last executing test programs: 1m21.870199764s ago: executing program 3 (id=2958): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001940)=@delchain={0x34, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}]}, 0x34}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r0, &(0x7f0000001140), 0x700, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', '', [], 0xa, "3c21d74d3315feb81e0fad330a9f02f9fc44a4b63830b3ea1fb0289a359bdf2c577a998ac691f48b56df93209097f6fdb4a06628e01f330badf74e09dffcf6466546ce52f011c29cfd6beeb18400"/87}, 0x5b) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r4, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000a6000200000000000500020000000000858500feff000000009500000000000000ae457001af50d5b1e3f6a76f975d5933a9763b512f468541a22306b79046d8ce3ea5d434b87119cac4b2dfee437ebe5a2f9b9e7a4de3541814486127b10c76745668045bd70283d669b6be5d6a1f855fc255a3d9256fa21d98fa1e3abe349637282fb0e4d5e994a285ccd55ae0380dae0b7a8905695c131d62319f37e95e5a30009d00000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x90) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001500), 0x588, 0x46) socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x30, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x400) 1m7.826964443s ago: executing program 3 (id=2958): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001940)=@delchain={0x34, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}]}, 0x34}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r0, &(0x7f0000001140), 0x700, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', '', [], 0xa, "3c21d74d3315feb81e0fad330a9f02f9fc44a4b63830b3ea1fb0289a359bdf2c577a998ac691f48b56df93209097f6fdb4a06628e01f330badf74e09dffcf6466546ce52f011c29cfd6beeb18400"/87}, 0x5b) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r4, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000a6000200000000000500020000000000858500feff000000009500000000000000ae457001af50d5b1e3f6a76f975d5933a9763b512f468541a22306b79046d8ce3ea5d434b87119cac4b2dfee437ebe5a2f9b9e7a4de3541814486127b10c76745668045bd70283d669b6be5d6a1f855fc255a3d9256fa21d98fa1e3abe349637282fb0e4d5e994a285ccd55ae0380dae0b7a8905695c131d62319f37e95e5a30009d00000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x90) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001500), 0x588, 0x46) socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x30, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x400) 54.723590148s ago: executing program 3 (id=2958): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001940)=@delchain={0x34, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}]}, 0x34}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r0, &(0x7f0000001140), 0x700, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', '', [], 0xa, "3c21d74d3315feb81e0fad330a9f02f9fc44a4b63830b3ea1fb0289a359bdf2c577a998ac691f48b56df93209097f6fdb4a06628e01f330badf74e09dffcf6466546ce52f011c29cfd6beeb18400"/87}, 0x5b) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r4, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000a6000200000000000500020000000000858500feff000000009500000000000000ae457001af50d5b1e3f6a76f975d5933a9763b512f468541a22306b79046d8ce3ea5d434b87119cac4b2dfee437ebe5a2f9b9e7a4de3541814486127b10c76745668045bd70283d669b6be5d6a1f855fc255a3d9256fa21d98fa1e3abe349637282fb0e4d5e994a285ccd55ae0380dae0b7a8905695c131d62319f37e95e5a30009d00000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x90) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001500), 0x588, 0x46) socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x30, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x400) 39.521201287s ago: executing program 3 (id=2958): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001940)=@delchain={0x34, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}]}, 0x34}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r0, &(0x7f0000001140), 0x700, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', '', [], 0xa, "3c21d74d3315feb81e0fad330a9f02f9fc44a4b63830b3ea1fb0289a359bdf2c577a998ac691f48b56df93209097f6fdb4a06628e01f330badf74e09dffcf6466546ce52f011c29cfd6beeb18400"/87}, 0x5b) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r4, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000a6000200000000000500020000000000858500feff000000009500000000000000ae457001af50d5b1e3f6a76f975d5933a9763b512f468541a22306b79046d8ce3ea5d434b87119cac4b2dfee437ebe5a2f9b9e7a4de3541814486127b10c76745668045bd70283d669b6be5d6a1f855fc255a3d9256fa21d98fa1e3abe349637282fb0e4d5e994a285ccd55ae0380dae0b7a8905695c131d62319f37e95e5a30009d00000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x90) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001500), 0x588, 0x46) socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x30, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x400) 26.030609596s ago: executing program 3 (id=2958): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001940)=@delchain={0x34, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}]}, 0x34}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r0, &(0x7f0000001140), 0x700, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', '', [], 0xa, "3c21d74d3315feb81e0fad330a9f02f9fc44a4b63830b3ea1fb0289a359bdf2c577a998ac691f48b56df93209097f6fdb4a06628e01f330badf74e09dffcf6466546ce52f011c29cfd6beeb18400"/87}, 0x5b) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r4, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000a6000200000000000500020000000000858500feff000000009500000000000000ae457001af50d5b1e3f6a76f975d5933a9763b512f468541a22306b79046d8ce3ea5d434b87119cac4b2dfee437ebe5a2f9b9e7a4de3541814486127b10c76745668045bd70283d669b6be5d6a1f855fc255a3d9256fa21d98fa1e3abe349637282fb0e4d5e994a285ccd55ae0380dae0b7a8905695c131d62319f37e95e5a30009d00000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x90) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001500), 0x588, 0x46) socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x30, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x400) 12.873268771s ago: executing program 3 (id=2958): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001940)=@delchain={0x34, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}]}, 0x34}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r0, &(0x7f0000001140), 0x700, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', '', [], 0xa, "3c21d74d3315feb81e0fad330a9f02f9fc44a4b63830b3ea1fb0289a359bdf2c577a998ac691f48b56df93209097f6fdb4a06628e01f330badf74e09dffcf6466546ce52f011c29cfd6beeb18400"/87}, 0x5b) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r4, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000a6000200000000000500020000000000858500feff000000009500000000000000ae457001af50d5b1e3f6a76f975d5933a9763b512f468541a22306b79046d8ce3ea5d434b87119cac4b2dfee437ebe5a2f9b9e7a4de3541814486127b10c76745668045bd70283d669b6be5d6a1f855fc255a3d9256fa21d98fa1e3abe349637282fb0e4d5e994a285ccd55ae0380dae0b7a8905695c131d62319f37e95e5a30009d00000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x90) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001500), 0x588, 0x46) socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x30, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x400) 5.557787486s ago: executing program 1 (id=4467): unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vxcan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f0000000400), 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x20000400) socket$unix(0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.871861348s ago: executing program 1 (id=4470): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="e9", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r3, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x7, 0xa, 0x1, 0xe65, r3}, &(0x7f0000000200)=0x10) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001d80)=""/4106, 0x100a}, {&(0x7f00000003c0)=""/41, 0x29}, {0x0}, {&(0x7f0000001900)=""/230, 0xe6}, {&(0x7f0000001a00)=""/111, 0x6f}], 0x5}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000740)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x2, 0xa, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000280)={'batadv_slave_1\x00', &(0x7f0000002fc0)=@ethtool_stats={0x4b, 0x3c}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0018000000cb0000fc273302dbbc2a00240000000200c48183888f50000000000000030000cd000000060c0000007bffff3f000000000900000000000000000000000000841f0e2e19ed83e277492eb890e61bd5f5ff7f18cbdb206cacb4c5567d121ec3dda8c780dcaab9a1a50988e740a5489e2d7346a0d810591afefade8151b632883edf1a0f22"], &(0x7f0000000f40)=""/4096, 0x3e, 0x1000, 0x9}, 0x20) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000007c0)="87", 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000005620000000000000000ef00711243000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 3.854563979s ago: executing program 1 (id=4475): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newaddrlabel={0x38, 0x48, 0x513, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000005cc0)={&(0x7f00000009c0), 0x18, &(0x7f0000000d40)={&(0x7f0000004cc0)="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", 0x6fffff9}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x52d35ce30131f272}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d3, &(0x7f0000000100)) ioctl$TUNSETVNETLE(r4, 0x400454dc, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 3.358503218s ago: executing program 0 (id=4478): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1100, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.237981121s ago: executing program 0 (id=4480): unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vxcan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f0000000400), 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x20000400) socket$unix(0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.142353544s ago: executing program 4 (id=4481): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0701000009090c040500feff"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11}, 0x90) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000000)=0x7fff, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000200)=0x8, 0x4) (async) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000240)) r1 = socket(0x2, 0x80805, 0x0) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000400)=0x175, 0x4) (async, rerun: 32) r2 = socket(0xa, 0x1, 0x0) (async, rerun: 32) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000020c0)=[@in={0x2, 0x4e24, @broadcast}]}, &(0x7f0000002100)=0x10) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x74, 0x0, &(0x7f0000003c00)) (async) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffff00208500000070000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) r4 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=@base={0xe, 0xffffffff, 0x0, 0x2000, 0x4b0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x20000000}, 0x48) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) (async, rerun: 64) socket$packet(0x11, 0x0, 0x300) (async, rerun: 64) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r7, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES64=r6, @ANYRES16, @ANYRESDEC=r4], 0x36) (async, rerun: 32) setsockopt$PNPIPE_HANDLE(r6, 0x113, 0x3, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8, 0x0, r5}, 0x48) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @local, @local}, &(0x7f00000002c0)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) (async, rerun: 32) r9 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x0, 0x3, 0x5}, 0x10) 2.898010391s ago: executing program 4 (id=4482): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="0701000077939c37a3559618"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11}, 0x90) r0 = socket(0x1, 0x803, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x14}}]}, 0x78}}, 0x0) connect$bt_sco(r0, &(0x7f0000000400)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) write$binfmt_elf64(r6, 0x0, 0x78) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000500), &(0x7f0000000540)=0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockopt$packet_buf(r2, 0x107, 0x13, &(0x7f0000000600)=""/176, &(0x7f00000006c0)=0xb0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x2f, 0x81, 0xa9, 0x101, 0xc, @dev={0xfe, 0x80, '\x00', 0x25}, @mcast1, 0x700, 0x10, 0x0, 0x80000001}}) bpf$PROG_BIND_MAP(0x23, &(0x7f00000004c0)={r8, r7}, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000009511f41fb7d8337f5ea9eae01ff30ec93f2db03b85e7a0bad732b4", @ANYRES16=r10, @ANYBLOB="20002abd7000fbdbdf2501000000140002007767320000000000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="0800070003000000080005000100000008000100", @ANYRES32=r12, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4005) 2.657338352s ago: executing program 1 (id=4485): r0 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) (async) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r2], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x30}, 0x90) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map=0x1, r5, 0x37, 0x0, 0x0, @link_id}, 0x20) (async) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x400000001ffffffd) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r7) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x34, r10, 0x12ca589fdb765487, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x34}}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r12 = openat$cgroup_netprio_ifpriomap(r11, &(0x7f0000000540), 0x2, 0x0) write(r12, &(0x7f0000000080)="a4", 0x1) (async) setsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f0000000880)={@empty}, 0x14) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\a\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000200001800d0001006574683a68737230000000000c0002800800030080000000"], 0x34}}, 0x0) 2.610022424s ago: executing program 4 (id=4486): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x408, 0x110, 0x110, 0x210, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @empty}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f77a4a2a222f5b9d9d1ac799fbb255c6fb8a52e5e1298b0fb0a2e65cb160"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@local, @multicast1, @dev}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r3 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000050000000000000071106800000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6b3df0bdf4647ad842ac54c6c3a7b45aad9449f5aa8f8c3c9aa16aaf0aaf605b786101d463100000003d20502fcf7c50baf3993c9de05d8369d4d6acad0ab792003d2c305afdf3ef723989757ba2095e29b964c0d6170e56bbd35376ab21", @ANYRES16=r1, @ANYBLOB="01000000000000000000140000000c0001800800030000000000080016000000000005001800000000000500190001000000"], 0x38}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x408, 0x110, 0x110, 0x210, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @empty}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f77a4a2a222f5b9d9d1ac799fbb255c6fb8a52e5e1298b0fb0a2e65cb160"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@local, @multicast1, @dev}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) (async) socket(0xa, 0x3, 0x4) (async) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000050000000000000071106800000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6b3df0bdf4647ad842ac54c6c3a7b45aad9449f5aa8f8c3c9aa16aaf0aaf605b786101d463100000003d20502fcf7c50baf3993c9de05d8369d4d6acad0ab792003d2c305afdf3ef723989757ba2095e29b964c0d6170e56bbd35376ab21", @ANYRES16=r1, @ANYBLOB="01000000000000000000140000000c0001800800030000000000080016000000000005001800000000000500190001000000"], 0x38}}, 0x0) (async) 2.218900037s ago: executing program 2 (id=4488): r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r1, 0x0, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$sock_int(r2, 0x1, 0xf, 0x0, &(0x7f00000020c0)) r3 = socket$vsock_stream(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)={0xb0000004}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0xce27, @multicast2}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0x1, 0x10012, r4, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25DELUID(r5, 0x89e2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x31}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0xb0b}, 0x14}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x0, 0x0, @local}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 2.106585033s ago: executing program 2 (id=4489): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x2, 0x8, 0xf8, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x1, 0xa56, 0x8}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1}, 0x48) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0xfffffffffffffef3, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x800) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'veth0_virt_wifi\x00', @link_local}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000200000000003d0000000a00000017329c399db77b207d11d0c83f1f9c0566dcbe06ed6e332609967a13a3c5d50900eca9269aadceda0054d3b1f2f2b9547f614eaebad2e126a609b08deba44acf95e36871aab7e0a2"], 0x68) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="100027bd7000fcdbdf25030000002d00070073797374656d5f753a6f626a6563745f723a68616c645f736f6e797069635f657865635f743a73300000000014000200000000000000000000000000000000011400060076657468315f746f5f7465616d000000"], 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000850) 2.097071942s ago: executing program 4 (id=4490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) r1 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/251, 0xfb}, 0x0) (async, rerun: 32) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x29, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r10, 0x4) (async) close(0x3) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 1.796672433s ago: executing program 4 (id=4491): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040), 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0x4, 0x0, &(0x7f00000000c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000001bc0)=ANY=[@ANYBLOB="18000000000000000000001b000000009500000000000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='tlb_flush\x00', r2}, 0xf) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="2e00000010008188040f6fec59acbc0435a181003f00000000060000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x0, 0x4, 0x8, 0x1014}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r5, 0x0, 0x0}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) socketpair(0xb, 0xa, 0xae76, &(0x7f00000000c0)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x1, r6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0xb, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="77809ad791b15fa5bfba9f8738f0ce8006739e8efea10297c2fee0bfd4a46782679ee052447531d4c50682ecbf4dd7a070a59327cb0527440cb18d3f87c10a01da15f4352f", @ANYRES16=0x0, @ANYBLOB="000000000000000000003b000000e801330080000000080211000000ffffffffffff90e488f9971a000000000000000000006400044003010004060000000000002a01007206030303030303760600000000060bdd2d2d5014b2109a59339408ad50548584c01cda5f3ced6f13b590b9aaf1bca488130effc03c7c2adf4757f2542033dd3d"], 0x208}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r12, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 1.743388768s ago: executing program 2 (id=4492): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x28e6, 0x50, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001940)={{}, &(0x7f0000000300), &(0x7f0000000440), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0xf5}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x60000000}, 0x70) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="24000000180003041dfffd946f61050002", 0x11}], 0x1}, 0x0) sendmmsg$alg(r5, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x6, &(0x7f0000000100), 0xf}], 0x492492492492642, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4b}}, &(0x7f00000002c0)='GPL\x00', 0x5}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0x69) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xf, &(0x7f0000000080)=@ringbuf, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1}, 0x10}, 0x90) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r8, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.395580418s ago: executing program 0 (id=4493): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c0", @ANYRES64], 0x398}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010000000000000000001c00000000000000000000000800020000000037abd8b000d682ce557088667cd8796813b2512a4a2e0a7e2de21ba0e0086ec6ee057081a751a7b4d8489752364c154ee1000000"], 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYBLOB="06309b876cb52f161fd908cf5561972d451650ed6def273c060191ecae68304add294e78b8d142e16853a0229a21bdbdcee2c0a8cf2cf07055b53de7937f591e5cd6bbedb0632fe130a6405d2b258d66e8104c7dbaabd2b169d692505af963ad0000194310096a3c1cdcdcefce17768633472fc440e97195e068c90e97b77025e78c98e2ca8a47b0da4c592fbda4ed9519f43f279faa1f63a9e80c76b362020d9e21a5307e82f1f76c1d91d68dcb30efc2b6484e788ab789daa75f5c0a4e3dee", @ANYRES16=r5], 0x160}, 0x1, 0x0, 0x0, 0x40}, 0x24045804) (async) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYBLOB="06309b876cb52f161fd908cf5561972d451650ed6def273c060191ecae68304add294e78b8d142e16853a0229a21bdbdcee2c0a8cf2cf07055b53de7937f591e5cd6bbedb0632fe130a6405d2b258d66e8104c7dbaabd2b169d692505af963ad0000194310096a3c1cdcdcefce17768633472fc440e97195e068c90e97b77025e78c98e2ca8a47b0da4c592fbda4ed9519f43f279faa1f63a9e80c76b362020d9e21a5307e82f1f76c1d91d68dcb30efc2b6484e788ab789daa75f5c0a4e3dee", @ANYRES16=r5], 0x160}, 0x1, 0x0, 0x0, 0x40}, 0x24045804) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getpeername$inet6(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, 0x0, &(0x7f0000000240)) (async) getsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, 0x0, &(0x7f0000000240)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21}, 0x90) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='cdg\x00', 0x4) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x0, 0xb, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x118, 0x180, 0x9c03, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6_vti0\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) ioctl(r9, 0x8b1a, &(0x7f0000000040)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x4, 0x0) (async) socket$inet6(0xa, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.242320736s ago: executing program 1 (id=4494): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x18, 0x110, 0xa, 'E'}], 0x18}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300), 0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300), 0xc) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x1}], 0x1}, 0x0) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x1}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000040)=0x100000, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000040)=0x100000, 0x4) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x18) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fca", 0x85}, {&(0x7f0000000d40)="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", 0x177}, {&(0x7f0000000f00)="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", 0x14b}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000340)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07e153e3949b954c1d74b105c14411925a8ae24778d4111d2d9743b682d653bcf35d53fd33489a3a405042c0de5ec2cb4b991a31e1d76db8609d0bf66d8d723a6c28a50d42ab169de383345fbee97bea33e8bfb5d705852d360ab703fc956c1ea86157aedcff1782c784e074", 0xc5}, {&(0x7f0000000440)}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xc4}}, 0x0) 1.133433897s ago: executing program 0 (id=4495): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000400000000000013000018180000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000350901000000000095000000000700007f9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000400000000000013000018180000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000350901000000000095000000000700007f9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) pipe(&(0x7f0000000040)) (async) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) close(r2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) (async) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) (async) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000)=0x1, 0x4) (async) 1.076105422s ago: executing program 0 (id=4496): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001ce38003fe0f0273240ada1b40d80800c500"/40, 0x28}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x6f3c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000003500)=0x4, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x110, 0x0, 0x1a8, 0x110, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xfffffe21, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001000010400f924153cae64c75dfcff0900000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163767461700004000280"], 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'cpuset'}, {0x0, 'net_cls'}]}, 0x11) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'cpuset'}, {0x0, 'net_cls'}]}, 0x11) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r9) sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r9, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r9, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000d00)=""/72, 0x48}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/137, 0x89}], 0x3}}], 0x3, 0x0, 0x0) (async) recvmmsg(r9, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000d00)=""/72, 0x48}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/137, 0x89}], 0x3}}], 0x3, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x1a, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x1, 0x3, 0x0, 0x7, 0xb, 0xfffffffffffffff4}, @call={0x85, 0x0, 0x0, 0x6b}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @generic={0xc, 0x2, 0x3, 0x8001, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r11}, &(0x7f0000000600), &(0x7f0000000640)=r10}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000004000000000000400000000000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000004000000000000400000000000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) socket(0x24, 0xa, 0x5) 619.956067ms ago: executing program 2 (id=4497): writev(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xda00) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000a50000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x20, 0x2, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000100001000000000000000000000020000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000082a4d1540000080005400000001f840000000c0a01010000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b802c000110000001006c696d6974000002000000800c00014000000000000000050c0002"], 0x108}}, 0x0) 491.181937ms ago: executing program 4 (id=4498): getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000280), &(0x7f0000000000)=0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="444dc9fe000000006400128009000100766c616e000000005400028006000100000000000c000200020000000a000000040004801c0003800c00010068e30000030000000c0001007f000000070000001c0004800c0001000200000060d506000c000100000000000200000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x94}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0x1, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x6, 0x7, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7880, 0x40, 0x5, 0x1}}) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x4}, @IFLA_GRE_FWMARK={0x8}]}}}]}, 0x48}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56561, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8}]}}]}, 0x48}}, 0x0) r13 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x2c}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000600)={@private, @loopback, 0x0}, &(0x7f0000000640)=0xc) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r16, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r16, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r17, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r18}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r16, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r17, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r18}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r16, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r17, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r18}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x4) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1d4, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x3, 0x1, r5}]}, @HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000091) 457.666169ms ago: executing program 2 (id=4499): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="7387000000000000000001000000080001"], 0x30}}, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/6, &(0x7f0000000040)=0x6) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080), 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$sock_buf(r5, 0x1, 0x38, 0x0, &(0x7f0000000040)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"/723], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0xfffff000, 0xe, 0x0, &(0x7f0000000880)="61df712bc884fed5722780b60800", 0x0, 0x8000, 0x0, 0x0, 0x67, &(0x7f0000000000), &(0x7f0000000800)="ffe200004e379b19393a41afde6b0b1235c1278ebf59a5d4d697bc199e060b675b46d4ff37c7f91ceaa6790cd8570f080b0d2375918cd7dfcf26aa90dc6a5617be488475b892958512c8e814c24d7efc26f9f2512dec8c759773c42a2fca2735984613809a78eb", 0x0, 0x2}, 0x50) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 228.506952ms ago: executing program 0 (id=4500): socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private0, @private}}) openat$tun(0xffffffffffffff9c, &(0x7f0000001680), 0x103000, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10}, 0x48) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b15, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004021}, 0x20000008) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001a40)={0x6, 0x1, &(0x7f0000001880)=ANY=[@ANYBLOB="95001d000094a4f6"], &(0x7f0000001900)='GPL\x00', 0x2, 0xf, &(0x7f0000001940)=""/15}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b405000000000000711059000000000006000000000000009500000000000000ca866ded69d9bb03c490921579bca08e67bf798b4713cac05ce584bfe9a21306faaca58cb23f615819df4ec8c0cdfa75936a6c366d465eceaa95ffdb436e963818045b07c4cbebaab50d126c105b5f04aedf193445f470167db9c9e92269c9d9bd7f9651d2fb07b9c9efbea9"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x12, &(0x7f0000000380)=@framed={{}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000200)='syzkaller\x00', 0x2000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x28, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r8, &(0x7f0000001a80)=[{{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000200)=""/13, 0xd}, {&(0x7f0000000fc0)=""/221, 0xdd}, {&(0x7f00000010c0)=""/70, 0x46}, {&(0x7f00000005c0)=""/213, 0xd5}, {&(0x7f0000001240)=""/32, 0x20}, {&(0x7f0000001280)=""/229, 0xe5}, {&(0x7f0000001380)}, {&(0x7f00000013c0)=""/64, 0x40}, {&(0x7f0000001440)=""/162, 0xa2}], 0x9, &(0x7f00000006c0)=""/189, 0xbd}}, {{&(0x7f0000001680)=@qipcrtr, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001700)=""/240, 0xf0}, {&(0x7f0000001800)=""/162, 0xa2}, {&(0x7f00000018c0)=""/85, 0x55}, {&(0x7f0000001940)=""/92, 0x5c}], 0x4, &(0x7f0000001a00)=""/88, 0x58}}], 0x2, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x6, &(0x7f00000004c0)=0x30, 0x4) syz_emit_ethernet(0x17, &(0x7f00000002c0)=ANY=[@ANYBLOB="d92aebf7a2010180ae08586a004000000000000000595f"], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) 79.205208ms ago: executing program 1 (id=4501): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002600)={0x6, 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB="85104300ffffffff9500000000000000"], &(0x7f00000024c0)='syzkaller\x00', 0x8, 0x1f, &(0x7f0000002500)=""/31}, 0x90) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup, 0x8, 0x1, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0]}, 0x40) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) (async, rerun: 32) r0 = socket$rxrpc(0x21, 0x2, 0xa) (rerun: 32) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) socketpair(0x5, 0x2, 0x6, &(0x7f0000000000)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0x9c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x80, 0x33, @beacon={{{}, {}, @broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{}]}, @void, @val={0x4, 0x6}, @void, @val={0x5, 0x3}, @val={0x25, 0x3}, @void, @void, @val={0x2d, 0x1a, {0x0, 0x2, 0x4, 0x0, {0x1ff, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, 0x7cfadfd09456c78c, 0x0, 0x7}}, @void, @void, @void, [{0xdd, 0x1d, "4681fcb2fb4323c9f657e659a392e70d299679756854196d371f504d9b"}]}}]}, 0x9c}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) (async) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) (async) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendto$packet(r5, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7877dcdcba32f8fad8d56b141ab05aef91aa7c50df71548a3f6c5609063382a0c1511fdf9435e3ffe46000000000000580cc40000", 0x46, 0x0, &(0x7f0000000540)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @multicast}, 0x14) recvmmsg(r5, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/27, 0x1b}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002580)=""/215, 0xd7}], 0x1}}], 0x2, 0x0, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x44, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@NDA_CACHEINFO={0x14, 0x3, {0x7}}, @NDA_DST_IPV6={0x14, 0x1, @mcast2}]}, 0x44}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000002c0)='rpcb_setport\x00'}, 0x10) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r8, &(0x7f0000000080), 0x1c) 0s ago: executing program 2 (id=4502): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x2, 0x8, 0xf8, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x1, 0xa56, 0x8}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1}, 0x48) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0xfffffffffffffef3, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x800) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'veth0_virt_wifi\x00', @link_local}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000200000000003d0000000a00000017329c399db77b207d11d0c83f1f9c0566dcbe06ed6e332609967a13a3c5d50900eca9269aadceda0054d3b1f2f2b9547f614eaebad2e126a609b08deba44acf95e36871aab7e0a2"], 0x68) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="100027bd7000fcdbdf25030000002d00070073797374656d5f753a6f626a6563745f723a68616c645f736f6e797069635f657865635f743a73300000000014000200000000000000000000000000000000011400060076657468315f746f5f7465616d000000"], 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000850) kernel console output (not intermixed with test programs): Port device team_slave_0 added [ 428.838677][T18501] team0: Port device team_slave_1 added [ 428.958563][T18501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.976043][T18501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.009387][T18501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.043976][T18501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.059099][T18501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.133070][T18501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.324667][T18501] hsr_slave_0: entered promiscuous mode [ 429.368970][T18501] hsr_slave_1: entered promiscuous mode [ 429.395450][T18501] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.406695][T18501] Cannot create hsr debugfs directory [ 429.496815][T18675] __nla_validate_parse: 1 callbacks suppressed [ 429.496837][T18675] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3804'. [ 429.506871][T18681] netlink: 'syz.1.3807': attribute type 9 has an invalid length. [ 429.527942][T18681] netlink: 'syz.1.3807': attribute type 6 has an invalid length. [ 429.620574][ C0] eth0: bad gso: type: 1, size: 1408 [ 429.698184][T18694] netlink: 596 bytes leftover after parsing attributes in process `syz.4.3811'. [ 429.866841][ T5104] Bluetooth: hci4: command tx timeout [ 430.034264][T18709] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3815'. [ 430.053794][T18709] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 430.428307][T18722] netlink: 'syz.4.3819': attribute type 9 has an invalid length. [ 430.464904][T18722] netlink: 'syz.4.3819': attribute type 6 has an invalid length. [ 430.501934][T18501] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 430.548612][T18501] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 430.619817][T18501] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 430.650108][T18731] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3821'. [ 430.673869][T18501] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 430.675438][T18730] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20004 [ 431.010339][T18501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.027356][T18747] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3827'. [ 431.037557][T18747] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 431.101862][T18501] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.157873][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.165128][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.214065][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.221293][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.302547][T18757] netlink: 'syz.4.3832': attribute type 10 has an invalid length. [ 431.522428][T18766] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 431.551359][T18766] netlink: 'syz.4.3834': attribute type 1 has an invalid length. [ 431.695629][T18772] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3835'. [ 431.720400][T18501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.849464][T18501] veth0_vlan: entered promiscuous mode [ 431.933703][T18501] veth1_vlan: entered promiscuous mode [ 431.946027][ T5104] Bluetooth: hci4: command tx timeout [ 431.999484][ C0] eth0: bad gso: type: 1, size: 1408 [ 432.083719][T18501] veth0_macvtap: entered promiscuous mode [ 432.143014][T18501] veth1_macvtap: entered promiscuous mode [ 432.193770][T18501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.207993][T18501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.219245][T18501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.230174][T18501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.240764][T18501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.257479][T18501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.271646][T18501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.298283][T18501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.335818][T18501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.356099][T18501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.370005][T18501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.381514][T18501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.403419][T18501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.421962][T18501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.432742][T18501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.444676][T18501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.465534][T18789] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3841'. [ 432.481767][T18789] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 432.558863][T18501] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.570693][T18501] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.586808][T18501] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.602188][T18501] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.690086][T18807] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3844'. [ 432.756707][T18807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3844'. [ 432.860406][T15307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.881233][T15307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.896011][T18814] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3846'. [ 432.959525][T15306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.007480][T15306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.031025][T18816] macsec0 speed is unknown, defaulting to 1000 [ 433.079420][T18816] lo speed is unknown, defaulting to 1000 [ 433.717530][T18837] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 433.977302][T18839] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 434.299015][ C0] eth0: bad gso: type: 1, size: 1408 [ 434.356928][T18855] syzkaller0: left promiscuous mode [ 434.385241][T18855] syzkaller0: left allmulticast mode [ 434.456787][T18859] macsec0 speed is unknown, defaulting to 1000 [ 434.472495][T18861] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 434.504097][T18859] lo speed is unknown, defaulting to 1000 [ 434.658313][T18869] __nla_validate_parse: 6 callbacks suppressed [ 434.658334][T18869] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3866'. [ 434.682944][T18869] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 434.863073][T18879] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64 [ 435.291801][ C0] eth0: bad gso: type: 1, size: 1408 [ 435.383208][T18886] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 435.491948][T18900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3874'. [ 435.664582][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.664476][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.792593][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.856628][T18911] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3879'. [ 436.877785][T18919] netlink: 'syz.0.3876': attribute type 9 has an invalid length. [ 436.892291][T18919] netlink: 'syz.0.3876': attribute type 6 has an invalid length. [ 436.896552][T18911] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 437.014601][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.077561][T18912] macsec0 speed is unknown, defaulting to 1000 [ 437.085921][T18912] lo speed is unknown, defaulting to 1000 [ 437.221840][ T5100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 437.232400][ T5100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 437.241647][ T5100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 437.257700][ T5100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 437.276857][ T5100] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 437.285457][ T5100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 437.389013][T18942] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 437.399528][T18942] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 437.466110][ T53] bridge_slave_1: left allmulticast mode [ 437.471807][ T53] bridge_slave_1: left promiscuous mode [ 437.477761][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.518233][ T53] bridge_slave_0: left allmulticast mode [ 437.524015][ T53] bridge_slave_0: left promiscuous mode [ 437.529876][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.004705][T18957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3886'. [ 438.305642][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.319421][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.331915][ T53] bond0 (unregistering): Released all slaves [ 438.351901][T18934] macsec0 speed is unknown, defaulting to 1000 [ 438.361014][T18934] lo speed is unknown, defaulting to 1000 [ 438.626446][T18974] netlink: 'syz.2.3890': attribute type 9 has an invalid length. [ 438.637819][T18971] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 438.675484][T18974] netlink: 'syz.2.3890': attribute type 6 has an invalid length. [ 438.795087][T18980] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3892'. [ 438.826088][T18980] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 438.975381][ T5104] Bluetooth: hci2: command tx timeout [ 439.032967][T18988] macsec0 speed is unknown, defaulting to 1000 [ 439.053026][T18934] chnl_net:caif_netlink_parms(): no params data found [ 439.099967][T18988] lo speed is unknown, defaulting to 1000 [ 439.235523][ T53] hsr_slave_0: left promiscuous mode [ 439.259710][ T53] hsr_slave_1: left promiscuous mode [ 439.275533][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.283009][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.345619][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.353096][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.375459][ T5104] Bluetooth: hci4: command tx timeout [ 439.422393][ T53] veth1_macvtap: left promiscuous mode [ 439.428328][ T53] veth0_macvtap: left promiscuous mode [ 439.442632][ T53] veth1_vlan: left promiscuous mode [ 439.448048][ T53] veth0_vlan: left promiscuous mode [ 440.119239][T19006] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3901'. [ 440.143896][T19010] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3901'. [ 440.557580][ T53] team0 (unregistering): Port device team_slave_1 removed [ 440.613015][ T53] team0 (unregistering): Port device team_slave_0 removed [ 441.273987][T19016] macsec0 speed is unknown, defaulting to 1000 [ 441.334207][T19025] netlink: 'syz.4.3904': attribute type 9 has an invalid length. [ 441.357045][T19025] netlink: 'syz.4.3904': attribute type 6 has an invalid length. [ 441.457319][ T5104] Bluetooth: hci4: command tx timeout [ 441.466311][T19016] lo speed is unknown, defaulting to 1000 [ 441.510048][T18934] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.544974][T18934] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.552993][T18934] bridge_slave_0: entered allmulticast mode [ 441.564436][T18934] bridge_slave_0: entered promiscuous mode [ 441.597552][T18934] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.605731][T18934] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.613567][T18934] bridge_slave_1: entered allmulticast mode [ 441.627077][T18934] bridge_slave_1: entered promiscuous mode [ 441.720276][T18934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.750984][T18934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.876783][T18934] team0: Port device team_slave_0 added [ 441.890259][T18934] team0: Port device team_slave_1 added [ 441.998864][T18934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.015779][T18934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.079899][T18934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.106255][T18934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.124042][T18934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.185064][T18934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.498821][T18934] hsr_slave_0: entered promiscuous mode [ 442.526422][T18934] hsr_slave_1: entered promiscuous mode [ 442.529290][T19068] netlink: 'syz.0.3916': attribute type 9 has an invalid length. [ 442.560594][T19068] netlink: 'syz.0.3916': attribute type 6 has an invalid length. [ 442.570063][T18934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 442.586703][T18934] Cannot create hsr debugfs directory [ 442.601639][T19062] hsr0: entered promiscuous mode [ 442.897555][T19071] macsec0 speed is unknown, defaulting to 1000 [ 442.989918][T19071] lo speed is unknown, defaulting to 1000 [ 443.135310][T19061] hsr0: left promiscuous mode [ 443.342602][T19082] macsec0 speed is unknown, defaulting to 1000 [ 443.435923][T19088] openvswitch: netlink: Missing key (keys=20040, expected=80) [ 443.492531][T19082] lo speed is unknown, defaulting to 1000 [ 443.538550][ T5104] Bluetooth: hci4: command tx timeout [ 443.759321][T18934] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 443.797439][T18934] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 443.933661][T18934] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 443.959790][T18934] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 444.184314][ C0] eth0: bad gso: type: 1, size: 1408 [ 444.228335][T19112] netlink: 'syz.0.3928': attribute type 1 has an invalid length. [ 444.249274][T19113] netlink: 'syz.2.3927': attribute type 9 has an invalid length. [ 444.255285][T19112] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3928'. [ 444.267641][T19113] netlink: 'syz.2.3927': attribute type 6 has an invalid length. [ 444.542951][T18934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.633489][T18934] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.657858][T19127] macsec0 speed is unknown, defaulting to 1000 [ 444.674064][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.681320][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.728664][T19127] lo speed is unknown, defaulting to 1000 [ 444.746999][ T5203] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.754166][ T5203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.900494][T19142] FAULT_INJECTION: forcing a failure. [ 444.900494][T19142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.917032][T19142] CPU: 0 PID: 19142 Comm: syz.0.3936 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 444.926891][T19142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 444.937060][T19142] Call Trace: [ 444.940457][T19142] [ 444.943419][T19142] dump_stack_lvl+0x241/0x360 [ 444.948156][T19142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.953403][T19142] ? __pfx__printk+0x10/0x10 [ 444.958043][T19142] ? __pfx_lock_release+0x10/0x10 [ 444.963131][T19142] should_fail_ex+0x3b0/0x4e0 [ 444.967855][T19142] _copy_from_user+0x2f/0xe0 [ 444.972488][T19142] copy_msghdr_from_user+0xae/0x680 [ 444.977830][T19142] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 444.983695][T19142] __sys_sendmsg+0x23d/0x3a0 [ 444.988323][T19142] ? __pfx___sys_sendmsg+0x10/0x10 [ 444.993487][T19142] ? vfs_write+0x7c4/0xc90 [ 444.997994][T19142] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 445.004364][T19142] ? do_syscall_64+0x100/0x230 [ 445.009220][T19142] ? do_syscall_64+0xb6/0x230 [ 445.013925][T19142] do_syscall_64+0xf3/0x230 [ 445.018467][T19142] ? clear_bhb_loop+0x35/0x90 [ 445.023206][T19142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.029142][T19142] RIP: 0033:0x7f3123375f19 [ 445.033677][T19142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.053320][T19142] RSP: 002b:00007f3124141048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.061865][T19142] RAX: ffffffffffffffda RBX: 00007f3123505f60 RCX: 00007f3123375f19 [ 445.069873][T19142] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 445.077877][T19142] RBP: 00007f31241410a0 R08: 0000000000000000 R09: 0000000000000000 [ 445.085880][T19142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.093964][T19142] R13: 000000000000000b R14: 00007f3123505f60 R15: 00007ffc179cb3a8 [ 445.102003][T19142] [ 445.362933][T18934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.461769][T19158] dccp_xmit_packet: Payload too large (65475) for featneg. [ 445.499231][T19158] dccp_close: ABORT with 65475 bytes unread [ 445.510626][T18934] veth0_vlan: entered promiscuous mode [ 445.525310][T19159] netlink: 'syz.2.3941': attribute type 9 has an invalid length. [ 445.533153][T19159] netlink: 'syz.2.3941': attribute type 6 has an invalid length. [ 445.564020][T19155] sctp: [Deprecated]: syz.1.3939 (pid 19155) Use of int in maxseg socket option. [ 445.564020][T19155] Use struct sctp_assoc_value instead [ 445.579639][T18934] veth1_vlan: entered promiscuous mode [ 445.615864][ T5104] Bluetooth: hci4: command tx timeout [ 445.644632][T19162] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3942'. [ 445.693598][T18934] veth0_macvtap: entered promiscuous mode [ 445.737220][T18934] veth1_macvtap: entered promiscuous mode [ 445.785540][T18934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.810095][T18934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.820394][T18934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.831535][T18934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.847877][T18934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.862460][T18934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.884147][T18934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.916791][T18934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.936179][T18934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.959069][T19173] netlink: 'syz.0.3946': attribute type 9 has an invalid length. [ 445.960458][T18934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.976223][T19173] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3946'. [ 445.985151][T18934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.005081][T18934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.024541][T18934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.071705][T18934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.100710][T18934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.126500][T18934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.200209][T18934] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.201390][T19175] netlink: 'syz.0.3946': attribute type 9 has an invalid length. [ 446.221084][T18934] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.234189][T19175] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3946'. [ 446.254845][T18934] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.267965][T18934] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.332333][T19172] atomic_op ffff88805ccf7998 conn xmit_atomic 0000000000000000 [ 446.373766][T19181] macsec0 speed is unknown, defaulting to 1000 [ 446.426518][T19181] lo speed is unknown, defaulting to 1000 [ 446.551327][T15308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.570766][T15308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.732809][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.774545][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.919438][T19197] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3953'. [ 447.126159][T19207] FAULT_INJECTION: forcing a failure. [ 447.126159][T19207] name failslab, interval 1, probability 0, space 0, times 0 [ 447.151801][T19207] CPU: 0 PID: 19207 Comm: syz.2.3955 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 447.161667][T19207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 447.171753][T19207] Call Trace: [ 447.175061][T19207] [ 447.178022][T19207] dump_stack_lvl+0x241/0x360 [ 447.182739][T19207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.187973][T19207] ? __pfx__printk+0x10/0x10 [ 447.192608][T19207] ? netlink_insert+0x10b7/0x14b0 [ 447.197677][T19207] should_fail_ex+0x3b0/0x4e0 [ 447.202395][T19207] ? __alloc_skb+0x1c3/0x440 [ 447.207032][T19207] should_failslab+0x9/0x20 [ 447.211574][T19207] kmem_cache_alloc_node_noprof+0x71/0x320 [ 447.217429][T19207] __alloc_skb+0x1c3/0x440 [ 447.221903][T19207] ? __pfx___alloc_skb+0x10/0x10 [ 447.226879][T19207] ? netlink_autobind+0xd6/0x2f0 [ 447.231855][T19207] ? netlink_autobind+0x2b0/0x2f0 [ 447.236933][T19207] netlink_sendmsg+0x638/0xcb0 [ 447.241753][T19207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.247081][T19207] ? __import_iovec+0x536/0x820 [ 447.251978][T19207] ? aa_sock_msg_perm+0x91/0x160 [ 447.256969][T19207] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 447.262287][T19207] ? security_socket_sendmsg+0x87/0xb0 [ 447.267812][T19207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.273140][T19207] __sock_sendmsg+0x221/0x270 [ 447.277868][T19207] ____sys_sendmsg+0x525/0x7d0 [ 447.282689][T19207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 447.288030][T19207] __sys_sendmsg+0x2b0/0x3a0 [ 447.292646][T19207] ? __pfx___sys_sendmsg+0x10/0x10 [ 447.297815][T19207] ? vfs_write+0x7c4/0xc90 [ 447.302317][T19207] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 447.308781][T19207] ? do_syscall_64+0x100/0x230 [ 447.313590][T19207] ? do_syscall_64+0xb6/0x230 [ 447.318395][T19207] do_syscall_64+0xf3/0x230 [ 447.322937][T19207] ? clear_bhb_loop+0x35/0x90 [ 447.327665][T19207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.333596][T19207] RIP: 0033:0x7f4630575f19 [ 447.338044][T19207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.357687][T19207] RSP: 002b:00007f4631430048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.366140][T19207] RAX: ffffffffffffffda RBX: 00007f4630705f60 RCX: 00007f4630575f19 [ 447.374153][T19207] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 447.382166][T19207] RBP: 00007f46314300a0 R08: 0000000000000000 R09: 0000000000000000 [ 447.390177][T19207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.398184][T19207] R13: 000000000000004d R14: 00007f4630705f60 R15: 00007ffffba299c8 [ 447.406245][T19207] [ 447.957027][T19227] macsec0 speed is unknown, defaulting to 1000 [ 447.986009][T19227] lo speed is unknown, defaulting to 1000 [ 448.208380][T19242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3967'. [ 448.218774][T19242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3967'. [ 448.238212][T19242] sch_tbf: burst 65535 is lower than device lo mtu (65550) ! [ 448.537252][T19255] FAULT_INJECTION: forcing a failure. [ 448.537252][T19255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.616692][T19255] CPU: 0 PID: 19255 Comm: syz.0.3972 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 448.626565][T19255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 448.636657][T19255] Call Trace: [ 448.639970][T19255] [ 448.642929][T19255] dump_stack_lvl+0x241/0x360 [ 448.647666][T19255] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.652904][T19255] ? __pfx__printk+0x10/0x10 [ 448.657539][T19255] ? __pfx_lock_release+0x10/0x10 [ 448.662605][T19255] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 448.668626][T19255] should_fail_ex+0x3b0/0x4e0 [ 448.673319][T19255] _copy_from_user+0x2f/0xe0 [ 448.677932][T19255] ethtool_set_pauseparam+0xeb/0x1f0 [ 448.683240][T19255] ? __pfx_ethtool_set_pauseparam+0x10/0x10 [ 448.689156][T19255] dev_ethtool+0x1215/0x1bc0 [ 448.693771][T19255] ? __pfx_dev_ethtool+0x10/0x10 [ 448.698738][T19255] ? dev_load+0x21/0x1f0 [ 448.702985][T19255] dev_ioctl+0x785/0x1340 [ 448.707329][T19255] sock_do_ioctl+0x240/0x460 [ 448.711935][T19255] ? __pfx_sock_do_ioctl+0x10/0x10 [ 448.717072][T19255] sock_ioctl+0x629/0x8e0 [ 448.721414][T19255] ? __pfx_sock_ioctl+0x10/0x10 [ 448.726270][T19255] ? __fget_files+0x29/0x470 [ 448.730876][T19255] ? __fget_files+0x3f6/0x470 [ 448.735556][T19255] ? __fget_files+0x29/0x470 [ 448.740155][T19255] ? bpf_lsm_file_ioctl+0x9/0x10 [ 448.745105][T19255] ? security_file_ioctl+0x87/0xb0 [ 448.750222][T19255] ? __pfx_sock_ioctl+0x10/0x10 [ 448.755083][T19255] __se_sys_ioctl+0xfc/0x170 [ 448.759691][T19255] do_syscall_64+0xf3/0x230 [ 448.764218][T19255] ? clear_bhb_loop+0x35/0x90 [ 448.768920][T19255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.774843][T19255] RIP: 0033:0x7f3123375f19 [ 448.779281][T19255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.798893][T19255] RSP: 002b:00007f3124141048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 448.807333][T19255] RAX: ffffffffffffffda RBX: 00007f3123505f60 RCX: 00007f3123375f19 [ 448.815309][T19255] RDX: 0000000020000900 RSI: 0000000000008946 RDI: 0000000000000012 [ 448.823292][T19255] RBP: 00007f31241410a0 R08: 0000000000000000 R09: 0000000000000000 [ 448.831273][T19255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.839245][T19255] R13: 000000000000000b R14: 00007f3123505f60 R15: 00007ffc179cb3a8 [ 448.847246][T19255] [ 448.888728][T19258] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3973'. [ 448.916113][T19258] 0ͺXΉ¦D: renamed from 00ͺXΉ¦Dφ» (while UP) [ 448.933305][T19258] A link change request failed with some changes committed already. Interface 30ͺXΉ¦D may have been left with an inconsistent configuration, please check. [ 449.030805][T19261] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3974'. [ 449.079115][T19262] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 449.087962][T19261] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 449.124574][T19264] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3976'. [ 449.356107][T19273] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3980'. [ 449.511768][T19275] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 449.540035][T19275] macvlan2: entered promiscuous mode [ 449.595306][T19275] mac80211_hwsim hwsim27 wlan0: left promiscuous mode [ 449.691818][T19284] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 449.707851][T19284] macvlan2: entered promiscuous mode [ 449.721953][T19284] mac80211_hwsim hwsim27 wlan0: left promiscuous mode [ 449.789833][T19293] FAULT_INJECTION: forcing a failure. [ 449.789833][T19293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.810037][T19293] CPU: 1 PID: 19293 Comm: syz.2.3984 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 449.819891][T19293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 449.829958][T19293] Call Trace: [ 449.833247][T19293] [ 449.836198][T19293] dump_stack_lvl+0x241/0x360 [ 449.840917][T19293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.846139][T19293] ? __pfx__printk+0x10/0x10 [ 449.850742][T19293] ? snprintf+0xda/0x120 [ 449.855012][T19293] should_fail_ex+0x3b0/0x4e0 [ 449.859720][T19293] _copy_to_user+0x2f/0xb0 [ 449.864149][T19293] simple_read_from_buffer+0xca/0x150 [ 449.869540][T19293] proc_fail_nth_read+0x1e9/0x250 [ 449.874582][T19293] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 449.880148][T19293] ? rw_verify_area+0x520/0x6b0 [ 449.885017][T19293] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 449.890577][T19293] vfs_read+0x204/0xbc0 [ 449.894755][T19293] ? __pfx_lock_release+0x10/0x10 [ 449.899806][T19293] ? __pfx_vfs_read+0x10/0x10 [ 449.904492][T19293] ? __fget_files+0x29/0x470 [ 449.909084][T19293] ? __fget_files+0x3f6/0x470 [ 449.913772][T19293] ksys_read+0x1a0/0x2c0 [ 449.918018][T19293] ? __pfx_ksys_read+0x10/0x10 [ 449.922785][T19293] ? do_syscall_64+0x100/0x230 [ 449.927562][T19293] ? do_syscall_64+0xb6/0x230 [ 449.932250][T19293] do_syscall_64+0xf3/0x230 [ 449.936763][T19293] ? clear_bhb_loop+0x35/0x90 [ 449.941465][T19293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.947370][T19293] RIP: 0033:0x7f46305749fc [ 449.951790][T19293] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 449.971405][T19293] RSP: 002b:00007f4631430040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 449.979827][T19293] RAX: ffffffffffffffda RBX: 00007f4630705f60 RCX: 00007f46305749fc [ 449.987802][T19293] RDX: 000000000000000f RSI: 00007f46314300b0 RDI: 0000000000000015 [ 449.995779][T19293] RBP: 00007f46314300a0 R08: 0000000000000000 R09: 0000000000000000 [ 450.003750][T19293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.011721][T19293] R13: 000000000000004d R14: 00007f4630705f60 R15: 00007ffffba299c8 [ 450.019715][T19293] [ 450.100914][T15306] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.940067][T15306] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.044981][T19314] __nla_validate_parse: 3 callbacks suppressed [ 451.045001][T19314] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3985'. [ 451.061216][T19308] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3987'. [ 451.112231][T19317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3989'. [ 451.217290][T15306] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.313339][T19322] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3990'. [ 451.324891][T19322] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 451.439132][T15306] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.480071][T19327] netlink: 'syz.1.3991': attribute type 9 has an invalid length. [ 451.496408][T19327] netlink: 'syz.1.3991': attribute type 6 has an invalid length. [ 451.520050][ T5100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 451.530707][ T5100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 451.540408][ T5100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 451.551177][ T5100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 451.564301][ T5100] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 451.574798][ T5100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 451.632990][T19328] macsec0 speed is unknown, defaulting to 1000 [ 451.648063][T19328] lo speed is unknown, defaulting to 1000 [ 451.782698][T15306] bridge_slave_1: left allmulticast mode [ 451.790882][T19333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.800679][T15306] bridge_slave_1: left promiscuous mode [ 451.800904][T15306] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.825875][T15306] bridge_slave_0: left allmulticast mode [ 451.845824][T15306] bridge_slave_0: left promiscuous mode [ 451.851649][T15306] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.549819][T15306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.571201][T15306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.584661][T15306] bond0 (unregistering): Released all slaves [ 452.677295][T19344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3997'. [ 452.742600][T19347] syzkaller1: entered promiscuous mode [ 452.753794][T19347] syzkaller1: entered allmulticast mode [ 453.112974][T19379] netlink: 'syz.4.4003': attribute type 9 has an invalid length. [ 453.122064][T19379] netlink: 'syz.4.4003': attribute type 6 has an invalid length. [ 453.302209][T15306] hsr_slave_0: left promiscuous mode [ 453.319880][T15306] hsr_slave_1: left promiscuous mode [ 453.333855][T15306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.350499][T15306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.376140][T15306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.397547][T15306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.474062][T15306] veth1_macvtap: left promiscuous mode [ 453.490311][T15306] veth0_macvtap: left promiscuous mode [ 453.498733][T15306] veth1_vlan: left promiscuous mode [ 453.504454][T15306] veth0_vlan: left promiscuous mode [ 453.615560][ T5100] Bluetooth: hci4: command tx timeout [ 454.219901][T15306] team0 (unregistering): Port device team_slave_1 removed [ 454.273249][T15306] team0 (unregistering): Port device team_slave_0 removed [ 454.743751][T19390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4007'. [ 454.789508][T19393] tipc: Enabling of bearer rejected, failed to enable media [ 454.887441][ C0] eth0: bad gso: type: 1, size: 1408 [ 454.893306][ C0] eth0: bad gso: type: 1, size: 1408 [ 455.119521][T19328] chnl_net:caif_netlink_parms(): no params data found [ 455.399009][T19328] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.412599][T19328] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.420416][T19328] bridge_slave_0: entered allmulticast mode [ 455.428780][T19328] bridge_slave_0: entered promiscuous mode [ 455.441324][T19328] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.449053][T19328] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.457453][T19328] bridge_slave_1: entered allmulticast mode [ 455.465092][T19328] bridge_slave_1: entered promiscuous mode [ 455.520943][T19328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.536793][T19445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4019'. [ 455.550112][T19445] netlink: 'syz.4.4019': attribute type 20 has an invalid length. [ 455.572693][T19328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.599082][T19449] netlink: 'syz.2.4022': attribute type 1 has an invalid length. [ 455.614873][T19449] netlink: 512 bytes leftover after parsing attributes in process `syz.2.4022'. [ 455.643711][T19328] team0: Port device team_slave_0 added [ 455.651305][T19449] netlink: 288 bytes leftover after parsing attributes in process `syz.2.4022'. [ 455.667093][T19328] team0: Port device team_slave_1 added [ 455.695064][ T5100] Bluetooth: hci4: command tx timeout [ 455.747573][T19328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.755040][T19328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.789768][T19328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.812359][T19328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.820048][T19328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.846426][T19328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.858845][T19451] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4023'. [ 455.955188][T19451] netlink: 'syz.2.4023': attribute type 1 has an invalid length. [ 456.071127][T19328] hsr_slave_0: entered promiscuous mode [ 456.085864][T19328] hsr_slave_1: entered promiscuous mode [ 456.092747][T19328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.109536][T19328] Cannot create hsr debugfs directory [ 456.126107][T19461] No such timeout policy "syz0" [ 456.132899][T19459] __nla_validate_parse: 4 callbacks suppressed [ 456.132917][T19459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4026'. [ 456.197513][T19459] bond1: entered promiscuous mode [ 456.203836][T19462] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4026'. [ 456.283696][T19464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4026'. [ 456.310361][T19464] bond1: left promiscuous mode [ 456.373693][T19467] netlink: 'syz.0.4027': attribute type 1 has an invalid length. [ 456.403092][T19467] netlink: 9352 bytes leftover after parsing attributes in process `syz.0.4027'. [ 456.413174][T19467] netlink: 'syz.0.4027': attribute type 1 has an invalid length. [ 456.421266][T19467] netlink: 'syz.0.4027': attribute type 2 has an invalid length. [ 456.629515][T19476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4031'. [ 456.703058][T19476] x_tables: duplicate underflow at hook 1 [ 456.767489][T19480] netlink: 'syz.4.4033': attribute type 9 has an invalid length. [ 456.779082][T19480] netlink: 'syz.4.4033': attribute type 6 has an invalid length. [ 457.086361][T19328] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 457.110506][T19328] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 457.122702][T19328] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 457.143846][T19328] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 457.471317][T19328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.566574][T19328] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.609164][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.616358][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.658603][ T5102] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.665831][ T5102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.711695][T19517] xt_CT: You must specify a L4 protocol and not use inversions on it [ 457.775516][ T5100] Bluetooth: hci4: command tx timeout [ 457.816783][T19328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 457.839230][T19523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4043'. [ 457.908551][T19524] sch_fq: defrate 2 ignored. [ 458.263980][T19328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.431485][T19328] veth0_vlan: entered promiscuous mode [ 458.478104][T19328] veth1_vlan: entered promiscuous mode [ 458.485368][T19557] netlink: 'syz.2.4045': attribute type 9 has an invalid length. [ 458.493137][T19557] netlink: 'syz.2.4045': attribute type 6 has an invalid length. [ 458.614310][T19328] veth0_macvtap: entered promiscuous mode [ 458.632362][T19564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4051'. [ 458.653711][T19567] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4050'. [ 458.671856][T19567] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 458.711030][T19328] veth1_macvtap: entered promiscuous mode [ 458.821958][T19575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4052'. [ 458.854314][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.893381][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.915186][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.943568][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.959051][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.990561][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.020181][T19328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.039108][T19578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4053'. [ 459.083039][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.096689][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.109805][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.130680][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.152753][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.166184][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.184891][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.198472][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.220540][T19328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.272927][T19328] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.292016][T19328] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.304379][T19328] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.321590][T19328] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.664485][T15306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.704483][T15306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.807391][ T2470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.829046][ T2470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.855287][ T5100] Bluetooth: hci4: command tx timeout [ 460.087611][T19616] netlink: 'syz.0.4062': attribute type 9 has an invalid length. [ 460.113613][T19616] netlink: 'syz.0.4062': attribute type 6 has an invalid length. [ 460.837291][T19641] delete_channel: no stack [ 461.185163][T19663] netlink: 'syz.1.4074': attribute type 9 has an invalid length. [ 461.192945][T19663] netlink: 'syz.1.4074': attribute type 6 has an invalid length. [ 461.206649][ C0] eth0: bad gso: type: 1, size: 1408 [ 461.808393][T19703] ipip0: entered promiscuous mode [ 461.923680][T19705] __nla_validate_parse: 3 callbacks suppressed [ 461.923702][T19705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4085'. [ 461.958089][T19705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4085'. [ 462.569325][T19701] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 462.725199][T19717] netlink: 'syz.1.4087': attribute type 9 has an invalid length. [ 462.772205][T19717] netlink: 'syz.1.4087': attribute type 6 has an invalid length. [ 462.804880][T15306] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.540296][T15306] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.620076][T15306] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.717667][T15306] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.856355][T15306] bridge_slave_1: left allmulticast mode [ 463.862049][T15306] bridge_slave_1: left promiscuous mode [ 463.869183][T15306] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.879140][T15306] bridge_slave_0: left allmulticast mode [ 463.885342][T15306] bridge_slave_0: left promiscuous mode [ 463.891133][T15306] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.631869][ T5104] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 464.643336][ T5104] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 464.663995][ T5104] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 464.672853][ T5104] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 464.683497][ T5104] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 464.697181][ T5104] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 464.907079][T15306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.932311][T15306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.955575][T15306] bond0 (unregistering): Released all slaves [ 464.981401][T19732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4091'. [ 465.148131][T19736] macsec0 speed is unknown, defaulting to 1000 [ 465.166353][T19736] lo speed is unknown, defaulting to 1000 [ 465.174022][T19750] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4094'. [ 465.521511][T19760] netlink: 'syz.1.4097': attribute type 11 has an invalid length. [ 465.664139][T15306] hsr_slave_0: left promiscuous mode [ 465.687875][T15306] hsr_slave_1: left promiscuous mode [ 465.725901][T15306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.755714][T15306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.781345][T19776] netlink: 'syz.4.4099': attribute type 9 has an invalid length. [ 465.795801][T15306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.818600][T19776] netlink: 'syz.4.4099': attribute type 6 has an invalid length. [ 465.826726][T15306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.896539][T15306] veth1_macvtap: left promiscuous mode [ 465.913754][T15306] veth0_macvtap: left promiscuous mode [ 465.926342][T15306] veth1_vlan: left promiscuous mode [ 465.937428][T15306] veth0_vlan: left promiscuous mode [ 466.745232][ T5100] Bluetooth: hci4: command tx timeout [ 466.994112][T15306] team0 (unregistering): Port device team_slave_1 removed [ 467.092954][T15306] team0 (unregistering): Port device team_slave_0 removed [ 467.766065][T19778] bridge0: port 3(gretap0) entered blocking state [ 467.772939][T19778] bridge0: port 3(gretap0) entered disabled state [ 467.782824][T19778] gretap0: entered allmulticast mode [ 467.791153][T19778] gretap0: entered promiscuous mode [ 467.816066][T19778] bridge0: port 3(gretap0) entered blocking state [ 467.822639][T19778] bridge0: port 3(gretap0) entered forwarding state [ 468.086691][T19796] netlink: 'syz.1.4104': attribute type 1 has an invalid length. [ 468.094568][T19796] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4104'. [ 468.139918][T19736] chnl_net:caif_netlink_parms(): no params data found [ 468.431082][T19811] netlink: 'syz.1.4108': attribute type 14 has an invalid length. [ 468.521662][T19802] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 468.572137][T19736] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.589329][T19736] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.601851][T19736] bridge_slave_0: entered allmulticast mode [ 468.617367][T19736] bridge_slave_0: entered promiscuous mode [ 468.635327][T19736] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.642643][T19736] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.658424][T19736] bridge_slave_1: entered allmulticast mode [ 468.691977][T19736] bridge_slave_1: entered promiscuous mode [ 468.781834][T19736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.802759][T19736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.838958][ T5100] Bluetooth: hci4: command tx timeout [ 469.069465][T19736] team0: Port device team_slave_0 added [ 469.108065][T19736] team0: Port device team_slave_1 added [ 469.288884][T19736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.320853][T19736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.371982][T19736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.402781][T19829] netlink: 'syz.4.4113': attribute type 10 has an invalid length. [ 469.524503][T19834] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4114'. [ 469.562441][T19830] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4113'. [ 469.598987][T19736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.632621][T19736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.744586][T19736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.388415][T19736] hsr_slave_0: entered promiscuous mode [ 470.423428][T19736] hsr_slave_1: entered promiscuous mode [ 470.446752][T19736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.454652][T19736] Cannot create hsr debugfs directory [ 470.900834][ T5100] Bluetooth: hci4: command tx timeout [ 471.325311][T19865] netlink: 'syz.2.4122': attribute type 3 has an invalid length. [ 471.471497][T19881] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4127'. [ 471.638308][T19736] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 471.672700][T19736] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 471.696116][T19736] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 471.716857][T19736] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 471.810041][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059013c00: rx timeout, send abort [ 471.998615][T19736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.112145][T19736] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.210509][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.217926][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.285548][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.292773][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.318332][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059013c00: abort rx timeout. Force session deactivation [ 472.755170][T19943] sctp: [Deprecated]: syz.0.4145 (pid 19943) Use of struct sctp_assoc_value in delayed_ack socket option. [ 472.755170][T19943] Use struct sctp_sack_info instead [ 472.806699][T19943] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4145'. [ 472.891522][T19736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.956899][T19952] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4148'. [ 472.976119][ T5100] Bluetooth: hci4: command tx timeout [ 473.064276][T19736] veth0_vlan: entered promiscuous mode [ 473.145817][T19736] veth1_vlan: entered promiscuous mode [ 473.266976][T19736] veth0_macvtap: entered promiscuous mode [ 473.294515][T19736] veth1_macvtap: entered promiscuous mode [ 473.372812][T19736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.404501][T19736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.416833][T19736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.445042][T19736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.493499][T19736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.528709][T19736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.559695][T19736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.593846][T19986] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.601100][T19986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.624022][T19989] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4156'. [ 473.685998][T19736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.721894][T19736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.732454][T19736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.750667][T19736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.778615][T19736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.790180][T19995] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4159'. [ 473.799770][T19736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.819350][T19736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.842268][T19736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.869304][T19736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.880491][T19997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4160'. [ 473.909605][T19998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4160'. [ 473.952744][T19736] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.962353][T19736] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.973740][T19736] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.991322][T19736] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.241821][T15308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.271586][T15308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.379868][T20012] netlink: 'syz.0.4166': attribute type 4 has an invalid length. [ 474.493039][T15304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.521628][T15304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.624339][T20028] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4170'. [ 474.651532][T20028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.687192][T20031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.935455][T20046] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4175'. [ 474.984147][T20042] macsec0 speed is unknown, defaulting to 1000 [ 475.009785][T20042] lo speed is unknown, defaulting to 1000 [ 475.085916][T20055] FAULT_INJECTION: forcing a failure. [ 475.085916][T20055] name failslab, interval 1, probability 0, space 0, times 0 [ 475.123922][T20055] CPU: 1 PID: 20055 Comm: syz.1.4177 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 475.133776][T20055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 475.143840][T20055] Call Trace: [ 475.147132][T20055] [ 475.150078][T20055] dump_stack_lvl+0x241/0x360 [ 475.154779][T20055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.159996][T20055] ? __pfx__printk+0x10/0x10 [ 475.164604][T20055] should_fail_ex+0x3b0/0x4e0 [ 475.169290][T20055] ? nf_tables_newtable+0x52e/0x1dc0 [ 475.174588][T20055] should_failslab+0x9/0x20 [ 475.179101][T20055] __kmalloc_cache_noprof+0x6c/0x2c0 [ 475.184413][T20055] ? nft_pernet+0x23/0x240 [ 475.188840][T20055] nf_tables_newtable+0x52e/0x1dc0 [ 475.193958][T20055] ? nfnl_pernet+0x23/0x240 [ 475.198472][T20055] ? __pfx_nf_tables_newtable+0x10/0x10 [ 475.204031][T20055] ? __nla_parse+0x40/0x60 [ 475.208464][T20055] nfnetlink_rcv+0x1427/0x2a90 [ 475.213261][T20055] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 475.218419][T20055] ? netlink_deliver_tap+0x2e/0x1b0 [ 475.223620][T20055] ? skb_clone+0x240/0x390 [ 475.228158][T20055] ? __pfx_lock_release+0x10/0x10 [ 475.233207][T20055] ? netlink_deliver_tap+0x2e/0x1b0 [ 475.238416][T20055] netlink_unicast+0x7f0/0x990 [ 475.243193][T20055] ? __pfx_netlink_unicast+0x10/0x10 [ 475.248484][T20055] ? __virt_addr_valid+0x183/0x530 [ 475.253608][T20055] ? __check_object_size+0x49c/0x900 [ 475.258905][T20055] ? bpf_lsm_netlink_send+0x9/0x10 [ 475.264029][T20055] netlink_sendmsg+0x8e4/0xcb0 [ 475.268838][T20055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.274146][T20055] ? __import_iovec+0x536/0x820 [ 475.279007][T20055] ? aa_sock_msg_perm+0x91/0x160 [ 475.283962][T20055] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 475.289264][T20055] ? security_socket_sendmsg+0x87/0xb0 [ 475.294749][T20055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.300059][T20055] __sock_sendmsg+0x221/0x270 [ 475.304759][T20055] ____sys_sendmsg+0x525/0x7d0 [ 475.309563][T20055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 475.314884][T20055] __sys_sendmsg+0x2b0/0x3a0 [ 475.319488][T20055] ? __pfx___sys_sendmsg+0x10/0x10 [ 475.324611][T20055] ? vfs_write+0x7c4/0xc90 [ 475.329078][T20055] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 475.335418][T20055] ? do_syscall_64+0x100/0x230 [ 475.340192][T20055] ? do_syscall_64+0xb6/0x230 [ 475.344884][T20055] do_syscall_64+0xf3/0x230 [ 475.349400][T20055] ? clear_bhb_loop+0x35/0x90 [ 475.354091][T20055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.359995][T20055] RIP: 0033:0x7f20f9b75f19 [ 475.364421][T20055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.384037][T20055] RSP: 002b:00007f20fa9f7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.392463][T20055] RAX: ffffffffffffffda RBX: 00007f20f9d05f60 RCX: 00007f20f9b75f19 [ 475.400440][T20055] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 475.408418][T20055] RBP: 00007f20fa9f70a0 R08: 0000000000000000 R09: 0000000000000000 [ 475.416391][T20055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.424363][T20055] R13: 000000000000004d R14: 00007f20f9d05f60 R15: 00007ffe955ef7f8 [ 475.432354][T20055] [ 475.555052][T20063] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 475.569832][T20063] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4181'. [ 476.005063][T20086] xt_CT: You must specify a L4 protocol and not use inversions on it [ 476.103484][T20092] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4189'. [ 476.366647][T20110] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 476.474093][T20115] macsec0 speed is unknown, defaulting to 1000 [ 476.490023][T20115] lo speed is unknown, defaulting to 1000 [ 477.014282][T20138] Cannot find set identified by id 0 to match [ 477.468455][T20155] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4204'. [ 477.493983][T20155] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 477.530732][T20158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4205'. [ 477.956201][T15306] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.593319][T15306] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.653564][T15306] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.734273][T15306] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.852086][T15306] bridge_slave_1: left allmulticast mode [ 478.857978][T15306] bridge_slave_1: left promiscuous mode [ 478.863677][T15306] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.873216][T15306] bridge_slave_0: left allmulticast mode [ 478.879347][T15306] bridge_slave_0: left promiscuous mode [ 478.887382][T15306] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.256500][T15306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.268179][T15306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.281541][T15306] bond0 (unregistering): Released all slaves [ 479.525892][T20193] __nla_validate_parse: 3 callbacks suppressed [ 479.525914][T20193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4213'. [ 479.583574][T20193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4213'. [ 479.758563][T20202] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4216'. [ 479.793844][T20202] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 479.856585][ C0] eth0: bad gso: type: 1, size: 1408 [ 479.916710][T15306] hsr_slave_0: left promiscuous mode [ 479.930210][T15306] hsr_slave_1: left promiscuous mode [ 479.950009][T15306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.964555][T15306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.978778][T15306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.010736][T15306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.013475][ T5104] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 480.032367][ T5104] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 480.041546][ T5104] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 480.050853][ T5104] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 480.059399][ T5104] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 480.069703][ T5104] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 480.086287][T15306] veth1_macvtap: left promiscuous mode [ 480.092391][T15306] veth0_macvtap: left promiscuous mode [ 480.098555][T15306] veth1_vlan: left promiscuous mode [ 480.104328][T15306] veth0_vlan: left promiscuous mode [ 480.667311][T15306] team0 (unregistering): Port device team_slave_1 removed [ 480.711722][T15306] team0 (unregistering): Port device team_slave_0 removed [ 481.269138][T20213] macsec0 speed is unknown, defaulting to 1000 [ 481.310729][T20213] lo speed is unknown, defaulting to 1000 [ 481.355109][T20224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4221'. [ 481.580235][T20232] netlink: 'syz.1.4224': attribute type 9 has an invalid length. [ 481.862337][T20238] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4225'. [ 481.952173][T20213] chnl_net:caif_netlink_parms(): no params data found [ 482.175001][ T5104] Bluetooth: hci4: command tx timeout [ 482.228576][T20213] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.265043][T20213] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.278871][T20213] bridge_slave_0: entered allmulticast mode [ 482.296572][T20213] bridge_slave_0: entered promiscuous mode [ 482.324218][T20260] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4229'. [ 482.362579][T20260] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 482.406601][T20213] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.420263][T20213] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.438024][T20213] bridge_slave_1: entered allmulticast mode [ 482.452743][T20213] bridge_slave_1: entered promiscuous mode [ 482.620819][T20275] netlink: 312 bytes leftover after parsing attributes in process `syz.0.4232'. [ 482.656602][T20279] xt_HMARK: spi-set and port-set can't be combined [ 482.669981][T20213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.716457][T20279] netlink: 'syz.4.4233': attribute type 2 has an invalid length. [ 482.736852][T20213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.829204][T20290] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4233'. [ 482.880731][T20293] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4235'. [ 482.965761][T20296] sctp: [Deprecated]: syz.4.4236 (pid 20296) Use of struct sctp_assoc_value in delayed_ack socket option. [ 482.965761][T20296] Use struct sctp_sack_info instead [ 482.977982][T20213] team0: Port device team_slave_0 added [ 483.016502][T20213] team0: Port device team_slave_1 added [ 483.027741][T20296] sctp: [Deprecated]: syz.4.4236 (pid 20296) Use of struct sctp_assoc_value in delayed_ack socket option. [ 483.027741][T20296] Use struct sctp_sack_info instead [ 483.238469][T20213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.253814][T20213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.287180][T20213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.341795][T20213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.350690][T20213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.384398][T20213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.494137][ C0] eth0: bad gso: type: 1, size: 1408 [ 483.558583][T20213] hsr_slave_0: entered promiscuous mode [ 483.588170][T20213] hsr_slave_1: entered promiscuous mode [ 483.609768][T20213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 483.632351][T20213] Cannot create hsr debugfs directory [ 483.805614][T20328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4243'. [ 484.264657][ T5104] Bluetooth: hci4: command tx timeout [ 484.695937][T20213] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 484.751758][T20365] __nla_validate_parse: 2 callbacks suppressed [ 484.751779][T20365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4252'. [ 484.893687][T20213] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 484.919099][T20213] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 484.950426][T20213] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 485.169960][T20382] netlink: 312 bytes leftover after parsing attributes in process `syz.2.4255'. [ 485.182698][ C0] eth0: bad gso: type: 1, size: 1408 [ 485.257644][T20390] netlink: 312 bytes leftover after parsing attributes in process `syz.2.4255'. [ 485.369399][T20213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.437693][T20402] FAULT_INJECTION: forcing a failure. [ 485.437693][T20402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.462413][T20213] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.484536][T20402] CPU: 1 PID: 20402 Comm: syz.2.4260 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 485.486103][T20399] xt_hashlimit: overflow, try lower: 0/0 [ 485.494374][T20402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 485.510094][T20402] Call Trace: [ 485.513401][T20402] [ 485.515196][ T5203] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.516336][T20402] dump_stack_lvl+0x241/0x360 [ 485.523475][ T5203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.528005][T20402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.528034][T20402] ? __pfx__printk+0x10/0x10 [ 485.545035][T20402] ? __pfx_lock_release+0x10/0x10 [ 485.550071][T20402] ? alloc_pages_mpol_noprof+0x417/0x680 [ 485.555737][T20402] should_fail_ex+0x3b0/0x4e0 [ 485.560424][T20402] _copy_from_user+0x2f/0xe0 [ 485.565027][T20402] bpf_prog_test_run_xdp+0xdde/0x11b0 [ 485.570425][T20402] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 485.576236][T20402] ? __fget_files+0x29/0x470 [ 485.580839][T20402] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 485.586653][T20402] bpf_prog_test_run+0x33a/0x3b0 [ 485.591601][T20402] __sys_bpf+0x48d/0x810 [ 485.595856][T20402] ? __pfx___sys_bpf+0x10/0x10 [ 485.600648][T20402] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 485.606641][T20402] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 485.612978][T20402] ? do_syscall_64+0x100/0x230 [ 485.617781][T20402] __x64_sys_bpf+0x7c/0x90 [ 485.622208][T20402] do_syscall_64+0xf3/0x230 [ 485.626722][T20402] ? clear_bhb_loop+0x35/0x90 [ 485.631432][T20402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.637337][T20402] RIP: 0033:0x7f4630575f19 [ 485.641756][T20402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.661455][T20402] RSP: 002b:00007f4631430048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 485.669878][T20402] RAX: ffffffffffffffda RBX: 00007f4630705f60 RCX: 00007f4630575f19 [ 485.677851][T20402] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 485.685824][T20402] RBP: 00007f46314300a0 R08: 0000000000000000 R09: 0000000000000000 [ 485.693796][T20402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.701787][T20402] R13: 000000000000004d R14: 00007f4630705f60 R15: 00007ffffba299c8 [ 485.709780][T20402] [ 485.747355][ T5102] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.754525][ T5102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.970588][T20410] delete_channel: no stack [ 486.146135][T20213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.291000][T20213] veth0_vlan: entered promiscuous mode [ 486.335078][ T5104] Bluetooth: hci4: command tx timeout [ 486.349917][T20213] veth1_vlan: entered promiscuous mode [ 486.377511][T20432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4266'. [ 486.580697][T20213] veth0_macvtap: entered promiscuous mode [ 486.626905][T20449] FAULT_INJECTION: forcing a failure. [ 486.626905][T20449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.650031][T20213] veth1_macvtap: entered promiscuous mode [ 486.676178][T20449] CPU: 1 PID: 20449 Comm: syz.4.4271 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 486.686050][T20449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 486.696155][T20449] Call Trace: [ 486.699466][T20449] [ 486.702424][T20449] dump_stack_lvl+0x241/0x360 [ 486.707148][T20449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.712388][T20449] ? __pfx__printk+0x10/0x10 [ 486.717016][T20449] ? __pfx_lock_release+0x10/0x10 [ 486.722086][T20449] should_fail_ex+0x3b0/0x4e0 [ 486.726804][T20449] _copy_to_user+0x2f/0xb0 [ 486.731260][T20449] bpf_test_finish+0x22c/0x8b0 [ 486.736069][T20449] ? __pfx_bpf_test_finish+0x10/0x10 [ 486.741391][T20449] ? rcuref_put_slowpath+0x2d1/0x340 [ 486.746717][T20449] ? rep_movs_alternative+0x4a/0x70 [ 486.751986][T20449] bpf_prog_test_run_xdp+0x905/0x11b0 [ 486.757418][T20449] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 486.763269][T20449] ? __fget_files+0x29/0x470 [ 486.767923][T20449] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 486.773879][T20449] bpf_prog_test_run+0x33a/0x3b0 [ 486.778862][T20449] __sys_bpf+0x48d/0x810 [ 486.783148][T20449] ? __pfx___sys_bpf+0x10/0x10 [ 486.787960][T20449] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 486.793977][T20449] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 486.800336][T20449] ? do_syscall_64+0x100/0x230 [ 486.805159][T20449] __x64_sys_bpf+0x7c/0x90 [ 486.809611][T20449] do_syscall_64+0xf3/0x230 [ 486.814153][T20449] ? clear_bhb_loop+0x35/0x90 [ 486.818874][T20449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.824811][T20449] RIP: 0033:0x7fe3ca775f19 [ 486.829248][T20449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.848882][T20449] RSP: 002b:00007fe3cb4d4048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 486.857335][T20449] RAX: ffffffffffffffda RBX: 00007fe3ca905f60 RCX: 00007fe3ca775f19 [ 486.865334][T20449] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 486.873330][T20449] RBP: 00007fe3cb4d40a0 R08: 0000000000000000 R09: 0000000000000000 [ 486.881328][T20449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.889325][T20449] R13: 000000000000000b R14: 00007fe3ca905f60 R15: 00007fff6f627af8 [ 486.897341][T20449] [ 486.917602][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.928162][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.938809][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.949911][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.960143][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.971023][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.995858][T20213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.031719][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.060237][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.077269][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.087835][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.097726][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.108385][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.118317][T20213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.132859][T20213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.146643][T20213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.170417][T20213] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.200893][T20213] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.222030][T20213] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.250688][T20213] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.365813][T20473] team0: Device is already in use. [ 487.425729][T20476] netlink: 'syz.1.4276': attribute type 7 has an invalid length. [ 487.458887][T20476] netlink: 'syz.1.4276': attribute type 8 has an invalid length. [ 487.493075][T20478] xt_hashlimit: overflow, rate too high: 0 [ 487.499622][T20479] syz.1.4276[20479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 487.499886][T20479] syz.1.4276[20479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 487.610638][T20476] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4276'. [ 487.734217][T20471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.761264][T15305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.776341][T15305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.838519][T15305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.897423][T15305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.675737][T20524] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4289'. [ 489.836388][T20531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4289'. [ 490.269246][ C0] vcan0: j1939_tp_rxtimer: 0xffff888023dde000: rx timeout, send abort [ 490.738178][T20550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 490.777561][ C0] vcan0: j1939_tp_rxtimer: 0xffff888023dde000: abort rx timeout. Force session deactivation [ 490.904314][T20569] netlink: 'syz.4.4301': attribute type 11 has an invalid length. [ 490.920337][T20569] netlink: 'syz.4.4301': attribute type 1 has an invalid length. [ 490.932371][T20569] netlink: 191384 bytes leftover after parsing attributes in process `syz.4.4301'. [ 490.956195][T20573] IPVS: length: 64 != 8 [ 490.972865][T20569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.015034][T20586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4307'. [ 493.157820][T20586] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.185477][T20586] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.262243][ T5100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 493.276645][ T5100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 493.290256][ T5100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 493.301882][ T5100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 493.314521][ T5100] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 493.322343][ T5100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 493.403661][T20601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4308'. [ 493.531977][T15306] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.588053][T20606] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4311'. [ 493.658841][T15306] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.690347][T20589] macsec0 speed is unknown, defaulting to 1000 [ 493.709827][T20589] lo speed is unknown, defaulting to 1000 [ 493.772783][T15306] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.874358][T15306] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.123515][T15306] bridge_slave_1: left allmulticast mode [ 494.133817][T15306] bridge_slave_1: left promiscuous mode [ 494.143824][T15306] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.168320][T15306] bridge_slave_0: left allmulticast mode [ 494.181596][T15306] bridge_slave_0: left promiscuous mode [ 494.190055][T15306] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.200427][T20615] FAULT_INJECTION: forcing a failure. [ 494.200427][T20615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.222316][T20615] CPU: 1 PID: 20615 Comm: syz.1.4314 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 494.232176][T20615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 494.242267][T20615] Call Trace: [ 494.245566][T20615] [ 494.248499][T20615] dump_stack_lvl+0x241/0x360 [ 494.253193][T20615] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.258412][T20615] ? __pfx__printk+0x10/0x10 [ 494.263029][T20615] ? snprintf+0xda/0x120 [ 494.267305][T20615] should_fail_ex+0x3b0/0x4e0 [ 494.272021][T20615] _copy_to_user+0x2f/0xb0 [ 494.276568][T20615] simple_read_from_buffer+0xca/0x150 [ 494.281978][T20615] proc_fail_nth_read+0x1e9/0x250 [ 494.287022][T20615] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 494.292670][T20615] ? rw_verify_area+0x520/0x6b0 [ 494.297549][T20615] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 494.303148][T20615] vfs_read+0x204/0xbc0 [ 494.307347][T20615] ? __pfx_lock_release+0x10/0x10 [ 494.312386][T20615] ? __pfx_vfs_read+0x10/0x10 [ 494.317098][T20615] ? bpf_prog_test_run+0x352/0x3b0 [ 494.322225][T20615] ? __fget_files+0x29/0x470 [ 494.326824][T20615] ? __fget_files+0x3f6/0x470 [ 494.331524][T20615] ksys_read+0x1a0/0x2c0 [ 494.335795][T20615] ? __pfx_ksys_read+0x10/0x10 [ 494.340562][T20615] ? do_syscall_64+0x100/0x230 [ 494.345336][T20615] ? do_syscall_64+0xb6/0x230 [ 494.350021][T20615] do_syscall_64+0xf3/0x230 [ 494.354529][T20615] ? clear_bhb_loop+0x35/0x90 [ 494.359233][T20615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.365163][T20615] RIP: 0033:0x7f20f9b749fc [ 494.369599][T20615] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 494.389224][T20615] RSP: 002b:00007f20fa9f7040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 494.397657][T20615] RAX: ffffffffffffffda RBX: 00007f20f9d05f60 RCX: 00007f20f9b749fc [ 494.405645][T20615] RDX: 000000000000000f RSI: 00007f20fa9f70b0 RDI: 0000000000000004 [ 494.413638][T20615] RBP: 00007f20fa9f70a0 R08: 0000000000000000 R09: 0000000000000000 [ 494.421622][T20615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 494.429612][T20615] R13: 000000000000004d R14: 00007f20f9d05f60 R15: 00007ffe955ef7f8 [ 494.437599][T20615] [ 494.559579][T20625] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 494.910580][T15306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.922895][T15306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.936332][T15306] bond0 (unregistering): Released all slaves [ 494.963791][T20589] chnl_net:caif_netlink_parms(): no params data found [ 495.017036][T20631] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.183775][T20641] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4320'. [ 495.375444][ T5100] Bluetooth: hci4: command tx timeout [ 495.480637][T20646] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4322'. [ 495.601041][T20646] Κό: entered promiscuous mode [ 495.643713][T20589] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.656030][T20589] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.670558][T20589] bridge_slave_0: entered allmulticast mode [ 495.688230][T20589] bridge_slave_0: entered promiscuous mode [ 495.703931][T20662] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4327'. [ 495.762617][T20589] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.771995][T20589] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.805220][T20589] bridge_slave_1: entered allmulticast mode [ 495.812782][T20589] bridge_slave_1: entered promiscuous mode [ 495.951577][T15306] hsr_slave_0: left promiscuous mode [ 495.961083][T15306] hsr_slave_1: left promiscuous mode [ 495.989967][T15306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.997735][T15306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.007870][T15306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.015714][T15306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.048015][T15306] veth1_macvtap: left promiscuous mode [ 496.053766][T15306] veth0_macvtap: left promiscuous mode [ 496.060998][T15306] veth1_vlan: left promiscuous mode [ 496.066903][T15306] veth0_vlan: left promiscuous mode [ 496.752206][T15306] team0 (unregistering): Port device team_slave_1 removed [ 496.800510][T15306] team0 (unregistering): Port device team_slave_0 removed [ 497.325816][T20589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.347735][T20589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.463755][ T5100] Bluetooth: hci4: command tx timeout [ 497.483070][T20589] team0: Port device team_slave_0 added [ 497.531808][T20589] team0: Port device team_slave_1 added [ 497.551167][T20690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4332'. [ 497.569525][T20690] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4332'. [ 497.682154][T20589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.698130][T20589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.746175][T20589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.784881][T20589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.823291][T20589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.886909][T20589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.955428][T20717] netlink: 288 bytes leftover after parsing attributes in process `syz.2.4339'. [ 498.143585][T20724] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 498.181097][T20731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.198964][T20589] hsr_slave_0: entered promiscuous mode [ 498.205050][T20731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.214436][T20589] hsr_slave_1: entered promiscuous mode [ 498.230543][T20589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.250444][T20589] Cannot create hsr debugfs directory [ 498.261243][T20730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.289515][T20730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.425455][T15306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.434868][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.455233][ T5150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.470439][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.506449][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.514654][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.651725][T20752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4347'. [ 499.040155][T20771] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4353'. [ 499.306014][T20589] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 499.317188][T20589] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 499.327205][T20589] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 499.339244][T20589] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 499.436022][T20589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.461398][T20589] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.474035][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.481253][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.500007][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.507262][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.535064][ T5100] Bluetooth: hci4: command tx timeout [ 499.749420][T20784] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.4356'. [ 499.880843][T20589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.012007][T20798] netlink: 'syz.4.4361': attribute type 1 has an invalid length. [ 500.037888][T20589] veth0_vlan: entered promiscuous mode [ 500.060865][T20589] veth1_vlan: entered promiscuous mode [ 500.131348][T20589] veth0_macvtap: entered promiscuous mode [ 500.153219][T20589] veth1_macvtap: entered promiscuous mode [ 500.206205][T20589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.209450][T20802] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4362'. [ 500.240352][T20589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.264757][T20589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.291219][T20589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.318593][T20589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.342951][T20589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.366219][T20589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.435381][T20589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.460355][T20589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.522608][T20589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.561374][T20589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.578086][T20589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.597711][T20589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.628521][T20589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.650084][T20589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.683620][T20589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.731665][T20816] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4366'. [ 500.788129][T20822] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.815646][T20824] team0: entered promiscuous mode [ 500.820743][T20824] team_slave_1: entered promiscuous mode [ 500.845160][T20824] bond0: entered promiscuous mode [ 500.850466][T20824] bond_slave_0: entered promiscuous mode [ 500.864516][T20824] bond_slave_1: entered promiscuous mode [ 500.881275][T20824] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 500.966530][T20589] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.992138][T20589] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.010855][T20589] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.028296][T20589] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.116023][T20840] netlink: 'syz.1.4370': attribute type 3 has an invalid length. [ 501.154563][T20839] netlink: 'syz.1.4370': attribute type 3 has an invalid length. [ 501.281651][T20813] team0: left promiscuous mode [ 501.296609][T20813] team_slave_1: left promiscuous mode [ 501.314654][T20813] bond0: left promiscuous mode [ 501.319700][T20813] bond_slave_0: left promiscuous mode [ 501.335295][T20813] bond_slave_1: left promiscuous mode [ 501.340897][T20813] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 501.390614][T15302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.432825][T15302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.474297][ T2470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.483156][ T2470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.523660][T20849] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 501.732150][T20855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4374'. [ 501.845664][T20857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4375'. [ 502.128005][T20870] pim6reg: entered allmulticast mode [ 502.149249][T20870] pim6reg: left allmulticast mode [ 502.223339][T20876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4379'. [ 502.252657][T20878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4381'. [ 502.556645][T20900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4386'. [ 502.808065][T20909] netlink: 'syz.1.4392': attribute type 1 has an invalid length. [ 502.883742][T20916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4393'. [ 502.961863][T20909] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 502.985259][T20909] bond2: (slave batadv1): Enslaving as a backup interface with an up link [ 503.469902][T20956] xt_policy: output policy not valid in PREROUTING and INPUT [ 503.705665][ T5150] net_ratelimit: 76 callbacks suppressed [ 503.705686][ T5150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.734304][T20976] sit0: entered allmulticast mode [ 503.956832][T20985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4412'. [ 503.979034][T20985] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4412'. [ 504.375384][T20995] macsec0 speed is unknown, defaulting to 1000 [ 504.393565][T20995] lo speed is unknown, defaulting to 1000 [ 504.692482][ T6987] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.740341][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.829345][ T5148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.838029][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.296868][ T6987] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.356409][ T6987] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.413372][ T6987] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.521811][ T6987] bridge_slave_1: left allmulticast mode [ 505.527783][ T6987] bridge_slave_1: left promiscuous mode [ 505.533960][ T6987] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.544401][ T6987] bridge_slave_0: left allmulticast mode [ 505.550291][ T6987] bridge_slave_0: left promiscuous mode [ 505.557490][ T6987] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.782510][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.922914][ T6987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 505.936709][ T6987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 505.949742][ T6987] bond0 (unregistering): Released all slaves [ 506.193865][ T6987] hsr_slave_0: left promiscuous mode [ 506.201232][ T6987] hsr_slave_1: left promiscuous mode [ 506.207715][ T6987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.215240][ T6987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.229344][ C0] eth0: bad gso: type: 1, size: 1408 [ 506.238697][ C0] eth0: bad gso: type: 1, size: 1408 [ 506.283479][ T6987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.315014][ T6987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.409197][ T6987] veth1_macvtap: left promiscuous mode [ 506.425364][ T6987] veth0_macvtap: left promiscuous mode [ 506.431047][ T6987] veth1_vlan: left promiscuous mode [ 506.444871][ T6987] veth0_vlan: left promiscuous mode [ 506.642490][T21044] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 506.651428][T21044] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 506.668459][T21044] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 506.680718][T21044] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 506.689657][T21044] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 506.701224][T21044] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 506.735985][ T5152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.744543][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.825980][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.191553][ T6987] team0 (unregistering): Port device team_slave_1 removed [ 507.234064][ T6987] team0 (unregistering): Port device team_slave_0 removed [ 507.680260][T21022] __nla_validate_parse: 2 callbacks suppressed [ 507.680277][T21022] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4424'. [ 507.820066][T21043] macsec0 speed is unknown, defaulting to 1000 [ 507.901566][T21055] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4430'. [ 507.909940][T21052] bond0: entered promiscuous mode [ 507.921967][T21055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.923300][T21052] bond_slave_0: entered promiscuous mode [ 507.944271][T21052] bond_slave_1: entered promiscuous mode [ 507.991416][T21043] lo speed is unknown, defaulting to 1000 [ 508.046688][T21060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4432'. [ 508.075595][T21056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4433'. [ 508.183179][T21056] macsec0 speed is unknown, defaulting to 1000 [ 508.203316][T21056] lo speed is unknown, defaulting to 1000 [ 508.274119][T21070] ipvlan1: entered promiscuous mode [ 508.283870][T21070] ipvlan1: left promiscuous mode [ 508.552506][T21043] chnl_net:caif_netlink_parms(): no params data found [ 508.745541][ T5100] Bluetooth: hci4: command tx timeout [ 508.803345][T21086] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4440'. [ 509.208327][T21043] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.225894][T21043] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.250594][T21043] bridge_slave_0: entered allmulticast mode [ 509.266971][T21043] bridge_slave_0: entered promiscuous mode [ 509.289847][T21116] net_ratelimit: 3 callbacks suppressed [ 509.289864][T21116] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 509.317635][T21119] netlink: 'syz.0.4445': attribute type 1 has an invalid length. [ 509.326967][T21119] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4445'. [ 509.341202][T21124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4448'. [ 509.361584][T21043] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.376793][T21043] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.389266][T21043] bridge_slave_1: entered allmulticast mode [ 509.404068][T21043] bridge_slave_1: entered promiscuous mode [ 509.411772][T21113] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 509.462774][T21118] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4447'. [ 509.583215][T21043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.621518][T21043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.688325][T21134] netlink: 'syz.0.4451': attribute type 16 has an invalid length. [ 509.696667][T21118] macsec0 speed is unknown, defaulting to 1000 [ 509.703122][ T5150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.717085][T21134] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4451'. [ 509.728012][T21134] bridge_slave_0: entered allmulticast mode [ 509.742740][T21043] team0: Port device team_slave_0 added [ 509.753453][T21118] lo speed is unknown, defaulting to 1000 [ 509.767019][T21043] team0: Port device team_slave_1 added [ 509.784634][ T5152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.793292][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.808787][T21131] macsec0 speed is unknown, defaulting to 1000 [ 509.849622][T21131] lo speed is unknown, defaulting to 1000 [ 509.851200][T21043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.864358][T21043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.890788][T21043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.928932][T21043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.938361][T21043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.964854][T21043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.976451][T21138] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4452'. [ 510.187691][T21043] hsr_slave_0: entered promiscuous mode [ 510.215228][T21043] hsr_slave_1: entered promiscuous mode [ 510.237412][T21043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 510.251727][T21043] Cannot create hsr debugfs directory [ 510.493582][T21158] Κό: entered promiscuous mode [ 510.736767][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.825555][ T5100] Bluetooth: hci4: command tx timeout [ 511.375840][T21177] FAULT_INJECTION: forcing a failure. [ 511.375840][T21177] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 511.393038][T21043] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 511.406768][T21043] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 511.414501][T21177] CPU: 1 PID: 21177 Comm: syz.2.4462 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 511.424346][T21177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 511.434421][T21177] Call Trace: [ 511.437720][T21177] [ 511.440658][T21177] dump_stack_lvl+0x241/0x360 [ 511.445350][T21177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.450562][T21177] ? __pfx__printk+0x10/0x10 [ 511.455195][T21177] should_fail_ex+0x3b0/0x4e0 [ 511.459890][T21177] prepare_alloc_pages+0x1da/0x5d0 [ 511.465018][T21177] __alloc_pages_noprof+0x166/0x6c0 [ 511.470229][T21177] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 511.475961][T21177] ? __might_fault+0xaa/0x120 [ 511.480654][T21177] alloc_pages_mpol_noprof+0x3e8/0x680 [ 511.486143][T21177] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 511.492129][T21177] ? _copy_from_user+0xa6/0xe0 [ 511.496903][T21177] ? bpf_test_init+0x15a/0x180 [ 511.501671][T21177] ? alloc_pages_noprof+0xef/0x170 [ 511.506786][T21177] bpf_prog_test_run_xdp+0xc97/0x11b0 [ 511.512179][T21177] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 511.518001][T21177] ? __fget_files+0x29/0x470 [ 511.522611][T21177] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 511.528430][T21177] bpf_prog_test_run+0x33a/0x3b0 [ 511.533381][T21177] __sys_bpf+0x48d/0x810 [ 511.537634][T21177] ? __pfx___sys_bpf+0x10/0x10 [ 511.542410][T21177] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 511.548396][T21177] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 511.554734][T21177] ? do_syscall_64+0x100/0x230 [ 511.559508][T21177] __x64_sys_bpf+0x7c/0x90 [ 511.563928][T21177] do_syscall_64+0xf3/0x230 [ 511.568440][T21177] ? clear_bhb_loop+0x35/0x90 [ 511.573131][T21177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.579034][T21177] RIP: 0033:0x7f4630575f19 [ 511.583452][T21177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.603062][T21177] RSP: 002b:00007f4631430048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 511.611484][T21177] RAX: ffffffffffffffda RBX: 00007f4630705f60 RCX: 00007f4630575f19 [ 511.619462][T21177] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 511.627435][T21177] RBP: 00007f46314300a0 R08: 0000000000000000 R09: 0000000000000000 [ 511.635404][T21177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.643370][T21177] R13: 000000000000004d R14: 00007f4630705f60 R15: 00007ffffba299c8 [ 511.651358][T21177] [ 511.672513][T21043] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 511.734118][T21043] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 511.749356][T21183] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 511.760235][T21183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.769473][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.786973][ T5150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.952164][T21183] macsec0 speed is unknown, defaulting to 1000 [ 511.992680][T21192] macsec0 speed is unknown, defaulting to 1000 [ 512.011103][T21183] lo speed is unknown, defaulting to 1000 [ 512.083683][T21192] lo speed is unknown, defaulting to 1000 [ 512.171251][T21043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.319876][T21043] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.417570][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.424803][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.656739][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.663968][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.818151][T21200] macsec0 speed is unknown, defaulting to 1000 [ 512.818162][ T5148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.841806][T21210] __nla_validate_parse: 2 callbacks suppressed [ 512.841824][T21210] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4471'. [ 512.896022][ T5100] Bluetooth: hci4: command tx timeout [ 512.931472][T21200] lo speed is unknown, defaulting to 1000 [ 513.336957][T21220] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4473'. [ 513.409124][T21220] IPVS: Error binding to the multicast addr [ 513.411705][T21224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4474'. [ 513.590767][T21233] FAULT_INJECTION: forcing a failure. [ 513.590767][T21233] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 513.604656][T21233] CPU: 1 PID: 21233 Comm: syz.4.4476 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 513.614504][T21233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 513.624588][T21233] Call Trace: [ 513.627913][T21233] [ 513.630871][T21233] dump_stack_lvl+0x241/0x360 [ 513.635578][T21233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.640813][T21233] ? __pfx__printk+0x10/0x10 [ 513.645444][T21233] should_fail_ex+0x3b0/0x4e0 [ 513.650152][T21233] prepare_alloc_pages+0x1da/0x5d0 [ 513.655330][T21233] __alloc_pages_noprof+0x166/0x6c0 [ 513.660585][T21233] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 513.666356][T21233] ? lockdep_hardirqs_on+0x99/0x150 [ 513.671603][T21233] alloc_pages_mpol_noprof+0x3e8/0x680 [ 513.677107][T21233] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 513.683119][T21233] ? rcuref_put_slowpath+0x2d1/0x340 [ 513.688445][T21233] ? rep_movs_alternative+0x4a/0x70 [ 513.693681][T21233] ? alloc_pages_noprof+0xef/0x170 [ 513.695762][T21043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.698802][T21233] bpf_prog_test_run_xdp+0xc97/0x11b0 [ 513.698854][T21233] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 513.716799][T21233] ? __fget_files+0x29/0x470 [ 513.721435][T21233] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 513.727289][T21233] bpf_prog_test_run+0x33a/0x3b0 [ 513.732271][T21233] __sys_bpf+0x48d/0x810 [ 513.736557][T21233] ? __pfx___sys_bpf+0x10/0x10 [ 513.741386][T21233] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 513.747408][T21233] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 513.753771][T21233] ? do_syscall_64+0x100/0x230 [ 513.758578][T21233] __x64_sys_bpf+0x7c/0x90 [ 513.763034][T21233] do_syscall_64+0xf3/0x230 [ 513.767570][T21233] ? clear_bhb_loop+0x35/0x90 [ 513.772296][T21233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.778231][T21233] RIP: 0033:0x7fe3ca775f19 [ 513.782700][T21233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.802341][T21233] RSP: 002b:00007fe3cb4d4048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 513.810796][T21233] RAX: ffffffffffffffda RBX: 00007fe3ca905f60 RCX: 00007fe3ca775f19 [ 513.818800][T21233] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 513.820135][T21043] veth0_vlan: entered promiscuous mode [ 513.826774][T21233] RBP: 00007fe3cb4d40a0 R08: 0000000000000000 R09: 0000000000000000 [ 513.826795][T21233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.826811][T21233] R13: 000000000000000b R14: 00007fe3ca905f60 R15: 00007fff6f627af8 [ 513.826846][T21233] [ 513.945916][T21238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4475'. [ 514.120007][T21239] veth1_macvtap: left promiscuous mode [ 514.136254][T21239] macsec0: entered promiscuous mode [ 514.176996][T21240] veth1_macvtap: entered promiscuous mode [ 514.191762][T21240] macsec0: left promiscuous mode [ 514.209375][T21240] macsec0: entered allmulticast mode [ 514.215008][T21240] veth1_macvtap: entered allmulticast mode [ 514.228993][T21244] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4479'. [ 514.245397][T21043] veth1_vlan: entered promiscuous mode [ 514.335879][T21250] lo: Caught tx_queue_len zero misconfig [ 514.348138][T21250] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 514.432974][T21043] veth0_macvtap: entered promiscuous mode [ 514.460526][T21246] macsec0 speed is unknown, defaulting to 1000 [ 514.569564][T21043] veth1_macvtap: entered promiscuous mode [ 514.587281][T21246] lo speed is unknown, defaulting to 1000 [ 514.587298][T21260] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4482'. [ 514.790115][T21043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.815862][T21043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.839153][T21043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.853003][T21043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.854198][T21274] FAULT_INJECTION: forcing a failure. [ 514.854198][T21274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.882900][T21043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.890998][T21274] CPU: 1 PID: 21274 Comm: syz.2.4487 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 514.894101][T21043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.903213][T21274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 514.903230][T21274] Call Trace: [ 514.903240][T21274] [ 514.903251][T21274] dump_stack_lvl+0x241/0x360 [ 514.903294][T21274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 514.903322][T21274] ? __pfx__printk+0x10/0x10 [ 514.903352][T21274] ? __pfx_lock_release+0x10/0x10 [ 514.903379][T21274] ? alloc_pages_mpol_noprof+0x417/0x680 [ 514.903415][T21274] should_fail_ex+0x3b0/0x4e0 [ 514.959167][T21274] _copy_from_user+0x2f/0xe0 [ 514.963775][T21274] bpf_prog_test_run_xdp+0xdde/0x11b0 [ 514.969173][T21274] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 514.974989][T21274] ? __fget_files+0x29/0x470 [ 514.979599][T21274] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 514.985419][T21274] bpf_prog_test_run+0x33a/0x3b0 [ 514.990374][T21274] __sys_bpf+0x48d/0x810 [ 514.994629][T21274] ? __pfx___sys_bpf+0x10/0x10 [ 514.999411][T21274] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 515.005404][T21274] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 515.011739][T21274] ? do_syscall_64+0x100/0x230 [ 515.016516][T21274] __x64_sys_bpf+0x7c/0x90 [ 515.020940][T21274] do_syscall_64+0xf3/0x230 [ 515.025451][T21274] ? clear_bhb_loop+0x35/0x90 [ 515.030142][T21274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.036041][T21274] RIP: 0033:0x7f4630575f19 [ 515.040455][T21274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.060074][T21274] RSP: 002b:00007f4631430048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 515.068499][T21274] RAX: ffffffffffffffda RBX: 00007f4630705f60 RCX: 00007f4630575f19 [ 515.076491][T21274] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 515.084474][T21274] RBP: 00007f46314300a0 R08: 0000000000000000 R09: 0000000000000000 [ 515.092453][T21274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.100433][T21274] R13: 000000000000004d R14: 00007f4630705f60 R15: 00007ffffba299c8 [ 515.108448][T21274] [ 515.133813][ T5100] Bluetooth: hci4: command tx timeout [ 515.138988][T21043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.147520][ T25] net_ratelimit: 3 callbacks suppressed [ 515.147539][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.165185][T21268] bridge0: port 3(macvlan0) entered blocking state [ 515.182149][T21268] bridge0: port 3(macvlan0) entered disabled state [ 515.204979][T21268] macvlan0: entered allmulticast mode [ 515.210435][T21268] veth1_vlan: entered allmulticast mode [ 515.247965][T21268] macvlan0: entered promiscuous mode [ 515.352723][T21284] netlink: 312 bytes leftover after parsing attributes in process `syz.2.4489'. [ 515.409052][T21043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.444780][T21043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.474526][T21043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.504813][T21043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.534938][T21043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.554741][T21043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.573524][T21043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.584039][T21043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.597238][T21043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.682117][T21043] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.707916][T21043] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.724808][T21043] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.733551][T21043] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.827126][T21291] netlink: 'syz.4.4491': attribute type 13 has an invalid length. [ 515.857100][ T5152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.865663][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.883548][T21291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4491'. [ 515.943913][ T6987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.964816][ T6987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.029026][T15307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.044107][T15307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.062024][T21296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4493'. [ 516.126255][T21297] xt_hashlimit: overflow, try lower: 0/0 [ 516.177984][ T5147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.358673][T21308] syz.1.4494: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 516.378975][T21308] CPU: 0 PID: 21308 Comm: syz.1.4494 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 516.388837][T21308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 516.398910][T21308] Call Trace: [ 516.402194][T21308] [ 516.405129][T21308] dump_stack_lvl+0x241/0x360 [ 516.409820][T21308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.415037][T21308] ? __pfx__printk+0x10/0x10 [ 516.419636][T21308] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 516.426053][T21308] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 516.432568][T21308] warn_alloc+0x278/0x410 [ 516.436931][T21308] ? __pfx_warn_alloc+0x10/0x10 [ 516.441836][T21308] ? xskq_create+0xb6/0x170 [ 516.446370][T21308] ? __get_vm_area_node+0x23d/0x270 [ 516.451627][T21308] __vmalloc_node_range_noprof+0x69f/0x1460 [ 516.457609][T21308] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 516.463959][T21308] ? __kasan_kmalloc+0x98/0xb0 [ 516.468731][T21308] ? xskq_create+0x54/0x170 [ 516.473245][T21308] vmalloc_user_noprof+0x74/0x80 [ 516.478198][T21308] ? xskq_create+0xb6/0x170 [ 516.482707][T21308] xskq_create+0xb6/0x170 [ 516.487048][T21308] xsk_init_queue+0xa1/0x100 [ 516.491651][T21308] xsk_setsockopt+0x4ea/0x950 [ 516.496333][T21308] ? __pfx_xsk_setsockopt+0x10/0x10 [ 516.501539][T21308] ? __pfx_lock_acquire+0x10/0x10 [ 516.506578][T21308] ? aa_sock_opt_perm+0x79/0x120 [ 516.511522][T21308] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 516.517077][T21308] ? security_socket_setsockopt+0x87/0xb0 [ 516.522799][T21308] ? __pfx_xsk_setsockopt+0x10/0x10 [ 516.528001][T21308] do_sock_setsockopt+0x3af/0x720 [ 516.533046][T21308] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 516.538619][T21308] ? __fget_files+0x29/0x470 [ 516.543217][T21308] ? __fget_files+0x3f6/0x470 [ 516.547908][T21308] __sys_setsockopt+0x1ae/0x250 [ 516.552771][T21308] __x64_sys_setsockopt+0xb5/0xd0 [ 516.557808][T21308] do_syscall_64+0xf3/0x230 [ 516.562327][T21308] ? clear_bhb_loop+0x35/0x90 [ 516.567022][T21308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.572935][T21308] RIP: 0033:0x7f20f9b75f19 [ 516.577355][T21308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.596974][T21308] RSP: 002b:00007f20fa9b5048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 516.605398][T21308] RAX: ffffffffffffffda RBX: 00007f20f9d06110 RCX: 00007f20f9b75f19 [ 516.613375][T21308] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 516.621351][T21308] RBP: 00007f20f9be4e68 R08: 0000000000000004 R09: 0000000000000000 [ 516.629332][T21308] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 516.637314][T21308] R13: 000000000000000b R14: 00007f20f9d06110 R15: 00007ffe955ef7f8 [ 516.645310][T21308] [ 516.656362][T21308] Mem-Info: [ 516.659521][T21308] active_anon:6492 inactive_anon:0 isolated_anon:0 [ 516.659521][T21308] active_file:1783 inactive_file:38350 isolated_file:0 [ 516.659521][T21308] unevictable:768 dirty:171 writeback:0 [ 516.659521][T21308] slab_reclaimable:9622 slab_unreclaimable:99719 [ 516.659521][T21308] mapped:13482 shmem:5019 pagetables:603 [ 516.659521][T21308] sec_pagetables:0 bounce:0 [ 516.659521][T21308] kernel_misc_reclaimable:0 [ 516.659521][T21308] free:1395034 free_pcp:2074 free_cma:0 [ 516.731291][T21315] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4496'. [ 516.735379][T21308] Node 0 active_anon:25868kB inactive_anon:0kB active_file:7132kB inactive_file:153316kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:53928kB dirty:680kB writeback:0kB shmem:18540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11236kB pagetables:2312kB sec_pagetables:0kB all_unreclaimable? no [ 516.800215][T21308] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 516.801664][T21316] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 516.838706][T21308] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 516.869528][T21316] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 516.946503][T21308] lowmem_reserve[]: 0 2571 2571 0 0 [ 516.952165][T21308] Node 0 DMA32 free:1614504kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:25824kB inactive_anon:0kB active_file:7132kB inactive_file:153012kB unevictable:1536kB writepending:676kB present:3129332kB managed:2659812kB mlocked:0kB bounce:0kB free_pcp:6028kB local_pcp:4848kB free_cma:0kB [ 516.988438][T21308] lowmem_reserve[]: 0 0 0 0 0 [ 516.994110][T21308] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:304kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 517.023770][T21308] lowmem_reserve[]: 0 0 0 0 0 [ 517.032454][T21308] Node 1 Normal free:3952676kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:752kB local_pcp:752kB free_cma:0kB [ 517.075158][T21308] lowmem_reserve[]: 0 0 0 0 0 [ 517.090217][T21308] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 517.114141][T21308] Node 0 DMA32: 2*4kB (ME) 4*8kB (UME) 274*16kB (UME) 389*32kB (UME) 315*64kB (UME) 139*128kB (UME) 75*256kB (UM) 44*512kB (UM) 30*1024kB (UME) 4*2048kB (M) 361*4096kB (UM) = 1614120kB [ 517.152471][T21308] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 517.181298][T21308] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 5*64kB (U) 5*128kB (U) 4*256kB (UM) 2*512kB (UM) 1*1024kB (U) 0*2048kB 964*4096kB (UM) = 3952676kB [ 517.198684][T21308] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 517.198963][T21326] netlink: 'syz.2.4499': attribute type 10 has an invalid length. [ 517.208678][T21308] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 517.208708][T21308] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 517.208729][T21308] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 517.208749][T21308] 45155 total pagecache pages [ 517.208768][T21308] 0 pages in swap cache [ 517.208778][T21308] Free swap = 124996kB [ 517.208788][T21308] Total swap = 124996kB [ 517.208801][T21308] 2097051 pages RAM [ 517.208811][T21308] 0 pages HighMem/MovableOnly [ 517.208832][T21308] 400888 pages reserved [ 517.208842][T21308] 0 pages cma reserved [ 517.416461][T21330] [ 517.418834][T21330] ====================================================== [ 517.425865][T21330] WARNING: possible circular locking dependency detected [ 517.432904][T21330] 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 Not tainted [ 517.439675][T21330] ------------------------------------------------------ [ 517.446708][T21330] syz.0.4500/21330 is trying to acquire lock: [ 517.452781][T21330] ffff88805fab0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_open+0xe7/0x200 [ 517.461985][T21330] [ 517.461985][T21330] but task is already holding lock: [ 517.469371][T21330] ffff8880669dcd40 (team->team_lock_key#2){+.+.}-{3:3}, at: team_add_slave+0xad/0x2760 [ 517.479060][T21330] [ 517.479060][T21330] which lock already depends on the new lock. [ 517.479060][T21330] [ 517.489468][T21330] [ 517.489468][T21330] the existing dependency chain (in reverse order) is: [ 517.498479][T21330] [ 517.498479][T21330] -> #1 (team->team_lock_key#2){+.+.}-{3:3}: [ 517.506656][T21330] lock_acquire+0x1ed/0x550 [ 517.511697][T21330] __mutex_lock+0x136/0xd70 [ 517.516731][T21330] team_port_change_check+0x51/0x1e0 [ 517.522547][T21330] team_device_event+0x161/0x5b0 [ 517.528008][T21330] notifier_call_chain+0x19f/0x3e0 [ 517.533641][T21330] dev_close_many+0x33c/0x4c0 [ 517.538837][T21330] unregister_netdevice_many_notify+0x50b/0x1c40 [ 517.545678][T21330] macvlan_device_event+0x7e0/0x870 [ 517.551395][T21330] notifier_call_chain+0x19f/0x3e0 [ 517.557028][T21330] unregister_netdevice_many_notify+0xd81/0x1c40 [ 517.563893][T21330] unregister_netdevice_queue+0x303/0x370 [ 517.570144][T21330] _cfg80211_unregister_wdev+0x162/0x560 [ 517.576386][T21330] ieee80211_if_remove+0x25d/0x3a0 [ 517.582015][T21330] ieee80211_del_iface+0x19/0x30 [ 517.587470][T21330] cfg80211_remove_virtual_intf+0x23f/0x410 [ 517.593883][T21330] genl_rcv_msg+0xb14/0xec0 [ 517.598905][T21330] netlink_rcv_skb+0x1e3/0x430 [ 517.604194][T21330] genl_rcv+0x28/0x40 [ 517.608702][T21330] netlink_unicast+0x7f0/0x990 [ 517.613982][T21330] netlink_sendmsg+0x8e4/0xcb0 [ 517.619280][T21330] __sock_sendmsg+0x221/0x270 [ 517.624480][T21330] ____sys_sendmsg+0x525/0x7d0 [ 517.629771][T21330] __sys_sendmsg+0x2b0/0x3a0 [ 517.634877][T21330] do_syscall_64+0xf3/0x230 [ 517.639903][T21330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.646322][T21330] [ 517.646322][T21330] -> #0 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 517.654075][T21330] validate_chain+0x18e0/0x5900 [ 517.659469][T21330] __lock_acquire+0x137a/0x2040 [ 517.664846][T21330] lock_acquire+0x1ed/0x550 [ 517.669877][T21330] __mutex_lock+0x136/0xd70 [ 517.674899][T21330] ieee80211_open+0xe7/0x200 [ 517.680021][T21330] __dev_open+0x2d3/0x450 [ 517.684873][T21330] dev_open+0xae/0x1b0 [ 517.689462][T21330] team_add_slave+0x9c8/0x2760 [ 517.694750][T21330] do_setlink+0xe70/0x41f0 [ 517.699689][T21330] rtnl_newlink+0x180d/0x20a0 [ 517.704889][T21330] rtnetlink_rcv_msg+0x73f/0xcf0 [ 517.710349][T21330] netlink_rcv_skb+0x1e3/0x430 [ 517.715637][T21330] netlink_unicast+0x7f0/0x990 [ 517.720920][T21330] netlink_sendmsg+0x8e4/0xcb0 [ 517.726206][T21330] __sock_sendmsg+0x221/0x270 [ 517.731408][T21330] ____sys_sendmsg+0x525/0x7d0 [ 517.736692][T21330] __sys_sendmsg+0x2b0/0x3a0 [ 517.741794][T21330] do_syscall_64+0xf3/0x230 [ 517.746817][T21330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.753231][T21330] [ 517.753231][T21330] other info that might help us debug this: [ 517.753231][T21330] [ 517.763457][T21330] Possible unsafe locking scenario: [ 517.763457][T21330] [ 517.770902][T21330] CPU0 CPU1 [ 517.776263][T21330] ---- ---- [ 517.781619][T21330] lock(team->team_lock_key#2); [ 517.786569][T21330] lock(&rdev->wiphy.mtx); [ 517.793587][T21330] lock(team->team_lock_key#2); [ 517.801050][T21330] lock(&rdev->wiphy.mtx); [ 517.805557][T21330] [ 517.805557][T21330] *** DEADLOCK *** [ 517.805557][T21330] [ 517.813692][T21330] 2 locks held by syz.0.4500/21330: [ 517.818882][T21330] #0: ffffffff8f5fe708 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 517.828297][T21330] #1: ffff8880669dcd40 (team->team_lock_key#2){+.+.}-{3:3}, at: team_add_slave+0xad/0x2760 [ 517.838408][T21330] [ 517.838408][T21330] stack backtrace: [ 517.844304][T21330] CPU: 0 PID: 21330 Comm: syz.0.4500 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 517.854117][T21330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 517.864170][T21330] Call Trace: [ 517.867450][T21330] [ 517.870382][T21330] dump_stack_lvl+0x241/0x360 [ 517.875066][T21330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 517.880270][T21330] ? print_circular_bug+0x130/0x1a0 [ 517.885479][T21330] check_noncircular+0x36a/0x4a0 [ 517.890427][T21330] ? __lock_acquire+0x137a/0x2040 [ 517.895462][T21330] ? __pfx_check_noncircular+0x10/0x10 [ 517.900930][T21330] ? lockdep_lock+0x123/0x2b0 [ 517.905607][T21330] ? validate_chain+0x11e/0x5900 [ 517.910551][T21330] ? mark_lock+0x9a/0x350 [ 517.914891][T21330] ? _find_first_zero_bit+0xd3/0x100 [ 517.920197][T21330] validate_chain+0x18e0/0x5900 [ 517.925078][T21330] ? __pfx_validate_chain+0x10/0x10 [ 517.930290][T21330] ? mark_lock+0x9a/0x350 [ 517.934621][T21330] ? __pfx_validate_chain+0x10/0x10 [ 517.939823][T21330] ? __pfx_validate_chain+0x10/0x10 [ 517.945028][T21330] ? mark_lock+0x9a/0x350 [ 517.949361][T21330] ? __lock_acquire+0x137a/0x2040 [ 517.954395][T21330] ? mark_lock+0x9a/0x350 [ 517.958733][T21330] __lock_acquire+0x137a/0x2040 [ 517.963599][T21330] lock_acquire+0x1ed/0x550 [ 517.968108][T21330] ? ieee80211_open+0xe7/0x200 [ 517.972881][T21330] ? __pfx_lock_acquire+0x10/0x10 [ 517.977914][T21330] ? __pfx___might_resched+0x10/0x10 [ 517.983203][T21330] ? ib_device_get_by_netdev+0x595/0x5e0 [ 517.988853][T21330] ? ib_device_get_by_netdev+0x85/0x5e0 [ 517.994410][T21330] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 518.000396][T21330] ? net_generic+0x1f/0x240 [ 518.004901][T21330] ? net_generic+0x1f0/0x240 [ 518.009493][T21330] __mutex_lock+0x136/0xd70 [ 518.013999][T21330] ? ieee80211_open+0xe7/0x200 [ 518.018772][T21330] ? rxe_notify+0xef/0x4c0 [ 518.023204][T21330] ? __pfx_vxlan_netdevice_event+0x10/0x10 [ 518.029026][T21330] ? __pfx_rxe_notify+0x10/0x10 [ 518.033883][T21330] ? is_hsr_master+0x19/0x70 [ 518.038471][T21330] ? ieee80211_open+0xe7/0x200 [ 518.043241][T21330] ? __pfx___mutex_lock+0x10/0x10 [ 518.048271][T21330] ? ip6_route_dev_notify+0x99/0x600 [ 518.053571][T21330] ieee80211_open+0xe7/0x200 [ 518.058169][T21330] __dev_open+0x2d3/0x450 [ 518.062526][T21330] ? __pfx___dev_open+0x10/0x10 [ 518.067388][T21330] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 518.072856][T21330] dev_open+0xae/0x1b0 [ 518.076933][T21330] ? __pfx_dev_open+0x10/0x10 [ 518.081635][T21330] ? rcu_is_watching+0x15/0xb0 [ 518.086418][T21330] ? team_add_slave+0x69e/0x2760 [ 518.091368][T21330] ? team_add_slave+0x69e/0x2760 [ 518.096400][T21330] ? team_add_slave+0x8b5/0x2760 [ 518.101351][T21330] team_add_slave+0x9c8/0x2760 [ 518.106149][T21330] ? __dev_change_flags+0x515/0x6f0 [ 518.111375][T21330] ? __pfx_team_add_slave+0x10/0x10 [ 518.116626][T21330] ? 0xffffffffa0000954 [ 518.120797][T21330] ? __pfx___dev_change_flags+0x10/0x10 [ 518.126369][T21330] ? is_bpf_text_address+0x285/0x2a0 [ 518.131670][T21330] ? is_bpf_text_address+0x26/0x2a0 [ 518.136882][T21330] ? kernel_text_address+0xa7/0xe0 [ 518.141995][T21330] ? nla_strscpy+0x100/0x180 [ 518.146599][T21330] ? mutex_is_locked+0x12/0x50 [ 518.151373][T21330] do_setlink+0xe70/0x41f0 [ 518.155805][T21330] ? stack_trace_save+0x118/0x1d0 [ 518.160835][T21330] ? __lock_acquire+0x137a/0x2040 [ 518.165885][T21330] ? __pfx_stack_trace_save+0x10/0x10 [ 518.171265][T21330] ? __pfx_do_setlink+0x10/0x10 [ 518.176141][T21330] ? __nla_validate_parse+0x26ce/0x3090 [ 518.181694][T21330] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 518.187245][T21330] ? rtnl_newlink+0xf2/0x20a0 [ 518.191947][T21330] ? __pfx___nla_validate_parse+0x10/0x10 [ 518.197686][T21330] ? nla_strscpy+0x100/0x180 [ 518.202281][T21330] ? full_name_hash+0x93/0xe0 [ 518.206966][T21330] ? validate_linkmsg+0x71e/0x900 [ 518.212002][T21330] rtnl_newlink+0x180d/0x20a0 [ 518.216687][T21330] ? rtnl_newlink+0x4d1/0x20a0 [ 518.221456][T21330] ? __pfx_rtnl_newlink+0x10/0x10 [ 518.226480][T21330] ? __pfx___mutex_trylock_common+0x10/0x10 [ 518.232391][T21330] ? __pfx_lock_release+0x10/0x10 [ 518.237426][T21330] ? __pfx_rtnl_newlink+0x10/0x10 [ 518.242453][T21330] rtnetlink_rcv_msg+0x73f/0xcf0 [ 518.247391][T21330] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 518.252499][T21330] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 518.257956][T21330] ? ref_tracker_free+0x643/0x7e0 [ 518.262985][T21330] netlink_rcv_skb+0x1e3/0x430 [ 518.267759][T21330] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 518.273234][T21330] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 518.278552][T21330] ? netlink_deliver_tap+0x2e/0x1b0 [ 518.283757][T21330] netlink_unicast+0x7f0/0x990 [ 518.288529][T21330] ? __pfx_netlink_unicast+0x10/0x10 [ 518.293816][T21330] ? __virt_addr_valid+0x183/0x530 [ 518.298946][T21330] ? __check_object_size+0x49c/0x900 [ 518.304245][T21330] ? bpf_lsm_netlink_send+0x9/0x10 [ 518.309373][T21330] netlink_sendmsg+0x8e4/0xcb0 [ 518.314158][T21330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.319482][T21330] ? __import_iovec+0x536/0x820 [ 518.324347][T21330] ? aa_sock_msg_perm+0x91/0x160 [ 518.329292][T21330] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 518.334639][T21330] ? security_socket_sendmsg+0x87/0xb0 [ 518.340177][T21330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.345489][T21330] __sock_sendmsg+0x221/0x270 [ 518.350226][T21330] ____sys_sendmsg+0x525/0x7d0 [ 518.355037][T21330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 518.360350][T21330] __sys_sendmsg+0x2b0/0x3a0 [ 518.364955][T21330] ? __pfx___sys_sendmsg+0x10/0x10 [ 518.370102][T21330] ? bpf_btf_load+0xcf/0x1a0 [ 518.374727][T21330] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 518.381073][T21330] ? do_syscall_64+0x100/0x230 [ 518.385849][T21330] ? do_syscall_64+0xb6/0x230 [ 518.390531][T21330] do_syscall_64+0xf3/0x230 [ 518.395041][T21330] ? clear_bhb_loop+0x35/0x90 [ 518.399730][T21330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.405631][T21330] RIP: 0033:0x7f3123375f19 [ 518.410052][T21330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.429662][T21330] RSP: 002b:00007f3124120048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 518.438081][T21330] RAX: ffffffffffffffda RBX: 00007f3123506038 RCX: 00007f3123375f19 [ 518.446066][T21330] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000009 [ 518.454052][T21330] RBP: 00007f31233e4e68 R08: 0000000000000000 R09: 0000000000000000 [ 518.462031][T21330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.470013][T21330] R13: 000000000000006e R14: 00007f3123506038 R15: 00007ffc179cb3a8 [ 518.478006][T21330] [ 518.496068][T21330] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 518.503842][T21330] team0: Port device wlan1 added [ 518.542814][T21343] __nla_validate_parse: 1 callbacks suppressed [ 518.542840][T21343] netlink: 312 bytes leftover after parsing attributes in process `syz.2.4502'. [ 518.568278][T21342] macsec0 speed is unknown, defaulting to 1000 [ 518.575838][T21342] lo speed is unknown, defaulting to 1000 [ 519.741196][ T6987] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.031686][ T6987] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.098742][ T6987] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.172231][ T6987] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.281779][ T6987] bridge_slave_1: left allmulticast mode [ 520.290960][ T6987] bridge_slave_1: left promiscuous mode [ 520.296877][ T6987] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.309771][ T6987] bridge_slave_0: left allmulticast mode [ 520.316742][ T6987] bridge_slave_0: left promiscuous mode [ 520.323012][ T6987] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.494054][ T6987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.509554][ T6987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.521444][ T6987] bond0 (unregistering): Released all slaves [ 520.814535][ T6987] hsr_slave_0: left promiscuous mode [ 520.821580][ T6987] hsr_slave_1: left promiscuous mode [ 520.832223][ T6987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.843405][ T6987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.855928][ T6987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.863361][ T6987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.876971][ T6987] veth1_macvtap: left promiscuous mode [ 520.882523][ T6987] veth0_macvtap: left promiscuous mode [ 520.891780][ T6987] veth1_vlan: left promiscuous mode [ 520.898183][ T6987] veth0_vlan: left promiscuous mode [ 521.194160][ T6987] team0 (unregistering): Port device team_slave_1 removed [ 521.239062][ T6987] team0 (unregistering): Port device team_slave_0 removed