52b222a6971cdb790688"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) unshare(0x400) bpf$PROG_LOAD(0x23, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x48, 0x3, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x48}}, 0x0) 31.57482943s ago: executing program 3 (id=24): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303, 0x36}, "7b8bdfd668e040b5", "89e73c8e9aa7e7aa844ee902749b141eb57bda9660b3567988c3ddb6cb7405a4", "e01bfca4", "b914d9d2ad0d05dc"}, 0x38) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)=0x100) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) unshare(0x400) bpf$PROG_LOAD(0x23, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x48, 0x3, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x48}}, 0x0) 22.495726936s ago: executing program 2 (id=461): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x48, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x48}}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x2, 0x2d, 0x8, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0x7, @void, @value, @void, @value}, 0x50) (async) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r8, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r12, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) (async) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x44, r6, 0x809, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x4c1, 0x5f}}}}, [@NL80211_ATTR_KEY_SEQ={0xa, 0xa, "0f5903418cb0"}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "e467"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x44}}, 0x40010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15864}]}}]}, 0x44}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0309c026d4bd181a479305000000000000000000", @ANYRES32=r3, @ANYBLOB='\b\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="02000000040000000400"/28], 0x50) syz_emit_ethernet(0x4e, &(0x7f0000000e00)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x17, 0x12, [@private, @broadcast, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 22.290079605s ago: executing program 2 (id=463): r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x80000) setsockopt(r2, 0x84, 0x81, &(0x7f00000001c0)="020000000980ffff", 0x8) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x80000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000002c000000000000000000860090780000000000000000000000000000ee3f000000002b036f"], 0xfdef) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="cf042cbd7001000000001300000008000300", @ANYRES32=r8, @ANYBLOB="0a000600ffffffffffff0000"], 0x28}}, 0x4000004) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) preadv(r10, &(0x7f0000000180)=[{&(0x7f0000001300)=""/4083, 0x1001}], 0x10000000000000c0, 0x80000000, 0x0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x8844}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40600000000000073113d00000000008510000002000000b7000000000000009500c200000000790ba0ea0095000012"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x0, 0xa48a, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffffe}, 0x1c) setsockopt$inet6_int(r11, 0x29, 0x1000000000021, &(0x7f0000000180)=0xfffffffe, 0x4) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x3, 0xe0, @empty}, 0x1c) 21.614703872s ago: executing program 2 (id=468): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0x1, 0xffffffffffffffff}, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x625f, 0x5, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) shutdown(r3, 0x1) bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r1}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="02"], 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000020601020000000000000000000000000500040000000000100003006269746d61703a706f72740005000500ccc897f405000100070000000900020073797a3000000000"], 0x48}}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r7, 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 21.283855947s ago: executing program 2 (id=469): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x67) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000ad080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xd, 0x0, &(0x7f0000000080)="00faff0f0001eeff7f6faf9a1e", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='6\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a6cafca29547a05f362658b4964f4c208f68ab3815a3a918db58d9fdb302c7ff2"], 0x20) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x80, 0x4b6, 0x401, 0x0, 0x12, 0xfffffff8}}, {0x4}}]}]}, 0x48}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x14e22, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffdfffe}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r3}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x29, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x3a, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1e, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x50) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r6, 0x400454d9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x2c, r8, 0x1, 0x1000000, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvtap0\x00'}}]}]}, 0x2c}}, 0x0) preadv(r6, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) 20.991524304s ago: executing program 2 (id=472): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x12e, 0x12e, 0x3, [@union={0x0, 0x9, 0x0, 0x5, 0x1, 0x3ff, [{0xb, 0x0, 0x17d9c450}, {0x1, 0x5, 0x8}, {0xf, 0x3, 0x3}, {0xc, 0x3, 0xf}, {0x5, 0x3, 0x4}, {0x7, 0x3, 0x7ff}, {0x4, 0x5, 0x9}, {0x9, 0x1, 0x5}, {0x4, 0x4, 0x8}]}, @struct={0xf, 0x7, 0x0, 0x4, 0x1, 0x8, [{0xe, 0x2, 0x7}, {0x7, 0x2, 0x2}, {0x6, 0x0, 0x8}, {0x9, 0x4, 0x7}, {0x7, 0x4, 0x5}, {0x7, 0x2, 0x5}, {0x10, 0x3, 0x800}]}, @datasec={0x4, 0x6, 0x0, 0xf, 0x2, [{0x4, 0x800, 0x90f}, {0x1, 0x3, 0x7}, {0x2, 0xff, 0x3}, {0x2, 0x42, 0x1}, {0x2, 0x9, 0x3d}, {0x1, 0x7, 0xfffffff7}], 'nG'}]}, {0x0, [0x30]}}, &(0x7f0000000340)=""/4096, 0x14b, 0x1000, 0x0, 0x9, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001400)={0x922b, 0x0}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002780)={0x11, 0x2d, &(0x7f0000001440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000015c0)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000001600)=""/4096, 0x41000, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002600)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000002640)={0x4, 0x6, 0x6, 0x4}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000002680)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000026c0)=[{0x0, 0x4, 0xe, 0xc}, {0x0, 0x4, 0x1, 0xc}, {0x2, 0x3, 0xb, 0x6}, {0x4, 0x2, 0x6, 0x2}, {0x0, 0x2, 0x9, 0xc}, {0x1, 0x5, 0x4, 0x5}, {0x5, 0x3, 0x8, 0x9}, {0x0, 0x2, 0x9, 0x5}, {0x2, 0x1, 0x0, 0xb}], 0x10, 0x7, @void, @value}, 0x94) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000002840), 0x8) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002880)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002900)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002980)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002a00)=@base={0x1f, 0x4, 0x5df9, 0x4, 0x1020, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002b40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002ac0), &(0x7f0000002b00)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000002c00)={0xd, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xdc76}, [@alu={0x7, 0x0, 0x4, 0x1, 0x7, 0xc, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000080)='syzkaller\x00', 0x98d, 0x7a, &(0x7f00000000c0)=""/122, 0x41100, 0x42, '\x00', r0, @fallback=0x5, r1, 0x8, &(0x7f0000001380)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000013c0)={0x0, 0x9, 0x9, 0x5}, 0x10, r2, r3, 0x3, &(0x7f0000002b80)=[r4, 0x1, r5, r6, r7, r8, r9, 0xffffffffffffffff, r10], &(0x7f0000002bc0)=[{0x3, 0x4, 0x7, 0x3}, {0x1, 0x5, 0xe, 0x9}, {0x5, 0x5, 0xe, 0xb}], 0x10, 0x9bb3, @void, @value}, 0x94) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002f40)={0x11, 0x16, &(0x7f0000002d00)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x0, 0x6, 0x1, 0x4, 0x4, 0x1}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000002dc0)='GPL\x00', 0x40, 0x70, &(0x7f0000002e00)=""/112, 0x41100, 0x12, '\x00', r0, 0x0, r4, 0x8, &(0x7f0000002e80)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000002ec0)={0x2, 0x6, 0xcb5, 0xa000}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000002f00)=[{0x3, 0x5, 0xa}, {0x3, 0x3, 0xc, 0x2}, {0x0, 0x3, 0xb}], 0x10, 0xfffffff8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000003000)={&(0x7f0000002cc0)='itimer_state\x00', r12, 0x0, 0x7}, 0x18) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000003040)={0x0, 0x101}, 0x8) r13 = socket$nl_audit(0x10, 0x3, 0x9) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003400)={&(0x7f0000003200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10c, 0x10c, 0x6, [@func={0x10, 0x0, 0x0, 0xc, 0x5}, @ptr={0x10, 0x0, 0x0, 0x2, 0x3}, @enum64={0x9, 0x8, 0x0, 0x13, 0x1, 0x0, [{0xe, 0x1, 0x800}, {0x5, 0x7, 0x3672143c}, {0xb, 0x1ff, 0xc78}, {0x6, 0xa, 0xffffff06}, {0x10, 0x500000, 0x9}, {0xc, 0x8, 0x5}, {0x6, 0x5, 0x5}, {0x1, 0x194, 0x100}]}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x3, 0x4}, {0x3, 0x5}, {0x10, 0x2}, {0xf, 0x5}, {0x6, 0x2}, {0x8}, {0x5}, {0x6, 0x3}]}, @volatile={0x9}, @typedef={0x10, 0x0, 0x0, 0x8, 0x5}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x5}, @struct={0x8, 0x1, 0x0, 0x4, 0x0, 0x80000001, [{0x4, 0x5, 0x27e}]}]}, {0x0, [0x0, 0x5f, 0x61, 0x61]}}, &(0x7f0000003340)=""/138, 0x12a, 0x8a, 0x1, 0x3, 0x10000, @value=r4}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003500)={0x6, 0x3, &(0x7f0000003080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @ldst={0x1, 0x3, 0x4, 0xb, 0x4, 0x18, 0x8}], &(0x7f00000030c0)='GPL\x00', 0x0, 0xc6, &(0x7f0000003100)=""/198, 0x41000, 0x20, '\x00', r0, 0x25, r14, 0x8, &(0x7f0000003440)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000003480)={0x3, 0xb, 0x80, 0x2}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000034c0)=[{0x2, 0x4, 0x0, 0x3}], 0x10, 0xce, @void, @value}, 0x94) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000003600)=0x0, &(0x7f0000003640)=0x4) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000003780)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003740)={&(0x7f0000003680)={0x9c, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x9c}}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003840)={{r11, 0xffffffffffffffff}, &(0x7f00000037c0), &(0x7f0000003800)=r11}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000003880)=@base={0xd, 0x1, 0x0, 0xd, 0x20090, r16, 0x72, '\x00', 0x0, r14, 0x2, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003bc0)={&(0x7f0000003900)=@llc={0x1a, 0x320, 0xa, 0xfd, 0x1, 0x9f}, 0x80, &(0x7f0000003a80)=[{&(0x7f0000003980)="89e6d580ed719c2f73425ad75cb1c869ebf1bc6608bb49968ff72d02824dbcd1b5e382902fabccd0562712c5ec0c3c3c5526c6dfde0d397508ca8237e935", 0x3e}, {&(0x7f00000039c0)="bf3e0af1ac18d9a073958caf6040f41914e8734e8de9ac5f73f26585fe3cfb4b6febfa4dadef67e7f66a1f91dd6da69d9b5bb7717c6a057bc64457d425f7b2169c9729e7fef5aa0d374ffe311256de4a663733dbeac00d60cc5bc1fb6e2627cff16d6eeb69", 0x65}, {&(0x7f0000003a40)="5e5adf161a6e4710eada8f078bcbf5338ec70ecdbbfcedc47000cff081065cbb951fb873b17329054c4beedb", 0x2c}], 0x3, &(0x7f0000003ac0)=[{0xf0, 0x6, 0x8, "17fe0f9d6ef79bfa2d903978c040ebd1575beab8a5a03646abbaed95c699bf78016cffcc0b7522b53c9febd19372c58e671e04ceed26ac0f534ccdd61929625248f19061f85d3bc8c2fd86c4ccb1404520a14329585f83f907838aa36229a0be059ae3dba644efd8e6de91151bc220d39a406f98ab14925bb1708df55f34273052292d90318eff993e858cc45df4bb49ffb5688c77246f9fd493e754ec6e98a5e15f709eb4c480e52401ea061b0d4d4c99d8db85a44fbe18d3d4d69179e2ad53c2b8c6ab38d1f42e409dabbe10b83317f05a95071bf11247ff7e7c"}], 0xf0}, 0x24040011) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003c80)={{r4}, &(0x7f0000003c00), &(0x7f0000003c40)=r12}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003f80)={r12, 0xe0, &(0x7f0000003e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000003cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000003d00)=[0x0, 0x0, 0x0], &(0x7f0000003d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x28, &(0x7f0000003d80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000003dc0), &(0x7f0000003e00), 0x8, 0x8e, 0x8, 0x8, &(0x7f0000003e40)}}, 0x10) sendmsg$inet(r13, &(0x7f0000004180)={&(0x7f0000003fc0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000004140)=[{&(0x7f0000004000)="9acd6e37d13fba6a59e189cd2b699aac6b7534060b698a53a5a9f55488b20bc81f57ed330d21565e4b26e4965be47727c1852c9bc1d2489513d73dda2f61355dcd4c8165c0a0239042945e85c06da914bc8f021c0d36de1a80cc8b578a84f45f44c354a48235178593f695c71146af589744e694c69ce8b95b281e113e07846e02e87d66905be9c5e854a90ed5983aa97d7990932580c3706e0f82c9e2a3b50ced7f90614de26d42b3d027eb705e6c2a7c78ab41c571a12554436d1c201c0f2eaf3d04de5e0c8c78ba8fd102ca6b5c5de263490218e2679473bd4613eb7fef", 0xdf}, {&(0x7f0000004100)}], 0x2}, 0x10) r17 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004200), r4) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000004800)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000047c0)={&(0x7f0000004240)={0x580, r17, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_SOPASS={0x32, 0x3, "ab3a01e43a7fc19d6fd527bdddd46289472a21859ff9d659f8de1e58b995e0c65304ef64024c31019af9689b13ee"}, @ETHTOOL_A_WOL_SOPASS={0x27, 0x3, "52a13b5466ccc6223008f1a074c43277944badc348bff4a2783d5730826b208afadc75"}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @ETHTOOL_A_WOL_MODES={0x310, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x39, 0x5, "097e744dfe29629d917e2c9cd0bebba85ba5684704cb05526438de5c4fef0793e0b11c963d1eabb949ec838159586b33c8b2273701"}, @ETHTOOL_A_BITSET_MASK={0x80, 0x5, "5744c611f3eed26e6d0fa91fb5a4ced63ada7f13b8ebd34d5f365acdd6f0a6c1da6ff66ccbc6c73751f63ed485ff86b72e7bef91ef89d099c304e44f6b31e168d576cef572d91506f41b49082b9f93ca1652996ecee0de89a79b10a50b7265ce8ae60346734b1b7e81bed433006814fdce193e76cf128d6a7207e495"}, @ETHTOOL_A_BITSET_BITS={0xec, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff00}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x63}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x27b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'macvtap0\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x71, 0x4, "d67ad03fb9113eecb2d4132a1153b3a6c32b2358bd260e91a02c9683adcbc70d4d35db77228c49fdf92f10b19bbed812169f160b8c5c4736902c5c4601451e035f7d0a18d5661f08977de1688161813f2cc20aaeeec9dd63f667ac919db0ef4407134963f7e0b2bda78c87b57c"}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xd1, 0x5, "5f05716109dfb1b282a94bf83c4fe073dca6cfacb3279c9fcecf789e3dd40b414d26cb3106c1620463925d8303d68d2452094f67022e62f495d4fd0959bb708079283301cef28035eef2256136dde1096b7f6b894695b2a7a2f98ecaabb1810df73437d919bcd4dd9dc8ca5507bf04fddf2d20da2abfdacbaae81b29c6d15babaaffd0c57040b9db44c39dfaaa16b88a1396543925fb845f959f6f99b4c0e35756607b0beca29b9667fdf18f25657322bcab88715be72e39d6a0a7617fc7ddd7927e732dd33539460e4df3f5ec"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x45}]}, @ETHTOOL_A_WOL_MODES={0x1e8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x15, 0x4, "6ea7a1af0fec625b4d187fda097bc33a83"}, @ETHTOOL_A_BITSET_BITS={0x1cc, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7b2f62f7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x68f}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'macvtap0\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5a7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, './cgroup.net/syz0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x998}]}, {0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-({\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, './cgroup.net/syz0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '#)&{{]\\\\%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '&$\xfa+!)\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'macvtap0\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '].&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '[}([[\xf5%Y*))\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x580}}, 0x40) read(r1, &(0x7f0000004840)=""/4096, 0x1000) 20.264908658s ago: executing program 3 (id=24): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303, 0x36}, "7b8bdfd668e040b5", "89e73c8e9aa7e7aa844ee902749b141eb57bda9660b3567988c3ddb6cb7405a4", "e01bfca4", "b914d9d2ad0d05dc"}, 0x38) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)=0x100) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) unshare(0x400) bpf$PROG_LOAD(0x23, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x48, 0x3, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x48}}, 0x0) 9.079195448s ago: executing program 2 (id=472): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x12e, 0x12e, 0x3, [@union={0x0, 0x9, 0x0, 0x5, 0x1, 0x3ff, [{0xb, 0x0, 0x17d9c450}, {0x1, 0x5, 0x8}, {0xf, 0x3, 0x3}, {0xc, 0x3, 0xf}, {0x5, 0x3, 0x4}, {0x7, 0x3, 0x7ff}, {0x4, 0x5, 0x9}, {0x9, 0x1, 0x5}, {0x4, 0x4, 0x8}]}, @struct={0xf, 0x7, 0x0, 0x4, 0x1, 0x8, [{0xe, 0x2, 0x7}, {0x7, 0x2, 0x2}, {0x6, 0x0, 0x8}, {0x9, 0x4, 0x7}, {0x7, 0x4, 0x5}, {0x7, 0x2, 0x5}, {0x10, 0x3, 0x800}]}, @datasec={0x4, 0x6, 0x0, 0xf, 0x2, [{0x4, 0x800, 0x90f}, {0x1, 0x3, 0x7}, {0x2, 0xff, 0x3}, {0x2, 0x42, 0x1}, {0x2, 0x9, 0x3d}, {0x1, 0x7, 0xfffffff7}], 'nG'}]}, {0x0, [0x30]}}, &(0x7f0000000340)=""/4096, 0x14b, 0x1000, 0x0, 0x9, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001400)={0x922b, 0x0}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002780)={0x11, 0x2d, &(0x7f0000001440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000015c0)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000001600)=""/4096, 0x41000, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002600)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000002640)={0x4, 0x6, 0x6, 0x4}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000002680)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000026c0)=[{0x0, 0x4, 0xe, 0xc}, {0x0, 0x4, 0x1, 0xc}, {0x2, 0x3, 0xb, 0x6}, {0x4, 0x2, 0x6, 0x2}, {0x0, 0x2, 0x9, 0xc}, {0x1, 0x5, 0x4, 0x5}, {0x5, 0x3, 0x8, 0x9}, {0x0, 0x2, 0x9, 0x5}, {0x2, 0x1, 0x0, 0xb}], 0x10, 0x7, @void, @value}, 0x94) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000002840), 0x8) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002880)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002900)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002980)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002a00)=@base={0x1f, 0x4, 0x5df9, 0x4, 0x1020, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002b40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002ac0), &(0x7f0000002b00)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000002c00)={0xd, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xdc76}, [@alu={0x7, 0x0, 0x4, 0x1, 0x7, 0xc, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000080)='syzkaller\x00', 0x98d, 0x7a, &(0x7f00000000c0)=""/122, 0x41100, 0x42, '\x00', r0, @fallback=0x5, r1, 0x8, &(0x7f0000001380)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000013c0)={0x0, 0x9, 0x9, 0x5}, 0x10, r2, r3, 0x3, &(0x7f0000002b80)=[r4, 0x1, r5, r6, r7, r8, r9, 0xffffffffffffffff, r10], &(0x7f0000002bc0)=[{0x3, 0x4, 0x7, 0x3}, {0x1, 0x5, 0xe, 0x9}, {0x5, 0x5, 0xe, 0xb}], 0x10, 0x9bb3, @void, @value}, 0x94) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002f40)={0x11, 0x16, &(0x7f0000002d00)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x0, 0x6, 0x1, 0x4, 0x4, 0x1}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000002dc0)='GPL\x00', 0x40, 0x70, &(0x7f0000002e00)=""/112, 0x41100, 0x12, '\x00', r0, 0x0, r4, 0x8, &(0x7f0000002e80)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000002ec0)={0x2, 0x6, 0xcb5, 0xa000}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000002f00)=[{0x3, 0x5, 0xa}, {0x3, 0x3, 0xc, 0x2}, {0x0, 0x3, 0xb}], 0x10, 0xfffffff8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000003000)={&(0x7f0000002cc0)='itimer_state\x00', r12, 0x0, 0x7}, 0x18) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000003040)={0x0, 0x101}, 0x8) r13 = socket$nl_audit(0x10, 0x3, 0x9) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003400)={&(0x7f0000003200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10c, 0x10c, 0x6, [@func={0x10, 0x0, 0x0, 0xc, 0x5}, @ptr={0x10, 0x0, 0x0, 0x2, 0x3}, @enum64={0x9, 0x8, 0x0, 0x13, 0x1, 0x0, [{0xe, 0x1, 0x800}, {0x5, 0x7, 0x3672143c}, {0xb, 0x1ff, 0xc78}, {0x6, 0xa, 0xffffff06}, {0x10, 0x500000, 0x9}, {0xc, 0x8, 0x5}, {0x6, 0x5, 0x5}, {0x1, 0x194, 0x100}]}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x3, 0x4}, {0x3, 0x5}, {0x10, 0x2}, {0xf, 0x5}, {0x6, 0x2}, {0x8}, {0x5}, {0x6, 0x3}]}, @volatile={0x9}, @typedef={0x10, 0x0, 0x0, 0x8, 0x5}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x5}, @struct={0x8, 0x1, 0x0, 0x4, 0x0, 0x80000001, [{0x4, 0x5, 0x27e}]}]}, {0x0, [0x0, 0x5f, 0x61, 0x61]}}, &(0x7f0000003340)=""/138, 0x12a, 0x8a, 0x1, 0x3, 0x10000, @value=r4}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003500)={0x6, 0x3, &(0x7f0000003080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @ldst={0x1, 0x3, 0x4, 0xb, 0x4, 0x18, 0x8}], &(0x7f00000030c0)='GPL\x00', 0x0, 0xc6, &(0x7f0000003100)=""/198, 0x41000, 0x20, '\x00', r0, 0x25, r14, 0x8, &(0x7f0000003440)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000003480)={0x3, 0xb, 0x80, 0x2}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000034c0)=[{0x2, 0x4, 0x0, 0x3}], 0x10, 0xce, @void, @value}, 0x94) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000003600)=0x0, &(0x7f0000003640)=0x4) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000003780)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003740)={&(0x7f0000003680)={0x9c, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x9c}}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003840)={{r11, 0xffffffffffffffff}, &(0x7f00000037c0), &(0x7f0000003800)=r11}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000003880)=@base={0xd, 0x1, 0x0, 0xd, 0x20090, r16, 0x72, '\x00', 0x0, r14, 0x2, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003bc0)={&(0x7f0000003900)=@llc={0x1a, 0x320, 0xa, 0xfd, 0x1, 0x9f}, 0x80, &(0x7f0000003a80)=[{&(0x7f0000003980)="89e6d580ed719c2f73425ad75cb1c869ebf1bc6608bb49968ff72d02824dbcd1b5e382902fabccd0562712c5ec0c3c3c5526c6dfde0d397508ca8237e935", 0x3e}, {&(0x7f00000039c0)="bf3e0af1ac18d9a073958caf6040f41914e8734e8de9ac5f73f26585fe3cfb4b6febfa4dadef67e7f66a1f91dd6da69d9b5bb7717c6a057bc64457d425f7b2169c9729e7fef5aa0d374ffe311256de4a663733dbeac00d60cc5bc1fb6e2627cff16d6eeb69", 0x65}, {&(0x7f0000003a40)="5e5adf161a6e4710eada8f078bcbf5338ec70ecdbbfcedc47000cff081065cbb951fb873b17329054c4beedb", 0x2c}], 0x3, &(0x7f0000003ac0)=[{0xf0, 0x6, 0x8, "17fe0f9d6ef79bfa2d903978c040ebd1575beab8a5a03646abbaed95c699bf78016cffcc0b7522b53c9febd19372c58e671e04ceed26ac0f534ccdd61929625248f19061f85d3bc8c2fd86c4ccb1404520a14329585f83f907838aa36229a0be059ae3dba644efd8e6de91151bc220d39a406f98ab14925bb1708df55f34273052292d90318eff993e858cc45df4bb49ffb5688c77246f9fd493e754ec6e98a5e15f709eb4c480e52401ea061b0d4d4c99d8db85a44fbe18d3d4d69179e2ad53c2b8c6ab38d1f42e409dabbe10b83317f05a95071bf11247ff7e7c"}], 0xf0}, 0x24040011) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003c80)={{r4}, &(0x7f0000003c00), &(0x7f0000003c40)=r12}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003f80)={r12, 0xe0, &(0x7f0000003e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000003cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000003d00)=[0x0, 0x0, 0x0], &(0x7f0000003d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x28, &(0x7f0000003d80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000003dc0), &(0x7f0000003e00), 0x8, 0x8e, 0x8, 0x8, &(0x7f0000003e40)}}, 0x10) sendmsg$inet(r13, &(0x7f0000004180)={&(0x7f0000003fc0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000004140)=[{&(0x7f0000004000)="9acd6e37d13fba6a59e189cd2b699aac6b7534060b698a53a5a9f55488b20bc81f57ed330d21565e4b26e4965be47727c1852c9bc1d2489513d73dda2f61355dcd4c8165c0a0239042945e85c06da914bc8f021c0d36de1a80cc8b578a84f45f44c354a48235178593f695c71146af589744e694c69ce8b95b281e113e07846e02e87d66905be9c5e854a90ed5983aa97d7990932580c3706e0f82c9e2a3b50ced7f90614de26d42b3d027eb705e6c2a7c78ab41c571a12554436d1c201c0f2eaf3d04de5e0c8c78ba8fd102ca6b5c5de263490218e2679473bd4613eb7fef", 0xdf}, {&(0x7f0000004100)}], 0x2}, 0x10) r17 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004200), r4) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000004800)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000047c0)={&(0x7f0000004240)={0x580, r17, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_SOPASS={0x32, 0x3, "ab3a01e43a7fc19d6fd527bdddd46289472a21859ff9d659f8de1e58b995e0c65304ef64024c31019af9689b13ee"}, @ETHTOOL_A_WOL_SOPASS={0x27, 0x3, "52a13b5466ccc6223008f1a074c43277944badc348bff4a2783d5730826b208afadc75"}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @ETHTOOL_A_WOL_MODES={0x310, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x39, 0x5, "097e744dfe29629d917e2c9cd0bebba85ba5684704cb05526438de5c4fef0793e0b11c963d1eabb949ec838159586b33c8b2273701"}, @ETHTOOL_A_BITSET_MASK={0x80, 0x5, "5744c611f3eed26e6d0fa91fb5a4ced63ada7f13b8ebd34d5f365acdd6f0a6c1da6ff66ccbc6c73751f63ed485ff86b72e7bef91ef89d099c304e44f6b31e168d576cef572d91506f41b49082b9f93ca1652996ecee0de89a79b10a50b7265ce8ae60346734b1b7e81bed433006814fdce193e76cf128d6a7207e495"}, @ETHTOOL_A_BITSET_BITS={0xec, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff00}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x63}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x27b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'macvtap0\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x71, 0x4, "d67ad03fb9113eecb2d4132a1153b3a6c32b2358bd260e91a02c9683adcbc70d4d35db77228c49fdf92f10b19bbed812169f160b8c5c4736902c5c4601451e035f7d0a18d5661f08977de1688161813f2cc20aaeeec9dd63f667ac919db0ef4407134963f7e0b2bda78c87b57c"}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xd1, 0x5, "5f05716109dfb1b282a94bf83c4fe073dca6cfacb3279c9fcecf789e3dd40b414d26cb3106c1620463925d8303d68d2452094f67022e62f495d4fd0959bb708079283301cef28035eef2256136dde1096b7f6b894695b2a7a2f98ecaabb1810df73437d919bcd4dd9dc8ca5507bf04fddf2d20da2abfdacbaae81b29c6d15babaaffd0c57040b9db44c39dfaaa16b88a1396543925fb845f959f6f99b4c0e35756607b0beca29b9667fdf18f25657322bcab88715be72e39d6a0a7617fc7ddd7927e732dd33539460e4df3f5ec"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x45}]}, @ETHTOOL_A_WOL_MODES={0x1e8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x15, 0x4, "6ea7a1af0fec625b4d187fda097bc33a83"}, @ETHTOOL_A_BITSET_BITS={0x1cc, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7b2f62f7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x68f}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'macvtap0\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5a7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, './cgroup.net/syz0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x998}]}, {0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-({\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, './cgroup.net/syz0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '#)&{{]\\\\%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '&$\xfa+!)\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'macvtap0\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '].&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '[}([[\xf5%Y*))\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x580}}, 0x40) read(r1, &(0x7f0000004840)=""/4096, 0x1000) 8.620630343s ago: executing program 3 (id=24): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303, 0x36}, "7b8bdfd668e040b5", "89e73c8e9aa7e7aa844ee902749b141eb57bda9660b3567988c3ddb6cb7405a4", "e01bfca4", "b914d9d2ad0d05dc"}, 0x38) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)=0x100) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) unshare(0x400) bpf$PROG_LOAD(0x23, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x48, 0x3, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x48}}, 0x0) 2.747866283s ago: executing program 1 (id=594): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2, &(0x7f0000000240)={0x1, {{0xa, 0x4e23, 0x804d8b, @remote, 0x401}}, {{0xa, 0x4e21, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd5}}}, 0x108) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xeaffffff}]}}}]}, 0x3c}}, 0x400c810) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x294, &(0x7f0000000700)={@local, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x7, 0x6, "a96620", 0x25e, 0x6, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, {[@hopopts={0xfe30ea57ecc06f1}, @hopopts={0x87, 0x1b, '\x00', [@calipso={0x7, 0x58, {0x3, 0x14, 0x1, 0x364, [0x6, 0x8, 0x1, 0x1, 0xfffffffffffffffd, 0xfffffffffffffcf9, 0x200, 0x0, 0x9235, 0xffffffffffffffff]}}, @generic={0x1, 0x7b, "effa0888cf28560698e55f3629ac137d689e59883140edf54db9b8eb9a2c6a3dd92535990f4031e45586f87ce26a9ef2be436138725f63bc9b2e595efc74425b6ddb34ba34755fdee83f59f74b44fbede6df8ec09ace4bbc1ef3b770822bb0158d5eef4c5282dee5c6e81832b4ece327ca434a8be156801187a218"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @hopopts={0x2c, 0x8, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x9, 0x8, [0x5]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}]}, @srh={0x4, 0xc, 0x4, 0x6, 0xa7, 0x84, 0x8, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @dev={0xfe, 0x80, '\x00', 0x1f}, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2b}, @mcast2, @rand_addr=' \x01\x00']}, @hopopts={0x3c, 0x7, '\x00', [@ra={0x5, 0x2, 0x8648}, @calipso={0x7, 0x18, {0x2, 0x4, 0x1, 0x5, [0xcb, 0x1]}}, @calipso={0x7, 0x18, {0x3, 0x4, 0x80, 0x0, [0x9, 0x4]}}, @ra={0x5, 0x2, 0x3}, @pad1]}, @fragment={0x1, 0x0, 0x9, 0x0, 0x0, 0x9, 0x66}, @routing={0x5e, 0x8, 0x2, 0x1, 0x0, [@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty]}], @payload_direct={{{{0x26, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x2, 0x7, 0x3, 0x3, 0x0, 0xd5, 0x3, 0x4e20, 0x4e21}, 0x0, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 1.608077825s ago: executing program 1 (id=597): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000280)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) 1.247610122s ago: executing program 4 (id=603): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a3000000000080002"], 0x7c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) 1.064328318s ago: executing program 4 (id=605): r0 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r0, &(0x7f0000004380)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001640)=[{0x0, 0x63}, {&(0x7f0000000480)="ba3d2374", 0x4}], 0x2, 0x0, 0x0, 0x844}}], 0x1, 0x814) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000640)={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x40000, 0x40, 0x5, 0x100, 0x6, 0x40008}) 919.441547ms ago: executing program 4 (id=607): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000340)=0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0xfffffffd) close(r1) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) close(0x3) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='rcu_utilization\x00', r4}, 0x18) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000000f1401000bbd7000fcdbdf25080045006d616400"], 0x18}, 0x1, 0x0, 0x0, 0x4000890}, 0x40080) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='contention_end\x00', r5, 0x0, 0x3}, 0x18) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008100) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @remote, 0x40}}, 0x0, 0x0, 0x49, 0x0, "74b726a137c433aa4cf0f8a94c7510ddbf387212ce63ffca84192f1a7e8fada98c09787c0f09d31204d72b1adc22136d0634dc3a24c89484e02716f385873737b1b6f21d8d87d45685a6377fb167d2e7"}, 0xd8) close(0xffffffffffffffff) write(r7, &(0x7f0000000000)="2e0003000100", 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000080)=0x8, 0x12) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x2, 0x8000000000400}) socket$nl_route(0x10, 0x3, 0x0) 857.545072ms ago: executing program 0 (id=608): unshare(0x8040600) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000000)={r7, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x0, 0xaf6d, 0x8, 0x5, 0x7f, 0x0, 0x7, 0x8001, r7}, 0x20) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x40000) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r9, 0x10e, 0xb, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001f0003050071d3561480395437220755edb1d6609a64e88a805b6dde9a0332ab90fe3023151177052026a5db4ba737421c1d04d27f38f100d9988180000d260fd542d5853945e77deb894f2767f01e05a4e53299bafb26ff0f000032fdcf9ddda9f2b76cef466c00"/122, @ANYRES64=r3, @ANYRESOCT=r8, @ANYRES32=r8], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 684.01804ms ago: executing program 0 (id=609): r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000140)=0x10, 0x80000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001800)={@map, 0xffffffffffffffff, 0x31, 0x0, 0x0, @void, @value}, 0x20) bind$llc(r0, &(0x7f00000000c0)={0x1a, 0x339, 0xa5, 0xb7, 0x81, 0x26, @random="98daa6d73033"}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) 655.322212ms ago: executing program 1 (id=610): r0 = socket$kcm(0x21, 0x2, 0x2) (async) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r1, 0x541b, &(0x7f0000000000)) (async) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 597.385387ms ago: executing program 0 (id=611): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)=@delqdisc={0x230, 0x25, 0x801, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x8}, {0x1, 0xa}, {0x2, 0x6}}, [@TCA_STAB={0x124, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x9, 0x6, 0x0, 0x0, 0x8, 0x6}}, {0x10, 0x2, [0x9, 0x876, 0x0, 0xff, 0x2, 0xe]}}, {{0x1c, 0x1, {0x9, 0xff, 0x73d4, 0x3, 0x0, 0xffffff48, 0xc006, 0x2}}, {0x8, 0x2, [0x7, 0x1]}}, {{0x1c, 0x1, {0x7, 0x9, 0x9, 0x9, 0x2, 0xfffffffa, 0x8, 0xa}}, {0x18, 0x2, [0x3a5f, 0x1, 0x0, 0x3ff, 0x100, 0x7, 0x7f, 0x0, 0xfc00, 0x3]}}, {{0x1c, 0x1, {0x1, 0xd, 0x5, 0x4, 0x2, 0x499, 0x5, 0x2}}, {0x8, 0x2, [0x3, 0x4]}}, {{0x1c, 0x1, {0x4d, 0x35, 0x6, 0x3, 0x0, 0x9, 0x1000, 0x4}}, {0xc, 0x2, [0x0, 0x800, 0x5, 0x7fff]}}, {{0x1c, 0x1, {0x1, 0x3f, 0x2, 0x0, 0x0, 0x8001, 0x4, 0x7}}, {0x12, 0x2, [0x4, 0x3, 0x9, 0x2, 0xd3, 0xbebb, 0x8]}}, {{0x1c, 0x1, {0x46, 0x4, 0x0, 0x80000000, 0x0, 0x400, 0x2}}, {0x4}}]}, @qdisc_kind_options=@q_fq={{0x7}, {0x54, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x4}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x4d62}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x7f}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x4}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xf}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x2}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x4}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x2}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x6}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x2}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x5}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xc}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x7f, 0x8, 0xb, 0x2, 0x5, 0x10001, 0x6}}, {0x10, 0x2, [0x7, 0x9b5, 0x4, 0x8, 0x400, 0x167d]}}, {{0x1c, 0x1, {0x6, 0xd, 0x1ff, 0xbf50, 0x1, 0x2, 0x6, 0x6}}, {0x10, 0x2, [0xd30, 0x7, 0x4460, 0xb, 0xfff, 0x2d]}}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x81}, 0x850) 517.193795ms ago: executing program 1 (id=612): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000840)=ANY=[@ANYBLOB="7c01000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000073000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000001900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000039564357be71653f0000000010000000000000000000000000804000000000000000000000000000000000000000000200000000c4000500ac1414bb000000000000000000000000000004d2330000000a000000200100000000000000000000000000010335000002030800000400000f000000feffffffac1414aa000000000000000000000000000004d63320"], 0x17c}, 0x1, 0x300000000000000}, 0x4000840) 516.26557ms ago: executing program 0 (id=613): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000680)=ANY=[@ANYBLOB="18012f00210001000000000000000000fc020000000000000000000000000000ff0200000000000000000000000000014e210000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac14140c000000000000000000000000fc000000000000000000000000000001fe8000000000000000000000000000bbffffffff000000000000000000000000ff000000020000449c000a0000000000000000000000ffff7f000001fc02000000000000000000000000000064010102000000000000000000000000bc0200000000000000000000000000203c00000000000000080002002c0013"], 0x118}}, 0x44) 460.315987ms ago: executing program 1 (id=614): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a3000000380080001400000000008000240000000002c0003"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x16}, {0x0, 0x6faa}, {0x0, 0x0, 0x3e0}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@remote, 0x800, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x1, 0xfb}}, 0xe8) close(r1) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0xa, 0x6) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000000c0)={@private, @broadcast, 0x0}, &(0x7f0000000380)=0xc) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'veth0_macvtap\x00', 0x1000}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r10 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r9, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@private}}, &(0x7f0000000100)=0xe8) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) setsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000340)={r10, r11, r12}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e24, 0xff70, 0x4e22, 0x40, 0x2, 0x20, 0xa0, 0x3a, r6, r11}, {0x2, 0x6, 0x4, 0x5, 0x8, 0x3849, 0x91, 0x8}, {0x1800000000000, 0x7fffffff, 0x8, 0x80000000}, 0x0, 0x6e6bc0, 0x0, 0x0, 0x3, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d2, 0x33}, 0xa, @in=@loopback, 0x3505, 0x4, 0x0, 0x93, 0x398, 0x9, 0x81}}, 0xe8) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002400000000058000000200a0101000b000000000000010000000900020073797a30000000000900010073797a30"], 0xf8}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001900010000000000000000001c140000fe000001000000001400120011"], 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x30, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xa}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8}, @TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x60}}, 0x0) 334.858657ms ago: executing program 0 (id=615): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a3000000000080002"], 0x7c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) 332.198288ms ago: executing program 4 (id=616): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000400000003"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 131.742604ms ago: executing program 4 (id=617): socket(0xa, 0x3, 0x87) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000, @void, @value}, 0x94) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000640)={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x40000, 0x40, 0x5, 0x100, 0x6, 0x40008}) 21.923488ms ago: executing program 1 (id=618): socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/83, 0x53}, {&(0x7f0000000140)=""/46, 0x2e}, {0x0}], 0x5}}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="13000000100000000100"/20, @ANYRES32, @ANYBLOB="000000db00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) socket$packet(0x11, 0x2, 0x300) close(0x3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYRES8=r1, @ANYRES32], 0x26c0}}, 0x4010) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 6.24978ms ago: executing program 0 (id=619): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000), 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x21, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x15, &(0x7f0000001600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x6d}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@jmp={0x5, 0x0, 0x3, 0x8, 0x0, 0x1, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5a3e, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ldst={0x1, 0x2, 0x0, 0x9, 0x9, 0xfffffffffffffffc, 0x8}]}, &(0x7f0000000740)='GPL\x00', 0x9, 0x77, &(0x7f0000000a40)=""/119, 0xc3200, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000980)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x1200, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) 0s ago: executing program 4 (id=620): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095", @ANYRES8, @ANYRES16, @ANYBLOB="b75fe0315eecd9d4bb652b03b6ddb2dcc0230498117bf83f710b6c43f05b359de43088b8dc3c5e1bead7715c8ec362af5c9874391f9f7ab92c7d863b64c96032fe5890425e227745270733983974e9aeb32fa53b97c6fb4c67a427e0b3b315d515bf64226d25a9bb9c7cc2c1764ed5e495da3625c4f1cde17cc68391c15faf1731a9c18488"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f00000004c0)=""/190, 0x2000000, 0x1000, 0x1}, 0x20) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x5, 0x4) socket$inet(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvfrom(r5, 0x0, 0x0, 0x2000, 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) pipe(&(0x7f00000000c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x23, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x20, r8, 0xe23, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffea1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r11, 0x0, 0xf69}, 0x18) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) write$bt_hci(r3, &(0x7f0000000000)={0x1, @le_set_scan_enable={{0x200c, 0x2}, {0xc, 0xe}}}, 0x6) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb00000600020001000000440003000000000008000500", @ANYRES32], 0x64}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000191400"], 0xd8}}, 0x80) kernel console output (not intermixed with test programs): 5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.351685][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.374263][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.384967][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.398550][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.411706][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.424120][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.443616][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.482456][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.491653][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.505701][ T5914] IPVS: set_ctl: invalid protocol: 103 100.1.1.2:20004 [ 89.525276][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.525957][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.544124][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.559410][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.571785][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.584362][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.595763][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.607162][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.619484][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.694703][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.710864][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.727838][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.736579][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.792262][ T5919] Bluetooth: MGMT ver 1.23 [ 89.890544][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.914851][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.949999][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.971684][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.015677][ T5922] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.016211][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.067085][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.153847][ T4760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.182065][ T4760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.239775][ T5839] Bluetooth: hci0: command tx timeout [ 90.249019][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.273264][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.347722][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.369919][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.397886][ T5839] Bluetooth: hci1: command tx timeout [ 90.458623][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.466917][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.488082][ T5839] Bluetooth: hci2: command tx timeout [ 90.559661][ T5839] Bluetooth: hci3: command tx timeout [ 90.565122][ T5839] Bluetooth: hci4: command tx timeout [ 90.617181][ T5933] xt_l2tp: v2 sid > 0xffff: 262144 [ 90.956760][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 90.967688][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 91.022259][ T5945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.040890][ T5945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.140714][ T5945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.165149][ T5945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.166281][ T5957] netlink: 'syz.2.3': attribute type 21 has an invalid length. [ 91.185330][ T5957] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3'. [ 91.240299][ T5957] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 91.272254][ T5957] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3'. [ 91.335849][ T5960] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.449423][ T5963] openvswitch: netlink: Message has 8 unknown bytes. [ 91.845316][ T5830] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 91.875248][ T10] cfg80211: failed to load regulatory.db [ 91.944572][ T5966] syz.4.17 uses obsolete (PF_INET,SOCK_PACKET) [ 91.977449][ T5966] netlink: 'syz.4.17': attribute type 10 has an invalid length. [ 91.989593][ T5968] netlink: 'syz.4.17': attribute type 10 has an invalid length. [ 92.034549][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.042993][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.068720][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.076656][ T5968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.084671][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.091901][ T5968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.165739][ T5968] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 92.193655][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.200986][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.319347][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.542276][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.650811][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.780963][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.980879][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.211353][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28'. [ 93.268857][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28'. [ 93.321789][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28'. [ 93.391487][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 93.595297][ T13] bridge_slave_1: left allmulticast mode [ 93.622813][ T13] bridge_slave_1: left promiscuous mode [ 93.668335][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.740474][ T13] bridge_slave_0: left allmulticast mode [ 93.757078][ T13] bridge_slave_0: left promiscuous mode [ 93.790796][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.906236][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.915800][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.926514][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.941866][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.949773][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.425457][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.441656][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.454285][ T13] bond0 (unregistering): Released all slaves [ 94.666743][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.36'. [ 94.747673][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.36'. [ 94.794469][ T6052] Zero length message leads to an empty skb [ 95.203149][ T6082] xt_l2tp: v2 sid > 0xffff: 262144 [ 95.314849][ T6088] netlink: 'syz.4.43': attribute type 30 has an invalid length. [ 95.429294][ T6091] openvswitch: netlink: nsh attr 12 is out of range max 3 [ 95.460954][ T6091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.851456][ T13] hsr_slave_0: left promiscuous mode [ 95.909770][ T13] hsr_slave_1: left promiscuous mode [ 95.933175][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.981047][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.003322][ T5830] Bluetooth: hci3: command tx timeout [ 96.054144][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.114000][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.184757][ T13] veth1_macvtap: left promiscuous mode [ 96.194441][ T13] veth0_macvtap: left promiscuous mode [ 96.227880][ T13] veth1_vlan: left promiscuous mode [ 96.233406][ T13] veth0_vlan: left promiscuous mode [ 96.800742][ T13] team0 (unregistering): Port device team_slave_1 removed [ 96.837159][ T13] team0 (unregistering): Port device team_slave_0 removed [ 97.273567][ T6120] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.281579][ T6120] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.326540][ T6137] xt_l2tp: v2 sid > 0xffff: 262144 [ 97.582449][ T6120] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.591852][ T6120] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.605569][ T6120] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.615444][ T6120] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.659729][ T6128] __nla_validate_parse: 4 callbacks suppressed [ 97.659750][ T6128] netlink: 96 bytes leftover after parsing attributes in process `syz.4.52'. [ 97.750738][ T6133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.972013][ T6033] chnl_net:caif_netlink_parms(): no params data found [ 98.077853][ T5830] Bluetooth: hci3: command tx timeout [ 98.412145][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.62'. [ 98.456755][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.62'. [ 98.606599][ T6181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.64'. [ 98.632444][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'. [ 98.703091][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.728970][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.737471][ T6033] bridge_slave_0: entered allmulticast mode [ 98.746119][ T6033] bridge_slave_0: entered promiscuous mode [ 98.757409][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.766737][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.785425][ T6033] bridge_slave_1: entered allmulticast mode [ 98.804744][ T6033] bridge_slave_1: entered promiscuous mode [ 98.932502][ T6196] xt_l2tp: v2 sid > 0xffff: 262144 [ 99.055048][ T6198] Cannot find set identified by id 0 to match [ 99.101722][ T6200] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20001 [ 99.342259][ T6033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.620467][ T6204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.657786][ T6204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.742125][ T6204] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.751795][ T6204] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.761804][ T6204] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.770928][ T6204] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.825424][ T6033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.953978][ T6219] FAULT_INJECTION: forcing a failure. [ 99.953978][ T6219] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.967690][ T6219] CPU: 1 UID: 0 PID: 6219 Comm: syz.1.73 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 99.967717][ T6219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 99.967733][ T6219] Call Trace: [ 99.967744][ T6219] [ 99.967752][ T6219] dump_stack_lvl+0x189/0x250 [ 99.967795][ T6219] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.967821][ T6219] ? __pfx__printk+0x10/0x10 [ 99.967853][ T6219] should_fail_ex+0x414/0x560 [ 99.967888][ T6219] _copy_to_user+0x31/0xb0 [ 99.967915][ T6219] simple_read_from_buffer+0xe1/0x170 [ 99.967944][ T6219] proc_fail_nth_read+0x1df/0x250 [ 99.967975][ T6219] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.968005][ T6219] ? rw_verify_area+0x258/0x650 [ 99.968025][ T6219] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.968053][ T6219] vfs_read+0x1fd/0x980 [ 99.968080][ T6219] ? __pfx___mutex_lock+0x10/0x10 [ 99.968106][ T6219] ? __pfx_vfs_read+0x10/0x10 [ 99.968129][ T6219] ? __fget_files+0x2a/0x420 [ 99.968158][ T6219] ? __fget_files+0x3a0/0x420 [ 99.968181][ T6219] ? __fget_files+0x2a/0x420 [ 99.968215][ T6219] ksys_read+0x145/0x250 [ 99.968234][ T6219] ? __fget_files+0x2a/0x420 [ 99.968259][ T6219] ? __pfx_ksys_read+0x10/0x10 [ 99.968285][ T6219] ? do_syscall_64+0xba/0x210 [ 99.968313][ T6219] do_syscall_64+0xf6/0x210 [ 99.968338][ T6219] ? clear_bhb_loop+0x45/0xa0 [ 99.968362][ T6219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.968380][ T6219] RIP: 0033:0x7f810218d37c [ 99.968403][ T6219] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 99.968419][ T6219] RSP: 002b:00007f8102f98030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.968442][ T6219] RAX: ffffffffffffffda RBX: 00007f81023b5fa0 RCX: 00007f810218d37c [ 99.968455][ T6219] RDX: 000000000000000f RSI: 00007f8102f980a0 RDI: 0000000000000004 [ 99.968466][ T6219] RBP: 00007f8102f98090 R08: 0000000000000000 R09: 0000000000000000 [ 99.968477][ T6219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.968488][ T6219] R13: 0000000000000000 R14: 00007f81023b5fa0 R15: 00007ffe2e62ed68 [ 99.968516][ T6219] [ 100.231234][ T5839] Bluetooth: hci3: command tx timeout [ 100.252917][ T6033] team0: Port device team_slave_0 added [ 100.512063][ T6033] team0: Port device team_slave_1 added [ 100.675984][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.694370][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.725241][ T6033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.740045][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'. [ 100.851795][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.870099][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.902956][ T6033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.923825][ T6254] batadv1: entered promiscuous mode [ 101.233271][ T6033] hsr_slave_0: entered promiscuous mode [ 101.249247][ T6033] hsr_slave_1: entered promiscuous mode [ 101.259291][ T6033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.278902][ T6033] Cannot create hsr debugfs directory [ 101.512240][ T6253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.540767][ T6253] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.556117][ T6253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.237776][ T5839] Bluetooth: hci3: command 0x0419 tx timeout [ 102.693719][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'. [ 104.202277][ T6367] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 104.224217][ T6380] netlink: 64 bytes leftover after parsing attributes in process `syz.2.108'. [ 104.238593][ T6367] syzkaller0: linktype set to 774 [ 104.251362][ T6033] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.291452][ T6367] netlink: 20 bytes leftover after parsing attributes in process `syz.4.105'. [ 104.313096][ T6033] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.328578][ T5830] Bluetooth: hci3: command 0x0419 tx timeout [ 104.373434][ T6386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.110'. [ 104.487271][ T6033] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.618065][ T6033] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.757023][ T6395] lo speed is unknown, defaulting to 1000 [ 104.763879][ T6395] lo speed is unknown, defaulting to 1000 [ 104.818063][ T6397] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 104.847471][ T6395] lo speed is unknown, defaulting to 1000 [ 104.873933][ T6398] team0: Device gtp0 is of different type [ 104.893833][ T6395] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 104.911578][ T6395] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 105.177109][ T6395] lo speed is unknown, defaulting to 1000 [ 105.269077][ T6395] lo speed is unknown, defaulting to 1000 [ 105.360637][ T6395] lo speed is unknown, defaulting to 1000 [ 105.461965][ T6413] netlink: 16 bytes leftover after parsing attributes in process `syz.2.116'. [ 105.473228][ T6413] netlink: 20 bytes leftover after parsing attributes in process `syz.2.116'. [ 105.496616][ T6395] lo speed is unknown, defaulting to 1000 [ 105.567519][ T6413] geneve2: entered allmulticast mode [ 105.703624][ T6395] lo speed is unknown, defaulting to 1000 [ 105.733823][ T6395] lo speed is unknown, defaulting to 1000 [ 105.751460][ T6412] lo speed is unknown, defaulting to 1000 [ 105.766718][ T6033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.783704][ T6395] lo speed is unknown, defaulting to 1000 [ 105.989603][ T6434] netlink: 32 bytes leftover after parsing attributes in process `syz.1.117'. [ 106.171518][ T6033] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.220935][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.228170][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.246222][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.253473][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.528213][ T6452] warning: `syz.4.119' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.746548][ T6465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.121'. [ 107.262233][ T6033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.376511][ T6033] veth0_vlan: entered promiscuous mode [ 107.480392][ T6033] veth1_vlan: entered promiscuous mode [ 107.640372][ T6033] veth0_macvtap: entered promiscuous mode [ 107.650213][ T6498] sctp: [Deprecated]: syz.2.127 (pid 6498) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.650213][ T6498] Use struct sctp_sack_info instead [ 107.666705][ T6499] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 107.689885][ T6498] netlink: 'syz.2.127': attribute type 1 has an invalid length. [ 107.698263][ T6033] veth1_macvtap: entered promiscuous mode [ 107.750592][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.808961][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.843111][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.866932][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.882444][ T6033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.988368][ T6493] bond1 (unregistering): Released all slaves [ 108.201573][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.236013][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.259104][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.306304][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.352449][ T6033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.456433][ T6033] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.507654][ T6033] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.516413][ T6033] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.594998][ T6033] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.789454][ T6527] lo speed is unknown, defaulting to 1000 [ 108.813360][ T6532] netlink: 'syz.0.133': attribute type 10 has an invalid length. [ 108.888057][ T6532] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 108.954095][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.136'. [ 108.963912][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.136'. [ 109.048736][ T6463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.056615][ T6463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.332685][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.343560][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.703048][ T6566] netlink: 232 bytes leftover after parsing attributes in process `syz.0.144'. [ 109.713737][ T6566] netlink: 'syz.0.144': attribute type 178 has an invalid length. [ 109.845559][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.980616][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.001378][ T30] audit: type=1800 audit(1745645139.045:2): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.146" name="memory.events" dev="tmpfs" ino=224 res=0 errno=0 [ 110.072561][ T30] audit: type=1804 audit(1745645139.045:3): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.146" name="/newroot/40/memory.events" dev="tmpfs" ino=224 res=1 errno=0 [ 110.136021][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.280474][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.366174][ T6582] lo speed is unknown, defaulting to 1000 [ 110.460908][ T6584] lo speed is unknown, defaulting to 1000 [ 110.732275][ T6585] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 110.820167][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 110.834545][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.851348][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 110.862012][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 110.886765][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 110.958793][ T6583] lo speed is unknown, defaulting to 1000 [ 111.000865][ T36] bridge_slave_1: left allmulticast mode [ 111.006662][ T36] bridge_slave_1: left promiscuous mode [ 111.016305][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.035097][ T36] bridge_slave_0: left allmulticast mode [ 111.042655][ T36] bridge_slave_0: left promiscuous mode [ 111.052358][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.413683][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.424650][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.436251][ T36] bond0 (unregistering): Released all slaves [ 111.481000][ T6586] lo speed is unknown, defaulting to 1000 [ 111.531159][ T6588] lo speed is unknown, defaulting to 1000 [ 111.610040][ T6587] lo speed is unknown, defaulting to 1000 [ 111.627766][ T6592] lo speed is unknown, defaulting to 1000 [ 111.940345][ T36] hsr_slave_0: left promiscuous mode [ 111.946311][ T36] hsr_slave_1: left promiscuous mode [ 111.952992][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.962706][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.970867][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.978771][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.997402][ T36] veth1_macvtap: left promiscuous mode [ 112.003441][ T36] veth0_macvtap: left promiscuous mode [ 112.009670][ T36] veth1_vlan: left promiscuous mode [ 112.015000][ T36] veth0_vlan: left promiscuous mode [ 112.401109][ T36] team0 (unregistering): Port device team_slave_1 removed [ 112.434545][ T36] team0 (unregistering): Port device team_slave_0 removed [ 112.932362][ T6592] chnl_net:caif_netlink_parms(): no params data found [ 112.963289][ T5830] Bluetooth: hci3: command tx timeout [ 113.110407][ T6603] netlink: 20 bytes leftover after parsing attributes in process `syz.2.152'. [ 113.417049][ T6616] xt_l2tp: v2 sid > 0xffff: 262144 [ 113.459194][ T6603] netlink: 'syz.2.152': attribute type 10 has an invalid length. [ 113.602560][ T6592] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.624929][ T6592] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.656270][ T6592] bridge_slave_0: entered allmulticast mode [ 113.670487][ T6592] bridge_slave_0: entered promiscuous mode [ 113.717160][ T6592] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.734212][ T6592] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.742135][ T6592] bridge_slave_1: entered allmulticast mode [ 113.754482][ T6592] bridge_slave_1: entered promiscuous mode [ 113.786730][ T6638] netlink: 'syz.4.162': attribute type 4 has an invalid length. [ 113.794624][ T6638] netlink: 17 bytes leftover after parsing attributes in process `syz.4.162'. [ 113.955566][ T6592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.980769][ T6592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.137283][ T6652] xt_l2tp: v2 sid > 0xffff: 262144 [ 114.277492][ T6592] team0: Port device team_slave_0 added [ 114.306678][ T6592] team0: Port device team_slave_1 added [ 114.468747][ T6592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.475772][ T6592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.563322][ T6592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.587509][ T6592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.597658][ T6592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.704864][ T6592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.901072][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 114.903123][ T6592] hsr_slave_0: entered promiscuous mode [ 114.929613][ T6592] hsr_slave_1: entered promiscuous mode [ 114.936084][ T6592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.954639][ T6592] Cannot create hsr debugfs directory [ 114.958511][ T6685] netlink: 24 bytes leftover after parsing attributes in process `syz.0.178'. [ 114.986168][ T6685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.038883][ T5830] Bluetooth: hci3: command tx timeout [ 115.545601][ T6697] bridge0: port 3(gretap0) entered blocking state [ 115.555004][ T6697] bridge0: port 3(gretap0) entered disabled state [ 115.583712][ T6697] gretap0: entered allmulticast mode [ 115.615348][ T6697] gretap0: entered promiscuous mode [ 115.630374][ T6697] bridge0: port 3(gretap0) entered blocking state [ 115.637361][ T6697] bridge0: port 3(gretap0) entered forwarding state [ 115.653433][ T6700] xt_l2tp: v2 sid > 0xffff: 262144 [ 115.940066][ T6706] IPVS: sed: UDP 224.0.0.2:20004 - no destination available [ 115.951932][ T5881] IPVS: starting estimator thread 0... [ 115.957153][ T6709] IPVS: sed: UDP 224.0.0.2:20004 - no destination available [ 115.960128][ T6592] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 116.008489][ T6592] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 116.042406][ T6592] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 116.059671][ T6710] IPVS: using max 28 ests per chain, 67200 per kthread [ 116.076291][ T6592] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 116.387438][ T6592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.467522][ T6592] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.510756][ T6463] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.517987][ T6463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.526942][ T6729] trusted_key: syz.0.191 sent an empty control message without MSG_MORE. [ 116.565653][ T6463] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.572945][ T6463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.944394][ T6592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.966165][ T6740] lo speed is unknown, defaulting to 1000 [ 117.118045][ T5830] Bluetooth: hci3: command tx timeout [ 117.189636][ T6592] veth0_vlan: entered promiscuous mode [ 117.225835][ T6592] veth1_vlan: entered promiscuous mode [ 117.311309][ T6592] veth0_macvtap: entered promiscuous mode [ 117.361051][ T6592] veth1_macvtap: entered promiscuous mode [ 117.363108][ T6745] xt_l2tp: v2 sid > 0xffff: 262144 [ 117.445395][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.472492][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.501822][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.520409][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.540463][ T6592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.556838][ T6748] netlink: 'syz.4.195': attribute type 14 has an invalid length. [ 117.609433][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.642691][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.660433][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.687715][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.709293][ T6592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.062451][ T6592] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.107782][ T6592] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.137780][ T6592] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.147166][ T6592] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.176315][ T6762] netlink: 'syz.0.199': attribute type 29 has an invalid length. [ 118.436277][ T6771] xfrm1: entered promiscuous mode [ 118.460300][ T6771] xfrm1: entered allmulticast mode [ 118.481649][ T6780] xt_l2tp: v2 sid > 0xffff: 262144 [ 118.519551][ T6781] xt_hashlimit: size too large, truncated to 1048576 [ 118.826405][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.842834][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.843395][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.207'. [ 118.887937][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.207'. [ 118.930276][ T6788] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.938629][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.966743][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.080886][ T6796] netlink: 5 bytes leftover after parsing attributes in process `syz.4.208'. [ 119.169231][ T6797] netlink: 5 bytes leftover after parsing attributes in process `syz.4.208'. [ 119.198704][ T5830] Bluetooth: hci3: command tx timeout [ 119.364397][ T6800] lo speed is unknown, defaulting to 1000 [ 119.951050][ T1106] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.082808][ T6815] lo speed is unknown, defaulting to 1000 [ 120.160518][ T6801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.209'. [ 120.246647][ T1106] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.422260][ T6826] xt_l2tp: v2 sid > 0xffff: 262144 [ 120.471927][ T6801] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.613168][ T6811] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.624647][ T6811] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 120.637240][ T6811] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 120.640642][ T6831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.219'. [ 120.668133][ T6830] netlink: 48 bytes leftover after parsing attributes in process `syz.2.218'. [ 120.678460][ T6830] netlink: 28 bytes leftover after parsing attributes in process `syz.2.218'. [ 120.684752][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 120.697398][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 120.706789][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 120.715126][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 120.723707][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 120.766730][ T1106] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.961034][ T1106] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.053917][ T6832] lo speed is unknown, defaulting to 1000 [ 121.432248][ T1106] bridge_slave_1: left allmulticast mode [ 121.440656][ T1106] bridge_slave_1: left promiscuous mode [ 121.446701][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.461526][ T1106] bridge_slave_0: left allmulticast mode [ 121.469093][ T1106] bridge_slave_0: left promiscuous mode [ 121.475374][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.583003][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.228'. [ 121.832190][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.843696][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.855157][ T1106] bond0 (unregistering): Released all slaves [ 121.893606][ T6855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.905499][ T6855] bond0: (slave bond1): Enslaving as an active interface with an up link [ 121.922742][ T6857] netlink: 184 bytes leftover after parsing attributes in process `syz.0.227'. [ 121.974685][ T6861] batman_adv: batadv0: Adding interface: dummy0 [ 121.987732][ T6861] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.037952][ T6861] batman_adv: batadv0: Interface activated: dummy0 [ 122.093576][ T6865] batadv0: mtu less than device minimum [ 122.094605][ T6871] xt_l2tp: v2 sid > 0xffff: 262144 [ 122.102050][ T6865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.117621][ T6865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.129557][ T6865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.141537][ T6865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.153517][ T6865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.165539][ T6865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.177473][ T6865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.189452][ T6865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.201501][ T6865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 122.294028][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.232'. [ 122.393373][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 122.467484][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 122.494641][ T6832] chnl_net:caif_netlink_parms(): no params data found [ 122.547947][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 122.579157][ T6883] batman_adv: batadv0: Interface deactivated: dummy0 [ 122.611350][ T6883] batman_adv: batadv0: Removing interface: dummy0 [ 122.629403][ T6883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.636988][ T6883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.648198][ T6883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.655666][ T6883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.798420][ T5830] Bluetooth: hci3: command tx timeout [ 123.277754][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.427009][ T6903] FAULT_INJECTION: forcing a failure. [ 124.427009][ T6903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.455456][ T6903] CPU: 0 UID: 0 PID: 6903 Comm: syz.1.237 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 124.455486][ T6903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 124.455499][ T6903] Call Trace: [ 124.455507][ T6903] [ 124.455535][ T6903] dump_stack_lvl+0x189/0x250 [ 124.455568][ T6903] ? __lock_acquire+0xaac/0xd20 [ 124.455600][ T6903] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.455628][ T6903] ? __pfx__printk+0x10/0x10 [ 124.455648][ T6903] ? __might_fault+0xb0/0x130 [ 124.455686][ T6903] should_fail_ex+0x414/0x560 [ 124.455722][ T6903] _copy_from_user+0x2d/0xb0 [ 124.455749][ T6903] ___sys_sendmsg+0x158/0x2a0 [ 124.455775][ T6903] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.455836][ T6903] ? __fget_files+0x2a/0x420 [ 124.455860][ T6903] ? __fget_files+0x3a0/0x420 [ 124.455896][ T6903] __x64_sys_sendmsg+0x19b/0x260 [ 124.455922][ T6903] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 124.455962][ T6903] ? do_syscall_64+0xba/0x210 [ 124.455993][ T6903] do_syscall_64+0xf6/0x210 [ 124.456020][ T6903] ? clear_bhb_loop+0x45/0xa0 [ 124.456044][ T6903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.456064][ T6903] RIP: 0033:0x7f810218e969 [ 124.456081][ T6903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.456101][ T6903] RSP: 002b:00007f8102f98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.456122][ T6903] RAX: ffffffffffffffda RBX: 00007f81023b5fa0 RCX: 00007f810218e969 [ 124.456137][ T6903] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 124.456149][ T6903] RBP: 00007f8102f98090 R08: 0000000000000000 R09: 0000000000000000 [ 124.456165][ T6903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.456177][ T6903] R13: 0000000000000000 R14: 00007f81023b5fa0 R15: 00007ffe2e62ed68 [ 124.456208][ T6903] [ 124.737420][ T1106] hsr_slave_0: left promiscuous mode [ 124.770342][ T1106] hsr_slave_1: left promiscuous mode [ 124.776723][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.795425][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.803265][ T6912] netlink: 'syz.2.240': attribute type 64 has an invalid length. [ 124.830009][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.843223][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.860184][ T6914] xt_l2tp: v2 sid > 0xffff: 262144 [ 124.878086][ T5830] Bluetooth: hci3: command 0x041b tx timeout [ 124.896417][ T1106] veth1_macvtap: left promiscuous mode [ 124.902284][ T1106] veth0_macvtap: left promiscuous mode [ 124.908292][ T1106] veth1_vlan: left promiscuous mode [ 124.913812][ T1106] veth0_vlan: left promiscuous mode [ 125.705066][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 125.742022][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 126.110420][ T6916] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 126.137729][ T6916] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 126.241446][ T6919] __nla_validate_parse: 2 callbacks suppressed [ 126.241464][ T6919] netlink: 248 bytes leftover after parsing attributes in process `syz.2.245'. [ 126.303655][ T6832] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.311727][ T6832] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.326342][ T6832] bridge_slave_0: entered allmulticast mode [ 126.334456][ T6832] bridge_slave_0: entered promiscuous mode [ 126.376146][ T6832] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.392061][ T6832] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.401726][ T6832] bridge_slave_1: entered allmulticast mode [ 126.412512][ T6832] bridge_slave_1: entered promiscuous mode [ 126.493624][ T6933] dummy0: entered promiscuous mode [ 126.516202][ T6832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.543598][ T6832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.620631][ T6935] FAULT_INJECTION: forcing a failure. [ 126.620631][ T6935] name failslab, interval 1, probability 0, space 0, times 1 [ 126.658657][ T6935] CPU: 0 UID: 0 PID: 6935 Comm: syz.1.249 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 126.658688][ T6935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 126.658701][ T6935] Call Trace: [ 126.658708][ T6935] [ 126.658716][ T6935] dump_stack_lvl+0x189/0x250 [ 126.658753][ T6935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.658781][ T6935] ? __pfx__printk+0x10/0x10 [ 126.658806][ T6935] ? __pfx___might_resched+0x10/0x10 [ 126.658829][ T6935] should_fail_ex+0x414/0x560 [ 126.658864][ T6935] should_failslab+0xa8/0x100 [ 126.658891][ T6935] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 126.658916][ T6935] ? __alloc_skb+0x112/0x2d0 [ 126.658939][ T6935] __alloc_skb+0x112/0x2d0 [ 126.658961][ T6935] netlink_sendmsg+0x5c6/0xb30 [ 126.658990][ T6935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.659012][ T6935] ? aa_sock_msg_perm+0x94/0x160 [ 126.659033][ T6935] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 126.659054][ T6935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.659073][ T6935] __sock_sendmsg+0x219/0x270 [ 126.659102][ T6935] ____sys_sendmsg+0x505/0x830 [ 126.659129][ T6935] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.659160][ T6935] ? import_iovec+0x74/0xa0 [ 126.659188][ T6935] ___sys_sendmsg+0x21f/0x2a0 [ 126.659212][ T6935] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.659268][ T6935] ? __fget_files+0x2a/0x420 [ 126.659294][ T6935] ? __fget_files+0x3a0/0x420 [ 126.659329][ T6935] __x64_sys_sendmsg+0x19b/0x260 [ 126.659354][ T6935] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 126.659394][ T6935] ? do_syscall_64+0xba/0x210 [ 126.659425][ T6935] do_syscall_64+0xf6/0x210 [ 126.659452][ T6935] ? clear_bhb_loop+0x45/0xa0 [ 126.659477][ T6935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.659496][ T6935] RIP: 0033:0x7f810218e969 [ 126.659514][ T6935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.659530][ T6935] RSP: 002b:00007f8102f98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.659558][ T6935] RAX: ffffffffffffffda RBX: 00007f81023b5fa0 RCX: 00007f810218e969 [ 126.659573][ T6935] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 126.659584][ T6935] RBP: 00007f8102f98090 R08: 0000000000000000 R09: 0000000000000000 [ 126.659596][ T6935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.659607][ T6935] R13: 0000000000000000 R14: 00007f81023b5fa0 R15: 00007ffe2e62ed68 [ 126.659638][ T6935] [ 126.665562][ T6832] team0: Port device team_slave_0 added [ 126.870100][ T6946] xt_l2tp: v2 sid > 0xffff: 262144 [ 126.904126][ T6832] team0: Port device team_slave_1 added [ 126.957860][ T5830] Bluetooth: hci3: command 0x041b tx timeout [ 127.013602][ T6832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.040145][ T6832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.079649][ T6832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.094562][ T6952] netlink: 'syz.0.255': attribute type 1 has an invalid length. [ 127.118606][ T6832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.125598][ T6832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.153389][ T6832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.346473][ T6832] hsr_slave_0: entered promiscuous mode [ 127.355607][ T6832] hsr_slave_1: entered promiscuous mode [ 127.369312][ T6832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.372016][ T6958] netlink: 'syz.0.259': attribute type 39 has an invalid length. [ 127.377388][ T6832] Cannot create hsr debugfs directory [ 127.647272][ T6964] netlink: 'syz.4.261': attribute type 16 has an invalid length. [ 127.655523][ T6964] netlink: 'syz.4.261': attribute type 17 has an invalid length. [ 127.712997][ T6964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.724187][ T6964] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.737076][ T6964] net_ratelimit: 13 callbacks suppressed [ 127.737088][ T6964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.936918][ T6974] netlink: 'syz.0.264': attribute type 13 has an invalid length. [ 127.961515][ T6974] netlink: 152 bytes leftover after parsing attributes in process `syz.0.264'. [ 127.979003][ T6978] netlink: 200 bytes leftover after parsing attributes in process `syz.2.266'. [ 128.010922][ T6974] erspan0: refused to change device tx_queue_len [ 128.021026][ T6974] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 128.078066][ T6977] lo speed is unknown, defaulting to 1000 [ 128.087173][ T6832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 128.125748][ T6975] lo speed is unknown, defaulting to 1000 [ 128.156476][ T6832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 128.204491][ T6832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 128.249025][ T6832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 128.432823][ T6992] netlink: 'syz.1.270': attribute type 1 has an invalid length. [ 128.551810][ T6992] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.972668][ T6832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.003539][ T7006] block nbd0: server does not support multiple connections per device. [ 129.019691][ T6832] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.026962][ T7006] block nbd0: shutting down sockets [ 129.038257][ T5830] Bluetooth: hci3: command 0x041b tx timeout [ 129.051009][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.058226][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.104616][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.111876][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.288316][ T7017] netlink: 180 bytes leftover after parsing attributes in process `syz.1.277'. [ 129.574271][ T7032] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 129.687195][ T6832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.738427][ T7041] netlink: 'syz.2.284': attribute type 4 has an invalid length. [ 129.748839][ T7041] netlink: 32 bytes leftover after parsing attributes in process `syz.2.284'. [ 129.766110][ T7041] netlink: 'syz.2.284': attribute type 9 has an invalid length. [ 129.829720][ T6832] veth0_vlan: entered promiscuous mode [ 129.853670][ T6832] veth1_vlan: entered promiscuous mode [ 129.915346][ T6832] veth0_macvtap: entered promiscuous mode [ 129.943035][ T6832] veth1_macvtap: entered promiscuous mode [ 129.985919][ T6832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.007284][ T6832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.019972][ T6832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.031946][ T6832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.042665][ T6832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.055621][ T6832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.079601][ T7051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.288'. [ 130.105254][ T6832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.125551][ T6832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.134861][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.289'. [ 130.145371][ T6832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.155927][ T6832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.300810][ T7060] netlink: 180 bytes leftover after parsing attributes in process `syz.4.290'. [ 130.355271][ T7053] lo speed is unknown, defaulting to 1000 [ 130.473940][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.495994][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.675706][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.705064][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.118111][ T5830] Bluetooth: hci3: command 0x041b tx timeout [ 131.421620][ T7082] Driver unsupported XDP return value 0 on prog (id 187) dev N/A, expect packet loss! [ 131.741431][ T7097] netlink: 180 bytes leftover after parsing attributes in process `syz.1.301'. [ 131.854041][ T7101] x_tables: duplicate underflow at hook 2 [ 132.103998][ T7118] netlink: 165 bytes leftover after parsing attributes in process `syz.0.308'. [ 132.104601][ T7116] netlink: 40 bytes leftover after parsing attributes in process `syz.2.307'. [ 132.136381][ T7116] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.389893][ T7129] netlink: 200 bytes leftover after parsing attributes in process `syz.2.313'. [ 132.441465][ T7131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.314'. [ 132.453515][ T7131] netlink: 'syz.0.314': attribute type 1 has an invalid length. [ 132.805658][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.812784][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.998666][ T7135] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.404306][ T7147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.537394][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 133.608296][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 133.923798][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 133.932952][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 133.942073][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 133.951262][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 133.964198][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 134.349650][ T7135] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.369702][ T7135] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.380633][ T7135] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.389591][ T7135] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.401631][ T7135] geneve2: left allmulticast mode [ 134.420350][ T7131] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 134.483112][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.552417][ T7161] pimreg: entered allmulticast mode [ 134.565976][ T7146] lo speed is unknown, defaulting to 1000 [ 134.575471][ T7161] pimreg: left allmulticast mode [ 134.644183][ T7164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.319'. [ 134.673333][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.737999][ T7161] Bluetooth: MGMT ver 1.23 [ 134.776621][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'. [ 134.798240][ T7168] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 134.847673][ T7168] netlink: 16 bytes leftover after parsing attributes in process `syz.0.320'. [ 134.887726][ T7168] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 134.913978][ T7156] lo speed is unknown, defaulting to 1000 [ 134.970615][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.676437][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.998608][ T5839] Bluetooth: hci3: command tx timeout [ 136.167452][ T7183] lo speed is unknown, defaulting to 1000 [ 136.173755][ T7156] chnl_net:caif_netlink_parms(): no params data found [ 136.258818][ T63] bridge_slave_1: left allmulticast mode [ 136.264649][ T63] bridge_slave_1: left promiscuous mode [ 136.270887][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.300086][ T63] bridge_slave_0: left allmulticast mode [ 136.312477][ T63] bridge_slave_0: left promiscuous mode [ 136.327630][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.805756][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.821629][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.834437][ T63] bond0 (unregistering): Released all slaves [ 136.935193][ T7199] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 137.138169][ T7212] netlink: 'syz.2.333': attribute type 1 has an invalid length. [ 137.145882][ T7212] __nla_validate_parse: 6 callbacks suppressed [ 137.145897][ T7212] netlink: 224 bytes leftover after parsing attributes in process `syz.2.333'. [ 137.233885][ T7156] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.247828][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.256350][ T7156] bridge_slave_0: entered allmulticast mode [ 137.268255][ T7156] bridge_slave_0: entered promiscuous mode [ 137.290665][ T7156] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.318244][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.327167][ T7156] bridge_slave_1: entered allmulticast mode [ 137.439549][ T7156] bridge_slave_1: entered promiscuous mode [ 137.456838][ T7216] netlink: 'syz.2.334': attribute type 13 has an invalid length. [ 137.479418][ T7216] netlink: 152 bytes leftover after parsing attributes in process `syz.2.334'. [ 137.583466][ T7219] ip6tnl1: entered promiscuous mode [ 137.597837][ T7219] ip6tnl1: entered allmulticast mode [ 137.717105][ T7156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.775771][ T7216] syz_tun: refused to change device tx_queue_len [ 137.797679][ T7216] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 137.890360][ T7156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.918713][ T7230] netlink: 200 bytes leftover after parsing attributes in process `syz.4.336'. [ 137.976034][ T63] hsr_slave_0: left promiscuous mode [ 138.001451][ T63] hsr_slave_1: left promiscuous mode [ 138.008386][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.015836][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.044419][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.052889][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.077919][ T5839] Bluetooth: hci3: command tx timeout [ 138.082747][ T63] veth1_macvtap: left promiscuous mode [ 138.097800][ T63] veth0_macvtap: left promiscuous mode [ 138.108485][ T63] veth1_vlan: left promiscuous mode [ 138.118127][ T63] veth0_vlan: left promiscuous mode [ 138.810546][ T63] team0 (unregistering): Port device team_slave_1 removed [ 138.863618][ T63] team0 (unregistering): Port device team_slave_0 removed [ 139.371914][ T7156] team0: Port device team_slave_0 added [ 139.405427][ T7156] team0: Port device team_slave_1 added [ 139.481712][ T7235] netlink: 40 bytes leftover after parsing attributes in process `syz.2.338'. [ 139.564324][ T7156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.597814][ T7156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.661502][ T7156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.689867][ T7156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.707689][ T7156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.746774][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 139.785878][ T7156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.993469][ T7156] hsr_slave_0: entered promiscuous mode [ 140.014648][ T7156] hsr_slave_1: entered promiscuous mode [ 140.021734][ T7156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.031299][ T7249] netlink: 165 bytes leftover after parsing attributes in process `syz.0.343'. [ 140.040548][ T7156] Cannot create hsr debugfs directory [ 140.157775][ T5839] Bluetooth: hci3: command tx timeout [ 140.203094][ T7257] netlink: 'syz.2.345': attribute type 20 has an invalid length. [ 140.494093][ T7266] netlink: 9 bytes leftover after parsing attributes in process `syz.4.347'. [ 140.575569][ T7266] gretap0: entered promiscuous mode [ 141.132615][ T7281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.351'. [ 141.162434][ T7156] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 141.170985][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 141.184570][ T7156] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 141.217074][ T7156] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 141.281694][ T7156] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 141.487370][ T7297] FAULT_INJECTION: forcing a failure. [ 141.487370][ T7297] name failslab, interval 1, probability 0, space 0, times 0 [ 141.501743][ T7297] CPU: 0 UID: 0 PID: 7297 Comm: syz.1.356 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 141.501772][ T7297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 141.501784][ T7297] Call Trace: [ 141.501792][ T7297] [ 141.501801][ T7297] dump_stack_lvl+0x189/0x250 [ 141.501851][ T7297] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.501884][ T7297] ? __pfx__printk+0x10/0x10 [ 141.501910][ T7297] ? __pfx___might_resched+0x10/0x10 [ 141.501934][ T7297] should_fail_ex+0x414/0x560 [ 141.501977][ T7297] should_failslab+0xa8/0x100 [ 141.502022][ T7297] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 141.502048][ T7297] ? __alloc_skb+0x112/0x2d0 [ 141.502072][ T7297] __alloc_skb+0x112/0x2d0 [ 141.502095][ T7297] netlink_sendmsg+0x5c6/0xb30 [ 141.502125][ T7297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.502155][ T7297] ? ____sys_sendmsg+0x91/0x830 [ 141.502174][ T7297] ? aa_sock_msg_perm+0x94/0x160 [ 141.502196][ T7297] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 141.502218][ T7297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.502241][ T7297] __sock_sendmsg+0x219/0x270 [ 141.502270][ T7297] ____sys_sendmsg+0x505/0x830 [ 141.502308][ T7297] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.502338][ T7297] ? import_iovec+0x74/0xa0 [ 141.502361][ T7297] ___sys_sendmsg+0x21f/0x2a0 [ 141.502388][ T7297] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.502447][ T7297] ? __fget_files+0x2a/0x420 [ 141.502467][ T7297] ? __fget_files+0x3a0/0x420 [ 141.502495][ T7297] __x64_sys_sendmsg+0x19b/0x260 [ 141.502526][ T7297] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 141.502562][ T7297] ? do_syscall_64+0xba/0x210 [ 141.502594][ T7297] do_syscall_64+0xf6/0x210 [ 141.502615][ T7297] ? clear_bhb_loop+0x45/0xa0 [ 141.502635][ T7297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.502650][ T7297] RIP: 0033:0x7f810218e969 [ 141.502673][ T7297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.502686][ T7297] RSP: 002b:00007f8102f98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.502703][ T7297] RAX: ffffffffffffffda RBX: 00007f81023b5fa0 RCX: 00007f810218e969 [ 141.502715][ T7297] RDX: 0000000000000044 RSI: 0000200000000380 RDI: 0000000000000004 [ 141.502724][ T7297] RBP: 00007f8102f98090 R08: 0000000000000000 R09: 0000000000000000 [ 141.502734][ T7297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.502749][ T7297] R13: 0000000000000000 R14: 00007f81023b5fa0 R15: 00007ffe2e62ed68 [ 141.502774][ T7297] [ 141.984538][ T7156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.010314][ T7156] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.117388][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.124606][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.172846][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.180112][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.240808][ T5839] Bluetooth: hci3: command tx timeout [ 142.428921][ T7317] lo speed is unknown, defaulting to 1000 [ 142.443377][ T7323] netlink: 'syz.0.364': attribute type 1 has an invalid length. [ 142.452369][ T7323] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 142.604386][ T7333] netlink: 'syz.4.366': attribute type 1 has an invalid length. [ 142.798675][ T7338] bond2 (unregistering): Released all slaves [ 143.157253][ T7156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.269089][ T7156] veth0_vlan: entered promiscuous mode [ 143.299584][ T7156] veth1_vlan: entered promiscuous mode [ 143.402823][ T7156] veth0_macvtap: entered promiscuous mode [ 143.404281][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.373'. [ 143.423270][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.373'. [ 143.434325][ T7360] netlink: 'syz.1.373': attribute type 1 has an invalid length. [ 143.439636][ T7156] veth1_macvtap: entered promiscuous mode [ 143.447897][ T7360] netlink: 10 bytes leftover after parsing attributes in process `syz.1.373'. [ 143.464527][ T7362] netlink: 'syz.4.375': attribute type 2 has an invalid length. [ 143.472813][ T7362] netlink: 44 bytes leftover after parsing attributes in process `syz.4.375'. [ 143.480179][ T7360] block nbd0: Unsupported socket: shutdown callout must be supported. [ 143.502101][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.513069][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.525808][ T7156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.539332][ T7370] netlink: 'syz.4.375': attribute type 1 has an invalid length. [ 143.608565][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.633174][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.651182][ T7156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.660363][ T7372] dummy0: mtu less than device minimum [ 143.734038][ T7156] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.762282][ T7382] FAULT_INJECTION: forcing a failure. [ 143.762282][ T7382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.776063][ T7156] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.785130][ T7156] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.794101][ T7382] CPU: 1 UID: 0 PID: 7382 Comm: syz.0.380 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 143.794129][ T7382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 143.794141][ T7382] Call Trace: [ 143.794149][ T7382] [ 143.794157][ T7382] dump_stack_lvl+0x189/0x250 [ 143.794189][ T7382] ? __lock_acquire+0xaac/0xd20 [ 143.794220][ T7382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.794248][ T7382] ? __pfx__printk+0x10/0x10 [ 143.794268][ T7382] ? __might_fault+0xb0/0x130 [ 143.794306][ T7382] should_fail_ex+0x414/0x560 [ 143.794342][ T7382] _copy_from_iter+0x1db/0x15a0 [ 143.794373][ T7382] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 143.794395][ T7382] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 143.794422][ T7382] ? __pfx__copy_from_iter+0x10/0x10 [ 143.794446][ T7382] ? __build_skb_around+0x257/0x3e0 [ 143.794470][ T7382] ? netlink_sendmsg+0x642/0xb30 [ 143.794487][ T7382] ? skb_put+0x11b/0x210 [ 143.794510][ T7382] netlink_sendmsg+0x6b2/0xb30 [ 143.794538][ T7382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.794560][ T7382] ? aa_sock_msg_perm+0x94/0x160 [ 143.794581][ T7382] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 143.794603][ T7382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.794622][ T7382] __sock_sendmsg+0x219/0x270 [ 143.794651][ T7382] ____sys_sendmsg+0x505/0x830 [ 143.794678][ T7382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.794709][ T7382] ? import_iovec+0x74/0xa0 [ 143.794737][ T7382] ___sys_sendmsg+0x21f/0x2a0 [ 143.794760][ T7382] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.794819][ T7382] ? __fget_files+0x2a/0x420 [ 143.794843][ T7382] ? __fget_files+0x3a0/0x420 [ 143.794889][ T7382] __x64_sys_sendmsg+0x19b/0x260 [ 143.794915][ T7382] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 143.794953][ T7382] ? do_syscall_64+0xba/0x210 [ 143.794984][ T7382] do_syscall_64+0xf6/0x210 [ 143.795010][ T7382] ? clear_bhb_loop+0x45/0xa0 [ 143.795034][ T7382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.795053][ T7382] RIP: 0033:0x7fd0b9d8e969 [ 143.795070][ T7382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.795087][ T7382] RSP: 002b:00007fd0bab9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.795107][ T7382] RAX: ffffffffffffffda RBX: 00007fd0b9fb5fa0 RCX: 00007fd0b9d8e969 [ 143.795126][ T7382] RDX: 0000000000000044 RSI: 0000200000000380 RDI: 0000000000000004 [ 143.795138][ T7382] RBP: 00007fd0bab9d090 R08: 0000000000000000 R09: 0000000000000000 [ 143.795151][ T7382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.795162][ T7382] R13: 0000000000000000 R14: 00007fd0b9fb5fa0 R15: 00007ffdb1b8c3d8 [ 143.795193][ T7382] [ 144.060590][ T7156] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.185933][ T7393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.383'. [ 144.203589][ T7393] netlink: 52 bytes leftover after parsing attributes in process `syz.2.383'. [ 144.363574][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.374180][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.446398][ T6463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.472790][ T6463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.650928][ T7420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.389'. [ 144.696661][ T7420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.389'. [ 144.721386][ T7420] Bluetooth: MGMT ver 1.23 [ 144.943499][ T7434] FAULT_INJECTION: forcing a failure. [ 144.943499][ T7434] name failslab, interval 1, probability 0, space 0, times 0 [ 144.975763][ T7434] CPU: 0 UID: 0 PID: 7434 Comm: syz.1.395 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 144.975795][ T7434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 144.975820][ T7434] Call Trace: [ 144.975828][ T7434] [ 144.975836][ T7434] dump_stack_lvl+0x189/0x250 [ 144.975875][ T7434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.975905][ T7434] ? __pfx__printk+0x10/0x10 [ 144.975933][ T7434] ? ref_tracker_alloc+0x318/0x460 [ 144.975957][ T7434] should_fail_ex+0x414/0x560 [ 144.975993][ T7434] should_failslab+0xa8/0x100 [ 144.976019][ T7434] kmem_cache_alloc_noprof+0x73/0x3c0 [ 144.976043][ T7434] ? skb_clone+0x212/0x3a0 [ 144.976071][ T7434] skb_clone+0x212/0x3a0 [ 144.976098][ T7434] __netlink_deliver_tap+0x404/0x850 [ 144.976144][ T7434] ? netlink_deliver_tap+0x2e/0x1b0 [ 144.976183][ T7434] netlink_deliver_tap+0x19c/0x1b0 [ 144.976215][ T7434] netlink_unicast+0x72f/0x8d0 [ 144.976256][ T7434] netlink_sendmsg+0x805/0xb30 [ 144.976286][ T7434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.976309][ T7434] ? aa_sock_msg_perm+0x94/0x160 [ 144.976331][ T7434] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 144.976354][ T7434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.976374][ T7434] __sock_sendmsg+0x219/0x270 [ 144.976407][ T7434] ____sys_sendmsg+0x505/0x830 [ 144.976436][ T7434] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.976468][ T7434] ? import_iovec+0x74/0xa0 [ 144.976498][ T7434] ___sys_sendmsg+0x21f/0x2a0 [ 144.976523][ T7434] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.976591][ T7434] ? __fget_files+0x2a/0x420 [ 144.976616][ T7434] ? __fget_files+0x3a0/0x420 [ 144.976653][ T7434] __x64_sys_sendmsg+0x19b/0x260 [ 144.976680][ T7434] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 144.976721][ T7434] ? do_syscall_64+0xba/0x210 [ 144.976751][ T7434] do_syscall_64+0xf6/0x210 [ 144.976777][ T7434] ? clear_bhb_loop+0x45/0xa0 [ 144.976808][ T7434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.976827][ T7434] RIP: 0033:0x7f810218e969 [ 144.976843][ T7434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.976859][ T7434] RSP: 002b:00007f8102f98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.976879][ T7434] RAX: ffffffffffffffda RBX: 00007f81023b5fa0 RCX: 00007f810218e969 [ 144.976892][ T7434] RDX: 0000000000000044 RSI: 0000200000000380 RDI: 0000000000000004 [ 144.976905][ T7434] RBP: 00007f8102f98090 R08: 0000000000000000 R09: 0000000000000000 [ 144.976915][ T7434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.976926][ T7434] R13: 0000000000000000 R14: 00007f81023b5fa0 R15: 00007ffe2e62ed68 [ 144.976956][ T7434] [ 145.264796][ T7436] bond0: entered promiscuous mode [ 145.289396][ T7436] bond_slave_0: entered promiscuous mode [ 145.295887][ T7436] bond_slave_1: entered promiscuous mode [ 145.307949][ T7436] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 145.317207][ T7436] batadv0: entered promiscuous mode [ 145.326701][ T7436] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 145.353093][ T7436] bond0: left promiscuous mode [ 145.358289][ T7436] bond_slave_0: left promiscuous mode [ 145.375124][ T7436] bond_slave_1: left promiscuous mode [ 145.386623][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.392'. [ 145.400325][ T7436] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 145.417415][ T7436] batadv0: left promiscuous mode [ 145.578064][ T1106] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.933841][ T1106] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.111938][ T1106] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.182012][ T1106] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.773354][ T7462] gretap0: left promiscuous mode [ 146.897297][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.906953][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.915257][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.923751][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.931742][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.987723][ T7462] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 146.995873][ T7462] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 147.023471][ T7462] ip6tnl1: left promiscuous mode [ 147.035280][ T7462] ip6tnl1: left allmulticast mode [ 147.080474][ T1106] bridge_slave_1: left allmulticast mode [ 147.096400][ T1106] bridge_slave_1: left promiscuous mode [ 147.113408][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.143267][ T1106] bridge_slave_0: left allmulticast mode [ 147.157813][ T1106] bridge_slave_0: left promiscuous mode [ 147.173849][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.192796][ T7480] netlink: 16 bytes leftover after parsing attributes in process `syz.2.405'. [ 147.936266][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.949642][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.961625][ T1106] bond0 (unregistering): Released all slaves [ 148.084063][ T7488] lo speed is unknown, defaulting to 1000 [ 148.143804][ T7474] lo speed is unknown, defaulting to 1000 [ 148.692213][ T1106] hsr_slave_0: left promiscuous mode [ 148.727827][ T1106] hsr_slave_1: left promiscuous mode [ 148.736447][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.745724][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.757076][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.765488][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.823560][ T1106] veth1_macvtap: left promiscuous mode [ 148.829401][ T1106] veth0_macvtap: left promiscuous mode [ 148.835159][ T1106] veth1_vlan: left promiscuous mode [ 148.844229][ T1106] veth0_vlan: left promiscuous mode [ 148.957678][ T5839] Bluetooth: hci3: command tx timeout [ 149.547258][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 149.598008][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 150.098915][ T7500] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 150.148893][ T7522] lo speed is unknown, defaulting to 1000 [ 150.193894][ T7529] netlink: 'syz.2.420': attribute type 10 has an invalid length. [ 150.285520][ T7529] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 150.321142][ T7528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.345613][ T7474] chnl_net:caif_netlink_parms(): no params data found [ 150.474385][ T7535] netlink: 'syz.4.422': attribute type 1 has an invalid length. [ 150.485884][ T7535] __nla_validate_parse: 1 callbacks suppressed [ 150.485901][ T7535] netlink: 232 bytes leftover after parsing attributes in process `syz.4.422'. [ 150.522290][ T7533] gretap0: left allmulticast mode [ 150.527394][ T7533] gretap0: left promiscuous mode [ 150.532735][ T7533] bridge0: port 3(gretap0) entered disabled state [ 150.553949][ T7533] bridge_slave_0: left allmulticast mode [ 150.560372][ T7533] bridge_slave_0: left promiscuous mode [ 150.566370][ T7533] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.588421][ T7539] netlink: 'syz.1.421': attribute type 10 has an invalid length. [ 150.600016][ T7533] bridge_slave_1: left allmulticast mode [ 150.605713][ T7533] bridge_slave_1: left promiscuous mode [ 150.614921][ T7533] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.633768][ T7533] bond0: (slave bond_slave_0): Releasing backup interface [ 150.651788][ T7533] bond0: (slave bond_slave_1): Releasing backup interface [ 150.666484][ T7533] team0: Port device team_slave_0 removed [ 150.688618][ T7533] team0: Port device team_slave_1 removed [ 150.723917][ T7533] bond0: (slave bond1): Releasing backup interface [ 150.782587][ T10] lo speed is unknown, defaulting to 1000 [ 150.809234][ T7553] netlink: 72 bytes leftover after parsing attributes in process `syz.0.424'. [ 150.832386][ T7539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.843413][ T7539] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 150.935785][ T7556] xt_l2tp: v2 sid > 0xffff: 262144 [ 151.037835][ T5839] Bluetooth: hci3: command tx timeout [ 151.044379][ T7474] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.059736][ T7474] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.067929][ T7474] bridge_slave_0: entered allmulticast mode [ 151.094483][ T7474] bridge_slave_0: entered promiscuous mode [ 151.131156][ T7565] FAULT_INJECTION: forcing a failure. [ 151.131156][ T7565] name failslab, interval 1, probability 0, space 0, times 0 [ 151.148461][ T7565] CPU: 0 UID: 0 PID: 7565 Comm: syz.0.429 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 151.148486][ T7565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 151.148496][ T7565] Call Trace: [ 151.148502][ T7565] [ 151.148509][ T7565] dump_stack_lvl+0x189/0x250 [ 151.148537][ T7565] ? netlink_rcv_skb+0x219/0x490 [ 151.148561][ T7565] ? netlink_unicast+0x758/0x8d0 [ 151.148583][ T7565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.148605][ T7565] ? __pfx__printk+0x10/0x10 [ 151.148633][ T7565] should_fail_ex+0x414/0x560 [ 151.148662][ T7565] should_failslab+0xa8/0x100 [ 151.148684][ T7565] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 151.148705][ T7565] ? __alloc_skb+0x112/0x2d0 [ 151.148724][ T7565] __alloc_skb+0x112/0x2d0 [ 151.148743][ T7565] xfrm_alloc_compat+0x1a6/0x16f0 [ 151.148765][ T7565] ? xfrm_get_translator+0x1b/0x240 [ 151.148791][ T7565] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 151.148809][ T7565] xfrm_nlmsg_multicast+0xd7/0x1f0 [ 151.148836][ T7565] xfrm_send_migrate+0x429/0x8a0 [ 151.148859][ T7565] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 151.148882][ T7565] ? __pfx_xfrm_send_migrate+0x10/0x10 [ 151.148923][ T7565] ? __local_bh_enable_ip+0x12d/0x1c0 [ 151.148950][ T7565] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.148974][ T7565] ? __pfx_xfrm_send_migrate+0x10/0x10 [ 151.148996][ T7565] km_migrate+0x152/0x260 [ 151.149021][ T7565] ? km_migrate+0x3c/0x260 [ 151.149071][ T7565] xfrm_migrate+0x201c/0x2330 [ 151.149114][ T7565] ? __pfx_xfrm_migrate+0x10/0x10 [ 151.149128][ T7565] ? is_bpf_text_address+0x26/0x2b0 [ 151.149159][ T7565] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 151.149177][ T7565] ? arch_stack_walk+0xfc/0x150 [ 151.149218][ T7565] ? stack_trace_save+0x9c/0xe0 [ 151.149241][ T7565] ? stack_depot_save_flags+0x40/0x910 [ 151.149273][ T7565] xfrm_do_migrate+0x753/0x8a0 [ 151.149295][ T7565] ? kasan_save_track+0x4f/0x80 [ 151.149321][ T7565] ? __pfx_xfrm_do_migrate+0x10/0x10 [ 151.149384][ T7565] ? rcu_is_watching+0x15/0xb0 [ 151.149425][ T7565] ? __nla_parse+0x40/0x60 [ 151.149451][ T7565] xfrm_user_rcv_msg+0x7a0/0xab0 [ 151.149489][ T7565] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 151.149563][ T7565] ? __mutex_trylock_common+0x153/0x260 [ 151.149588][ T7565] ? __pfx___mutex_trylock_common+0x10/0x10 [ 151.149621][ T7565] netlink_rcv_skb+0x219/0x490 [ 151.149654][ T7565] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 151.149687][ T7565] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 151.149743][ T7565] ? netlink_deliver_tap+0x2e/0x1b0 [ 151.149773][ T7565] ? netlink_deliver_tap+0x2e/0x1b0 [ 151.149807][ T7565] xfrm_netlink_rcv+0x79/0x90 [ 151.149838][ T7565] netlink_unicast+0x758/0x8d0 [ 151.149878][ T7565] netlink_sendmsg+0x805/0xb30 [ 151.149908][ T7565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.149932][ T7565] ? aa_sock_msg_perm+0x94/0x160 [ 151.149954][ T7565] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 151.149976][ T7565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.149996][ T7565] __sock_sendmsg+0x219/0x270 [ 151.150027][ T7565] ____sys_sendmsg+0x505/0x830 [ 151.150056][ T7565] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.150088][ T7565] ? import_iovec+0x74/0xa0 [ 151.150118][ T7565] ___sys_sendmsg+0x21f/0x2a0 [ 151.150143][ T7565] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.150215][ T7565] ? __fget_files+0x2a/0x420 [ 151.150239][ T7565] ? __fget_files+0x3a0/0x420 [ 151.150276][ T7565] __x64_sys_sendmsg+0x19b/0x260 [ 151.150302][ T7565] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 151.150343][ T7565] ? do_syscall_64+0xba/0x210 [ 151.150374][ T7565] do_syscall_64+0xf6/0x210 [ 151.150401][ T7565] ? clear_bhb_loop+0x45/0xa0 [ 151.150426][ T7565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.150445][ T7565] RIP: 0033:0x7fd0b9d8e969 [ 151.150464][ T7565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.150480][ T7565] RSP: 002b:00007fd0bab9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.150501][ T7565] RAX: ffffffffffffffda RBX: 00007fd0b9fb5fa0 RCX: 00007fd0b9d8e969 [ 151.150515][ T7565] RDX: 0000000000000044 RSI: 0000200000000380 RDI: 0000000000000004 [ 151.150527][ T7565] RBP: 00007fd0bab9d090 R08: 0000000000000000 R09: 0000000000000000 [ 151.150539][ T7565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.150550][ T7565] R13: 0000000000000000 R14: 00007fd0b9fb5fa0 R15: 00007ffdb1b8c3d8 [ 151.150582][ T7565] [ 151.636180][ T7474] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.645888][ T7474] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.657488][ T7474] bridge_slave_1: entered allmulticast mode [ 151.724798][ T7474] bridge_slave_1: entered promiscuous mode [ 151.864967][ T7474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.878911][ T7474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.023165][ T7474] team0: Port device team_slave_0 added [ 152.071909][ T7474] team0: Port device team_slave_1 added [ 152.191321][ T7474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.217603][ T7474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.249881][ T7474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.269254][ T7589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.434'. [ 152.294214][ T7474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.305680][ T7586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.434'. [ 152.312661][ T7474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.352032][ T7474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.362371][ T7592] xt_l2tp: v2 sid > 0xffff: 262144 [ 152.456273][ T7474] hsr_slave_0: entered promiscuous mode [ 152.469524][ T7474] hsr_slave_1: entered promiscuous mode [ 152.476931][ T7474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.485901][ T7474] Cannot create hsr debugfs directory [ 152.623247][ T7601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.440'. [ 152.634726][ T7601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.440'. [ 153.117852][ T5839] Bluetooth: hci3: command tx timeout [ 153.168947][ T7474] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 153.180512][ T7474] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 153.197956][ T7474] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 153.211103][ T7619] netlink: 84 bytes leftover after parsing attributes in process `syz.4.447'. [ 153.226420][ T7474] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 153.257772][ T7624] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 153.286061][ T7622] xt_l2tp: v2 sid > 0xffff: 262144 [ 153.461236][ T7474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.486348][ T7474] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.509761][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.517006][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.536828][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.544054][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.914632][ T7641] lo speed is unknown, defaulting to 1000 [ 154.063666][ T7474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.210297][ T7474] veth0_vlan: entered promiscuous mode [ 154.243155][ T7474] veth1_vlan: entered promiscuous mode [ 154.309980][ T7653] netlink: 72 bytes leftover after parsing attributes in process `syz.0.457'. [ 154.381563][ T7474] veth0_macvtap: entered promiscuous mode [ 154.467339][ T7474] veth1_macvtap: entered promiscuous mode [ 154.550000][ T7474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.581686][ T7474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.606607][ T7474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.650402][ T7474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.658751][ T7665] xt_l2tp: v2 sid > 0xffff: 262144 [ 154.669219][ T7474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.686378][ T7474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.731381][ T7474] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.757726][ T7474] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.767343][ T7474] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.801428][ T7474] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.023801][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.050397][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.204987][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.206425][ T5839] Bluetooth: hci3: command tx timeout [ 155.219983][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.404380][ T7643] lo speed is unknown, defaulting to 1000 [ 156.381737][ T7716] xt_l2tp: v2 sid > 0xffff: 262144 [ 156.501673][ T7720] netlink: 'syz.1.473': attribute type 8 has an invalid length. [ 156.612929][ T7722] lo speed is unknown, defaulting to 1000 [ 156.686592][ T7724] bond0: (slave wlan1): Releasing backup interface [ 156.721946][ T7724] bond0: Destroying bond [ 156.832524][ T7724] bond0 (unregistering): Released all slaves [ 157.067172][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.078007][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.086094][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.095972][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.104870][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.157332][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.338392][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.371912][ T7738] lo speed is unknown, defaulting to 1000 [ 157.406369][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.513759][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.683712][ T12] bridge_slave_1: left allmulticast mode [ 157.690266][ T12] bridge_slave_1: left promiscuous mode [ 157.696044][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.705955][ T12] bridge_slave_0: left allmulticast mode [ 157.712002][ T12] bridge_slave_0: left promiscuous mode [ 157.717976][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.915981][ T7751] netlink: 'syz.1.480': attribute type 10 has an invalid length. [ 157.969142][ T7753] netlink: 'syz.1.480': attribute type 58 has an invalid length. [ 158.374366][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 158.384078][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 158.392605][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 158.402615][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 158.433438][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 158.481149][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.499318][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.513510][ T12] bond0 (unregistering): Released all slaves [ 158.526864][ T7768] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 158.555016][ T7738] chnl_net:caif_netlink_parms(): no params data found [ 158.613137][ T7772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.485'. [ 158.786394][ T7764] lo speed is unknown, defaulting to 1000 [ 158.984607][ T7738] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.003195][ T7738] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.010631][ T7738] bridge_slave_0: entered allmulticast mode [ 159.018633][ T7738] bridge_slave_0: entered promiscuous mode [ 159.056810][ T7738] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.065747][ T7738] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.073206][ T7738] bridge_slave_1: entered allmulticast mode [ 159.081370][ T7738] bridge_slave_1: entered promiscuous mode [ 159.135909][ T12] hsr_slave_0: left promiscuous mode [ 159.159475][ T12] hsr_slave_1: left promiscuous mode [ 159.165661][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.183271][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.197279][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.205498][ T5830] Bluetooth: hci3: command tx timeout [ 159.205533][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.323807][ T12] veth1_macvtap: left promiscuous mode [ 159.337324][ T12] veth0_macvtap: left promiscuous mode [ 159.350965][ T12] veth1_vlan: left promiscuous mode [ 159.356360][ T12] veth0_vlan: left promiscuous mode [ 159.377238][ T7788] xt_l2tp: v2 sid > 0xffff: 262144 [ 159.809691][ T12] team0 (unregistering): Port device team_slave_1 removed [ 159.849608][ T12] team0 (unregistering): Port device team_slave_0 removed [ 160.253250][ T7738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.280946][ T7789] bridge_slave_1: left allmulticast mode [ 160.286652][ T7789] bridge_slave_1: left promiscuous mode [ 160.292809][ T7789] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.307524][ T7789] bridge_slave_0: left allmulticast mode [ 160.314579][ T7789] bridge_slave_0: left promiscuous mode [ 160.320652][ T7789] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.357534][ T7794] x_tables: unsorted underflow at hook 2 [ 160.415733][ T7738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.475033][ T7798] netlink: 'syz.1.492': attribute type 21 has an invalid length. [ 160.477869][ T5830] Bluetooth: hci4: command tx timeout [ 160.503857][ T7798] IPv6: NLM_F_CREATE should be specified when creating new route [ 160.530730][ T7796] IPv6: sit2: Disabled Multicast RS [ 160.541392][ T7798] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 160.548974][ T7798] IPv6: NLM_F_CREATE should be set when creating new route [ 160.556519][ T7798] IPv6: NLM_F_CREATE should be set when creating new route [ 160.563823][ T7798] IPv6: NLM_F_CREATE should be set when creating new route [ 160.578344][ T7802] netlink: 'syz.0.494': attribute type 1 has an invalid length. [ 160.672278][ T7738] team0: Port device team_slave_0 added [ 160.747432][ T7805] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.794658][ T7808] bond0: entered promiscuous mode [ 160.800382][ T7813] xt_l2tp: v2 sid > 0xffff: 262144 [ 160.805764][ T7808] bond_slave_0: entered promiscuous mode [ 160.827996][ T7808] bond_slave_1: entered promiscuous mode [ 160.848124][ T7808] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 160.858755][ T7808] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 160.871039][ T7808] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 160.886850][ T7738] team0: Port device team_slave_1 added [ 161.015146][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.499'. [ 161.067349][ T7738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.074544][ T7738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.100841][ T7738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.114391][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 161.138788][ T7764] chnl_net:caif_netlink_parms(): no params data found [ 161.203590][ T7738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.212033][ T7738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.239176][ T7738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.277879][ T5830] Bluetooth: hci3: command tx timeout [ 161.312329][ T7837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.504'. [ 161.401643][ T7826] lo speed is unknown, defaulting to 1000 [ 161.576754][ T7823] lo speed is unknown, defaulting to 1000 [ 161.714817][ T7764] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.722921][ T7764] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.730885][ T7764] bridge_slave_0: entered allmulticast mode [ 161.738508][ T7764] bridge_slave_0: entered promiscuous mode [ 161.771629][ T7738] hsr_slave_0: entered promiscuous mode [ 161.778494][ T7738] hsr_slave_1: entered promiscuous mode [ 161.784684][ T7738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.793770][ T7738] Cannot create hsr debugfs directory [ 161.800840][ T7764] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.808788][ T7764] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.816105][ T7764] bridge_slave_1: entered allmulticast mode [ 161.824190][ T7764] bridge_slave_1: entered promiscuous mode [ 161.893403][ T7856] @ÿ: renamed from bond_slave_0 (while UP) [ 161.964682][ T7764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.981324][ T7764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.071007][ T7764] team0: Port device team_slave_0 added [ 162.100557][ T7764] team0: Port device team_slave_1 added [ 162.135655][ T7860] xt_l2tp: v2 sid > 0xffff: 262144 [ 162.152166][ T7764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.159507][ T7764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.185713][ T7764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.264595][ T7764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.277716][ T7764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.303798][ T7764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.561174][ T5830] Bluetooth: hci4: command tx timeout [ 162.602633][ T7764] hsr_slave_0: entered promiscuous mode [ 162.619818][ T7764] hsr_slave_1: entered promiscuous mode [ 162.626803][ T7764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.637381][ T7764] Cannot create hsr debugfs directory [ 162.652079][ T7872] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 162.721610][ T7877] pim6reg1: entered promiscuous mode [ 162.727039][ T7877] pim6reg1: entered allmulticast mode [ 163.078302][ T7890] FAULT_INJECTION: forcing a failure. [ 163.078302][ T7890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.094367][ T7890] CPU: 0 UID: 0 PID: 7890 Comm: syz.0.518 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 163.094398][ T7890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 163.094410][ T7890] Call Trace: [ 163.094419][ T7890] [ 163.094427][ T7890] dump_stack_lvl+0x189/0x250 [ 163.094459][ T7890] ? __lock_acquire+0xaac/0xd20 [ 163.094490][ T7890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.094519][ T7890] ? __pfx__printk+0x10/0x10 [ 163.094539][ T7890] ? __might_fault+0xb0/0x130 [ 163.094577][ T7890] should_fail_ex+0x414/0x560 [ 163.094613][ T7890] _copy_from_user+0x2d/0xb0 [ 163.094640][ T7890] ___sys_sendmsg+0x158/0x2a0 [ 163.094666][ T7890] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.094724][ T7890] ? __fget_files+0x2a/0x420 [ 163.094748][ T7890] ? __fget_files+0x3a0/0x420 [ 163.094785][ T7890] __x64_sys_sendmsg+0x19b/0x260 [ 163.094810][ T7890] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 163.094850][ T7890] ? do_syscall_64+0xba/0x210 [ 163.094881][ T7890] do_syscall_64+0xf6/0x210 [ 163.094907][ T7890] ? clear_bhb_loop+0x45/0xa0 [ 163.094932][ T7890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.094951][ T7890] RIP: 0033:0x7fd0b9d8e969 [ 163.094969][ T7890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.094985][ T7890] RSP: 002b:00007fd0bab9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.095006][ T7890] RAX: ffffffffffffffda RBX: 00007fd0b9fb5fa0 RCX: 00007fd0b9d8e969 [ 163.095030][ T7890] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 163.095042][ T7890] RBP: 00007fd0bab9d090 R08: 0000000000000000 R09: 0000000000000000 [ 163.095055][ T7890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.095066][ T7890] R13: 0000000000000000 R14: 00007fd0b9fb5fa0 R15: 00007ffdb1b8c3d8 [ 163.095097][ T7890] [ 163.118172][ T7891] xt_l2tp: v2 sid > 0xffff: 262144 [ 163.360350][ T5830] Bluetooth: hci3: command tx timeout [ 163.431716][ T7738] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 163.443816][ T7738] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 163.454491][ T7899] netlink: 312 bytes leftover after parsing attributes in process `syz.4.522'. [ 163.492083][ T7738] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 163.511589][ T7738] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 163.796485][ T7738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.866082][ T7738] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.894307][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.901598][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.984779][ T7924] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002 [ 164.004780][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.012032][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.206300][ T7764] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 164.245541][ T7934] FAULT_INJECTION: forcing a failure. [ 164.245541][ T7934] name failslab, interval 1, probability 0, space 0, times 0 [ 164.262142][ T7764] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 164.275955][ T7936] xt_l2tp: v2 sid > 0xffff: 262144 [ 164.315159][ T7764] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 164.325497][ T7934] CPU: 1 UID: 0 PID: 7934 Comm: syz.0.531 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 164.325527][ T7934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 164.325541][ T7934] Call Trace: [ 164.325548][ T7934] [ 164.325557][ T7934] dump_stack_lvl+0x189/0x250 [ 164.325596][ T7934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.325626][ T7934] ? __pfx__printk+0x10/0x10 [ 164.325652][ T7934] ? __pfx___might_resched+0x10/0x10 [ 164.325676][ T7934] should_fail_ex+0x414/0x560 [ 164.325714][ T7934] should_failslab+0xa8/0x100 [ 164.325743][ T7934] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 164.325770][ T7934] ? __alloc_skb+0x112/0x2d0 [ 164.325794][ T7934] __alloc_skb+0x112/0x2d0 [ 164.325817][ T7934] netlink_sendmsg+0x5c6/0xb30 [ 164.325848][ T7934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.325871][ T7934] ? aa_sock_msg_perm+0x94/0x160 [ 164.325894][ T7934] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 164.325917][ T7934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.325936][ T7934] __sock_sendmsg+0x219/0x270 [ 164.325979][ T7934] ____sys_sendmsg+0x505/0x830 [ 164.326007][ T7934] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.326037][ T7934] ? import_iovec+0x74/0xa0 [ 164.326066][ T7934] ___sys_sendmsg+0x21f/0x2a0 [ 164.326090][ T7934] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.326155][ T7934] ? __fget_files+0x2a/0x420 [ 164.326182][ T7934] ? __fget_files+0x3a0/0x420 [ 164.326214][ T7934] __x64_sys_sendmsg+0x19b/0x260 [ 164.326236][ T7934] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 164.326271][ T7934] ? do_syscall_64+0xba/0x210 [ 164.326298][ T7934] do_syscall_64+0xf6/0x210 [ 164.326328][ T7934] ? clear_bhb_loop+0x45/0xa0 [ 164.326349][ T7934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.326366][ T7934] RIP: 0033:0x7fd0b9d8e969 [ 164.326382][ T7934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.326397][ T7934] RSP: 002b:00007fd0bab9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.326416][ T7934] RAX: ffffffffffffffda RBX: 00007fd0b9fb5fa0 RCX: 00007fd0b9d8e969 [ 164.326429][ T7934] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 164.326440][ T7934] RBP: 00007fd0bab9d090 R08: 0000000000000000 R09: 0000000000000000 [ 164.326451][ T7934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.326461][ T7934] R13: 0000000000000000 R14: 00007fd0b9fb5fa0 R15: 00007ffdb1b8c3d8 [ 164.326488][ T7934] [ 164.445837][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.533'. [ 164.625453][ T7764] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 164.645383][ T5830] Bluetooth: hci4: command tx timeout [ 164.993320][ T7764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.047077][ T7764] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.076647][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.083870][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.084568][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'. [ 165.115379][ T7738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.139571][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.146767][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.186682][ T7957] bridge0: entered promiscuous mode [ 165.194809][ T7957] macvlan2: entered promiscuous mode [ 165.314348][ T7764] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 165.349571][ T7764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.392528][ T7968] netlink: 20 bytes leftover after parsing attributes in process `syz.1.540'. [ 165.413462][ T7968] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.422591][ T7968] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.431633][ T7968] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.440633][ T7968] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.447674][ T5830] Bluetooth: hci3: command tx timeout [ 165.583057][ T7968] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.592258][ T7968] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.601503][ T7968] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.610566][ T7968] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.793975][ T7738] veth0_vlan: entered promiscuous mode [ 165.842578][ T7738] veth1_vlan: entered promiscuous mode [ 165.977183][ T7764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.012102][ T7738] veth0_macvtap: entered promiscuous mode [ 166.053500][ T7738] veth1_macvtap: entered promiscuous mode [ 166.133684][ T7764] veth0_vlan: entered promiscuous mode [ 166.142904][ T7982] xt_l2tp: v2 sid > 0xffff: 262144 [ 166.178364][ T7738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.198836][ T7738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.232472][ T7738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.266693][ T7738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.284010][ T7738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.297909][ T7738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.308781][ T7764] veth1_vlan: entered promiscuous mode [ 166.347523][ T7738] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.357194][ T7738] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.366823][ T7738] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.375734][ T7738] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.455610][ T7764] veth0_macvtap: entered promiscuous mode [ 166.678207][ T7992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.696456][ T7992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.717807][ T5830] Bluetooth: hci4: command tx timeout [ 166.797012][ T7992] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.807348][ T7992] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.816415][ T7992] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.825638][ T7992] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.835393][ T7999] netlink: 144 bytes leftover after parsing attributes in process `syz.1.547'. [ 166.893658][ T7992] bond0: left promiscuous mode [ 166.898737][ T7992] @ÿ: left promiscuous mode [ 166.903682][ T7992] bond_slave_1: left promiscuous mode [ 166.909514][ T7992] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 166.932146][ T7764] veth1_macvtap: entered promiscuous mode [ 166.991228][ T7988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.006857][ T7988] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.024236][ T7988] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.142751][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.180589][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.189541][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.207392][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.225918][ T7764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.281579][ T8012] xt_CT: You must specify a L4 protocol and not use inversions on it [ 167.282797][ T7764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.295508][ T8011] xt_CT: You must specify a L4 protocol and not use inversions on it [ 167.300867][ T7764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.326380][ T7764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.339642][ T8010] batadv_slave_0: entered promiscuous mode [ 167.346790][ T8010] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 167.383350][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.384786][ T7764] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.400489][ T7764] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.410181][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.412629][ T7764] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.426432][ T7764] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.645368][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.659720][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.684572][ T8020] xt_l2tp: v2 sid > 0xffff: 262144 [ 167.770031][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.790012][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.843303][ T8022] lo speed is unknown, defaulting to 1000 [ 168.037353][ T54] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.186763][ T8034] netlink: 84 bytes leftover after parsing attributes in process `syz.4.557'. [ 168.299664][ T54] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.432571][ T54] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.762821][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 168.772579][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 168.773119][ T54] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.781494][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 168.800116][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 168.808657][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 168.861595][ T8048] lo speed is unknown, defaulting to 1000 [ 168.981818][ T54] bridge_slave_1: left allmulticast mode [ 168.987510][ T54] bridge_slave_1: left promiscuous mode [ 168.994689][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.004200][ T54] bridge_slave_0: left allmulticast mode [ 169.010298][ T54] bridge_slave_0: left promiscuous mode [ 169.016012][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.325953][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.337441][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.348408][ T54] bond0 (unregistering): Released all slaves [ 169.490299][ T8048] chnl_net:caif_netlink_parms(): no params data found [ 169.750788][ T8048] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.788203][ T8048] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.814365][ T8048] bridge_slave_0: entered allmulticast mode [ 169.829232][ T8048] bridge_slave_0: entered promiscuous mode [ 169.863228][ T54] hsr_slave_0: left promiscuous mode [ 169.900014][ T54] hsr_slave_1: left promiscuous mode [ 169.906969][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.948648][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.963740][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.989456][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.031719][ T54] veth1_macvtap: left promiscuous mode [ 170.037392][ T54] veth0_macvtap: left promiscuous mode [ 170.048269][ T54] veth1_vlan: left promiscuous mode [ 170.054603][ T54] veth0_vlan: left promiscuous mode [ 170.179168][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 170.188159][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 170.196398][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 170.204922][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 170.212804][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 170.571093][ T54] team0 (unregistering): Port device team_slave_1 removed [ 170.608987][ T54] team0 (unregistering): Port device team_slave_0 removed [ 170.881619][ T5830] Bluetooth: hci3: command tx timeout [ 170.993881][ T8048] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.001781][ T8048] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.011166][ T8048] bridge_slave_1: entered allmulticast mode [ 171.018795][ T8048] bridge_slave_1: entered promiscuous mode [ 171.172367][ T8048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.187381][ T8086] netlink: 'syz.1.567': attribute type 1 has an invalid length. [ 171.196016][ T8081] lo speed is unknown, defaulting to 1000 [ 171.206268][ T8048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.291913][ T8086] bond0: (slave gretap1): making interface the new active one [ 171.300412][ T8086] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 171.379750][ T8048] team0: Port device team_slave_0 added [ 171.443116][ T8048] team0: Port device team_slave_1 added [ 171.549795][ T8048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.556823][ T8048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.591025][ T8048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.614544][ T8048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.622490][ T8048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.652188][ T8048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.823218][ T8048] hsr_slave_0: entered promiscuous mode [ 171.831051][ T8048] hsr_slave_1: entered promiscuous mode [ 171.840169][ T8048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.849709][ T8048] Cannot create hsr debugfs directory [ 171.877161][ T8109] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 172.013873][ T54] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.126126][ T8081] chnl_net:caif_netlink_parms(): no params data found [ 172.204354][ T54] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.249269][ T5839] Bluetooth: hci4: command tx timeout [ 172.406577][ T54] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.503705][ T54] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.692498][ T8081] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.700072][ T8081] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.707370][ T8081] bridge_slave_0: entered allmulticast mode [ 172.717884][ T8081] bridge_slave_0: entered promiscuous mode [ 172.735070][ T8081] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.755031][ T8081] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.765307][ T8081] bridge_slave_1: entered allmulticast mode [ 172.776157][ T8081] bridge_slave_1: entered promiscuous mode [ 172.846559][ T8081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.891067][ T8081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.959152][ T5839] Bluetooth: hci3: command tx timeout [ 173.043187][ T8081] team0: Port device team_slave_0 added [ 173.073153][ T8081] team0: Port device team_slave_1 added [ 173.090510][ T54] bridge_slave_1: left allmulticast mode [ 173.114292][ T54] bridge_slave_1: left promiscuous mode [ 173.123035][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.140735][ T54] bridge_slave_0: left allmulticast mode [ 173.147020][ T54] bridge_slave_0: left promiscuous mode [ 173.157037][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.628685][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.640458][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.651493][ T54] bond0 (unregistering): Released all slaves [ 173.675781][ T8138] bridge0: entered allmulticast mode [ 173.756857][ T8081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.766961][ T8081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.798712][ T8081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.821170][ T8081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.828330][ T8081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.881005][ T8081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.966681][ T8159] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 173.991361][ T8159] netlink: 'syz.1.588': attribute type 1 has an invalid length. [ 174.006350][ T8159] netlink: 224 bytes leftover after parsing attributes in process `syz.1.588'. [ 174.072440][ T8081] hsr_slave_0: entered promiscuous mode [ 174.089979][ T8081] hsr_slave_1: entered promiscuous mode [ 174.096408][ T8081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.104124][ T8081] Cannot create hsr debugfs directory [ 174.316260][ T54] hsr_slave_0: left promiscuous mode [ 174.321709][ T5839] Bluetooth: hci4: command 0x041b tx timeout [ 174.339481][ T54] hsr_slave_1: left promiscuous mode [ 174.345724][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.353352][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.363089][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.370892][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.392995][ T54] veth1_macvtap: left promiscuous mode [ 174.398628][ T54] veth0_macvtap: left promiscuous mode [ 174.404226][ T54] veth1_vlan: left promiscuous mode [ 174.409704][ T54] veth0_vlan: left promiscuous mode [ 174.423590][ T8178] netlink: 224 bytes leftover after parsing attributes in process `syz.0.595'. [ 174.862116][ T54] team0 (unregistering): Port device team_slave_1 removed [ 174.909071][ T54] team0 (unregistering): Port device team_slave_0 removed [ 175.039723][ T5830] Bluetooth: hci3: command tx timeout [ 175.325872][ T8174] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073357230079) [ 175.339844][ T8174] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 175.380973][ T8180] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 175.473266][ T8048] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 175.500619][ T8048] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 175.543187][ T8189] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 175.613795][ T8048] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 175.666701][ T8048] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 175.678769][ T8192] sch_tbf: burst 3631 is lower than device lo mtu (65550) ! [ 176.054667][ T8048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.084683][ T8048] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.124513][ T6463] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.131750][ T6463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.214667][ T6463] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.221900][ T6463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.234934][ T8216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.608'. [ 176.324532][ T8081] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 176.347499][ T8219] netlink: 'syz.0.609': attribute type 10 has an invalid length. [ 176.369569][ T8219] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 176.389418][ T8219] team0: Port device netdevsim0 added [ 176.395518][ T8081] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 176.402981][ T5830] Bluetooth: hci4: command 0x041b tx timeout [ 176.425417][ T8081] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 176.533068][ T8081] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 176.664851][ T8234] netlink: 16 bytes leftover after parsing attributes in process `syz.1.614'. [ 176.846114][ T8246] netlink: 44 bytes leftover after parsing attributes in process `syz.1.614'. [ 176.959841][ T8081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.017092][ T8048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.033251][ T8081] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.072187][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.079388][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.111425][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.118755][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.121866][ T8254] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 177.148164][ T5830] Bluetooth: hci3: command tx timeout [ 177.169414][ T8254] netlink: 40 bytes leftover after parsing attributes in process `syz.0.619'. [ 177.193910][ T8254] team0: entered promiscuous mode [ 177.204888][ T8254] team_slave_0: entered promiscuous mode [ 177.213633][ T8254] team_slave_1: entered promiscuous mode [ 177.219685][ T8254] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 177.227333][ T8254] team0: entered allmulticast mode [ 177.233703][ T8254] team_slave_0: entered allmulticast mode [ 177.235105][ T8255] netlink: 68 bytes leftover after parsing attributes in process `syz.4.620'. [ 177.239477][ T8254] team_slave_1: entered allmulticast mode [ 177.239497][ T8254] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:578 [ 177.239513][ T8254] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 8254, name: syz.0.619 [ 177.239531][ T8254] preempt_count: 0, expected: 0 [ 177.239542][ T8254] RCU nest depth: 1, expected: 0 [ 177.239565][ T8254] 2 locks held by syz.0.619/8254: [ 177.239579][ T8254] #0: ffffffff8f2f3348 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_setlink+0x4ea/0x900 [ 177.239656][ T8254] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330 [ 177.239734][ T8254] CPU: 1 UID: 0 PID: 8254 Comm: syz.0.619 Not tainted 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 177.239767][ T8254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 177.239779][ T8254] Call Trace: [ 177.239793][ T8254] [ 177.239802][ T8254] dump_stack_lvl+0x189/0x250 [ 177.239862][ T8254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.239893][ T8254] ? console_unlock+0x21b/0x270 [ 177.239916][ T8254] ? print_lock_name+0xde/0x100 [ 177.239960][ T8254] __might_resched+0x495/0x610 [ 177.239987][ T8254] ? dev_set_rx_mode+0x54/0x2d0 [ 177.240010][ T8254] ? __pfx___might_resched+0x10/0x10 [ 177.240031][ T8254] ? __pfx__printk+0x10/0x10 [ 177.240049][ T8254] ? swake_up_one+0x78/0x140 [ 177.240092][ T8254] __mutex_lock+0x106/0xe80 [ 177.240125][ T8254] ? __pfx___dev_notify_flags+0x10/0x10 [ 177.240149][ T8254] ? __local_bh_enable_ip+0x12d/0x1c0 [ 177.240186][ T8254] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.240211][ T8254] ? dev_set_allmulti+0x10e/0x260 [ 177.240252][ T8254] ? __pfx___mutex_lock+0x10/0x10 [ 177.240289][ T8254] ? do_raw_spin_unlock+0x122/0x240 [ 177.240336][ T8254] ? netif_set_allmulti+0x267/0x380 [ 177.240367][ T8254] dev_set_allmulti+0x10e/0x260 [ 177.240395][ T8254] team_change_rx_flags+0x20f/0x330 [ 177.240426][ T8254] ? team_change_rx_flags+0x29/0x330 [ 177.240458][ T8254] ? __pfx_team_change_rx_flags+0x10/0x10 [ 177.240488][ T8254] netif_set_allmulti+0x20f/0x380 [ 177.240526][ T8254] __dev_change_flags+0x52e/0x6d0 [ 177.240557][ T8254] ? __pfx___dev_change_flags+0x10/0x10 [ 177.240596][ T8254] netif_change_flags+0x88/0x1a0 [ 177.240627][ T8254] do_setlink+0xcb9/0x40d0 [ 177.240668][ T8254] ? __pfx_do_setlink+0x10/0x10 [ 177.240687][ T8254] ? do_raw_spin_lock+0x121/0x290 [ 177.240739][ T8254] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.240773][ T8254] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 177.240812][ T8254] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 177.240844][ T8254] ? rcu_is_watching+0x15/0xb0 [ 177.240883][ T8254] ? __mutex_lock+0xa6d/0xe80 [ 177.240912][ T8254] ? __mutex_lock+0x51b/0xe80 [ 177.240947][ T8254] ? rtnl_setlink+0x4ea/0x900 [ 177.240983][ T8254] ? __pfx___mutex_lock+0x10/0x10 [ 177.241029][ T8254] ? ns_capable+0x8a/0xf0 [ 177.241058][ T8254] rtnl_setlink+0x604/0x900 [ 177.241099][ T8254] ? __pfx_rtnl_setlink+0x10/0x10 [ 177.241254][ T8254] ? __pfx_rtnl_setlink+0x10/0x10 [ 177.241286][ T8254] rtnetlink_rcv_msg+0x7cc/0xb70 [ 177.241323][ T8254] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 177.241356][ T8254] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 177.241395][ T8254] ? ref_tracker_free+0x63a/0x7d0 [ 177.241417][ T8254] ? __copy_skb_header+0xa7/0x550 [ 177.241457][ T8254] netlink_rcv_skb+0x219/0x490 [ 177.241494][ T8254] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 177.241528][ T8254] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.241587][ T8254] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.241621][ T8254] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.241662][ T8254] netlink_unicast+0x758/0x8d0 [ 177.241707][ T8254] netlink_sendmsg+0x805/0xb30 [ 177.241740][ T8254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.241765][ T8254] ? aa_sock_msg_perm+0x94/0x160 [ 177.241790][ T8254] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 177.241816][ T8254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.241838][ T8254] __sock_sendmsg+0x219/0x270 [ 177.241872][ T8254] ____sys_sendmsg+0x505/0x830 [ 177.241904][ T8254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.241939][ T8254] ? import_iovec+0x74/0xa0 [ 177.241972][ T8254] ___sys_sendmsg+0x21f/0x2a0 [ 177.241999][ T8254] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.242068][ T8254] ? __fget_files+0x2a/0x420 [ 177.242097][ T8254] ? __fget_files+0x3a0/0x420 [ 177.242137][ T8254] __x64_sys_sendmsg+0x19b/0x260 [ 177.242165][ T8254] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.242211][ T8254] ? do_syscall_64+0xba/0x210 [ 177.242251][ T8254] do_syscall_64+0xf6/0x210 [ 177.242281][ T8254] ? clear_bhb_loop+0x45/0xa0 [ 177.242309][ T8254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.242331][ T8254] RIP: 0033:0x7fd0b9d8e969 [ 177.242352][ T8254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.242370][ T8254] RSP: 002b:00007fd0bab9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.242393][ T8254] RAX: ffffffffffffffda RBX: 00007fd0b9fb5fa0 RCX: 00007fd0b9d8e969 [ 177.242410][ T8254] RDX: 0000000000004014 RSI: 0000200000000340 RDI: 0000000000000004 [ 177.242425][ T8254] RBP: 00007fd0b9e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 177.242439][ T8254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.242453][ T8254] R13: 0000000000000000 R14: 00007fd0b9fb5fa0 R15: 00007ffdb1b8c3d8 [ 177.242488][ T8254] [ 177.242514][ T8254] [ 177.763089][ T8254] ============================= [ 177.767939][ T8254] [ BUG: Invalid wait context ] [ 177.772810][ T8254] 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 Tainted: G W [ 177.781485][ T8254] ----------------------------- [ 177.786323][ T8254] syz.0.619/8254 is trying to lock: [ 177.791513][ T8254] ffff88805f038d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_set_allmulti+0x10e/0x260 [ 177.801705][ T8254] other info that might help us debug this: [ 177.807595][ T8254] context-{5:5} [ 177.811051][ T8254] 2 locks held by syz.0.619/8254: [ 177.816156][ T8254] #0: ffffffff8f2f3348 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_setlink+0x4ea/0x900 [ 177.825153][ T8254] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330 [ 177.835018][ T8254] stack backtrace: [ 177.838744][ T8254] CPU: 1 UID: 0 PID: 8254 Comm: syz.0.619 Tainted: G W 6.15.0-rc3-syzkaller-00580-g4acf6d4f6afc #0 PREEMPT(full) [ 177.838769][ T8254] Tainted: [W]=WARN [ 177.838775][ T8254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 177.838786][ T8254] Call Trace: [ 177.838792][ T8254] [ 177.838800][ T8254] dump_stack_lvl+0x189/0x250 [ 177.838829][ T8254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.838852][ T8254] ? __pfx__printk+0x10/0x10 [ 177.838866][ T8254] ? console_unlock+0x21b/0x270 [ 177.838883][ T8254] ? print_lock_name+0xde/0x100 [ 177.838910][ T8254] __lock_acquire+0xbcf/0xd20 [ 177.838936][ T8254] ? dev_set_allmulti+0x10e/0x260 [ 177.838952][ T8254] lock_acquire+0x120/0x360 [ 177.838973][ T8254] ? dev_set_allmulti+0x10e/0x260 [ 177.838994][ T8254] __mutex_lock+0x182/0xe80 [ 177.839015][ T8254] ? dev_set_allmulti+0x10e/0x260 [ 177.839031][ T8254] ? __pfx___dev_notify_flags+0x10/0x10 [ 177.839048][ T8254] ? __local_bh_enable_ip+0x12d/0x1c0 [ 177.839074][ T8254] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.839093][ T8254] ? dev_set_allmulti+0x10e/0x260 [ 177.839109][ T8254] ? __pfx___mutex_lock+0x10/0x10 [ 177.839130][ T8254] ? do_raw_spin_unlock+0x122/0x240 [ 177.839151][ T8254] ? netif_set_allmulti+0x267/0x380 [ 177.839176][ T8254] dev_set_allmulti+0x10e/0x260 [ 177.839193][ T8254] team_change_rx_flags+0x20f/0x330 [ 177.839216][ T8254] ? team_change_rx_flags+0x29/0x330 [ 177.839243][ T8254] ? __pfx_team_change_rx_flags+0x10/0x10 [ 177.839265][ T8254] netif_set_allmulti+0x20f/0x380 [ 177.839284][ T8254] __dev_change_flags+0x52e/0x6d0 [ 177.839302][ T8254] ? __pfx___dev_change_flags+0x10/0x10 [ 177.839323][ T8254] netif_change_flags+0x88/0x1a0 [ 177.839342][ T8254] do_setlink+0xcb9/0x40d0 [ 177.839363][ T8254] ? __pfx_do_setlink+0x10/0x10 [ 177.839377][ T8254] ? do_raw_spin_lock+0x121/0x290 [ 177.839400][ T8254] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.839420][ T8254] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 177.839438][ T8254] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 177.839458][ T8254] ? rcu_is_watching+0x15/0xb0 [ 177.839485][ T8254] ? __mutex_lock+0xa6d/0xe80 [ 177.839506][ T8254] ? __mutex_lock+0x51b/0xe80 [ 177.839528][ T8254] ? rtnl_setlink+0x4ea/0x900 [ 177.839553][ T8254] ? __pfx___mutex_lock+0x10/0x10 [ 177.839578][ T8254] ? ns_capable+0x8a/0xf0 [ 177.839595][ T8254] rtnl_setlink+0x604/0x900 [ 177.839623][ T8254] ? __pfx_rtnl_setlink+0x10/0x10 [ 177.839685][ T8254] ? __pfx_rtnl_setlink+0x10/0x10 [ 177.839709][ T8254] rtnetlink_rcv_msg+0x7cc/0xb70 [ 177.839735][ T8254] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 177.839758][ T8254] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 177.839784][ T8254] ? ref_tracker_free+0x63a/0x7d0 [ 177.839799][ T8254] ? __copy_skb_header+0xa7/0x550 [ 177.839821][ T8254] netlink_rcv_skb+0x219/0x490 [ 177.839847][ T8254] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 177.839872][ T8254] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.839904][ T8254] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.839931][ T8254] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.839958][ T8254] netlink_unicast+0x758/0x8d0 [ 177.839986][ T8254] netlink_sendmsg+0x805/0xb30 [ 177.840005][ T8254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.840021][ T8254] ? aa_sock_msg_perm+0x94/0x160 [ 177.840038][ T8254] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 177.840056][ T8254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.840071][ T8254] __sock_sendmsg+0x219/0x270 [ 177.840094][ T8254] ____sys_sendmsg+0x505/0x830 [ 177.840113][ T8254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.840134][ T8254] ? import_iovec+0x74/0xa0 [ 177.840156][ T8254] ___sys_sendmsg+0x21f/0x2a0 [ 177.840180][ T8254] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.840211][ T8254] ? __fget_files+0x2a/0x420 [ 177.840233][ T8254] ? __fget_files+0x3a0/0x420 [ 177.840258][ T8254] __x64_sys_sendmsg+0x19b/0x260 [ 177.840276][ T8254] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.840301][ T8254] ? do_syscall_64+0xba/0x210 [ 177.840323][ T8254] do_syscall_64+0xf6/0x210 [ 177.840345][ T8254] ? clear_bhb_loop+0x45/0xa0 [ 177.840364][ T8254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.840380][ T8254] RIP: 0033:0x7fd0b9d8e969 [ 177.840395][ T8254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.840410][ T8254] RSP: 002b:00007fd0bab9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.840428][ T8254] RAX: ffffffffffffffda RBX: 00007fd0b9fb5fa0 RCX: 00007fd0b9d8e969 [ 177.840441][ T8254] RDX: 0000000000004014 RSI: 0000200000000340 RDI: 0000000000000004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 177.840452][ T8254] RBP: 00007fd0b9e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 177.840462][ T8254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.840472][ T8254] R13: 0000000000000000 R14: 00007fd0b9fb5fa0 R15: 00007ffdb1b8c3d8 [ 177.840491][ T8254] [ 178.313240][ T8254] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 178.322164][ T8254] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 178.358394][ T8081] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.369361][ T8081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.479851][ T5830] Bluetooth: hci4: command 0x041b tx timeout [ 179.836428][ T83] bridge_slave_1: left allmulticast mode [ 179.842916][ T83] bridge_slave_1: left promiscuous mode [ 179.848834][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.857241][ T83] bridge_slave_0: left allmulticast mode [ 179.863966][ T83] bridge_slave_0: left promiscuous mode [ 179.870105][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.956343][ T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.966613][ T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.976754][ T83] bond0 (unregistering): Released all slaves [ 180.062215][ T83] hsr_slave_0: left promiscuous mode [ 180.068428][ T83] hsr_slave_1: left promiscuous mode [ 180.074462][ T83] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.083089][ T83] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.207286][ T83] team0 (unregistering): Port device team_slave_1 removed [ 180.231471][ T83] team0 (unregistering): Port device team_slave_0 removed [ 180.795901][ T83] bridge_slave_1: left allmulticast mode [ 180.802086][ T83] bridge_slave_1: left promiscuous mode [ 180.807921][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.816100][ T83] bridge_slave_0: left allmulticast mode [ 180.821888][ T83] bridge_slave_0: left promiscuous mode [ 180.827733][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.914971][ T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.925060][ T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.935399][ T83] bond0 (unregistering): Released all slaves [ 181.021717][ T83] hsr_slave_0: left promiscuous mode [ 181.027466][ T83] hsr_slave_1: left promiscuous mode [ 181.033884][ T83] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.041545][ T83] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.148508][ T83] team0 (unregistering): Port device team_slave_1 removed [ 181.173775][ T83] team0 (unregistering): Port device team_slave_0 removed