last executing test programs: 59.374856644s ago: executing program 0 (id=438): syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="018028d8fc8b0b2ce5b1666514ed0d28a4070000000000000000000086dd60081f2000103afffe8000000000000000000000000000bbff02000000fdac00e300fdc8bd7300"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e3"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x2000000, 0x7, 0x0, &(0x7f0000000280)="130200d3781ec4", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x6, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088fe508a8500000004000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x50) 45.488312936s ago: executing program 0 (id=438): syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="018028d8fc8b0b2ce5b1666514ed0d28a4070000000000000000000086dd60081f2000103afffe8000000000000000000000000000bbff02000000fdac00e300fdc8bd7300"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e3"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x2000000, 0x7, 0x0, &(0x7f0000000280)="130200d3781ec4", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x6, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088fe508a8500000004000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x50) 36.568828473s ago: executing program 0 (id=438): syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="018028d8fc8b0b2ce5b1666514ed0d28a4070000000000000000000086dd60081f2000103afffe8000000000000000000000000000bbff02000000fdac00e300fdc8bd7300"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e3"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x2000000, 0x7, 0x0, &(0x7f0000000280)="130200d3781ec4", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x6, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088fe508a8500000004000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x50) 26.344037694s ago: executing program 0 (id=438): syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="018028d8fc8b0b2ce5b1666514ed0d28a4070000000000000000000086dd60081f2000103afffe8000000000000000000000000000bbff02000000fdac00e300fdc8bd7300"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e3"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x2000000, 0x7, 0x0, &(0x7f0000000280)="130200d3781ec4", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x6, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088fe508a8500000004000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x50) 17.616382791s ago: executing program 0 (id=438): syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="018028d8fc8b0b2ce5b1666514ed0d28a4070000000000000000000086dd60081f2000103afffe8000000000000000000000000000bbff02000000fdac00e300fdc8bd7300"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e3"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x2000000, 0x7, 0x0, &(0x7f0000000280)="130200d3781ec4", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x6, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088fe508a8500000004000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x50) 6.817747676s ago: executing program 0 (id=438): syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="018028d8fc8b0b2ce5b1666514ed0d28a4070000000000000000000086dd60081f2000103afffe8000000000000000000000000000bbff02000000fdac00e300fdc8bd7300"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e3"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x2000000, 0x7, 0x0, &(0x7f0000000280)="130200d3781ec4", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x6, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088fe508a8500000004000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x50) 3.132349335s ago: executing program 1 (id=1201): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x30}}], 0x2, 0xff00) 2.9911049s ago: executing program 1 (id=1204): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r3, &(0x7f0000000380)={{0x3, @null, 0x1}, [@null={0x40, 0x40, 0x40, 0x40, 0x40, 0x40, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x3c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007b243ce4b3daa7804f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f0000000080)=0x7, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x0, 0x18000000}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2.698651955s ago: executing program 4 (id=1207): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x4}}}, 0x24}}, 0x0) 2.504258655s ago: executing program 4 (id=1210): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r1 = socket$inet6(0xa, 0x2, 0x0) unshare(0x2000400) setsockopt$inet6_buf(r1, 0x29, 0x3d, &(0x7f0000000240)="4b19bdd59b3586b48ee044dee720719d06c34dd98cb896", 0x17) 2.348519801s ago: executing program 4 (id=1211): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x800000, 0x10008, 0x8}) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x800000, 0x10008, 0x8}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) (async) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000180), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x0) r7 = accept(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000080), &(0x7f00000002c0)=@udp=r7}, 0x20) pipe(&(0x7f0000000b40)={0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xb, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r10, 0x0, &(0x7f0000000180)=@tcp}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r10, 0x0, &(0x7f0000000180)=@tcp}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0d00000004000000040000000900000000000000", @ANYRES32=r11, @ANYBLOB="0000000000000000000096f2053a0000000000003bac89656d7835600f4d8782f23074f7a5ef4c753ceecbff93ef6af360b4e85260cc4975add448e8b6b8126c71cc02f5a5857ebd1ed7779d5169d88ad51c20a7db614ce42ed6968074d77bc4f5cf516d36fa21c8941a87b0a5d0821bb5f47eff2fbc1da630f5d06fbd1903ad3cb46a32c19a76723a2a7bf78399a8a7b1b46e6888000000000000000092577b15e2fa1e971e3cf8f21123ff20e2e5f5f4b5691df249965ca26c3610b69d4f28900c0b3aa069ca2d4867518c600ff572e4cbff8e6baf773612119d770b871344cd7ca2ff31b97d956ef8b654a013df46a82c29ef68a92d312bc9b336ee8ee8986f3af0752ce75c01284a94988b4e4c9496611828489a23016dda29cf38a25f6d4db86b9643e58865ca9ed8033ba150f7da8dd1b19e8d305dcd7f9cd65c70e2a8dd13b17610d21ae85f7ff0f13944110ed482e821d3bb77c0d4ce92735cff81a42a6a000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0d00000004000000040000000900000000000000", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x6, 0x26, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0xed6}, [@tail_call, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @ringbuf_query, @map_fd={0x18, 0x6}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1e5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000a00)='GPL\x00', 0xf, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000ac0)={0x3, 0xd, 0x7fffffff, 0xffffffce}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000000b80)=[r8, r9, r5, r10, r0, r11, 0xffffffffffffffff], &(0x7f0000000bc0)=[{0x0, 0x5, 0xc, 0xc}, {0x1, 0x1, 0x3, 0x2}, {0x0, 0x5, 0x6, 0x2}, {0x1, 0x2, 0x8, 0x3}, {0x1, 0x4, 0x8, 0x2}, {0x3, 0x5, 0xb, 0xa}, {0x1, 0x4, 0xf, 0xb}, {0x5, 0x5, 0x7, 0x5}, {0x4, 0x5, 0x9, 0x6}], 0x10, 0x6, @void, @value}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r13, 0x29, 0x2b, &(0x7f00000006c0)={0x6, {{0xa, 0x4e21, 0xe3, @remote, 0xb}}, {{0xa, 0x4e21, 0x5b, @private0, 0xc6d}}}, 0x108) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005a000d0300000000000000000400008008000380cffa0291"], 0x1c}], 0x1}, 0x0) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r14, 0x0) (async) shutdown(r14, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r14, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @loopback}]}, &(0x7f00000001c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r14, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @loopback}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r14, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r15, 0x7}, &(0x7f00000002c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r14, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r15, 0x7}, &(0x7f00000002c0)=0x8) 2.044796522s ago: executing program 2 (id=1214): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x30}}], 0x2, 0xff00) 2.0409549s ago: executing program 4 (id=1215): socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x402, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x808}, 0x20000000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0x24}, &(0x7f0000000200)=0x8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/130, 0x82}], 0x1}}], 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000098120100240012800b00010062726964676500001400028005002c000600010005002b000200000030f0374fc95ca0ba7e1989497f709b4c2e9c827768a00ab66d75a34ba1ade2ebf5bf1610101dc1e512ad029136", @ANYBLOB="ed7c2d681a51bc0a57892ca64d04598d6069bcc5032b40226321c6deb1e8fcd9773eae5f5e444231f323ed49b512b156d5309e39e9c76fffdb5ab87914a677e0b7a056a5d80d3ee1f9a8e4ce6a80c76f6843b3289493edd8c8f33ed0b31422cb25ac28d0c0f68e0984a469ffb0e4d00c147d3e823418cdd0cbd1daad0f38ede9406e9df2b3ace0bf744b7ff623c9e2170e6070197e73cd55d1dfb4d1cf595a641cae482c27bab257b4e56f0e7f48c02a18ed39f44a4ee8751570dd59cce1fe7d8dc8f1c8198569a9b2bef10637122cd4617b5d27c12418b3107e51fce37e40aa", @ANYRESOCT], 0x44}}, 0x4000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x4, 0xfffff034}, {0x40, 0x40, 0x0, 0xfffffffe}, {0x6, 0x0, 0x40, 0x1}]}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r5]) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f0000000440)={0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x0, @remote}]}) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000140)=@int=0x1000000, 0x4) sendto$inet(r4, &(0x7f0000000080)="8f", 0x1, 0x1, &(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x40000, 0x1, {0x0, 0x0, 0x0, 0x0, 0x30}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40091}, 0x4004014) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x0, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x0, 0x2f, 0x0, @local, @private=0xa010100}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000780)={'syztnl1\x00', r8, 0x20, 0x700, 0x81, 0x756, {{0x25, 0x4, 0x2, 0x3, 0x94, 0x66, 0x0, 0x8c, 0x2f, 0x0, @multicast1, @multicast1, {[@timestamp_addr={0x44, 0xc, 0xfa, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @generic={0x89, 0xe, "9d03b2a3e3d35bf7140a4335"}, @ssrr={0x89, 0x1f, 0x9d, [@private=0x8010100, @private=0xa010101, @loopback, @empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010101]}, @rr={0x7, 0xf, 0x44, [@empty, @private=0xa010100, @multicast1]}, @timestamp_prespec={0x44, 0x34, 0x7b, 0x3, 0x2, [{@multicast2, 0x19}, {@remote, 0x8f}, {@multicast2, 0xa7}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x9a}, {@rand_addr=0x64010101, 0x8d4}, {@local, 0xffffff39}]}, @ra={0x94, 0x4}]}}}}}) 1.89679607s ago: executing program 2 (id=1217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[], 0x104}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r2, 0x0, 0x856) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x1, 0x7800, 0x1, 0x4, {{0x31, 0x4, 0x1, 0x39, 0xc4, 0x68, 0x0, 0x4e, 0x4, 0x0, @local, @loopback, {[@lsrr={0x83, 0xf, 0x22, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3c}, @broadcast]}, @timestamp_prespec={0x44, 0x1c, 0x6a, 0x3, 0x5, [{@remote, 0x401}, {@loopback, 0x3}, {@broadcast, 0x48}]}, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0x5e, [@rand_addr=0x64010101, @empty, @loopback, @private=0xa010102]}, @ssrr={0x89, 0xf, 0xa, [@loopback, @dev={0xac, 0x14, 0x14, 0x2e}, @broadcast]}, @timestamp_addr={0x44, 0x2c, 0xd7, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0xd0, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010101, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @lsrr={0x83, 0x1b, 0xdd, [@dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2, @multicast2]}, @lsrr={0x83, 0xf, 0x68, [@private=0xa010100, @multicast2, @loopback]}, @rr={0x7, 0x7, 0xe3, [@local]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd9}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x3b3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) 1.73262514s ago: executing program 2 (id=1218): r0 = socket$nl_route(0x10, 0x3, 0x0) accept4(r0, &(0x7f0000000000)=@vsock, &(0x7f0000000080)=0x80, 0x800) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r1, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x3, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, 0x8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) 1.542890426s ago: executing program 1 (id=1220): socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r2, 0x800448d5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) socket$inet6(0xa, 0x805, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001080)="020000000a55fbc3d774090c4665299c3c1dc8b87fbfe6aa8162fd897f263828a2", 0x21}], 0x1}], 0x1, 0x0) unshare(0x6a000600) socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r1, 0x0, 0x0}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x238}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000a00)=ANY=[@ANYRES16=r5], &(0x7f0000001100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1.485539744s ago: executing program 2 (id=1221): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xe}}}, 0x24}}, 0x0) 1.309594816s ago: executing program 2 (id=1222): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000300000000000004000000080002000500000006000b0002"], 0x24}}, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r3, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x0, @mcast2, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x20004855) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000160a01010000000000000000020000000900020073797a31000000000900010073797a30000000002c000380080002400000000008000140000000001800038014000100776c616e3000000000000000000000000800074000000001"], 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 980.572523ms ago: executing program 4 (id=1223): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1) r2 = socket$kcm(0x2, 0xa, 0x2) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000012c0), &(0x7f0000001300)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/232, 0xe8}, {&(0x7f0000002f80)=""/37, 0x25}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000003240)=""/4110, 0x100e}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x6}, 0x7fffffff}], 0x4, 0x20, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = socket$inet6(0xa, 0x3, 0x3) sendmmsg$inet6(r4, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x3, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00'], 0x28}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c000140000000000000a0a20c000140000010000000c6930c0002"], 0x92fc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e6114a000000000001d430000000000007a0a00fe00581c1f61144c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x5}, 0x8) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x4048800) close(r3) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001380), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001500)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f00000013c0)={0xc8, r6, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x16}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfbf5}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x60}, 0x80) 810.132465ms ago: executing program 2 (id=1224): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r2, 0x1}, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYRESOCT=r2, @ANYRES64=r0], 0x100}}, 0x20000800) setsockopt(0xffffffffffffffff, 0x800000010d, 0x2, &(0x7f00000002c0)="922b22c06d", 0x5) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="040062476f8efba810c4000005eb9631e222ef85f1a695f72a2914ee0d03b691ced72b747a8253002600e77d3014a11c62157c356cc03ee2a5940b32d55e488cc870e9530fab8805e8ede029cfa4af5eab026ef800ed0000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000b00000000000000", @ANYRES16=r5, @ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000095280500400012800c0001006d6163766c616e0030000280080001"], 0x68}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000030601010023063db300210000000041237f6dc25cdbee00050001000700000009000200"], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=ANY=[@ANYBLOB="a802000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="441001000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x8084}, 0x0) close(r7) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x9) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r10, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 609.491112ms ago: executing program 3 (id=1226): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800010000000000000300090000000006001500040000000c00168005000500020000000000000000000000f8a041eef5b3c0d6b85a8bbda61ea647b94810c364f08d1a8cfc2ae709acacedc694ef28dea785298266cc06e186922a69cd114c7762375a39ee796cf19c13c6e0cd"], 0x30}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x840000000002, 0x3, 0x100) r4 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r8, @ANYRESDEC=0x0, @ANYRES16=r2], 0x3c}}, 0x10) ioctl$TUNSETLINK(r5, 0x400454cd, 0x30c) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYRES32=r6], 0x48}], 0x1}, 0x300) 607.303244ms ago: executing program 1 (id=1227): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x30}}], 0x2, 0xff00) 504.449929ms ago: executing program 3 (id=1228): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xbc}, [@ldst={0x6}]}, &(0x7f0000000280)='syzkaller\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000001800835e0000000000000000020010000200fe020000000008000400", @ANYRES32=r4], 0x2c}, 0x1, 0xffffff7f}, 0x4040000) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0x6cfc}, 0xc) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="909a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a000000050000000400000000000000000000000000050000000000994478a655"], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x8000, r0}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x20, 0x4, &(0x7f0000000300)=@raw=[@ringbuf_query], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0xbe51380fbda001e3, 0x30, '\x00', r4, @netfilter=0x2d, r6, 0x8, &(0x7f00000003c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x5, 0x5, 0xb0b}, 0x10, 0xffffffffffffffff, r0, 0x9, &(0x7f0000000680)=[r7, 0xffffffffffffffff, r8, r9, r10, r11, r12, r13, r14, r15], &(0x7f00000006c0)=[{0x3, 0x3, 0x3, 0x7}, {0x5, 0x5, 0x1, 0xc}, {0x2, 0x4, 0x0, 0x6}, {0x0, 0x3, 0xa, 0x7}, {0x5, 0x2, 0xf, 0x9}, {0x0, 0x4, 0xe, 0xc}, {0x2, 0x1, 0x1, 0xc}, {0x5, 0x5, 0xe, 0xa}, {0x5, 0x2, 0x5}], 0x10, 0x2, @void, @value}, 0x94) getsockopt$MRT(r2, 0x0, 0xd1, 0x0, 0x0) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c40), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r16, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r17, @ANYBLOB="01002cbd7000fddbdf250600000006000b000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40080) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000002c0)={0xffffffffffffffff, 0x8, 0x7, 0x2, @vifc_lcl_addr=@broadcast, @broadcast}, 0x10) 465.877697ms ago: executing program 3 (id=1229): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c4f616462616c616e7365001f8f6df1124af79deb7e6c47ff549538b66bb5e280371c4193654877e9d8809f5a0300050b8c5d18a7062595d06cabf7a25cd2a907914772c90c9255438cd552d4fc88f02df93427de6658820a26a3aefbaeaf3ecc9b632054b081e21a0b1b305811968c95f7a78da2b075e1178ca14e6ea21b050a815f1066b72d57863d95e6ff9f50995d29ed"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 456.814289ms ago: executing program 1 (id=1230): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x80}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x31cf}]}}]}, 0x44}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000200)={0x1d, r9}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r12, @ANYBLOB="00000000000000001c001a800800028008000200080000003e12"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb0, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x890) 353.674571ms ago: executing program 3 (id=1231): r0 = socket$nl_route(0x10, 0x3, 0x0) accept4(r0, &(0x7f0000000000)=@vsock, &(0x7f0000000080)=0x80, 0x800) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r1, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x3, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, 0x8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) 216.039585ms ago: executing program 1 (id=1232): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="78000000020605000100000000000000000000050c00078008000a40ffffff7f0900020073797a300000000014000780050014000000000008001340000000000500050007000000050005000100000013000300686173683a6e65742c8366faffffff0014000780050003000000000008000a4000000041"], 0x78}}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r2, &(0x7f0000000380)={{0x3, @null, 0x1}, [@null={0x40, 0x40, 0x40, 0x40, 0x40, 0x40, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x3c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007b243ce4b3daa7804f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r5, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) setsockopt$inet_group_source_req(r5, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}}}, 0x108) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) setsockopt$sock_int(r8, 0x1, 0x12, &(0x7f0000000080)=0x7, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 202.28304ms ago: executing program 3 (id=1233): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x16}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000014000200776732000000000000000000000000004800088044000080080003000200000014000400efff4e24ac1414aa000000000000000024000100d17328"], 0x70}, 0x1, 0x0, 0x0, 0x24000855}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000026c0)={0x3c, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffffe}, @NBD_ATTR_SOCKETS={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000880)={0x47c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x36499245e490592}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x22f99eccfa546bea}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x12c, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c13766d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48cc31f4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xece942a}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12d69bf4}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71bd2cf5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46aeae0c}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26865428}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d2009fb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c181de5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x289e6b43}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5c}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e23b065}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x387b1571}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x172a3504}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1256dc56}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f05265c}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x149af0cb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6355ce43}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x174, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf48ce8e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f2ef2e4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x707e0c29}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62260704}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47d28fa2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3dbbb22d}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e19e39a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29636ec4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e4aa656}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a5268cd}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2faea302}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5c}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3596f506}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38f18a66}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f494bea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ac0977a}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xad}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a54e48}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x565480a7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3db7ff72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65b39a3d}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x143267f9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f698ab6}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74b4db5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f54d9e8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6aa7145a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x100, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d32b425}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13a5ff7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4266d1de}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66d99282}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5135c89f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7881dea6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb0f60db}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a940b6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f6422d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1dc6699b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a94ba18}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32dbcf01}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f25d44a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xaf040f3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3cc7e0bb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x47c}, 0x1, 0x0, 0x0, 0x40}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000d40)=""/53, 0x35}], 0x1, 0x0, 0x8bd7) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00!\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000bf5b00000000000000000000850000006100000085000000500000009500000000000000cedb416be0d98a0a361a37baa99a496f3c1e9a397b17579d180ab1e5e35b04e70bf04832d7b68e4d23733ab41b24b4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f67fe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0x0, &(0x7f0000000240)="354da925f340a56cd9bd738d6055", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$bt_hci(r7, &(0x7f00000004c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) 101.670989ms ago: executing program 3 (id=1234): r0 = socket$netlink(0x10, 0x3, 0x14) socket$pppoe(0x18, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='contention_begin\x00', r3, 0x0, 0xffffff7ffffff002}, 0x18) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3a8, 0xffffffff, 0x1c0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x50cc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x42b5}}}}, {{@ipv6={@private2, @mcast1, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x6c, 0x6, 0x6}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x80, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) write(r4, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f00000001c0)=0x2, 0x4) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000340)=""/52, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000300)=0x2, 0x4) bind$netlink(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000840)=ANY=[@ANYBLOB="ffffffffffff0180c20000030800450000200000000000119078000000000000000000014e05000c90780100000029863a9ae3948aed01a225f1a59c3686f916e6d9f317479a3fa03cd2048106fddc813a11168269aa678620af0088f380ed23206aa87c86b66857f71898394676f453439c3ebaa9c007166ce5ae73b2033ce1bb72a62efefb8bcb20961f92a6d70c80d08d17"], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'erspan0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x8c}}, 0x4000005) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r8, 0x0, 0x40000) select(0x40, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3}, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) 0s ago: executing program 4 (id=1235): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x38, &(0x7f0000001640)=""/170, &(0x7f0000001700)=0xaa) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000440)={'wpan1\x00'}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r3, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r0, &(0x7f00000030c0)=""/4117, 0x1015, 0x1, 0x0, 0x0) sendmsg$802154_raw(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="ebe60a435125d7", 0x7}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="0100000000000000000003000000300001"], 0x44}}, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x0) connect$netrom(r5, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2, 0x0}}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000000000004"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): 95881][ T8115] ? skb_put+0x114/0x1f0 [ 145.395906][ T8115] netlink_sendmsg+0x8c3/0xcd0 [ 145.395937][ T8115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.395959][ T8115] ? aa_sock_msg_perm+0x91/0x160 [ 145.395987][ T8115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.396003][ T8115] __sock_sendmsg+0x221/0x270 [ 145.396030][ T8115] ____sys_sendmsg+0x523/0x860 [ 145.396059][ T8115] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.396076][ T8115] ? __fget_files+0x2a/0x420 [ 145.396102][ T8115] ? __fget_files+0x2a/0x420 [ 145.396135][ T8115] __sys_sendmsg+0x271/0x360 [ 145.396161][ T8115] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.396210][ T8115] ? __pfx_sched_clock_cpu+0x10/0x10 [ 145.396229][ T8115] ? kvm_sched_clock_read+0x11/0x20 [ 145.396242][ T8115] ? sched_clock+0x4a/0x70 [ 145.396283][ T8115] ? do_syscall_64+0xb6/0x230 [ 145.396302][ T8115] do_syscall_64+0xf3/0x230 [ 145.396319][ T8115] ? clear_bhb_loop+0x45/0xa0 [ 145.396340][ T8115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.396356][ T8115] RIP: 0033:0x7f7ac358e169 [ 145.396371][ T8115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.396384][ T8115] RSP: 002b:00007f7ac4481038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.396403][ T8115] RAX: ffffffffffffffda RBX: 00007f7ac37b5fa0 RCX: 00007f7ac358e169 [ 145.396413][ T8115] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 145.396421][ T8115] RBP: 00007f7ac4481090 R08: 0000000000000000 R09: 0000000000000000 [ 145.396429][ T8115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.396440][ T8115] R13: 0000000000000000 R14: 00007f7ac37b5fa0 R15: 00007ffc93901b68 [ 145.396468][ T8115] [ 146.216498][ T7956] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 146.361743][ T7956] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 146.397790][ T7956] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 146.454352][ T7956] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 146.543925][ T5855] Bluetooth: hci1: command tx timeout [ 146.630430][ T8143] tipc: Started in network mode [ 146.635599][ T8143] tipc: Node identity , cluster identity 4711 [ 146.643904][ T8143] tipc: Failed to set node id, please configure manually [ 146.683691][ T8143] tipc: Enabling of bearer rejected, failed to enable media [ 146.829855][ T7956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.911066][ T7956] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.933037][ T8152] __nla_validate_parse: 8 callbacks suppressed [ 146.933052][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.584'. [ 146.963116][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.970369][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.006691][ T8152] hsr0: entered promiscuous mode [ 147.013219][ T8152] vlan0: entered promiscuous mode [ 147.080300][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.087570][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.330179][ T8179] netlink: 'syz.4.588': attribute type 3 has an invalid length. [ 147.382006][ T8182] netlink: 'syz.3.589': attribute type 1 has an invalid length. [ 147.391801][ T8178] can: request_module (can-proto-3) failed. [ 147.400622][ T8182] netlink: 44 bytes leftover after parsing attributes in process `syz.3.589'. [ 147.799979][ T8195] tipc: Started in network mode [ 147.814337][ T8195] tipc: Node identity , cluster identity 4711 [ 147.842623][ T8195] tipc: Failed to set node id, please configure manually [ 147.865207][ T8195] tipc: Enabling of bearer rejected, failed to enable media [ 147.912687][ T8199] IPv6: NLM_F_REPLACE set, but no existing node found! [ 147.940841][ T7956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.142597][ T7956] veth0_vlan: entered promiscuous mode [ 148.185465][ T7956] veth1_vlan: entered promiscuous mode [ 148.319582][ T7956] veth0_macvtap: entered promiscuous mode [ 148.354938][ T7956] veth1_macvtap: entered promiscuous mode [ 148.408083][ T8230] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.602'. [ 148.426836][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.451569][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.462933][ T8230] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 148.472143][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.490962][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.503075][ T8230] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 148.519479][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.536365][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.560633][ T7956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.625326][ T5855] Bluetooth: hci1: command tx timeout [ 148.683239][ T8221] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.734123][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.760689][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.770811][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.787357][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.797946][ T7956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.809766][ T7956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.821417][ T7956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.847906][ T7956] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.859107][ T7956] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.869023][ T7956] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.894012][ T7956] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.088459][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.102754][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.173379][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.210215][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.319436][ T8260] netlink: 2 bytes leftover after parsing attributes in process `syz.1.607'. [ 149.709742][ T8276] netlink: 44 bytes leftover after parsing attributes in process `syz.2.612'. [ 149.721066][ T8278] FAULT_INJECTION: forcing a failure. [ 149.721066][ T8278] name failslab, interval 1, probability 0, space 0, times 0 [ 149.740595][ T8278] CPU: 1 UID: 0 PID: 8278 Comm: syz.1.613 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) [ 149.740621][ T8278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 149.740631][ T8278] Call Trace: [ 149.740637][ T8278] [ 149.740644][ T8278] dump_stack_lvl+0x241/0x360 [ 149.740676][ T8278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.740699][ T8278] ? __pfx__printk+0x10/0x10 [ 149.740726][ T8278] ? __pfx___might_resched+0x10/0x10 [ 149.740750][ T8278] should_fail_ex+0x424/0x570 [ 149.740776][ T8278] should_failslab+0xac/0x100 [ 149.740800][ T8278] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 149.740823][ T8278] ? __alloc_skb+0x1c2/0x480 [ 149.740846][ T8278] __alloc_skb+0x1c2/0x480 [ 149.740865][ T8278] ? __mutex_lock+0x380/0x10c0 [ 149.740888][ T8278] ? __pfx___alloc_skb+0x10/0x10 [ 149.740912][ T8278] ? netlink_ack_tlv_len+0x7a/0x200 [ 149.740932][ T8278] netlink_ack+0x147/0xa70 [ 149.740948][ T8278] ? 0xffffffffa0000954 [ 149.740966][ T8278] ? is_bpf_text_address+0x26/0x2a0 [ 149.741000][ T8278] ? kernel_text_address+0xa7/0xe0 [ 149.741031][ T8278] audit_receive+0x89c/0x39d0 [ 149.741098][ T8278] ? __pfx_audit_receive+0x10/0x10 [ 149.741118][ T8278] ? kasan_save_track+0x51/0x80 [ 149.741134][ T8278] ? kasan_save_track+0x3f/0x80 [ 149.741148][ T8278] ? __kasan_slab_alloc+0x66/0x80 [ 149.741165][ T8278] ? kmem_cache_alloc_node_noprof+0x1f2/0x3b0 [ 149.741185][ T8278] ? kmalloc_reserve+0xa8/0x2a0 [ 149.741200][ T8278] ? __alloc_skb+0x1f2/0x480 [ 149.741215][ T8278] ? netlink_sendmsg+0x638/0xcd0 [ 149.741229][ T8278] ? __sock_sendmsg+0x221/0x270 [ 149.741250][ T8278] ? ____sys_sendmsg+0x523/0x860 [ 149.741274][ T8278] ? __lock_acquire+0xad5/0xd80 [ 149.741318][ T8278] ? __lock_acquire+0xad5/0xd80 [ 149.741354][ T8278] ? netlink_deliver_tap+0x2e/0x1b0 [ 149.741374][ T8278] ? netlink_deliver_tap+0x2e/0x1b0 [ 149.741393][ T8278] netlink_unicast+0x7f8/0x9a0 [ 149.741427][ T8278] ? __pfx_netlink_unicast+0x10/0x10 [ 149.741453][ T8278] ? skb_put+0x114/0x1f0 [ 149.741474][ T8278] netlink_sendmsg+0x8c3/0xcd0 [ 149.741504][ T8278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.741530][ T8278] ? aa_sock_msg_perm+0x91/0x160 [ 149.741558][ T8278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.741572][ T8278] __sock_sendmsg+0x221/0x270 [ 149.741598][ T8278] ____sys_sendmsg+0x523/0x860 [ 149.741626][ T8278] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.741643][ T8278] ? __fget_files+0x2a/0x420 [ 149.741666][ T8278] ? __fget_files+0x2a/0x420 [ 149.741694][ T8278] __sys_sendmsg+0x271/0x360 [ 149.741715][ T8278] ? __pfx___sys_sendmsg+0x10/0x10 [ 149.741779][ T8278] ? do_syscall_64+0xb6/0x230 [ 149.741800][ T8278] do_syscall_64+0xf3/0x230 [ 149.741817][ T8278] ? clear_bhb_loop+0x45/0xa0 [ 149.741836][ T8278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.741851][ T8278] RIP: 0033:0x7f7ac358e169 [ 149.741867][ T8278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.741878][ T8278] RSP: 002b:00007f7ac4481038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.741892][ T8278] RAX: ffffffffffffffda RBX: 00007f7ac37b5fa0 RCX: 00007f7ac358e169 [ 149.741901][ T8278] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 149.741909][ T8278] RBP: 00007f7ac4481090 R08: 0000000000000000 R09: 0000000000000000 [ 149.741919][ T8278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.741928][ T8278] R13: 0000000000000000 R14: 00007f7ac37b5fa0 R15: 00007ffc93901b68 [ 149.741955][ T8278] [ 150.102683][ T8270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.159062][ T8270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.566269][ T8270] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.593550][ T8270] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.613201][ T8270] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.631731][ T8270] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.719070][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.729345][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.736118][ T8270] ip6tnl1: left promiscuous mode [ 150.745127][ T8270] ip6tnl1: left allmulticast mode [ 150.746040][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.761581][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.778115][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.000077][ T8291] lo speed is unknown, defaulting to 1000 [ 151.113027][ T8301] lo speed is unknown, defaulting to 1000 [ 151.135963][ T8306] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.617'. [ 151.218951][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.616'. [ 151.260475][ T8306] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 151.391991][ T8306] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 151.511556][ T8325] xt_ipcomp: unknown flags F7 [ 151.642747][ T8306] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.660114][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.618'. [ 151.720252][ T8291] chnl_net:caif_netlink_parms(): no params data found [ 151.848487][ T8336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.622'. [ 151.940838][ T30] audit: type=1800 audit(1744818310.979:2): pid=8305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.618" name="cgroup.controllers" dev="tmpfs" ino=727 res=0 errno=0 [ 152.312523][ T8291] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.353711][ T8291] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.371325][ T8353] netlink: 56 bytes leftover after parsing attributes in process `syz.2.624'. [ 152.375502][ T8291] bridge_slave_0: entered allmulticast mode [ 152.389017][ T8291] bridge_slave_0: entered promiscuous mode [ 152.423033][ T8358] netlink: 'syz.1.626': attribute type 10 has an invalid length. [ 152.472913][ T8358] netlink: 40 bytes leftover after parsing attributes in process `syz.1.626'. [ 152.557844][ T8291] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.567260][ T8291] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.575800][ T8291] bridge_slave_1: entered allmulticast mode [ 152.590125][ T8291] bridge_slave_1: entered promiscuous mode [ 152.789531][ T8291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.818997][ T8291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.839767][ T8374] netlink: 44 bytes leftover after parsing attributes in process `syz.1.632'. [ 152.865417][ T5853] Bluetooth: hci1: command tx timeout [ 152.985572][ T8291] team0: Port device team_slave_0 added [ 152.993382][ T981] IPVS: starting estimator thread 0... [ 153.006546][ T8381] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 153.027075][ T8291] team0: Port device team_slave_1 added [ 153.045479][ T8367] lo speed is unknown, defaulting to 1000 [ 153.085843][ T8386] IPVS: using max 33 ests per chain, 79200 per kthread [ 153.200246][ T8291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.208123][ T8291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.240574][ T8291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.272579][ T8291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.281158][ T8291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.307932][ T8291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.656794][ T8291] hsr_slave_0: entered promiscuous mode [ 153.684768][ T8291] hsr_slave_1: entered promiscuous mode [ 153.715221][ T8291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.739199][ T8291] Cannot create hsr debugfs directory [ 153.798531][ T8407] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.635'. [ 153.836719][ T8407] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 153.929282][ T8407] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 153.970273][ T8413] netlink: 3 bytes leftover after parsing attributes in process `syz.2.637'. [ 154.001708][ T8413] netlink: 3 bytes leftover after parsing attributes in process `syz.2.637'. [ 154.099296][ T8413] netlink: 3 bytes leftover after parsing attributes in process `syz.2.637'. [ 154.132843][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.639'. [ 154.203414][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'. [ 154.210267][ T8415] 8021q: adding VLAN 0 to HW filter on device bond4 [ 154.464776][ T8291] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.611759][ T8438] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 154.664250][ T8438] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:0 [ 154.721543][ T8291] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.740584][ T8443] netlink: 'syz.2.646': attribute type 1 has an invalid length. [ 154.811727][ T8449] FAULT_INJECTION: forcing a failure. [ 154.811727][ T8449] name failslab, interval 1, probability 0, space 0, times 0 [ 154.825351][ T8449] CPU: 1 UID: 0 PID: 8449 Comm: syz.2.646 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) [ 154.825379][ T8449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 154.825390][ T8449] Call Trace: [ 154.825398][ T8449] [ 154.825405][ T8449] dump_stack_lvl+0x241/0x360 [ 154.825439][ T8449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.825462][ T8449] ? __pfx__printk+0x10/0x10 [ 154.825485][ T8449] ? __mutex_trylock_common+0x184/0x2e0 [ 154.825514][ T8449] should_fail_ex+0x424/0x570 [ 154.825540][ T8449] should_failslab+0xac/0x100 [ 154.825566][ T8449] __kmalloc_cache_noprof+0x73/0x370 [ 154.825589][ T8449] ? __hw_addr_add_ex+0x1fb/0x760 [ 154.825614][ T8449] __hw_addr_add_ex+0x1fb/0x760 [ 154.825641][ T8449] dev_addr_init+0x159/0x240 [ 154.825665][ T8449] ? __pfx_dev_addr_init+0x10/0x10 [ 154.825691][ T8449] ? sized_strscpy+0x9a/0x2b0 [ 154.825712][ T8449] alloc_netdev_mqs+0x307/0x1210 [ 154.825730][ T8449] ? __pfx_macvlan_setup+0x10/0x10 [ 154.825763][ T8449] rtnl_create_link+0x2f2/0xea0 [ 154.825805][ T8449] rtnl_newlink_create+0x2f2/0xc30 [ 154.825832][ T8449] ? __mutex_lock+0xbe3/0x10c0 [ 154.825877][ T8449] ? __mutex_lock+0x5f3/0x10c0 [ 154.825895][ T8449] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 154.825918][ T8449] ? __pfx___mutex_lock+0x10/0x10 [ 154.825977][ T8449] ? ns_capable+0x8a/0xf0 [ 154.825998][ T8449] rtnl_newlink+0x18b0/0x1fe0 [ 154.826033][ T8449] ? __pfx_rtnl_newlink+0x10/0x10 [ 154.826046][ T8449] ? unwind_get_return_address+0x4d/0x90 [ 154.826068][ T8449] ? arch_stack_walk+0xff/0x150 [ 154.826098][ T8449] ? __lock_acquire+0xad5/0xd80 [ 154.826121][ T8449] ? __lock_acquire+0xad5/0xd80 [ 154.826147][ T8449] ? __lock_acquire+0xad5/0xd80 [ 154.826179][ T8449] ? is_bpf_text_address+0x26/0x2a0 [ 154.826205][ T8449] ? 0xffffffffa0000954 [ 154.826221][ T8449] ? is_bpf_text_address+0x288/0x2a0 [ 154.826237][ T8449] ? is_bpf_text_address+0x26/0x2a0 [ 154.826255][ T8449] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 154.826278][ T8449] ? kernel_text_address+0xa7/0xe0 [ 154.826302][ T8449] ? __kernel_text_address+0xd/0x40 [ 154.826330][ T8449] ? aa_get_newest_label+0x101/0x6f0 [ 154.826359][ T8449] ? __lock_acquire+0xad5/0xd80 [ 154.826390][ T8449] ? __pfx_rtnl_newlink+0x10/0x10 [ 154.826407][ T8449] rtnetlink_rcv_msg+0x80f/0xd70 [ 154.826421][ T8449] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 154.826444][ T8449] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 154.826461][ T8449] ? __lock_acquire+0xad5/0xd80 [ 154.826493][ T8449] netlink_rcv_skb+0x208/0x480 [ 154.826512][ T8449] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 154.826529][ T8449] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 154.826569][ T8449] ? netlink_deliver_tap+0x2e/0x1b0 [ 154.826589][ T8449] ? netlink_deliver_tap+0x2e/0x1b0 [ 154.826607][ T8449] netlink_unicast+0x7f8/0x9a0 [ 154.826649][ T8449] ? __pfx_netlink_unicast+0x10/0x10 [ 154.826676][ T8449] ? skb_put+0x114/0x1f0 [ 154.826706][ T8449] netlink_sendmsg+0x8c3/0xcd0 [ 154.826742][ T8449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.826765][ T8449] ? aa_sock_msg_perm+0x91/0x160 [ 154.826793][ T8449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.826808][ T8449] __sock_sendmsg+0x221/0x270 [ 154.826838][ T8449] ____sys_sendmsg+0x523/0x860 [ 154.826869][ T8449] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.826887][ T8449] ? __fget_files+0x2a/0x420 [ 154.826914][ T8449] ? __fget_files+0x2a/0x420 [ 154.826953][ T8449] __sys_sendmsg+0x271/0x360 [ 154.826979][ T8449] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.827054][ T8449] ? do_syscall_64+0xb6/0x230 [ 154.827075][ T8449] do_syscall_64+0xf3/0x230 [ 154.827094][ T8449] ? clear_bhb_loop+0x45/0xa0 [ 154.827118][ T8449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.827134][ T8449] RIP: 0033:0x7f255bb8e169 [ 154.827151][ T8449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.827165][ T8449] RSP: 002b:00007f255c929038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.827185][ T8449] RAX: ffffffffffffffda RBX: 00007f255bdb6080 RCX: 00007f255bb8e169 [ 154.827198][ T8449] RDX: 0000000000004000 RSI: 0000200000000240 RDI: 0000000000000005 [ 154.827208][ T8449] RBP: 00007f255c929090 R08: 0000000000000000 R09: 0000000000000000 [ 154.827219][ T8449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.827229][ T8449] R13: 0000000000000000 R14: 00007f255bdb6080 R15: 00007ffea86e5c48 [ 154.827259][ T8449] [ 154.943773][ T5853] Bluetooth: hci1: command 0x041b tx timeout [ 155.287626][ T8291] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.379904][ T8291] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.580841][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.652'. [ 155.666121][ T8291] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 155.692561][ T8291] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 155.736697][ T8291] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 155.760310][ T8291] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 155.954352][ T8481] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 155.989968][ T8481] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 156.119703][ T8291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.202359][ T8481] 8021q: adding VLAN 0 to HW filter on device bond3 [ 156.236398][ T8291] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.249919][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.257655][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.341225][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.348472][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.497319][ T8291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.919523][ T8291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.089890][ T8291] veth0_vlan: entered promiscuous mode [ 157.121037][ T8291] veth1_vlan: entered promiscuous mode [ 157.279279][ T8291] veth0_macvtap: entered promiscuous mode [ 157.343770][ T5855] Bluetooth: hci1: command 0x041b tx timeout [ 157.351423][ T8291] veth1_macvtap: entered promiscuous mode [ 157.393899][ T8291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.404701][ T8291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.414643][ T8291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.429099][ T8291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.439723][ T8291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.451836][ T8291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.485188][ T8291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.511731][ T8291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.524594][ T8291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.536182][ T8541] __nla_validate_parse: 5 callbacks suppressed [ 157.536198][ T8541] netlink: 24 bytes leftover after parsing attributes in process `syz.4.676'. [ 157.556953][ T8291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.568285][ T8291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.579633][ T8291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.600139][ T8291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.604309][ T8552] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.679'. [ 157.613658][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.681'. [ 157.630371][ T8291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.639515][ T8552] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 157.652514][ T8552] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 157.708832][ T8291] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.724818][ T8291] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.734155][ T8291] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.746773][ T8291] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.912895][ T8546] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.072952][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.102259][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.200726][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.231148][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.239905][ T8566] lo speed is unknown, defaulting to 1000 [ 158.627092][ T8580] netlink: 'syz.1.687': attribute type 29 has an invalid length. [ 158.649175][ T8583] netlink: 'syz.1.687': attribute type 29 has an invalid length. [ 158.923326][ T8569] lo speed is unknown, defaulting to 1000 [ 159.166693][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.692'. [ 159.262607][ T8608] netlink: 'syz.1.693': attribute type 10 has an invalid length. [ 159.295828][ T8608] netlink: 40 bytes leftover after parsing attributes in process `syz.1.693'. [ 159.542372][ T8610] lo speed is unknown, defaulting to 1000 [ 160.227604][ T8628] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.694'. [ 160.240648][ T8628] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 160.274163][ T8628] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 160.346800][ T8630] lo speed is unknown, defaulting to 1000 [ 160.554642][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 160.578391][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 160.590557][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 160.598735][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 160.604545][ T8628] 8021q: adding VLAN 0 to HW filter on device bond3 [ 160.615529][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 160.956540][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.702'. [ 160.985279][ T8640] lo speed is unknown, defaulting to 1000 [ 161.230327][ T8657] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 161.248853][ T8662] sctp: [Deprecated]: syz.1.705 (pid 8662) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.248853][ T8662] Use struct sctp_sack_info instead [ 161.382275][ T8667] sctp: [Deprecated]: syz.1.705 (pid 8667) Use of int in max_burst socket option deprecated. [ 161.382275][ T8667] Use struct sctp_assoc_value instead [ 161.779999][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.706'. [ 161.996402][ T8667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.014603][ T8667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.095422][ T8684] netlink: 24 bytes leftover after parsing attributes in process `syz.2.708'. [ 162.110373][ T8667] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.119632][ T8667] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.132708][ T8667] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.141657][ T8667] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.353304][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.711'. [ 162.444146][ T8698] xt_TPROXY: Can be used only with -p tcp or -p udp [ 162.549812][ T8706] __nla_validate_parse: 1 callbacks suppressed [ 162.549830][ T8706] netlink: 28 bytes leftover after parsing attributes in process `syz.4.711'. [ 162.705934][ T5855] Bluetooth: hci1: command tx timeout [ 162.752049][ T8640] chnl_net:caif_netlink_parms(): no params data found [ 162.894907][ T8718] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.715'. [ 162.917992][ T8718] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 162.943710][ T8718] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 163.118400][ T8715] 8021q: adding VLAN 0 to HW filter on device bond4 [ 163.119527][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.719'. [ 163.126547][ T8640] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.142084][ T8640] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.149450][ T8729] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 163.153811][ T8640] bridge_slave_0: entered allmulticast mode [ 163.169417][ T8640] bridge_slave_0: entered promiscuous mode [ 163.178308][ T8640] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.192023][ T8640] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.199462][ T8640] bridge_slave_1: entered allmulticast mode [ 163.208104][ T8640] bridge_slave_1: entered promiscuous mode [ 163.326925][ T8640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.369522][ T8640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.453909][ T8739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.721'. [ 163.480665][ T8737] netlink: 'syz.2.722': attribute type 7 has an invalid length. [ 163.610657][ T8640] team0: Port device team_slave_0 added [ 163.621637][ T8640] team0: Port device team_slave_1 added [ 163.783282][ T8640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.815050][ T8640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.858474][ T8640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.930205][ T8640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.949571][ T8640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.020053][ T8640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.243470][ T8640] hsr_slave_0: entered promiscuous mode [ 164.256147][ T8640] hsr_slave_1: entered promiscuous mode [ 164.268278][ T8640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.277614][ T8640] Cannot create hsr debugfs directory [ 164.285792][ T8770] syz_tun: entered allmulticast mode [ 164.319901][ T8770] netlink: 324 bytes leftover after parsing attributes in process `syz.4.733'. [ 164.369754][ T8775] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.734'. [ 164.424392][ T8775] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 164.435870][ T8767] syz_tun: left allmulticast mode [ 164.457758][ T8775] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 164.613687][ T8771] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.626382][ T8789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.736'. [ 164.787687][ T5855] Bluetooth: hci1: command tx timeout [ 164.912908][ T8793] macvlan3: entered promiscuous mode [ 164.960836][ T8801] netlink: 'syz.3.738': attribute type 10 has an invalid length. [ 164.969225][ T8793] bridge0: entered promiscuous mode [ 164.979749][ T8801] netlink: 40 bytes leftover after parsing attributes in process `syz.3.738'. [ 164.991175][ T8793] bridge0: port 3(macvlan3) entered blocking state [ 165.004046][ T8793] bridge0: port 3(macvlan3) entered disabled state [ 165.015035][ T8793] macvlan3: entered allmulticast mode [ 165.023703][ T8793] bridge0: entered allmulticast mode [ 165.052025][ T8793] macvlan3: left allmulticast mode [ 165.071840][ T8793] bridge0: left allmulticast mode [ 165.096363][ T8793] bridge0: left promiscuous mode [ 165.272409][ T8640] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.545287][ T8640] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.769417][ T8640] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.987816][ T8640] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.994510][ T8839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'. [ 166.250218][ T8851] netlink: 'syz.2.750': attribute type 10 has an invalid length. [ 166.305999][ T8851] netlink: 40 bytes leftover after parsing attributes in process `syz.2.750'. [ 166.337453][ T8854] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 166.372931][ T8854] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 166.431950][ T8640] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 166.516376][ T8640] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 166.699176][ T8854] 8021q: adding VLAN 0 to HW filter on device bond4 [ 166.806054][ T8640] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 166.858160][ T8640] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 166.876957][ T5853] Bluetooth: hci1: command tx timeout [ 167.083453][ T8887] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (134217729), value rounded to 0 ms [ 167.197835][ T8640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.283272][ T8892] xt_CT: No such helper "pptp" [ 167.326378][ T8896] syzkaller0: entered promiscuous mode [ 167.333755][ T8896] syzkaller0: entered allmulticast mode [ 168.009189][ T8913] netlink: 'syz.1.763': attribute type 10 has an invalid length. [ 168.036257][ T8913] __nla_validate_parse: 5 callbacks suppressed [ 168.036277][ T8913] netlink: 40 bytes leftover after parsing attributes in process `syz.1.763'. [ 168.946487][ T5853] Bluetooth: hci1: command tx timeout [ 169.376884][ T8640] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.394441][ T8923] netlink: 'syz.3.765': attribute type 3 has an invalid length. [ 169.422254][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.429505][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.528045][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.535247][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.286970][ T8960] netlink: 20 bytes leftover after parsing attributes in process `syz.1.774'. [ 170.425628][ T8946] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.453230][ T8946] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.471944][ T8946] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.481467][ T8946] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.586627][ T8946] ip6gre1: left promiscuous mode [ 170.640606][ T8946] ip6erspan0: left promiscuous mode [ 170.662006][ T8938] lo speed is unknown, defaulting to 1000 [ 170.743433][ T8640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.814545][ T8968] netlink: 'syz.3.777': attribute type 10 has an invalid length. [ 170.827461][ T8968] netlink: 40 bytes leftover after parsing attributes in process `syz.3.777'. [ 171.067625][ T8974] netlink: 20 bytes leftover after parsing attributes in process `syz.1.779'. [ 171.108302][ T8640] veth0_vlan: entered promiscuous mode [ 171.158168][ T8640] veth1_vlan: entered promiscuous mode [ 171.336081][ T8640] veth0_macvtap: entered promiscuous mode [ 171.346667][ T8983] netlink: 'syz.4.782': attribute type 10 has an invalid length. [ 171.371618][ T8983] netlink: 40 bytes leftover after parsing attributes in process `syz.4.782'. [ 171.393011][ T8640] veth1_macvtap: entered promiscuous mode [ 171.423023][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.443076][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.471051][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.494590][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.507647][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.523345][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.537388][ T8640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.592866][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.634480][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.653681][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.670761][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.682574][ T8640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.693651][ T8640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.708789][ T8640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.727955][ T8983] lo speed is unknown, defaulting to 1000 [ 171.747810][ T8991] ip6tnl2: entered promiscuous mode [ 171.753069][ T8991] ip6tnl2: entered allmulticast mode [ 171.785618][ T8640] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.803641][ T8640] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.812484][ T8640] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.828041][ T8640] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.143333][ T9001] netlink: 'syz.1.790': attribute type 10 has an invalid length. [ 172.152670][ T9001] netlink: 40 bytes leftover after parsing attributes in process `syz.1.790'. [ 172.172963][ T3556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.209649][ T3556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.301818][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.322943][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.405660][ T9014] IPVS: set_ctl: invalid protocol: 1 172.30.1.4:21 [ 172.711038][ T9026] lo speed is unknown, defaulting to 1000 [ 173.057778][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.801'. [ 173.083393][ T9036] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 173.197126][ T10] IPVS: starting estimator thread 0... [ 173.304013][ T9041] IPVS: using max 37 ests per chain, 88800 per kthread [ 174.067001][ T9050] netlink: 16 bytes leftover after parsing attributes in process `syz.3.805'. [ 174.082117][ T9049] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 174.373051][ T9061] netlink: 'syz.3.810': attribute type 10 has an invalid length. [ 174.383375][ T9061] netlink: 40 bytes leftover after parsing attributes in process `syz.3.810'. [ 174.448841][ T9061] lo speed is unknown, defaulting to 1000 [ 174.505391][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.516167][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.529458][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.538112][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.549693][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.692675][ T9067] lo speed is unknown, defaulting to 1000 [ 174.992718][ T9067] chnl_net:caif_netlink_parms(): no params data found [ 175.276455][ T9087] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 175.287130][ T9092] netlink: 40 bytes leftover after parsing attributes in process `syz.1.817'. [ 175.515635][ T9067] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.523850][ T9067] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.531204][ T9067] bridge_slave_0: entered allmulticast mode [ 175.548192][ T9067] bridge_slave_0: entered promiscuous mode [ 175.563737][ T9067] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.581179][ T9067] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.604066][ T9067] bridge_slave_1: entered allmulticast mode [ 175.620607][ T9067] bridge_slave_1: entered promiscuous mode [ 175.711126][ T9067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.748924][ T9067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.831957][ T9110] netlink: 'syz.2.824': attribute type 10 has an invalid length. [ 175.848029][ T9110] netlink: 40 bytes leftover after parsing attributes in process `syz.2.824'. [ 175.908884][ T9067] team0: Port device team_slave_0 added [ 175.929662][ T9067] team0: Port device team_slave_1 added [ 175.968427][ T9112] netlink: 20 bytes leftover after parsing attributes in process `syz.3.823'. [ 175.984093][ T9112] netlink: 20 bytes leftover after parsing attributes in process `syz.3.823'. [ 176.022431][ T9067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.036318][ T9067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.091574][ T9067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.147950][ T9067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.153828][ T9123] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.826'. [ 176.176001][ T9067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.198196][ T9123] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 176.238244][ T9067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.261178][ T9123] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 176.458445][ T9116] 8021q: adding VLAN 0 to HW filter on device bond4 [ 176.458811][ T9135] netlink: 'syz.4.833': attribute type 1 has an invalid length. [ 176.475806][ T9135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.833'. [ 176.538652][ T9067] hsr_slave_0: entered promiscuous mode [ 176.546640][ T9067] hsr_slave_1: entered promiscuous mode [ 176.553063][ T9067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.570698][ T9067] Cannot create hsr debugfs directory [ 176.579724][ T9137] gretap0: left allmulticast mode [ 176.586760][ T9137] gretap0: left promiscuous mode [ 176.594855][ T9137] bridge0: port 3(gretap0) entered disabled state [ 176.616036][ T9137] bridge_slave_0: left allmulticast mode [ 176.623708][ T5855] Bluetooth: hci1: command tx timeout [ 176.637575][ T9137] bridge_slave_0: left promiscuous mode [ 176.643404][ T9137] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.646855][ T9145] netlink: 104 bytes leftover after parsing attributes in process `syz.1.832'. [ 176.671837][ T9137] bridge_slave_1: left allmulticast mode [ 176.687172][ T9137] bridge_slave_1: left promiscuous mode [ 176.693127][ T9137] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.711561][ T9137] bond0: (slave bond_slave_0): Releasing backup interface [ 176.728746][ T9137] bond0: (slave bond_slave_1): Releasing backup interface [ 176.752909][ T9137] team0: Port device team_slave_0 removed [ 176.764881][ T9137] team0: Port device team_slave_1 removed [ 176.772067][ T9137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.781736][ T9137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.792848][ T9137] team0: Port device geneve0 removed [ 176.863797][ T9142] team0: Mode "lOadbalanse" not found [ 176.943297][ T9156] netlink: 'syz.3.836': attribute type 10 has an invalid length. [ 177.116381][ T9160] netlink: 'syz.3.837': attribute type 33 has an invalid length. [ 177.149974][ T9161] No such timeout policy "syz0" [ 177.400123][ T9165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.409742][ T9165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.432529][ T9165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.450642][ T9165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.460912][ T9165] geneve3: entered allmulticast mode [ 177.467174][ T9174] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 177.481110][ T9174] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 177.534405][ T9164] lo speed is unknown, defaulting to 1000 [ 177.579958][ T9169] 8021q: adding VLAN 0 to HW filter on device bond6 [ 177.721100][ T9067] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.023182][ T9067] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.099240][ T9187] netlink: 'syz.1.843': attribute type 1 has an invalid length. [ 178.201337][ T9067] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.261673][ T9187] bond0: entered promiscuous mode [ 178.277671][ T9187] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 178.329889][ T9187] bond5: (slave macvlan2): Enslaving as a backup interface with a down link [ 178.556675][ T9067] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.704614][ T5855] Bluetooth: hci1: command tx timeout [ 178.722397][ T9191] lo speed is unknown, defaulting to 1000 [ 178.907552][ T9203] netlink: 'syz.4.848': attribute type 10 has an invalid length. [ 178.915692][ T9203] __nla_validate_parse: 7 callbacks suppressed [ 178.915707][ T9203] netlink: 40 bytes leftover after parsing attributes in process `syz.4.848'. [ 178.958737][ T9067] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 178.980198][ T9067] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 179.022922][ T9067] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 179.062840][ T9067] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 179.131769][ T9209] vlan2: entered allmulticast mode [ 179.142950][ T9209] bridge0: entered allmulticast mode [ 179.369844][ T9213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.852'. [ 179.394958][ T9067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.563795][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.852'. [ 179.575872][ T9067] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.676461][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.683682][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.714598][ T3556] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.721809][ T3556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.088543][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'. [ 180.119222][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'. [ 180.149643][ T9234] netlink: 132 bytes leftover after parsing attributes in process `syz.1.859'. [ 180.212891][ T9067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.318200][ T9067] veth0_vlan: entered promiscuous mode [ 180.332896][ T9067] veth1_vlan: entered promiscuous mode [ 180.386839][ T9067] veth0_macvtap: entered promiscuous mode [ 180.401234][ T9067] veth1_macvtap: entered promiscuous mode [ 180.432290][ T9067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.464236][ T9067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.480786][ T9067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.494351][ T9067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.504908][ T9067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.515515][ T9067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.525796][ T9067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.539898][ T9067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.555696][ T9067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.588187][ T9067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.610154][ T9067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.622386][ T9067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.641009][ T9067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.651175][ T9067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.670578][ T9067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.681994][ T9067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.702885][ T9067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.724727][ T9067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.784599][ T5855] Bluetooth: hci1: command tx timeout [ 180.805198][ T9067] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.814239][ T9067] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.822967][ T9067] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.832664][ T9067] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.113700][ T3490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.133687][ T3490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.304361][ T3490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.318608][ T3490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.541987][ T9256] netlink: 32 bytes leftover after parsing attributes in process `syz.1.865'. [ 181.619855][ T9256] lo speed is unknown, defaulting to 1000 [ 181.628090][ T9256] lo speed is unknown, defaulting to 1000 [ 181.636021][ T9256] lo speed is unknown, defaulting to 1000 [ 181.659673][ T9256] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 181.704563][ T9256] lo speed is unknown, defaulting to 1000 [ 181.727164][ T9256] lo speed is unknown, defaulting to 1000 [ 181.737001][ T9256] lo speed is unknown, defaulting to 1000 [ 181.755834][ T9256] lo speed is unknown, defaulting to 1000 [ 181.781280][ T9256] lo speed is unknown, defaulting to 1000 [ 181.805905][ T9256] lo speed is unknown, defaulting to 1000 [ 181.814220][ T9256] lo speed is unknown, defaulting to 1000 [ 181.843118][ T9256] lo speed is unknown, defaulting to 1000 [ 181.855087][ T9269] netlink: 52 bytes leftover after parsing attributes in process `syz.2.870'. [ 181.864481][ T9269] netlink: 16 bytes leftover after parsing attributes in process `syz.2.870'. [ 181.893796][ T9256] lo speed is unknown, defaulting to 1000 [ 181.901540][ T9256] lo speed is unknown, defaulting to 1000 [ 181.939580][ T9256] lo speed is unknown, defaulting to 1000 [ 181.963026][ T9256] lo speed is unknown, defaulting to 1000 [ 181.998979][ T9256] lo speed is unknown, defaulting to 1000 [ 181.999562][ T9271] netlink: 32 bytes leftover after parsing attributes in process `syz.3.871'. [ 182.026180][ T9256] lo speed is unknown, defaulting to 1000 [ 182.058944][ T9275] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.068345][ T9275] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.077136][ T9275] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.085906][ T9275] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.106338][ T9275] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.116857][ T9275] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.126393][ T9275] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.136062][ T9275] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.195962][ T9256] lo speed is unknown, defaulting to 1000 [ 182.217348][ T9256] lo speed is unknown, defaulting to 1000 [ 182.259742][ T9256] lo speed is unknown, defaulting to 1000 [ 182.288670][ T9256] lo speed is unknown, defaulting to 1000 [ 182.315764][ T9256] lo speed is unknown, defaulting to 1000 [ 182.350738][ T9256] lo speed is unknown, defaulting to 1000 [ 183.371891][ T9302] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 183.766168][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 183.776352][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 183.786812][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 183.808691][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 183.819595][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 183.887662][ T9321] lo speed is unknown, defaulting to 1000 [ 183.896830][ T9321] lo speed is unknown, defaulting to 1000 [ 184.163568][ T30] audit: type=1800 audit(1744818343.199:3): pid=9333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.889" name="memory.events" dev="tmpfs" ino=1055 res=0 errno=0 [ 184.252972][ T9321] chnl_net:caif_netlink_parms(): no params data found [ 184.475511][ T9321] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.483751][ T9321] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.491085][ T9321] bridge_slave_0: entered allmulticast mode [ 184.499521][ T9321] bridge_slave_0: entered promiscuous mode [ 184.508867][ T9321] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.516145][ T9321] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.523904][ T9321] bridge_slave_1: entered allmulticast mode [ 184.531684][ T9321] bridge_slave_1: entered promiscuous mode [ 184.713145][ T9321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.740714][ T9321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.818343][ T9321] team0: Port device team_slave_0 added [ 184.826820][ T9321] team0: Port device team_slave_1 added [ 184.910145][ T9321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.928111][ T9321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.936793][ T9351] __nla_validate_parse: 6 callbacks suppressed [ 184.936810][ T9351] netlink: 28 bytes leftover after parsing attributes in process `syz.2.894'. [ 184.963038][ T9321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.988088][ T9353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.893'. [ 184.998936][ T9321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.007032][ T9321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.042968][ T9321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.279936][ T9321] hsr_slave_0: entered promiscuous mode [ 185.321327][ T9321] hsr_slave_1: entered promiscuous mode [ 185.347787][ T9321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.373580][ T9321] Cannot create hsr debugfs directory [ 185.614762][ T9366] netlink: 332 bytes leftover after parsing attributes in process `syz.1.896'. [ 185.655553][ T9361] 8021q: adding VLAN 0 to HW filter on device bond5 [ 185.793723][ T9359] lo speed is unknown, defaulting to 1000 [ 185.884171][ T9359] lo speed is unknown, defaulting to 1000 [ 185.904302][ T5853] Bluetooth: hci1: command tx timeout [ 186.142427][ T9321] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.300140][ T9321] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.418556][ T9321] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.587322][ T9401] FAULT_INJECTION: forcing a failure. [ 186.587322][ T9401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.637006][ T9401] CPU: 0 UID: 0 PID: 9401 Comm: syz.4.908 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) [ 186.637031][ T9401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 186.637042][ T9401] Call Trace: [ 186.637049][ T9401] [ 186.637057][ T9401] dump_stack_lvl+0x241/0x360 [ 186.637104][ T9401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.637126][ T9401] ? __pfx__printk+0x10/0x10 [ 186.637160][ T9401] should_fail_ex+0x424/0x570 [ 186.637188][ T9401] _copy_from_user+0x2d/0xb0 [ 186.637206][ T9401] __sys_bpf+0x1c5/0x8b0 [ 186.637226][ T9401] ? __pfx___sys_bpf+0x10/0x10 [ 186.637255][ T9401] ? ksys_write+0x275/0x2d0 [ 186.637286][ T9401] __x64_sys_bpf+0x7c/0x90 [ 186.637312][ T9401] do_syscall_64+0xf3/0x230 [ 186.637333][ T9401] ? clear_bhb_loop+0x45/0xa0 [ 186.637353][ T9401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.637370][ T9401] RIP: 0033:0x7f1a2c38e169 [ 186.637390][ T9401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.637405][ T9401] RSP: 002b:00007f1a2d1a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 186.637430][ T9401] RAX: ffffffffffffffda RBX: 00007f1a2c5b5fa0 RCX: 00007f1a2c38e169 [ 186.637443][ T9401] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000015 [ 186.637453][ T9401] RBP: 00007f1a2d1a6090 R08: 0000000000000000 R09: 0000000000000000 [ 186.637463][ T9401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.637472][ T9401] R13: 0000000000000000 R14: 00007f1a2c5b5fa0 R15: 00007ffdda9a18a8 [ 186.637499][ T9401] [ 186.638254][ T9402] netlink: 'syz.1.907': attribute type 1 has an invalid length. [ 186.706319][ T9399] can: request_module (can-proto-4) failed. [ 186.777299][ T9399] xt_recent: hitcount (33554432) is larger than allowed maximum (65535) [ 186.832431][ T9321] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.847619][ T9404] netlink: 16 bytes leftover after parsing attributes in process `syz.2.909'. [ 186.881822][ T9404] veth0: entered promiscuous mode [ 186.890883][ T9404] veth0: left promiscuous mode [ 186.988698][ T9402] 8021q: adding VLAN 0 to HW filter on device bond6 [ 187.099676][ T9407] netlink: 'syz.4.910': attribute type 8 has an invalid length. [ 187.154823][ T9407] netlink: 60 bytes leftover after parsing attributes in process `syz.4.910'. [ 187.283334][ T9321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 187.352723][ T9321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 187.424150][ T9321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 187.483392][ T9434] netlink: 'syz.2.917': attribute type 1 has an invalid length. [ 187.606782][ T9321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 187.698131][ T9441] Â: renamed from pim6reg1 [ 187.821574][ T9448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.920'. [ 187.984932][ T5853] Bluetooth: hci1: command tx timeout [ 188.140074][ T9459] netlink: 'syz.2.925': attribute type 1 has an invalid length. [ 188.218152][ T9459] 8021q: adding VLAN 0 to HW filter on device bond6 [ 188.233283][ T9461] xt_recent: hitcount (33554432) is larger than allowed maximum (65535) [ 188.282705][ T9321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.297253][ T9455] can: request_module (can-proto-4) failed. [ 188.380958][ T9321] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.446541][ T3490] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.453815][ T3490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.476655][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.483911][ T3490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.645877][ T9478] netlink: 'syz.3.932': attribute type 17 has an invalid length. [ 188.686684][ T9480] netlink: 'syz.3.932': attribute type 17 has an invalid length. [ 188.898484][ T9491] lo: entered promiscuous mode [ 188.905917][ T9491] tunl0: entered promiscuous mode [ 188.911268][ T9491] gre0: entered promiscuous mode [ 188.935109][ T9491] gretap0: entered promiscuous mode [ 188.954494][ T9491] erspan0: entered promiscuous mode [ 188.984748][ T9491] ip_vti0: entered promiscuous mode [ 189.001489][ T9491] ip6_vti0: entered promiscuous mode [ 189.019614][ T9491] sit0: entered promiscuous mode [ 189.033104][ T9491] ip6tnl0: entered promiscuous mode [ 189.058412][ T9491] ip6gre0: entered promiscuous mode [ 189.070091][ T9499] FAULT_INJECTION: forcing a failure. [ 189.070091][ T9499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.070637][ T9491] syz_tun: entered promiscuous mode [ 189.100641][ T9491] ip6gretap0: entered promiscuous mode [ 189.108990][ T9491] bridge0: entered promiscuous mode [ 189.121948][ T9491] nlmon0: entered promiscuous mode [ 189.130397][ T9491] caif0: entered promiscuous mode [ 189.143792][ T9499] CPU: 0 UID: 0 PID: 9499 Comm: syz.3.939 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) [ 189.143818][ T9499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 189.143827][ T9499] Call Trace: [ 189.143832][ T9499] [ 189.143838][ T9499] dump_stack_lvl+0x241/0x360 [ 189.143864][ T9499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.143881][ T9499] ? __pfx__printk+0x10/0x10 [ 189.143909][ T9499] should_fail_ex+0x424/0x570 [ 189.143930][ T9499] _copy_from_user+0x2d/0xb0 [ 189.143944][ T9499] kstrtouint_from_user+0xce/0x1a0 [ 189.143964][ T9499] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 189.143985][ T9499] ? __lock_acquire+0xad5/0xd80 [ 189.144008][ T9499] proc_fail_nth_write+0xac/0x2d0 [ 189.144022][ T9499] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 189.144039][ T9499] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 189.144056][ T9499] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 189.144071][ T9499] vfs_write+0x2bc/0xd10 [ 189.144090][ T9499] ? fdget_pos+0x247/0x310 [ 189.144113][ T9499] ? __pfx_vfs_write+0x10/0x10 [ 189.144129][ T9499] ? __fget_files+0x2a/0x420 [ 189.144149][ T9499] ? __fget_files+0x39d/0x420 [ 189.144165][ T9499] ? __fget_files+0x2a/0x420 [ 189.144190][ T9499] ksys_write+0x19d/0x2d0 [ 189.144206][ T9499] ? __pfx_ksys_write+0x10/0x10 [ 189.144225][ T9499] ? do_syscall_64+0xb6/0x230 [ 189.144242][ T9499] do_syscall_64+0xf3/0x230 [ 189.144256][ T9499] ? clear_bhb_loop+0x45/0xa0 [ 189.144272][ T9499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.144284][ T9499] RIP: 0033:0x7ff33b38cc1f [ 189.144296][ T9499] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 189.144307][ T9499] RSP: 002b:00007ff33c1cd030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 189.144322][ T9499] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff33b38cc1f [ 189.144331][ T9499] RDX: 0000000000000001 RSI: 00007ff33c1cd0a0 RDI: 0000000000000004 [ 189.144339][ T9499] RBP: 00007ff33c1cd090 R08: 0000000000000000 R09: 0000000000000000 [ 189.144346][ T9499] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 189.144354][ T9499] R13: 0000000000000000 R14: 00007ff33b5b5fa0 R15: 00007fff71248ba8 [ 189.144376][ T9499] [ 189.369631][ T9491] batadv0: entered promiscuous mode [ 189.375303][ T9491] vxcan0: entered promiscuous mode [ 189.380584][ T9491] vxcan1: entered promiscuous mode [ 189.387163][ T9491] veth0: entered promiscuous mode [ 189.392574][ T9491] wg0: entered promiscuous mode [ 189.401044][ T9491] wg1: entered promiscuous mode [ 189.414145][ T9491] wg2: entered promiscuous mode [ 189.433020][ T9491] veth0_to_bridge: entered promiscuous mode [ 189.477549][ T9491] bridge_slave_0: entered promiscuous mode [ 189.495034][ T9491] veth1_to_bridge: entered promiscuous mode [ 189.511725][ T9491] bridge_slave_1: entered promiscuous mode [ 189.522207][ T9491] veth0_to_bond: entered promiscuous mode [ 189.529288][ T9491] bond_slave_0: entered promiscuous mode [ 189.536079][ T9491] veth1_to_bond: entered promiscuous mode [ 189.542283][ T9491] bond_slave_1: entered promiscuous mode [ 189.549510][ T9491] veth0_to_team: entered promiscuous mode [ 189.555948][ T9491] team_slave_0: entered promiscuous mode [ 189.561997][ T9491] veth1_to_team: entered promiscuous mode [ 189.568521][ T9491] team_slave_1: entered promiscuous mode [ 189.575006][ T9491] veth0_to_batadv: entered promiscuous mode [ 189.581168][ T9491] batadv_slave_0: entered promiscuous mode [ 189.594080][ T9491] veth1_to_batadv: entered promiscuous mode [ 189.602513][ T9491] batadv_slave_1: entered promiscuous mode [ 189.609339][ T9491] xfrm0: entered promiscuous mode [ 189.615514][ T9491] veth1_to_hsr: entered promiscuous mode [ 189.624467][ T9491] hsr0: entered promiscuous mode [ 189.629789][ T9491] veth1_virt_wifi: entered promiscuous mode [ 189.636523][ T9491] veth0_virt_wifi: entered promiscuous mode [ 189.642799][ T9491] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 189.651837][ T9491] vlan0: entered promiscuous mode [ 189.657665][ T9491] vlan1: entered promiscuous mode [ 189.663204][ T9491] macvlan0: entered promiscuous mode [ 189.669575][ T9491] macvlan1: entered promiscuous mode [ 189.675621][ T9491] ipvlan0: entered promiscuous mode [ 189.681194][ T9491] ipvlan1: entered promiscuous mode [ 189.687520][ T9491] macvtap0: entered promiscuous mode [ 189.693144][ T9491] macsec0: entered promiscuous mode [ 189.699464][ T9511] netlink: 'syz.4.941': attribute type 1 has an invalid length. [ 189.713905][ T9491] geneve0: entered promiscuous mode [ 189.726122][ T9491] geneve1: entered promiscuous mode [ 189.737226][ T9513] netlink: 16 bytes leftover after parsing attributes in process `syz.3.942'. [ 189.743618][ T9509] can: request_module (can-proto-4) failed. [ 189.748826][ T9491] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 189.772545][ T9491] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 189.780369][ T9491] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 189.793172][ T9509] xt_recent: hitcount (33554432) is larger than allowed maximum (65535) [ 189.801143][ T9491] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 189.812836][ T9491] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 189.820741][ T9491] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 189.831917][ T9491] geneve2: entered promiscuous mode [ 189.839313][ T9491] syztnl1: entered promiscuous mode [ 189.845179][ T9491] bond1: entered promiscuous mode [ 189.850690][ T9491] ip6tnl1: entered promiscuous mode [ 189.859714][ T9491] bond2: entered promiscuous mode [ 189.865020][ T9491] bond3: entered promiscuous mode [ 189.870279][ T9491] syztnl2: entered promiscuous mode [ 189.884834][ T9491] bond4: entered promiscuous mode [ 189.916292][ T9491] ip6tnl2: left allmulticast mode [ 189.951970][ T9491] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.969694][ T9491] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.979783][ T9491] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.990151][ T9491] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.999566][ T9491] geneve3: entered promiscuous mode [ 190.005402][ T9491] geneve3: left allmulticast mode [ 190.025167][ T9491] bond5: entered promiscuous mode [ 190.030382][ T9491] macvlan2: entered promiscuous mode [ 190.043964][ T9491] ipip0: entered promiscuous mode [ 190.056329][ T9491] bond6: entered promiscuous mode [ 190.063982][ T5853] Bluetooth: hci1: command tx timeout [ 190.121633][ T9511] 8021q: adding VLAN 0 to HW filter on device bond5 [ 190.397473][ T9321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.540807][ T9532] netlink: 'syz.2.948': attribute type 1 has an invalid length. [ 190.584511][ T9321] veth0_vlan: entered promiscuous mode [ 190.600632][ T9532] netlink: 224 bytes leftover after parsing attributes in process `syz.2.948'. [ 190.632617][ T9321] veth1_vlan: entered promiscuous mode [ 190.744203][ T9321] veth0_macvtap: entered promiscuous mode [ 190.768242][ T9321] veth1_macvtap: entered promiscuous mode [ 190.860938][ T9546] netlink: 16 bytes leftover after parsing attributes in process `syz.2.953'. [ 190.873221][ T9321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.895233][ T9321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.913554][ T9321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.936185][ T9321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.957498][ T9321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.003764][ T9321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.028855][ T9321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.058751][ T9321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.083711][ T9321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.101065][ T9321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.149316][ T9321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.162064][ T9561] netlink: 40 bytes leftover after parsing attributes in process `syz.3.958'. [ 191.232878][ T9321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.247194][ T9321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.257531][ T9321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.268285][ T9321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.278238][ T9321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.289003][ T9321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.301001][ T9321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.312509][ T9321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.323831][ T9321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.334442][ T9321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.348699][ T9321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.387725][ T9321] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.402378][ T9321] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.414205][ T9321] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.422952][ T9321] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.593900][ T3490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.601784][ T3490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.657314][ T3490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.671693][ T3490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.812282][ T9580] netlink: 20 bytes leftover after parsing attributes in process `syz.1.965'. [ 192.062944][ T9587] ip6tnl1: entered promiscuous mode [ 192.098915][ T9585] netlink: 'syz.2.967': attribute type 8 has an invalid length. [ 192.103574][ T9587] ip6tnl1: entered allmulticast mode [ 192.784225][ T3455] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 192.792051][ T3455] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 192.813866][ T6834] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 193.225836][ T9608] team0: Port device geneve0 removed [ 193.275497][ T5924] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 193.485022][ T9616] xt_CT: No such helper "pptp" [ 193.500318][ T6834] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 193.629430][ T9624] netlink: 44 bytes leftover after parsing attributes in process `syz.2.982'. [ 193.638809][ T9624] netlink: 43 bytes leftover after parsing attributes in process `syz.2.982'. [ 193.647853][ T9624] netlink: 'syz.2.982': attribute type 5 has an invalid length. [ 193.667297][ T9624] netlink: 43 bytes leftover after parsing attributes in process `syz.2.982'. [ 193.673870][ T6834] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 193.758439][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 193.768033][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 193.776758][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 193.786961][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 193.794846][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 193.845855][ T9630] lo speed is unknown, defaulting to 1000 [ 193.853412][ T9630] lo speed is unknown, defaulting to 1000 [ 194.152700][ T9630] chnl_net:caif_netlink_parms(): no params data found [ 194.321367][ T9647] netlink: 'syz.1.987': attribute type 2 has an invalid length. [ 194.336550][ T9647] netlink: 92 bytes leftover after parsing attributes in process `syz.1.987'. [ 194.379979][ T9647] netlink: 164 bytes leftover after parsing attributes in process `syz.1.987'. [ 194.431923][ T9630] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.453038][ T9630] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.486609][ T9630] bridge_slave_0: entered allmulticast mode [ 194.507707][ T9630] bridge_slave_0: entered promiscuous mode [ 194.547095][ T9630] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.570642][ T9630] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.585575][ T9630] bridge_slave_1: entered allmulticast mode [ 194.596182][ T9630] bridge_slave_1: entered promiscuous mode [ 194.663758][ T976] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 194.688739][ T9652] netlink: 'syz.4.988': attribute type 1 has an invalid length. [ 194.711107][ T9630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.722718][ T9652] netlink: 24 bytes leftover after parsing attributes in process `syz.4.988'. [ 194.738191][ T9630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.747832][ T9652] nbd: couldn't find device at index 0 [ 194.886888][ T9630] team0: Port device team_slave_0 added [ 194.909090][ T9661] lo speed is unknown, defaulting to 1000 [ 194.916851][ T9630] team0: Port device team_slave_1 added [ 194.923309][ T9661] lo speed is unknown, defaulting to 1000 [ 194.963779][ T976] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 195.061637][ T9630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.068773][ T9630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.102318][ T9630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.170527][ T9630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.184299][ T9630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.266510][ T9630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.465271][ T9677] lo speed is unknown, defaulting to 1000 [ 195.572627][ T9677] lo speed is unknown, defaulting to 1000 [ 195.616109][ T6834] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 195.661862][ T9630] hsr_slave_0: entered promiscuous mode [ 195.683791][ T5844] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 195.692688][ T9630] hsr_slave_1: entered promiscuous mode [ 195.708793][ T9630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.716987][ T9630] Cannot create hsr debugfs directory [ 195.824910][ T5853] Bluetooth: hci1: command tx timeout [ 196.464190][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 196.532012][ T9630] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.712200][ T9630] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.840061][ T9630] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.932442][ T9756] __nla_validate_parse: 3 callbacks suppressed [ 196.932461][ T9756] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1019'. [ 197.032530][ T9630] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.053053][ T9761] netlink: 'syz.3.1021': attribute type 1 has an invalid length. [ 197.064898][ T9761] netlink: 600 bytes leftover after parsing attributes in process `syz.3.1021'. [ 197.288327][ T9630] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 197.324122][ T9630] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 197.346865][ T9630] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 197.359510][ T9630] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 197.555639][ T9630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.689326][ T9630] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.752059][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.759305][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.825196][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.832419][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.871370][ T9774] netlink: 'syz.2.1024': attribute type 10 has an invalid length. [ 197.892446][ T9774] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1024'. [ 197.904196][ T5855] Bluetooth: hci1: command tx timeout [ 198.415547][ T9788] netlink: 'syz.2.1029': attribute type 1 has an invalid length. [ 198.449254][ T9788] netlink: 'syz.2.1029': attribute type 4 has an invalid length. [ 198.467748][ T9793] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1031'. [ 198.476944][ T9630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.482368][ T9788] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1029'. [ 198.625333][ T9630] veth0_vlan: entered promiscuous mode [ 198.648879][ T9630] veth1_vlan: entered promiscuous mode [ 198.740802][ T9630] veth0_macvtap: entered promiscuous mode [ 198.761688][ T9630] veth1_macvtap: entered promiscuous mode [ 198.788254][ T9630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.809489][ T9804] netlink: 'syz.3.1035': attribute type 10 has an invalid length. [ 198.818807][ T9804] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1035'. [ 198.832027][ T9630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.847646][ T9630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.860162][ T9630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.872441][ T9630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.883067][ T9630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.893875][ T9630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.904373][ T9630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.914380][ T9630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.930193][ T9630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.940974][ T9630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.956177][ T9630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.967655][ T9630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.977602][ T9804] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.986995][ T9804] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.995289][ T9804] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.003762][ T9804] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.017243][ T9804] team0: Port device geneve0 added [ 199.030986][ T9806] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1036'. [ 199.102506][ T9630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.121807][ T9630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.152597][ T9630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.164288][ T9630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.174668][ T9630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.185626][ T9630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.224904][ T9630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.249075][ T9630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.271326][ T9630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.293725][ T9630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.308463][ T9630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.319124][ T9630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.336542][ T9630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.371758][ T9630] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.395450][ T9630] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.411871][ T9630] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.423303][ T9630] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.569242][ T9829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1044'. [ 199.618328][ T9834] netlink: 'syz.3.1047': attribute type 10 has an invalid length. [ 199.627238][ T9834] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1047'. [ 199.713010][ T9834] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.732763][ T9834] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.745310][ T9834] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.754132][ T9834] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.897621][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.916047][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.969164][ T9845] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1052'. [ 199.994406][ T5153] Bluetooth: hci1: command tx timeout [ 200.023246][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.063644][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.365593][ T9867] netlink: 'syz.3.1058': attribute type 1 has an invalid length. [ 200.502205][ T9875] FAULT_INJECTION: forcing a failure. [ 200.502205][ T9875] name failslab, interval 1, probability 0, space 0, times 0 [ 200.517057][ T9875] CPU: 1 UID: 0 PID: 9875 Comm: syz.4.1062 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) [ 200.517082][ T9875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 200.517092][ T9875] Call Trace: [ 200.517098][ T9875] [ 200.517105][ T9875] dump_stack_lvl+0x241/0x360 [ 200.517137][ T9875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.517160][ T9875] ? __pfx__printk+0x10/0x10 [ 200.517188][ T9875] ? __pfx___might_resched+0x10/0x10 [ 200.517215][ T9875] should_fail_ex+0x424/0x570 [ 200.517240][ T9875] should_failslab+0xac/0x100 [ 200.517267][ T9875] __kmalloc_cache_noprof+0x73/0x370 [ 200.517290][ T9875] ? nf_tables_newtable+0x551/0x1e80 [ 200.517314][ T9875] nf_tables_newtable+0x551/0x1e80 [ 200.517331][ T9875] ? __lock_acquire+0xad5/0xd80 [ 200.517360][ T9875] ? __pfx_nf_tables_newtable+0x10/0x10 [ 200.517388][ T9875] ? __nla_parse+0x40/0x60 [ 200.517415][ T9875] nfnetlink_rcv+0x12eb/0x28f0 [ 200.517435][ T9875] ? __kernel_text_address+0xd/0x40 [ 200.517498][ T9875] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 200.517536][ T9875] ? __lock_acquire+0xad5/0xd80 [ 200.517603][ T9875] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.517623][ T9875] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.517643][ T9875] netlink_unicast+0x7f8/0x9a0 [ 200.517677][ T9875] ? __pfx_netlink_unicast+0x10/0x10 [ 200.517703][ T9875] ? skb_put+0x114/0x1f0 [ 200.517729][ T9875] netlink_sendmsg+0x8c3/0xcd0 [ 200.517760][ T9875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.517782][ T9875] ? aa_sock_msg_perm+0x91/0x160 [ 200.517812][ T9875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.517827][ T9875] __sock_sendmsg+0x221/0x270 [ 200.517856][ T9875] ____sys_sendmsg+0x523/0x860 [ 200.517893][ T9875] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.517911][ T9875] ? __fget_files+0x2a/0x420 [ 200.517939][ T9875] ? __fget_files+0x2a/0x420 [ 200.517976][ T9875] __sys_sendmsg+0x271/0x360 [ 200.518003][ T9875] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.518083][ T9875] ? do_syscall_64+0xb6/0x230 [ 200.518106][ T9875] do_syscall_64+0xf3/0x230 [ 200.518124][ T9875] ? clear_bhb_loop+0x45/0xa0 [ 200.518145][ T9875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.518161][ T9875] RIP: 0033:0x7f1a2c38e169 [ 200.518176][ T9875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.518190][ T9875] RSP: 002b:00007f1a2d1a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.518208][ T9875] RAX: ffffffffffffffda RBX: 00007f1a2c5b5fa0 RCX: 00007f1a2c38e169 [ 200.518220][ T9875] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 200.518230][ T9875] RBP: 00007f1a2d1a6090 R08: 0000000000000000 R09: 0000000000000000 [ 200.518241][ T9875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.518251][ T9875] R13: 0000000000000000 R14: 00007f1a2c5b5fa0 R15: 00007ffdda9a18a8 [ 200.518280][ T9875] [ 201.583717][ T5153] Bluetooth: hci3: command 0x0406 tx timeout [ 201.589823][ T5153] Bluetooth: hci0: command 0x0406 tx timeout [ 202.189416][ T9902] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 202.231428][ T9905] atomic_op ffff88805910b198 conn xmit_atomic 0000000000000000 [ 202.567841][ T9918] dummy0: left allmulticast mode [ 202.573027][ T9918] pim6reg: left allmulticast mode [ 202.620071][ T9921] __nla_validate_parse: 10 callbacks suppressed [ 202.620090][ T9921] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1078'. [ 202.706919][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 202.722169][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 202.731638][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 202.752974][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 202.762023][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 202.801787][ T9925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1080'. [ 202.848186][ T9922] lo speed is unknown, defaulting to 1000 [ 202.881830][ T9922] lo speed is unknown, defaulting to 1000 [ 203.248802][ T9922] chnl_net:caif_netlink_parms(): no params data found [ 203.272198][ T9943] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙv' [ 203.295574][ T9943] CPU: 0 UID: 0 PID: 9943 Comm: syz.4.1085 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) [ 203.295603][ T9943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 203.295614][ T9943] Call Trace: [ 203.295622][ T9943] [ 203.295630][ T9943] dump_stack_lvl+0x241/0x360 [ 203.295663][ T9943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.295689][ T9943] ? __pfx__printk+0x10/0x10 [ 203.295712][ T9943] ? kernfs_path_from_node+0x2b/0x250 [ 203.295735][ T9943] ? kernfs_path_from_node+0x217/0x250 [ 203.295757][ T9943] sysfs_warn_dup+0x8e/0xa0 [ 203.295784][ T9943] sysfs_do_create_link_sd+0xbe/0x110 [ 203.295815][ T9943] device_add_class_symlinks+0x1c5/0x250 [ 203.295845][ T9943] device_add+0x553/0xbf0 [ 203.295876][ T9943] wiphy_register+0x193c/0x2660 [ 203.295919][ T9943] ? __pfx_wiphy_register+0x10/0x10 [ 203.295939][ T9943] ? minstrel_ht_alloc+0x85a/0x950 [ 203.295971][ T9943] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 203.296002][ T9943] ieee80211_register_hw+0x35e9/0x42d0 [ 203.296039][ T9943] ? ieee80211_register_hw+0x15c1/0x42d0 [ 203.296071][ T9943] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 203.296109][ T9943] ? __hrtimer_setup+0x17f/0x200 [ 203.296128][ T9943] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 203.296157][ T9943] mac80211_hwsim_new_radio+0x2adc/0x4a60 [ 203.296207][ T9943] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 203.296226][ T9943] ? trace_kmalloc+0x1f/0xd0 [ 203.296244][ T9943] ? __kmalloc_node_track_caller_noprof+0x2b2/0x4d0 [ 203.296266][ T9943] ? kstrndup+0xbb/0x150 [ 203.296293][ T9943] hwsim_new_radio_nl+0xed0/0x2290 [ 203.296326][ T9943] ? __pfx___nla_validate_parse+0x10/0x10 [ 203.296356][ T9943] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 203.296409][ T9943] ? genl_family_rcv_msg_attrs_parse+0x1d4/0x290 [ 203.296442][ T9943] genl_rcv_msg+0xb38/0xf00 [ 203.296476][ T9943] ? __pfx_genl_rcv_msg+0x10/0x10 [ 203.296496][ T9943] ? stack_trace_save+0x11a/0x1d0 [ 203.296523][ T9943] ? __pfx_stack_trace_save+0x10/0x10 [ 203.296558][ T9943] ? stack_depot_save_flags+0x44/0x940 [ 203.296579][ T9943] ? stack_trace_snprint+0x71/0xf0 [ 203.296618][ T9943] ? __lock_acquire+0xad5/0xd80 [ 203.296637][ T9943] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 203.296675][ T9943] netlink_rcv_skb+0x208/0x480 [ 203.296692][ T9943] ? __pfx_genl_rcv_msg+0x10/0x10 [ 203.296714][ T9943] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 203.296753][ T9943] ? netlink_deliver_tap+0x2e/0x1b0 [ 203.296776][ T9943] genl_rcv+0x28/0x40 [ 203.296795][ T9943] netlink_unicast+0x7f8/0x9a0 [ 203.296829][ T9943] ? __pfx_netlink_unicast+0x10/0x10 [ 203.296855][ T9943] ? skb_put+0x114/0x1f0 [ 203.296880][ T9943] netlink_sendmsg+0x8c3/0xcd0 [ 203.296911][ T9943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.296933][ T9943] ? aa_sock_msg_perm+0x91/0x160 [ 203.296961][ T9943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.296977][ T9943] __sock_sendmsg+0x221/0x270 [ 203.297007][ T9943] ____sys_sendmsg+0x523/0x860 [ 203.297037][ T9943] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.297054][ T9943] ? __fget_files+0x2a/0x420 [ 203.297080][ T9943] ? __fget_files+0x2a/0x420 [ 203.297116][ T9943] __sys_sendmsg+0x271/0x360 [ 203.297142][ T9943] ? __pfx___sys_sendmsg+0x10/0x10 [ 203.297224][ T9943] ? do_syscall_64+0xb6/0x230 [ 203.297247][ T9943] do_syscall_64+0xf3/0x230 [ 203.297267][ T9943] ? clear_bhb_loop+0x45/0xa0 [ 203.297286][ T9943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.297303][ T9943] RIP: 0033:0x7f1a2c38e169 [ 203.297320][ T9943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.297336][ T9943] RSP: 002b:00007f1a2d1a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.297355][ T9943] RAX: ffffffffffffffda RBX: 00007f1a2c5b5fa0 RCX: 00007f1a2c38e169 [ 203.297368][ T9943] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 203.297378][ T9943] RBP: 00007f1a2c410a68 R08: 0000000000000000 R09: 0000000000000000 [ 203.297388][ T9943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.297397][ T9943] R13: 0000000000000000 R14: 00007f1a2c5b5fa0 R15: 00007ffdda9a18a8 [ 203.297426][ T9943] [ 203.982527][ T9922] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.983842][ C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 203.983858][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 204.001827][ T9922] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.010927][ T9922] bridge_slave_0: entered allmulticast mode [ 204.020860][ T9922] bridge_slave_0: entered promiscuous mode [ 204.030228][ T9922] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.050963][ T9922] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.058549][ T9922] bridge_slave_1: entered allmulticast mode [ 204.067895][ T9922] bridge_slave_1: entered promiscuous mode [ 204.097803][ T9963] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1090'. [ 204.160730][ T9968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1092'. [ 204.221996][ T9965] lo speed is unknown, defaulting to 1000 [ 204.232386][ T9922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.281660][ T9965] lo speed is unknown, defaulting to 1000 [ 204.292673][ T9922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.489899][ T9922] team0: Port device team_slave_0 added [ 204.530589][ T9922] team0: Port device team_slave_1 added [ 204.598850][ T9986] FAULT_INJECTION: forcing a failure. [ 204.598850][ T9986] name failslab, interval 1, probability 0, space 0, times 0 [ 204.612670][ T9986] CPU: 0 UID: 0 PID: 9986 Comm: syz.2.1097 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) [ 204.612695][ T9986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 204.612706][ T9986] Call Trace: [ 204.612714][ T9986] [ 204.612721][ T9986] dump_stack_lvl+0x241/0x360 [ 204.612753][ T9986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.612777][ T9986] ? __pfx__printk+0x10/0x10 [ 204.612804][ T9986] ? __pfx___might_resched+0x10/0x10 [ 204.612829][ T9986] should_fail_ex+0x424/0x570 [ 204.612855][ T9986] should_failslab+0xac/0x100 [ 204.612880][ T9986] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 204.612904][ T9986] ? __alloc_skb+0x1c2/0x480 [ 204.612928][ T9986] __alloc_skb+0x1c2/0x480 [ 204.612953][ T9986] ? __pfx___alloc_skb+0x10/0x10 [ 204.612983][ T9986] netlink_dump+0x237/0xeb0 [ 204.613001][ T9986] ? trace_contention_end+0x3c/0x120 [ 204.613024][ T9986] ? __mutex_lock+0x380/0x10c0 [ 204.613050][ T9986] ? __pfx_netlink_dump+0x10/0x10 [ 204.613065][ T9986] ? __netlink_lookup+0x894/0x980 [ 204.613102][ T9986] ? netlink_lookup+0x31/0x200 [ 204.613127][ T9986] __netlink_dump_start+0x5a2/0x790 [ 204.613156][ T9986] rtnetlink_rcv_msg+0xbba/0xd70 [ 204.613181][ T9986] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 204.613196][ T9986] ? __lock_acquire+0xad5/0xd80 [ 204.613212][ T9986] ? __pfx_rtnl_dumpit+0x10/0x10 [ 204.613228][ T9986] ? __pfx_rtnl_fdb_dump+0x10/0x10 [ 204.613259][ T9986] netlink_rcv_skb+0x208/0x480 [ 204.613278][ T9986] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 204.613297][ T9986] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 204.613333][ T9986] ? netlink_deliver_tap+0x2e/0x1b0 [ 204.613354][ T9986] ? netlink_deliver_tap+0x2e/0x1b0 [ 204.613374][ T9986] netlink_unicast+0x7f8/0x9a0 [ 204.613408][ T9986] ? __pfx_netlink_unicast+0x10/0x10 [ 204.613435][ T9986] ? skb_put+0x114/0x1f0 [ 204.613470][ T9986] netlink_sendmsg+0x8c3/0xcd0 [ 204.613497][ T9986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.613517][ T9986] ? aa_sock_msg_perm+0x91/0x160 [ 204.613545][ T9986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.613560][ T9986] __sock_sendmsg+0x221/0x270 [ 204.613586][ T9986] ____sys_sendmsg+0x523/0x860 [ 204.613613][ T9986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.613631][ T9986] ? __fget_files+0x2a/0x420 [ 204.613660][ T9986] ? __fget_files+0x2a/0x420 [ 204.613694][ T9986] __sys_sendmsg+0x271/0x360 [ 204.613721][ T9986] ? __pfx___sys_sendmsg+0x10/0x10 [ 204.613803][ T9986] ? do_syscall_64+0xb6/0x230 [ 204.613825][ T9986] do_syscall_64+0xf3/0x230 [ 204.613844][ T9986] ? clear_bhb_loop+0x45/0xa0 [ 204.613864][ T9986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.613880][ T9986] RIP: 0033:0x7f255bb8e169 [ 204.613896][ T9986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.613910][ T9986] RSP: 002b:00007f255c94a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.613929][ T9986] RAX: ffffffffffffffda RBX: 00007f255bdb5fa0 RCX: 00007f255bb8e169 [ 204.613942][ T9986] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 204.613952][ T9986] RBP: 00007f255c94a090 R08: 0000000000000000 R09: 0000000000000000 [ 204.613963][ T9986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.613973][ T9986] R13: 0000000000000000 R14: 00007f255bdb5fa0 R15: 00007ffea86e5c48 [ 204.614003][ T9986] [ 204.997979][ T5853] Bluetooth: hci1: command tx timeout [ 205.141201][ T9922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.148242][ T9922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.177813][ T9922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.327486][ T9922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.344777][ T9922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.374366][ T9922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.605224][ T9995] netlink: 'syz.1.1100': attribute type 1 has an invalid length. [ 205.769266][T10001] FAULT_INJECTION: forcing a failure. [ 205.769266][T10001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.783939][T10001] CPU: 0 UID: 0 PID: 10001 Comm: syz.4.1103 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) [ 205.783964][T10001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 205.783974][T10001] Call Trace: [ 205.783982][T10001] [ 205.783989][T10001] dump_stack_lvl+0x241/0x360 [ 205.784017][T10001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.784038][T10001] ? __pfx__printk+0x10/0x10 [ 205.784071][T10001] should_fail_ex+0x424/0x570 [ 205.784106][T10001] _copy_to_user+0x31/0xb0 [ 205.784126][T10001] simple_read_from_buffer+0xc4/0x170 [ 205.784153][T10001] proc_fail_nth_read+0x1ef/0x260 [ 205.784172][T10001] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.784192][T10001] ? rw_verify_area+0x246/0x630 [ 205.784209][T10001] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.784228][T10001] vfs_read+0x21f/0xb90 [ 205.784251][T10001] ? __pfx___mutex_lock+0x10/0x10 [ 205.784272][T10001] ? __pfx_vfs_read+0x10/0x10 [ 205.784293][T10001] ? __fget_files+0x2a/0x420 [ 205.784319][T10001] ? __fget_files+0x39d/0x420 [ 205.784340][T10001] ? __fget_files+0x2a/0x420 [ 205.784372][T10001] ksys_read+0x19d/0x2d0 [ 205.784393][T10001] ? __pfx_ksys_read+0x10/0x10 [ 205.784418][T10001] ? do_syscall_64+0xb6/0x230 [ 205.784439][T10001] do_syscall_64+0xf3/0x230 [ 205.784457][T10001] ? clear_bhb_loop+0x45/0xa0 [ 205.784477][T10001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.784493][T10001] RIP: 0033:0x7f1a2c38cb7c [ 205.784509][T10001] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 205.784522][T10001] RSP: 002b:00007f1a2d1a6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 205.784541][T10001] RAX: ffffffffffffffda RBX: 00007f1a2c5b5fa0 RCX: 00007f1a2c38cb7c [ 205.784553][T10001] RDX: 000000000000000f RSI: 00007f1a2d1a60a0 RDI: 0000000000000003 [ 205.784563][T10001] RBP: 00007f1a2d1a6090 R08: 0000000000000000 R09: 0000000000000000 [ 205.784573][T10001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.784582][T10001] R13: 0000000000000000 R14: 00007f1a2c5b5fa0 R15: 00007ffdda9a18a8 [ 205.784610][T10001] [ 205.798931][ T9922] hsr_slave_0: entered promiscuous mode [ 206.019600][T10009] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1105'. [ 206.094792][ T9922] hsr_slave_1: entered promiscuous mode [ 206.111633][ T9922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.131155][ T9922] Cannot create hsr debugfs directory [ 206.136318][T10013] netlink: 'syz.3.1106': attribute type 1 has an invalid length. [ 206.153702][T10013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1106'. [ 206.181725][T10014] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1107'. [ 206.231293][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1105'. [ 206.630035][ T9922] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.666241][T10025] wg1: entered allmulticast mode [ 206.786571][ T9922] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.901026][ T9922] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.983181][T10039] netlink: 'syz.3.1116': attribute type 1 has an invalid length. [ 207.029847][ T5853] Bluetooth: hci1: command tx timeout [ 207.051417][T10039] netlink: 600 bytes leftover after parsing attributes in process `syz.3.1116'. [ 207.107736][ T9922] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.279921][T10054] netlink: 'syz.3.1120': attribute type 1 has an invalid length. [ 207.425652][T10057] bond0: entered promiscuous mode [ 207.460654][T10057] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 207.471497][T10057] bond7: (slave macvlan2): Enslaving as a backup interface with a down link [ 207.714507][ T9922] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 207.735485][T10077] netlink: 'syz.1.1125': attribute type 1 has an invalid length. [ 207.743267][T10077] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1125'. [ 207.757652][ T9922] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 207.771486][ T9922] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 207.800054][ T9922] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 207.995901][T10083] x_tables: duplicate underflow at hook 1 [ 208.073982][ T9922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.118843][ T9922] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.160713][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.167937][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.207418][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.214661][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.572225][T10093] netlink: 'syz.2.1130': attribute type 1 has an invalid length. [ 208.613635][T10093] netlink: 600 bytes leftover after parsing attributes in process `syz.2.1130'. [ 208.639954][T10095] netem: incorrect ge model size [ 208.660935][T10095] netem: change failed [ 208.898173][ T9922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.027165][ T9922] veth0_vlan: entered promiscuous mode [ 209.094909][ T9922] veth1_vlan: entered promiscuous mode [ 209.106899][ T5855] Bluetooth: hci1: command tx timeout [ 209.235840][ T9922] veth0_macvtap: entered promiscuous mode [ 209.247958][ T9922] veth1_macvtap: entered promiscuous mode [ 209.320654][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.343265][T10128] netlink: 'syz.4.1141': attribute type 1 has an invalid length. [ 209.353064][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.366497][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.377298][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.387454][T10128] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1141'. [ 209.397439][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.410281][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.421237][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.432466][T10132] netlink: 'syz.3.1143': attribute type 1 has an invalid length. [ 209.437460][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.449462][T10132] netlink: 600 bytes leftover after parsing attributes in process `syz.3.1143'. [ 209.450299][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.472627][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.482811][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.494590][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.505549][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.516237][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.528048][ T9922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.590411][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.603184][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.613300][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.634297][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.644906][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.655953][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.666676][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.683396][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.695889][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.707112][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.717327][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.727873][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.737759][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.750442][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.805726][ T9922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.869720][ T9922] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.891077][ T9922] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.907226][ T9922] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.935394][ T9922] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.039491][T10145] team0: No ports can be present during mode change [ 210.222351][T10150] netlink: 'syz.1.1149': attribute type 1 has an invalid length. [ 210.338804][T10152] FAULT_INJECTION: forcing a failure. [ 210.338804][T10152] name failslab, interval 1, probability 0, space 0, times 0 [ 210.358985][T10152] CPU: 0 UID: 0 PID: 10152 Comm: syz.1.1149 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) [ 210.359032][T10152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 210.359054][T10152] Call Trace: [ 210.359063][T10152] [ 210.359070][T10152] dump_stack_lvl+0x241/0x360 [ 210.359101][T10152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.359124][T10152] ? __pfx__printk+0x10/0x10 [ 210.359151][T10152] ? __pfx___might_resched+0x10/0x10 [ 210.359176][T10152] should_fail_ex+0x424/0x570 [ 210.359203][T10152] should_failslab+0xac/0x100 [ 210.359228][T10152] __kvmalloc_node_noprof+0x170/0x5a0 [ 210.359251][T10152] ? alloc_netdev_mqs+0xac6/0x1210 [ 210.359283][T10152] alloc_netdev_mqs+0xac6/0x1210 [ 210.359314][T10152] rtnl_create_link+0x2f2/0xea0 [ 210.359348][T10152] rtnl_newlink_create+0x2f2/0xc30 [ 210.359368][T10152] ? __mutex_lock+0xbe3/0x10c0 [ 210.359394][T10152] ? __mutex_lock+0x5f3/0x10c0 [ 210.359412][T10152] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 210.359435][T10152] ? __pfx___mutex_lock+0x10/0x10 [ 210.359464][T10152] ? ns_capable+0x8a/0xf0 [ 210.359486][T10152] rtnl_newlink+0x18b0/0x1fe0 [ 210.359524][T10152] ? __pfx_rtnl_newlink+0x10/0x10 [ 210.359539][T10152] ? unwind_get_return_address+0x4d/0x90 [ 210.359562][T10152] ? arch_stack_walk+0xff/0x150 [ 210.359588][T10152] ? __lock_acquire+0xad5/0xd80 [ 210.359612][T10152] ? __lock_acquire+0xad5/0xd80 [ 210.359633][T10152] ? __lock_acquire+0xad5/0xd80 [ 210.359670][T10152] ? is_bpf_text_address+0x26/0x2a0 [ 210.359691][T10152] ? 0xffffffffa0000954 [ 210.359713][T10152] ? is_bpf_text_address+0x288/0x2a0 [ 210.359730][T10152] ? is_bpf_text_address+0x26/0x2a0 [ 210.359749][T10152] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 210.359773][T10152] ? kernel_text_address+0xa7/0xe0 [ 210.359799][T10152] ? __kernel_text_address+0xd/0x40 [ 210.359828][T10152] ? aa_get_newest_label+0x101/0x6f0 [ 210.359857][T10152] ? __lock_acquire+0xad5/0xd80 [ 210.359899][T10152] ? __pfx_rtnl_newlink+0x10/0x10 [ 210.359915][T10152] rtnetlink_rcv_msg+0x80f/0xd70 [ 210.359929][T10152] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 210.359949][T10152] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 210.359962][T10152] ? __lock_acquire+0xad5/0xd80 [ 210.359992][T10152] netlink_rcv_skb+0x208/0x480 [ 210.360011][T10152] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 210.360030][T10152] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 210.360064][T10152] ? netlink_deliver_tap+0x2e/0x1b0 [ 210.360081][T10152] ? netlink_deliver_tap+0x2e/0x1b0 [ 210.360098][T10152] netlink_unicast+0x7f8/0x9a0 [ 210.360129][T10152] ? __pfx_netlink_unicast+0x10/0x10 [ 210.360155][T10152] ? skb_put+0x114/0x1f0 [ 210.360178][T10152] netlink_sendmsg+0x8c3/0xcd0 [ 210.360208][T10152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.360230][T10152] ? aa_sock_msg_perm+0x91/0x160 [ 210.360257][T10152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.360272][T10152] __sock_sendmsg+0x221/0x270 [ 210.360300][T10152] ____sys_sendmsg+0x523/0x860 [ 210.360330][T10152] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.360349][T10152] ? __fget_files+0x2a/0x420 [ 210.360377][T10152] ? __fget_files+0x2a/0x420 [ 210.360411][T10152] __sys_sendmsg+0x271/0x360 [ 210.360438][T10152] ? __pfx___sys_sendmsg+0x10/0x10 [ 210.360517][T10152] ? do_syscall_64+0xb6/0x230 [ 210.360540][T10152] do_syscall_64+0xf3/0x230 [ 210.360559][T10152] ? clear_bhb_loop+0x45/0xa0 [ 210.360579][T10152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.360595][T10152] RIP: 0033:0x7f7ac358e169 [ 210.360610][T10152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.360623][T10152] RSP: 002b:00007f7ac4460038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.360642][T10152] RAX: ffffffffffffffda RBX: 00007f7ac37b6080 RCX: 00007f7ac358e169 [ 210.360654][T10152] RDX: 0000000000004000 RSI: 0000200000000240 RDI: 0000000000000005 [ 210.360665][T10152] RBP: 00007f7ac4460090 R08: 0000000000000000 R09: 0000000000000000 [ 210.360676][T10152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.360686][T10152] R13: 0000000000000000 R14: 00007f7ac37b6080 R15: 00007ffc93901b68 [ 210.360747][T10152] [ 210.361557][T10151] team0: No ports can be present during mode change [ 210.802641][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.843701][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.925593][T10166] netlink: 'syz.2.1154': attribute type 1 has an invalid length. [ 210.970687][T10170] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1155'. [ 210.975176][T10166] netlink: 600 bytes leftover after parsing attributes in process `syz.2.1154'. [ 211.037134][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.062195][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.192862][ T5855] Bluetooth: hci1: command tx timeout [ 211.260303][T10176] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1158'. [ 211.443101][T10181] lo speed is unknown, defaulting to 1000 [ 211.469337][T10181] lo speed is unknown, defaulting to 1000 [ 211.684845][T10186] team0: No ports can be present during mode change [ 211.896175][T10195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1164'. [ 211.933849][T10195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1164'. [ 211.966345][T10195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.115889][T10199] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 213.257234][T10207] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1170'. [ 213.269673][T10208] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1167'. [ 213.303721][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1170'. [ 213.333192][T10211] netlink: 'syz.2.1168': attribute type 1 has an invalid length. [ 213.402675][T10211] netlink: 600 bytes leftover after parsing attributes in process `syz.2.1168'. [ 213.885071][T10239] netlink: 'syz.3.1179': attribute type 32 has an invalid length. [ 213.977296][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.993839][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.006118][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.026958][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.038241][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.047497][T10248] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1182'. [ 214.080945][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1182'. [ 214.087092][T10250] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1181'. [ 214.173968][T10242] lo speed is unknown, defaulting to 1000 [ 214.200252][T10242] lo speed is unknown, defaulting to 1000 [ 214.286442][T10255] netlink: 'syz.1.1184': attribute type 1 has an invalid length. [ 214.316731][T10255] netlink: 600 bytes leftover after parsing attributes in process `syz.1.1184'. [ 214.638100][T10271] team0: No ports can be present during mode change [ 214.646200][T10276] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1193'. [ 214.659290][T10278] FAULT_INJECTION: forcing a failure. [ 214.659290][T10278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.707465][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1193'. [ 214.752249][T10278] CPU: 0 UID: 0 PID: 10278 Comm: syz.2.1192 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) [ 214.752276][T10278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 214.752287][T10278] Call Trace: [ 214.752294][T10278] [ 214.752309][T10278] dump_stack_lvl+0x241/0x360 [ 214.752342][T10278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.752365][T10278] ? __pfx__printk+0x10/0x10 [ 214.752401][T10278] should_fail_ex+0x424/0x570 [ 214.752429][T10278] _copy_from_user+0x2d/0xb0 [ 214.752447][T10278] copy_msghdr_from_user+0xb3/0x580 [ 214.752480][T10278] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 214.752526][T10278] do_recvmmsg+0x3bf/0xab0 [ 214.752559][T10278] ? __pfx_do_recvmmsg+0x10/0x10 [ 214.752598][T10278] ? rcu_read_lock_any_held+0xbb/0x160 [ 214.752619][T10278] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 214.752643][T10278] ? vfs_write+0xb29/0xd10 [ 214.752673][T10278] ? ksys_write+0x24e/0x2d0 [ 214.752694][T10278] ? __mutex_unlock_slowpath+0x229/0x800 [ 214.752724][T10278] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 214.752740][T10278] ? __fget_files+0x2a/0x420 [ 214.752781][T10278] __x64_sys_recvmmsg+0x1ab/0x260 [ 214.752806][T10278] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 214.752834][T10278] ? do_syscall_64+0xb6/0x230 [ 214.752855][T10278] do_syscall_64+0xf3/0x230 [ 214.752873][T10278] ? clear_bhb_loop+0x45/0xa0 [ 214.752894][T10278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.752910][T10278] RIP: 0033:0x7f255bb8e169 [ 214.752924][T10278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.752938][T10278] RSP: 002b:00007f255c929038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 214.752957][T10278] RAX: ffffffffffffffda RBX: 00007f255bdb6080 RCX: 00007f255bb8e169 [ 214.752969][T10278] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 214.752980][T10278] RBP: 00007f255c929090 R08: 0000000000000000 R09: 0000000000000000 [ 214.752990][T10278] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 214.753000][T10278] R13: 0000000000000001 R14: 00007f255bdb6080 R15: 00007ffea86e5c48 [ 214.753029][T10278] [ 214.759334][T10242] chnl_net:caif_netlink_parms(): no params data found [ 215.162123][T10242] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.170082][T10242] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.177802][T10242] bridge_slave_0: entered allmulticast mode [ 215.186453][T10242] bridge_slave_0: entered promiscuous mode [ 215.195083][T10242] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.208387][T10242] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.215885][T10242] bridge_slave_1: entered allmulticast mode [ 215.224239][T10242] bridge_slave_1: entered promiscuous mode [ 215.279401][T10242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.294256][T10242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.326990][T10295] netlink: 'syz.3.1199': attribute type 1 has an invalid length. [ 215.381836][T10242] team0: Port device team_slave_0 added [ 215.401717][T10242] team0: Port device team_slave_1 added [ 215.571659][T10242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.599964][T10242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.661330][T10242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.686074][T10308] team0: No ports can be present during mode change [ 215.693823][T10309] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 215.726430][T10242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.733428][T10242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.776472][T10242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.936890][T10242] hsr_slave_0: entered promiscuous mode [ 215.959698][T10242] hsr_slave_1: entered promiscuous mode [ 215.976566][T10242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.995873][T10242] Cannot create hsr debugfs directory [ 216.063680][ T5855] Bluetooth: hci1: command tx timeout [ 216.331252][T10329] sctp: [Deprecated]: syz.4.1211 (pid 10329) Use of struct sctp_assoc_value in delayed_ack socket option. [ 216.331252][T10329] Use struct sctp_sack_info instead [ 216.351924][T10328] sctp: [Deprecated]: syz.4.1211 (pid 10328) Use of struct sctp_assoc_value in delayed_ack socket option. [ 216.351924][T10328] Use struct sctp_sack_info instead [ 216.554860][T10242] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.605587][T10336] sctp: [Deprecated]: syz.4.1215 (pid 10336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 216.605587][T10336] Use struct sctp_sack_info instead [ 216.704834][T10242] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.720468][T10336] sctp: [Deprecated]: syz.4.1215 (pid 10336) Use of int in max_burst socket option deprecated. [ 216.720468][T10336] Use struct sctp_assoc_value instead [ 216.843898][T10341] team0: No ports can be present during mode change [ 216.938209][T10242] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.164759][T10354] netlink: 'syz.1.1220': attribute type 10 has an invalid length. [ 217.186045][T10242] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.207105][T10354] geneve0: left promiscuous mode [ 217.212264][T10354] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 217.337062][T10354] lo speed is unknown, defaulting to 1000 [ 217.375915][T10354] lo speed is unknown, defaulting to 1000 [ 217.809271][T10242] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 217.930996][T10242] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 217.975125][T10242] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 218.001499][T10242] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 218.058474][ T5855] Bluetooth: hci4: link tx timeout [ 218.066760][ T5855] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 218.146271][ T5853] Bluetooth: hci1: command tx timeout [ 218.163267][T10387] team0: No ports can be present during mode change [ 218.381227][T10242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.419611][T10242] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.493688][ T3490] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.500926][ T3490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.563197][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.570429][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.645826][T10381] [ 218.648189][T10381] ============================================ [ 218.654335][T10381] WARNING: possible recursive locking detected [ 218.660488][T10381] 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 Not tainted [ 218.667590][T10381] -------------------------------------------- [ 218.673730][T10381] syz.2.1224/10381 is trying to acquire lock: [ 218.679845][T10381] ffffc900053090d8 (&rb->spinlock){..-.}-{2:2}, at: __bpf_ringbuf_reserve+0x20e/0x650 [ 218.689425][T10381] [ 218.689425][T10381] but task is already holding lock: [ 218.696777][T10381] ffffc9000481d0d8 (&rb->spinlock){..-.}-{2:2}, at: __bpf_ringbuf_reserve+0x20e/0x650 [ 218.703775][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 218.706358][T10381] [ 218.706358][T10381] other info that might help us debug this: [ 218.706367][T10381] Possible unsafe locking scenario: [ 218.706367][T10381] [ 218.729332][T10381] CPU0 [ 218.732606][T10381] ---- [ 218.735871][T10381] lock(&rb->spinlock); [ 218.740125][T10381] lock(&rb->spinlock); [ 218.744412][T10381] [ 218.744412][T10381] *** DEADLOCK *** [ 218.744412][T10381] [ 218.752553][T10381] May be due to missing lock nesting notation [ 218.752553][T10381] [ 218.760888][T10381] 4 locks held by syz.2.1224/10381: [ 218.766079][T10381] #0: ffff8880769f33e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xda/0x310 [ 218.774874][T10381] #1: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run3+0x24e/0x5b0 [ 218.784429][T10381] #2: ffffc9000481d0d8 (&rb->spinlock){..-.}-{2:2}, at: __bpf_ringbuf_reserve+0x20e/0x650 [ 218.794442][T10381] #3: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1fe/0x550 [ 218.803857][T10381] [ 218.803857][T10381] stack backtrace: [ 218.809749][T10381] CPU: 0 UID: 0 PID: 10381 Comm: syz.2.1224 Not tainted 6.15.0-rc1-syzkaller-00374-gac1df712442c #0 PREEMPT(full) [ 218.809769][T10381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 218.809778][T10381] Call Trace: [ 218.809785][T10381] [ 218.809793][T10381] dump_stack_lvl+0x241/0x360 [ 218.809815][T10381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.809832][T10381] ? __pfx__printk+0x10/0x10 [ 218.809849][T10381] ? print_lock+0x171/0x1a0 [ 218.809865][T10381] print_deadlock_bug+0x2be/0x2d0 [ 218.809881][T10381] validate_chain+0x928/0x24e0 [ 218.809901][T10381] ? __pfx___cant_sleep+0x10/0x10 [ 218.809918][T10381] __lock_acquire+0xad5/0xd80 [ 218.809934][T10381] lock_acquire+0x116/0x2f0 [ 218.809945][T10381] ? __bpf_ringbuf_reserve+0x20e/0x650 [ 218.809965][T10381] _raw_spin_lock_irqsave+0xd8/0x130 [ 218.809985][T10381] ? __bpf_ringbuf_reserve+0x20e/0x650 [ 218.809999][T10381] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 218.810017][T10381] ? __bpf_trace_contention_begin+0x172/0x230 [ 218.810033][T10381] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 218.810050][T10381] __bpf_ringbuf_reserve+0x20e/0x650 [ 218.810069][T10381] ? __pfx___bpf_ringbuf_reserve+0x10/0x10 [ 218.810085][T10381] ? __pfx___cant_migrate+0x10/0x10 [ 218.810102][T10381] bpf_ringbuf_reserve+0x5c/0x70 [ 218.810116][T10381] ? bpf_trace_run2+0x1fe/0x550 [ 218.810134][T10381] bpf_prog_fe0ed97373b08409+0x2e/0x4b [ 218.810145][T10381] ? bpf_trace_run2+0x1fe/0x550 [ 218.810162][T10381] bpf_trace_run2+0x2ee/0x550 [ 218.810189][T10381] ? __pfx_bpf_trace_run2+0x10/0x10 [ 218.810206][T10381] ? try_grab_folio_fast+0x1d6/0x500 [ 218.810227][T10381] ? __bpf_trace_contention_begin+0x151/0x230 [ 218.810245][T10381] __bpf_trace_contention_begin+0x172/0x230 [ 218.810261][T10381] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 218.810282][T10381] trace_contention_begin+0x11b/0x140 [ 218.810299][T10381] __pv_queued_spin_lock_slowpath+0x116/0xdc0 [ 218.810315][T10381] ? __pfx_gup_fast_fallback+0x10/0x10 [ 218.810334][T10381] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 218.810348][T10381] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 218.810367][T10381] ? cgroup_rstat_updated+0x144/0xc40 [ 218.810385][T10381] queued_spin_lock_slowpath+0x42/0x50 [ 218.810404][T10381] do_raw_spin_lock+0x276/0x370 [ 218.810424][T10381] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 218.810443][T10381] _raw_spin_lock_irqsave+0xe4/0x130 [ 218.810461][T10381] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 218.810483][T10381] __bpf_ringbuf_reserve+0x20e/0x650 [ 218.810502][T10381] ? __pfx___bpf_ringbuf_reserve+0x10/0x10 [ 218.810518][T10381] ? __pfx___cant_migrate+0x10/0x10 [ 218.810534][T10381] bpf_ringbuf_output+0x67/0x1e0 [ 218.810548][T10381] ? bpf_trace_run3+0x24e/0x5b0 [ 218.810566][T10381] bpf_prog_a3e2825f60354855+0x46/0x4a [ 218.810576][T10381] bpf_trace_run3+0x33c/0x5b0 [ 218.810596][T10381] ? __pfx_bpf_trace_run3+0x10/0x10 [ 218.810615][T10381] ? do_futex+0x3d5/0x5a0 [ 218.810631][T10381] ? __bpf_trace_mmap_lock_acquire_returned+0x1de/0x310 [ 218.810646][T10381] __bpf_trace_mmap_lock_acquire_returned+0x205/0x310 [ 218.810661][T10381] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 218.810675][T10381] ? __pfx_down_read+0x10/0x10 [ 218.810689][T10381] ? mm_release+0x26c/0x430 [ 218.810701][T10381] ? exit_robust_list+0x1e0/0x2f0 [ 218.810716][T10381] ? mm_access+0x271/0x2a0 [ 218.810727][T10381] ? _raw_spin_unlock_irq+0x23/0x50 [ 218.810748][T10381] __mmap_lock_do_trace_acquire_returned+0x1a5/0x210 [ 218.810763][T10381] exit_mm+0x2e3/0x310 [ 218.810779][T10381] ? __pfx_exit_mm+0x10/0x10 [ 218.810794][T10381] ? taskstats_exit+0x326/0xa60 [ 218.810813][T10381] ? lockdep_hardirqs_on+0x9d/0x150 [ 218.810826][T10381] do_exit+0x994/0x27f0 [ 218.810843][T10381] ? do_raw_spin_lock+0x151/0x370 [ 218.810861][T10381] ? __pfx_do_exit+0x10/0x10 [ 218.810875][T10381] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 218.810897][T10381] do_group_exit+0x207/0x2c0 [ 218.810912][T10381] ? _raw_spin_unlock_irq+0x23/0x50 [ 218.810931][T10381] ? lockdep_hardirqs_on+0x9d/0x150 [ 218.810945][T10381] get_signal+0x1696/0x1730 [ 218.810969][T10381] ? __pfx_get_signal+0x10/0x10 [ 218.810990][T10381] arch_do_signal_or_restart+0x98/0x840 [ 218.811010][T10381] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 218.811033][T10381] ? syscall_exit_to_user_mode+0xa3/0x340 [ 218.811047][T10381] syscall_exit_to_user_mode+0xce/0x340 [ 218.811061][T10381] do_syscall_64+0x100/0x230 [ 218.811075][T10381] ? clear_bhb_loop+0x45/0xa0 [ 218.811089][T10381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.811102][T10381] RIP: 0033:0x7f255bb8e169 [ 218.811114][T10381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.811125][T10381] RSP: 002b:00007f25599f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 218.811141][T10381] RAX: fffffffffffffe00 RBX: 00007f255bdb6168 RCX: 00007f255bb8e169 [ 218.811150][T10381] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f255bdb6168 [ 218.811159][T10381] RBP: 00007f255bdb6160 R08: 0000000000000000 R09: 0000000000000000 [ 218.811167][T10381] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f255bdb616c [ 218.811183][T10381] R13: 0000000000000000 R14: 00007ffea86e5b60 R15: 00007ffea86e5c48 [ 218.811198][T10381] [ 219.334436][T10242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.371416][T10404] rdma_rxe: rxe_newlink: failed to add lo [ 219.420546][T10408] __nla_validate_parse: 10 callbacks suppressed [ 219.420565][T10408] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1235'. [ 219.441525][T10242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.480357][T10242] veth0_vlan: entered promiscuous mode [ 219.490724][T10242] veth1_vlan: entered promiscuous mode [ 219.525567][T10242] veth0_macvtap: entered promiscuous mode [ 219.535231][T10242] veth1_macvtap: entered promiscuous mode [ 219.549459][T10242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.561295][T10242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.571499][T10242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.590998][T10242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.600950][T10242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.612362][T10242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.622399][T10242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.632865][T10242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.642840][T10242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.653315][T10242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.663429][T10242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.674316][T10242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.684359][T10242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.695147][T10242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.705020][T10242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.717229][T10242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.728274][T10242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.739761][T10242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.750558][T10242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.760478][T10242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.771093][T10242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.780996][T10242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.791733][T10242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.801661][T10242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.814569][T10242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.824515][T10242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.835025][T10242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.844972][T10242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.855506][T10242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.865358][T10242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.876161][T10242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.886123][T10242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.896653][T10242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.907360][T10242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.924754][T10242] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.933724][T10242] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.942427][T10242] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.951602][T10242] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.977405][T10242] ieee80211 phy35: Selected rate control algorithm 'minstrel_ht' [ 220.000103][ T3490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.001714][T10242] ieee80211 phy36: Selected rate control algorithm 'minstrel_ht' [ 220.011721][ T3490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.036490][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.044498][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.154249][ T5855] Bluetooth: hci4: command 0x0406 tx timeout