last executing test programs: 4.781497687s ago: executing program 1 (id=1146): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x10, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000540)={{0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x13}, 0xa}, {0xa, 0x4e20, 0x8, @local, 0x5}, 0xffffffffffffffff, {[0xffffb815, 0x5, 0x101, 0x5, 0x5e99, 0x0, 0xffffff3d, 0xfffffffc]}}, 0x5c) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x20}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e40)={r7, 0x0, 0xe, 0x0, &(0x7f0000000bc0)="eb4676f22c9816dc1f1079b5a0a7", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001180)=ANY=[], 0x48}}, 0x0) recvmmsg(r6, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x560, 0x4) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x28) recvmsg(r0, &(0x7f0000000080)={0x0, 0xfffffdf4, 0x0}, 0x40002000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x10, 0x1, 0x8, 0x7, {{0xd, 0x4, 0x1, 0xf, 0x34, 0x65, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@generic={0x44, 0xa, "99788660ffd21746"}, @lsrr={0x83, 0x13, 0x6b, [@empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101]}]}}}}}) connect$can_j1939(r3, &(0x7f0000000200)={0x1d, r8, 0x3, {0x2, 0x1, 0x2}, 0xff}, 0x18) 3.827997059s ago: executing program 1 (id=1160): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x80, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f00000000c0)=@framed={{0x46, 0xa, 0x0, 0x0, 0x0, 0x79, 0x10, 0x87}}, &(0x7f0000000000)='GPL\x00'}, 0x90) pipe(&(0x7f0000000280)={0xffffffffffffffff}) readv(r5, &(0x7f0000000540)=[{&(0x7f0000000440)=""/194, 0xc2}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2}, 0x38) 3.043414982s ago: executing program 0 (id=1167): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f00000002c0)={0x2a, 0x4, 0x4001}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0xffffffc1}, 0xc) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000380)='bbr\x00', 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) write$binfmt_script(r4, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r0, 0x58, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1a, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe850}, @call={0x85, 0x0, 0x0, 0xa7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7ff}]}, &(0x7f0000000500)='syzkaller\x00', 0x57, 0xe8, &(0x7f0000000540)=""/232, 0x40f00, 0x20, '\x00', 0x0, 0xb, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x2, 0x3, 0x40, 0x7}, 0x10, 0x0, r7, 0x3, &(0x7f00000007c0)=[r0, r0, r0, 0xffffffffffffffff, r0], &(0x7f0000000800)=[{0x0, 0x4, 0xd, 0xa}, {0x0, 0x5, 0x5, 0x2}, {0x1, 0x1, 0x8, 0x2}], 0x10, 0x1}, 0x90) getsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000900)={@loopback, @loopback}, &(0x7f0000000940)=0x8) write$bt_hci(r7, &(0x7f0000000980)={0x1, @read_local_amp_assoc={{0x140a, 0x5}, {0x0, 0xfa0c, 0x4}}}, 0x9) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x9, 0x3, 0x338, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@dst={{0x48}, {0x401, 0x4, 0x1, [0x8001, 0x0, 0x8, 0xe5dc, 0x8, 0x1, 0xfffb, 0x1, 0x8, 0x6, 0x1, 0x9, 0x63d0, 0x3451, 0x5, 0x1], 0xb}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x16}, @empty, [0xff000000, 0xff000000, 0xffffffff, 0xff000000], [0xff, 0xffffff00], 'macsec0\x00', 'wg0\x00', {}, {}, 0x87, 0x9, 0x4}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x40, 0x2, 0x0, [0x8, 0x9a, 0xfffc, 0x77c, 0xc64, 0x5, 0x7, 0x4, 0x7, 0x8, 0x4, 0x0, 0x3, 0x3ff, 0x8, 0xe201], 0x10}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x6, 0x80, 0x0, 0x400, 0x1, 0x100, 0x80]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r7) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0xa0, r9, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1df4}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x480}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfdac}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0xa0}}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x18, 0x12, &(0x7f0000000dc0)=ANY=[@ANYBLOB="67080000000000007b8af8ff00000000b708000089eeac187b8af0ff00000010bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000085200000"], &(0x7f0000000e80)='syzkaller\x00', 0x1, 0xbb, &(0x7f0000000ec0)=""/187, 0x41100, 0x48, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0x3}, 0x8, 0x10, &(0x7f0000000fc0)={0x2, 0x9, 0x3, 0x69}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001000)=[r2], &(0x7f0000001040)=[{0x1, 0x1, 0x0, 0x8}, {0x4, 0x4, 0x1, 0xc}, {0x3, 0x3, 0x0, 0x4}, {0x3, 0x3}, {0x0, 0x0, 0x9, 0x6}, {0x5, 0x5, 0x10, 0x1}, {0x2, 0x2, 0x5, 0x6}, {0x3, 0x3, 0xb, 0x7}], 0x10, 0x3}, 0x90) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x22, &(0x7f0000001180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x85}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @alu={0x4, 0x1, 0x2, 0x9, 0x6, 0xfffffffffffffff4, 0x8}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ff}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @alu={0x0, 0x1, 0x4, 0x6, 0x7, 0xffffffffffffffff, 0x10}, @call={0x85, 0x0, 0x0, 0xa3}]}, &(0x7f00000012c0)='GPL\x00', 0x76, 0x1a, &(0x7f0000001300)=""/26, 0x41000, 0x10, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000001340)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001380)={0x4, 0x4, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000013c0)=[r0, r7, r3, r2, r7, 0xffffffffffffffff, r0], &(0x7f0000001400)=[{0x3, 0x1, 0xc, 0x4}, {0x0, 0x5, 0xb, 0xd}, {0x0, 0x5, 0x7}, {0x3, 0x5, 0xa, 0x4}, {0x0, 0x2, 0x3, 0xc}, {0x1, 0x2, 0xa, 0x2}, {0x5, 0x2, 0xd, 0x2}, {0x5, 0x1, 0xf, 0xc}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001580)={@map, r10, 0x22, 0x2000, 0x0, @prog_fd=r8}, 0x20) ioctl$sock_qrtr_TIOCINQ(r7, 0x541b, &(0x7f00000015c0)) writev(r1, &(0x7f0000001780)=[{&(0x7f0000001600)="0ee55f02eb7ffa2a50ba9b35802de7fb", 0x10}, {&(0x7f0000001640)="a7d1fc1be18287513701f0a510999573ee836d35f3de4e5cd1372b6d13182ce21362cce6a8435d75caf1f0983035caba4bce1c34a9e0f13a05e0e67b0c0b4456", 0x40}, {&(0x7f0000001680)}, {&(0x7f00000016c0)="f582032f10154fff052bf86a456436797f5dc147979890466d7bc7e71b8396fc6a6572693a121bbc8aca7aedf475eec37ab017c0c5940e2c031ef805b53aafc15b10f39dc77369b522127751004cbfe245e95f97a6c4f7e78319a496c94c7f8da294bda24656f4b8a4b6b6a845378477640a8ba807650b64a87887c2ac7b0969d523c9683be6dbfd588dc6a812ab4f", 0x8f}], 0x4) r11 = socket$inet(0xa, 0x801, 0x84) connect$inet(r11, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r11, 0x8) r12 = accept4(r11, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x8) socket$nl_route(0x10, 0x3, 0x0) 2.544908301s ago: executing program 4 (id=1171): r0 = socket$inet(0x2, 0x2, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000040), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x74, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000180)="080027226da0d6c1", 0x8}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @private}}}], 0x20}, 0x31c467c443849ffc) 2.42750138s ago: executing program 1 (id=1173): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000300000000000008000000000000ecfa89813f88d1287e005f5f00"], 0x0, 0x2a}, 0x20) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x209b, 0x30}, &(0x7f0000000300)=0xc) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000480)={r3, 0x3ff}, 0x8) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000340)={0x0, 0x6, 0xff}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$packet(0x11, 0x0, 0x300) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r12) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01000000000000000000037400062c000700737b7352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6ee4300000000001000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 2.426976138s ago: executing program 2 (id=1174): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) (async) r2 = accept$alg(r1, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="04000000000000001c0012800b00010062727d2c6964676500000c00028005002d790ab164577ad3545e3f4909d42d473a0003007124006ab0d2cff680c1000000001d0f3c2147467ed971d4b3ade7a3c7731600ff54f907ee53ddc65fda54e0ecc583924bdfb0a386d5c06ed55da13683506148a822b635366a0ab84da5d6dbe884d505fc75093937ecfa293d552ca95c6dcca74da689cd8034895861aad580fb98ad8d3be0c93f1b9323bca81aa4151ba6f1f4201af6"], 0x3c}}, 0x4000040) (async) sendmsg$alg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="de", 0x1}], 0x1}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000026bd7000fddbdf254b0000000c00a6009cd0000000000000080003000100000008000300030000000c00a70000010000000000000c00a6000700000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x24008880) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000007b000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r5], 0x40}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) r7 = socket$igmp6(0xa, 0x3, 0x2) (async) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000c80)={0x1bc, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x554}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x827}]}, @TIPC_NLA_NODE={0x120, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x800}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "42e1a4dee02ce801c1a06548e819efc31d71a2e453cffc849566635484ad569cb87623bf"}}, @TIPC_NLA_NODE_ID={0xc6, 0x3, "dff05987dd0cd206de18110ca38b74cc624b221e98467f70151d7e209729f37b37282fe78e200054cacc6f54a2779f004eefd1b7e35e302014707ad40a324cffc68c35dfa3b3b9379398303befc2bb61c33b4455bd85a623abb33ca2eebe489b8a27aea20e63e7dc39fdf92c0cccae7ac6dd7ffdafe4589a4658dc567d36f90faf701239d68e5c1025f1e4d03a68db3482035ba5a570ec375dfe487460644346cf4f79c7483a42afc101109d9f404a0f59aa11fc49a6ff5ab4ca1baa1c7d31d2f90c"}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x851}, 0x800) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18e700000000000000000000000000009500000000000004"], &(0x7f00000003c0)='GPL\x00'}, 0x90) r9 = accept(r3, &(0x7f0000000400)=@caif=@dgm, &(0x7f0000000240)=0x80) getsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000380)={0x0, 0x95, 0x6, 0x1}, &(0x7f00000004c0)=0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) (async) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x2, 0x0}}, @mcast1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x800c0280}) (async) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4000000) (async) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000580)={0x0, 0x2, 0x5, 0x7}) (async) r10 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a14000000020a01040000000000000000000000003c000000090a010100000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000141400000011000f0000000000000000000084002a"], 0x78}}, 0x0) accept(0xffffffffffffffff, &(0x7f00000006c0)=@nfc_llcp, &(0x7f00000005c0)=0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60002000001c2b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000002800000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000b67c4dcfb4b48e3c98ec4aeb8d5766ad"], 0x0) 2.265119311s ago: executing program 4 (id=1175): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xb1, &(0x7f0000000000), &(0x7f0000000080)=0x4) (fail_nth: 1) 2.171901527s ago: executing program 2 (id=1177): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020240), 0x10010) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080), 0x4) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r2, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) 2.126431882s ago: executing program 0 (id=1178): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd0", 0x76}, {&(0x7f0000000d40)="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", 0x15c}, {&(0x7f0000000f00)="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", 0x16b}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000340)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07e153e3949b954c1d74b105c14411925a8ae24778d4111d2d9743b682d653bcf35d53fd33489a3a405042c0de5ec2cb4b991a31e1d76db8609d0bf66d8d723a6c28a50d42ab169de383345fbee97bea33e8bfb5d705852d360ab703fc956c1ea86157aedcff1782c7", 0xc2}, {&(0x7f0000000440)="03d5", 0x2}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.965198986s ago: executing program 2 (id=1179): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000001c0)={0x3}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x0) 1.838120732s ago: executing program 0 (id=1181): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x5e20, @empty}, 0x10) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xe1, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = socket$inet(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xe, &(0x7f00000003c0)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x1, 0x2, 0x6, 0x7, 0xffffffffffffffc0, 0x10}], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000100)={0x11, 0x4, r5}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000000)={@link_local, @local, @void, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "e870ee2cacd3592f"}}}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={0x19c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x583}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NODE={0x148, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_NODE_ID={0x8f, 0x3, "8d9e42555607347b35def24304a155af293b381cf92e8405c34044bf217d80ced60be7a7b44ad26e7d470807321df36bcd7bccd3d99dc37def5268a655510d60c2e831c632691c604d51b918ecf218e3a7c2da3035e33ae407c85267440b011e9109668e879217c38c569d61811a8db6ce6d391b0b7cb86730ad3d27d4fa7c6a2e04fca3c286caa6ee5343"}, @TIPC_NLA_NODE_ID={0x18, 0x3, "72427e5a09eb6761f947448e90d79a413c2aa549"}, @TIPC_NLA_NODE_ID={0x84, 0x3, "f100edf3d856d463a8eb8124d3296e1d3926425b137c1bf923417a1af31992b7b95f3c6159eb7e24351c75a98b6a07a8a9437ce872b6000baa1cf88a046185f4982e8974ee95022d9f1d55a5fdb033de5d1fafa4f3b86092fb37d9ad10c102441544a2429d6f3bbf42fdca7ccf6241c76184eaf3f28f2d9898e86304b9643f07"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004000) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31}]}}}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) 1.834247064s ago: executing program 4 (id=1182): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037", 0x10}], 0x1, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b40)=""/4083, 0xff3}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001b40)=ANY=[@ANYBLOB="7c0200000000000000000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="040000800c0000000000000000000000d00100808b844e21163e88febd1b2fd4b3ab011b2989dd4c68e7787d74a9bb25d954878bc27286e7c5d8ae3b6cccf7fdf6c008b2cc1d0e7bcf95b765eabe9faf00ada552f666c4e9ddcaea82b23a5d2bb18c1420e20cd19c6af3e964b9ec86ac10c5996cf61e94ccf5c736649d28262cff1dfa286f26e6f022caf4bd00008ca025e0ce0ea72236e98e06d5ff8840b3798f321c217ac75a4ea784de49ae991c55410d9adeace2b6db2b14e9fc792c490a1f401501e686ac42f1c69b6f45fee0c3f25a6ef60800"/228, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="84d527b4dbb1c89ca34de5f4a5bbd09bdbb1af1e99c8c256d1b27fb64142545cea467a765058caa694d19ec7da2afba727c52ed038ed19b203f75895d190bc8f6d7993c75f69668c19a089c066c534a21848e708000000", @ANYRES32=0x0, @ANYRESDEC=r1], 0x27c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.746592939s ago: executing program 1 (id=1184): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x80, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f00000000c0)=@framed={{0x46, 0xa, 0x0, 0x0, 0x0, 0x79, 0x10, 0x87}}, &(0x7f0000000000)='GPL\x00'}, 0x90) pipe(&(0x7f0000000280)={0xffffffffffffffff}) readv(r5, &(0x7f0000000540)=[{&(0x7f0000000440)=""/194, 0xc2}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0xb, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r7}, 0x38) 1.697705466s ago: executing program 4 (id=1185): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x28, r2, 0x7, 0x0, 0x0, {{0x2}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000300)=""/182, 0xb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, r7, 0x1, 0x0, 0x0, {0x5}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x4, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x38}}, 0x0) close(r5) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) preadv(r5, &(0x7f0000000080)=[{&(0x7f0000001280)=""/157, 0x9d}], 0x1, 0xff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0xb, &(0x7f0000000300)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc8}}]}, &(0x7f0000000900)='syzkaller\x00', 0x6}, 0x90) 1.619584856s ago: executing program 2 (id=1187): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000000c0)={r2, &(0x7f0000000340), 0x0, 0xb00}, 0x20) 1.539792651s ago: executing program 0 (id=1188): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f00000002c0)={0x2a, 0x4, 0x4001}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0xffffffc1}, 0xc) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000380)='bbr\x00', 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) write$binfmt_script(r4, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r0, 0x58, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1a, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe850}, @call={0x85, 0x0, 0x0, 0xa7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7ff}]}, &(0x7f0000000500)='syzkaller\x00', 0x57, 0xe8, &(0x7f0000000540)=""/232, 0x40f00, 0x20, '\x00', 0x0, 0xb, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x2, 0x3, 0x40, 0x7}, 0x10, 0x0, r7, 0x3, &(0x7f00000007c0)=[r0, r0, r0, 0xffffffffffffffff, r0], &(0x7f0000000800)=[{0x0, 0x4, 0xd, 0xa}, {0x0, 0x5, 0x5, 0x2}, {0x1, 0x1, 0x8, 0x2}], 0x10, 0x1}, 0x90) getsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000900)={@loopback, @loopback}, &(0x7f0000000940)=0x8) write$bt_hci(r7, &(0x7f0000000980)={0x1, @read_local_amp_assoc={{0x140a, 0x5}, {0x0, 0xfa0c, 0x4}}}, 0x9) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x9, 0x3, 0x338, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@dst={{0x48}, {0x401, 0x4, 0x1, [0x8001, 0x0, 0x8, 0xe5dc, 0x8, 0x1, 0xfffb, 0x1, 0x8, 0x6, 0x1, 0x9, 0x63d0, 0x3451, 0x5, 0x1], 0xb}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x16}, @empty, [0xff000000, 0xff000000, 0xffffffff, 0xff000000], [0xff, 0xffffff00], 'macsec0\x00', 'wg0\x00', {}, {}, 0x87, 0x9, 0x4}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x40, 0x2, 0x0, [0x8, 0x9a, 0xfffc, 0x77c, 0xc64, 0x5, 0x7, 0x4, 0x7, 0x8, 0x4, 0x0, 0x3, 0x3ff, 0x8, 0xe201], 0x10}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x6, 0x80, 0x0, 0x400, 0x1, 0x100, 0x80]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r7) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0xa0, r9, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1df4}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x480}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfdac}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0xa0}}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x18, 0x12, &(0x7f0000000dc0)=ANY=[@ANYBLOB="67080000000000007b8af8ff00000000b708000089eeac187b8af0ff00000010bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000008500000086000000852000000100"], &(0x7f0000000e80)='syzkaller\x00', 0x1, 0xbb, &(0x7f0000000ec0)=""/187, 0x41100, 0x48, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0x3}, 0x8, 0x10, &(0x7f0000000fc0)={0x2, 0x9, 0x3, 0x69}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001000)=[r2], &(0x7f0000001040)=[{0x1, 0x1, 0x0, 0x8}, {0x4, 0x4, 0x1, 0xc}, {0x3, 0x3, 0x0, 0x4}, {0x3, 0x3}, {0x0, 0x0, 0x9, 0x6}, {0x5, 0x5, 0x10, 0x1}, {0x2, 0x2, 0x5, 0x6}, {0x3, 0x3, 0xb, 0x7}], 0x10, 0x3}, 0x90) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x22, &(0x7f0000001180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x85}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @alu={0x4, 0x1, 0x2, 0x9, 0x6, 0xfffffffffffffff4, 0x8}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ff}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @alu={0x0, 0x1, 0x4, 0x6, 0x7, 0xffffffffffffffff, 0x10}, @call={0x85, 0x0, 0x0, 0xa3}]}, &(0x7f00000012c0)='GPL\x00', 0x76, 0x1a, &(0x7f0000001300)=""/26, 0x41000, 0x10, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000001340)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001380)={0x4, 0x4, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000013c0)=[r0, r7, r3, r2, r7, 0xffffffffffffffff, r0], &(0x7f0000001400)=[{0x3, 0x1, 0xc, 0x4}, {0x0, 0x5, 0xb, 0xd}, {0x0, 0x5, 0x7}, {0x3, 0x5, 0xa, 0x4}, {0x0, 0x2, 0x3, 0xc}, {0x1, 0x2, 0xa, 0x2}, {0x5, 0x2, 0xd, 0x2}, {0x5, 0x1, 0xf, 0xc}], 0x10, 0x9}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001580)={@map, r10, 0x22, 0x2000, 0x0, @prog_fd=r8}, 0x20) ioctl$sock_qrtr_TIOCINQ(r7, 0x541b, &(0x7f00000015c0)) writev(r1, &(0x7f0000001780)=[{&(0x7f0000001600)="0ee55f02eb7ffa2a50ba9b35802de7fb", 0x10}, {&(0x7f0000001640)="a7d1fc1be18287513701f0a510999573ee836d35f3de4e5cd1372b6d13182ce21362cce6a8435d75caf1f0983035caba4bce1c34a9e0f13a05e0e67b0c0b4456", 0x40}, {&(0x7f0000001680)}, {&(0x7f00000016c0)="f582032f10154fff052bf86a456436797f5dc147979890466d7bc7e71b8396fc6a6572693a121bbc8aca7aedf475eec37ab017c0c5940e2c031ef805b53aafc15b10f39dc77369b522127751004cbfe245e95f97a6c4f7e78319a496c94c7f8da294bda24656f4b8a4b6b6a845378477640a8ba807650b64a87887c2ac7b0969d523c9683be6dbfd588dc6a812ab4f", 0x8f}], 0x4) r11 = socket$inet(0xa, 0x801, 0x84) connect$inet(r11, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r11, 0x8) r12 = accept4(r11, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x8) socket$nl_route(0x10, 0x3, 0x0) 1.518793941s ago: executing program 4 (id=1189): r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff35, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f97e24fc6002020e000a740100051882c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x400300}, 0x0) (async) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180100001c2300000000000000000000850000006d0000000396ca46acd7b1ead179770a884d4fe4855543cc5c68534edb07310a24eea4b4495800"/71], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) close(r6) (async) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) sendmmsg$inet6(r7, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1400000000000000290000000b000000000000aec80b7d855c3f12000000000024000000000000002900000043000000ff010000000000000000000000000001829aaa352dbe12e9363c1a1d23927e7f7a6cd3c74c4dcdb991ae8b36484c516067127b54cd04fc81b5dcabea63a6939dcf1d434fc148", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x40}}], 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r1) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES8=r0, @ANYBLOB="00022bbd7000fddbdf25020000000800020009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) (async) close(r4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) read(r8, &(0x7f0000000180)=""/68, 0x44) (async) splice(r1, 0x0, r4, 0x0, 0x1100000000f336, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x9, @local, 0x6}}, 0x0, 0x0, 0xe, 0x0, "1fa06a710a2d8f8614ac278e33e1fc378fc4893bf68389a4daaf4c91b55d209c8aadf137210e862a5bf9d60922e6b58343404faf7c10451678f45dfdc14d68b43d501bc84c18c2d17c2f0a719e5ff08e"}, 0xd8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="750bc0ff08000000186a0000060000000000000000000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000e04314ffcf6b7a4e2d501d283e85000000a500000095000000000000639ac60000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xbe, &(0x7f000000cf3d)=""/190}, 0x90) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 1.499913272s ago: executing program 2 (id=1190): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240c80c0, &(0x7f0000000240)={0xa, 0xe20, 0x0, @private1, 0x1}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000240)) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.359977381s ago: executing program 2 (id=1191): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000002c0)={'security\x00', 0x4, [{0x500}, {}, {}, {}]}, 0x68) 1.326951467s ago: executing program 3 (id=1192): bpf$MAP_CREATE(0x6000000, &(0x7f00000001c0)=@base={0x13, 0x8, 0x2, 0x16, 0x0, 0x1}, 0x48) 1.273517s ago: executing program 4 (id=1193): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000001280), 0x56) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000000080), 0x72a, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={0xffffffffffffffff, &(0x7f00000007c0)}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xffffffffffffff9c, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=0x0, @ANYBLOB="ae27850edaea5c9aaaaa0000"], 0x48}}, 0xc0c0) sendto$inet6(r3, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x0, 0xfffe}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000020000100000000000000000002000000000000080017004e204e20080018006b7bc3f4c781264314f3b97ece57214e220000000000"], 0x2c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.220832275s ago: executing program 3 (id=1194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x64, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='memory.events\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001600)={0x84, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x37}}}}, [@NL80211_ATTR_FRAME={0x59, 0x33, @beacon={{{}, {}, @device_a, @device_a, @random="a5fcc8639e98"}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @val={0x25, 0x3}, @void, @val={0x3c, 0x4, {0x0, 0xff}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x6, 0x8, 0x32, 0x100}}}}]}, 0x84}}, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x40000001}) syz_emit_ethernet(0x4d3, &(0x7f00000001c0)={@dev, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x49d, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "7db4265c9f6aa3b46521199ea778d105c24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2"}, {0x0, 0x6, "1598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e8f222b9ddc4e0bfb5e5c9a484353b785e7"}, {0x0, 0x1, "d429145c793e823829b4376332"}, {0x0, 0x7e, "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"}]}}}}}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001540)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000240), 0x3af4701e) sendfile(r10, r2, 0x0, 0x10000a007) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000340)={{r1}, "7d98fda4f5d891597fe1af4491a31813729403613108992a15d101a9aa5cebe3ac81f706480994bd8f46dc04afa8c2fb1c0c80d0bd31a3b2132babdb963acafc84379bd5ae776663b5fcb43155265eb40afae1a5089d59b64ef428a5eda427f2ad54cbbcee679a7d857342edaedefd72e7fbaded96a959a04e32eeb4ed934c73b8bd27ce7ce12967d16c0b2fe5c20a0e9dd652538f76e5d87e6f8bb77dce64d8890228f0b244ed947c1ac51ebce9aa3b9f6f68282e7d1d8b1d3bf6700922541cf3feac146628a3df3c1e62f932fd953721d298dcd92093e965057dc0bd40db77546125d1f4acc87509487f08b2687d1c39fea849c16f0696f524775484318b696e9d9716100f2249f89ea653c3765f26ebf676db97c5de2e649c034c82a875ad961587ef86907d0d5ef5eba0c5c317be7cd83b475eb9955eb152fa759ec4dd4cb15fe25bb658935e07f068f5e7d57b6648817ff543b430f6801cbcf1284f579ce818222a08d29002bc9bfa2d321f67c3ea896cd329316bab7bad9ec54babd4aea4c0a51062ca68497aa9bd066b28f50d076a3276b9be727f03bbae733480c77f855f2ae2c64380b3779cc1409bda3dd86ef29573a60801a339b3b0f4b39ac865eb06f5bd8496530436db16db1f2649a12ae4ccef9dce2b007593bf6cb980ecb4d28929ee65c44eff125cea22f70a3a3c447eb3d84e9a0b8c96458d6739eeed99dbe85037ffe2843e0d7758ee908c181b63ebb763ca2460addc66866d5777a9e218911c2cbbd8d7c895d90a805ddc0a6258789c19ca0681c0a42e164496590c4883539d4c69ce00a8e39ae9080b432033361e3918903182df46bfd9b929ce69f8ff452674cdd50eafd730604d944062c930eb7a5333a1fca5d4be44a58a1e031444e28fb5dcbeeefaf157b24d6e0da7f0bb24916241067d7b742685544036247a45a340e1ee2022277cb7ec04999235d2796704337f1ffacea79f42afe4c3cceb2c3aaf83da408586177ca05ed2b10db06199f48b66de37a136248f036f6c99015f52b249d0c736fc6d80c3a42ec38e8a8b24ddb9644a9dcd6f9e1468f15ce3c33f6d6e651d3b2e88a65b644a51e42a8d0943107eb51c6da27a03e76210e4a80c1910ff1e8c6e039dcc3f5fb86bedaecab4b16ef54d4fc23dcd1299c7c138545fc37d4991c5927b8a092337c9ac147646462b9c5ebb6f65f5cc5aee6e3997ac8ed1ce354a27b37b7b7eec139d2f88f554ef7520bd39ac03724cdb7ce2f60aedf9deb7db00e4b0ae5a9abf5e0968a1dc7fec8029ee6e711da04deccc51124b5a594f9d8047bbd564846cdd1b6d2abc9d6cfbc49883961e16a34338a91454f02e1dea9b920c050f22b669a2cd75ce4b86b774980dd9b545ec0134b641eb09a65fb17106aa5756ce27b24bf42bfb2c6579a16c91c96c0842473ab71cf3f725f54214e9b507a3fce4fe146a30deaf422e3452b6d4e0146e1fdf683b575017e51a491694fe0195150821a47d90df07885a86d3f1e6ff9cedb76f78308bab183958a18153de9fd3ba9b4ed59ab83590d2fb7599dd7656972bd11e11cf978b71b89aad512e96629c413fae726c25487ffa52b2107a8932006e876057e104596b15d96b0de60ba1dc951175984b565cd9bf006c46717bd1a60665715289b103f56274e960d28acc92bd6e1a003a36f4d894337f917788b611793eb4aa444696443b93b49cb221396658a4ceeed4a4863e55b7b95f0965efc5ad02b5f674ae475794d25fcb99044eea97a340de58e703aff9b1961bd60269ec5dd34a9cd8d0486b3251dfbf45ac72b78d2b6ac4f1a4208d8a5ac7bc7beee987c3f6b3a6b3ade0c2720f19618c6558bb55f4a6f7e4dbb522c8f2cbabaf898967734da957c80d944e73225ce526a430cf6424b3dcf9f430d9dbc8e22da63097031e5769bd73ae2027ecb5beb4074bdc73d35a59c56d33e1dc55e228b7953f1518b9aee1287654875963a35ecc2079a7be6e71242c9740bdc559c4a320be5401ef2b584e43abe51e1d12145f30c3bb0c963882ef7a76c17ab009d8ba2f8b6fe888022263e65a28a42e6f41c15160add3ddc4f4b9329758e3c6cd30e8a311d2de72135c171aca50877c4843b09817e565d3765b5d50b6d3b7b0f870514c4bc3f2bc5cb4448dca253916fb530ae6b9574924c1c257b679f43d7228cfbdda83de2f09d6a3ceaefc9ab9747db977b2580dfaee96e5ad1d498022ae0df8c68efa993e0d0141f5dbad25c7bfc928a43cb159e0e0369afff54bf409c0b3edc4c877ef103812ab5e6bf8eceb55cf1edccce2add494e81d6bd3ee515d625521087589e75f4a93b3c2941cbd4bc7f69ff8bdb596d42a20da525fb9565c0fb4ea774fb31f169475ddea55b84258f61dfa45f7fe5d27bc8a7a2de9fbe176f11887ae3ca71a5238685793bf110132334bb729e8c6ee0c29c8b095d00ca3a89f8022513bda92ad4165254c9a37f1c3f9a0393dceafb2ae748488f56371262a477db5892213e88b6c39e7aee601bac91a24e2d024d61856af2a76b47ec4bffdce497ae5826f6f69c362766d9cfc10397806dc6b70fbbd4488ada492a35282d80f2b3718801748d3a7f04bdc22cb91d8b6816dc35f924884d6b1411f4ec3b1d5c07060447b3e1b453eb38036d8c594603b1193ac0974eaa79d637d6f4f0f197a75af97da58bacc34978a9bc41f80ce13d0726f8394dae2a3b53e39aaa670d1e014b9c14aa8463ffd4777ca321b6d4da5cf3210d09df3e3ef7ab928bae449e81b34beff28eb2896614613f338a0971b0863a7d73cb588838e2692c11d00f2f3de8715746ebe28db06c6d8aad90b2493fd0b42dfef71b582501cb38a52e3daf4b61cbd4459fb22b1a2daccd3cba14890443c5bdde64ddd207fc4ee286224a77c6bd3f2de125c93bfa058d28e5d0fa769ed6d0f0acb452f424c2eb81ba804f4e0d707a8ee807c42da2f58e4c4bf5cf3daff2152dccf2f667d1b49034d9c92f68241d027d2b90f228404e08af5cfea73fcc7d0147b46fdd2883f06000b37b0cd0307880bcf6d30e7a3f37e41322b6ceac98df72e27493266b5bacb7d38b80d9fa27d21c838fd7e2e18efa4f7341457cc3790a93d5efefb01261f34e177bf7e10760d59bdf6d8478d041c01261794b3d1353eeb539bcc0a99fd2a49637fc726f1f57e5e85af4cc69de8ce21d9545639be3ebad5260e312455fc0527a02b09926180a3b1f6b92fa291cb17c5f99ee00a2533ebd317033b58594a6d2c54f9bcc682be825dc40a1a8d673059e71b82e77326daafb68b1cc7d84ba0e96909675f69b24f086e906146a6d7dd84b25304b6e0f5b8d97740e6bc302ff14eb3e0d92731831e217cd6dcffe318f1ea5531b1349d4cbf9c65b3f8f78f2878342f563f7494a971ca104bf9fdb66c3c4ba27d6da733c0067c0d65763f69ed2c2ca022d3d57eefc3d8b92f47a8617a395dab17595a849e7759fe8e8c988fc6b2eea1e51682d709a1f7010981d93c164764d3b51850851270b21fec6aff4c3134a2807e9666a4cc4baaee822df387d6ce94b5e5279e47f505c5f0ce084427a8409d0c5b83fbc70b9e53749770b6776452437df1d34777df0650d5c1c65723868146d0eeb48229f34167a9d33fef64eeba9080208c9953e28b22293401c0a211f556eca83983da670461c52af9dbefb35266c213e27283fcb05b4b4d7fd3fb2827f9373ca5e890d4acd497bb99e2dee1d1cc1b86ac7b70c2c75a7d59bd29dd0497b5d97d93d6dc19b7938f44c5548a4fc9d106beb34f1cfd97dfda1b173e2df9b96a03be25729c14970e25fbe5f382431d841065e230c958eee42b95ff760edf968360f9b3eb5106e04880d1489cbb14cb927997b500f6d4d0710c7c507eacc4564e65deecc81d8819f8bdee599be7f025b2e3b2aa03516d5a43d915cc605a3c919a11ed9e353eea73278e28cb86723f98e4944170dbc7fe9c4790d2956cb89e838725f5b15157eded600ecb9a0ee427a3826ce78267535e312cba45a04a88611804f400e8b38b4860eaa7d981c75d8ae0173040ff73411921da87d45b1e30ecb97907ed1c75d4049f6152057d2264c73fedf3d51cb00ec4bf7fec9af6f13b294efe20144273fe2f44241f87744b910d5d7ed15b6507fcb6c96e1eac0c9ea02b3832da6d1d1c026b06056f3b62bd160a7d6bbd0874066754ed0e4e0bb815237392d164ea8c14b4e77a6bbb0794e28f00c9ebb5122d513811a345fc78c8d7c43448fbe9b90b49aa689ee0bc057a06ebe80ff9cbd28620882404275d342dc289131cc5d5b78828f21445137220be2edb94993db16a4822d4b64372b61ac15b4d252e39caabc347e468f69d5111acd1830003563c3d453664c7a00c4c78cbe64019ca2301034e26349e091fafe839272157f6cee91b9e2fa8910e50b8b01da8709e28ec72b33cc67ee06c9671f88ad382832f376ada349454db557523185ca0a8e50d10dba85846a34f2b69532c895be0f6b9cf1fadae965589516e592147165c866449270bde406e00188f981787fc52f291fa45bde0a119b2c75153ee0e5ee63e04b4a863f005da142984c9e8ed96f7f440ad571165fcd77b42f7c5793071e626b6a26948e80a6befa4338ac1cd53278e054fb99c082846414779fcd344a700a45313b8f144223420322a224327b006a6982d2bb8e85281e1f971a97197cd0d7218fa3665569929b4ffc443feb77c7018b8a7d180acba1cb5da021aa1905995da4e6835290662bf7ec05dfaa514b3d765ccaed6ac069f938ee1e2357c499363b3f107bb8850dc191cb99c79843690e80883bc2ee28f03c51b27fc6907644371060b552c1c2c8c81423b6340bd2740c84b687af75e10aba5d47ce6aef37612bdf9fbadd007603adfb574f948dbe9a5a13c9e948a277e205990da9f63f436b8e80c6b98e86232b5a6b9131956d1107325252cf88ac514fec99a93151fc0da29c046f360c19a84632c1ca0627f39c4c27f44a588fece50e4c1345ec2df96606d7f5fc0e0bdd7b90a944d47b6b45e915bb27d10111b2df7ac76222e8135da594a249877fd18b7cd9c39fb4cb5783d5426cdd75ecd0c64b68eabcdf9fb3c0cd67cb0b914a160ddc95622bb95960894a87b42a5d31a3abb4a8f87c4a51e9228689dc6f42ba2665ed5f8b3d9a15403f3aa2427fdf0a37203ab24935d8e6fb63adf83b616424d68f12a746cbbb9790e15d8e743745d479372529054214e87dc0ca3675a926f6a7d4584444aaff42ccfe71a9869b3c7e5c96e3709cbed062ca966845944c9291048c6edfd00c5264c97eec8b83c1843d6731cf68790fb2e3632b271b958323607a0e20cb74ef504e641a81cba207915120e7031d9ed7d8afa83c7502148e48dcd93dd0fbee5d9c3f7da6793b25f1059059d9d78d3bc5b9e9ba5c2bc7799b732b9750b32d2c09fa7f86a2371503f6445cf0e7eb4a4187cf3122ea9af3b4d8379c716f46e217e4f0084bc0960fd0ab608cd3e680510986a34926a4d3ca82095b88b0b7fdd7eafbaeec762bad86f445f22565a4eb157daad4a4ac59ac0b8973ff72608c99dd4d99221d26e6eb6509c6ebd14cd14ac462946bed31a9e6f6ec192dc927199d4110e157f492df0bf7bcc2640451683e418d22c9229a8187a7e4b5abb826d1a4b502685897fb0dff76c62c78657f2d8cab21828c28f53fc3139bf476d70f29fa978c9cc5e6ff359f33905c1ad2d66b08eb18ccbdcb2d9b8bad9b41b27e51a6faa108f6176d3d56c6df15ee77818f411fd684e"}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtclass={0x2c, 0x28, 0x2, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x7}, {0xfff3, 0x5}, {0x8, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x5}}]}, 0x2c}}, 0x20000000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000feff00000014000300686173683a69702c706f72742c6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000008000840"], 0x60}}, 0x0) 802.955312ms ago: executing program 3 (id=1195): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037", 0x10}], 0x1, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001b40)=ANY=[@ANYBLOB="7c0200000000000000000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="040000800c0000000000000000000000d00100808b844e21163e88febd1b2fd4b3ab011b2989dd4c68e7787d74a9bb25d954878bc27286e7c5d8ae3b6cccf7fdf6c008b2cc1d0e7bcf95b765eabe9faf00ada552f666c4e9ddcaea82b23a5d2bb18c1420e20cd19c6af3e964b9ec86ac10c5996cf61e94ccf5c736649d28262cff1dfa286f26e6f022caf4bd00008ca025e0ce0ea72236e98e06d5ff8840b3798f321c217ac75a4ea784de49ae991c55410d9adeace2b6db2b14e9fc792c490a1f401501e686ac42f1c69b6f45fee0c3f25a6ef60800"/228, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="84d527b4dbb1c89ca34de5f4a5bbd09bdbb1af1e99c8c256d1b27fb64142545cea467a765058caa694d19ec7da2afba727c52ed038ed19b203f75895d190bc8f6d7993c75f69668c19a089c066c534a21848e708000000", @ANYRES32=0x0, @ANYRESDEC=r1], 0x27c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 725.130638ms ago: executing program 1 (id=1196): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000100)}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x4c, 0x1, 0x6, 0x704, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x488c1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x270) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000700060a09040000000000000000020000003400048030000180080001006e617400240002800800024000000002080005400000000f080001400000000008000340000000100900010073797a30000000000900020073797a3200000000140000001100010017000000000000000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 646.377392ms ago: executing program 0 (id=1197): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000000), 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000001840)=@udp6}, 0x20) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800", @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x891c, &(0x7f0000000100)={0x0, {0x2, 0x0, @local}, {0x2, 0x4e20, @remote}, {0x2, 0x4e23, @multicast1}, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) 535.876014ms ago: executing program 3 (id=1198): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x2d, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000007f0000000063748a2d557ee8c1a0f4e55b90bca719db35a1cba8", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000852000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x51, &(0x7f0000000680)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @generic={{0xb, 0x4, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @remote, {[@generic={0x83, 0x6, "ee26f36e"}, @cipso={0x86, 0x10, 0x0, [{0x2, 0x6, "9677ce26"}, {0x0, 0x2}, {0x0, 0x2}]}]}}, "d19f75d1274417a79690eaa02c926a3dec06fbe9306497"}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000200000018000000000000000000000000000090cd58562a15002c000064a6693bad890000000000180000000000000000000000000000001b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x20040000) 314.443034ms ago: executing program 3 (id=1199): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x28, r2, 0x7, 0x0, 0x0, {{0x2}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000300)=""/182, 0xb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, r7, 0x1, 0x0, 0x0, {0x5}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x4, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x38}}, 0x0) close(r5) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) preadv(r5, &(0x7f0000000080)=[{&(0x7f0000001280)=""/157, 0x9d}], 0x1, 0xff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0xb, &(0x7f0000000300)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc8}}]}, &(0x7f0000000900)='syzkaller\x00', 0x6}, 0x90) 278.137423ms ago: executing program 0 (id=1200): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x6}]}}}]}, 0x44}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f00000005c0)=ANY=[], 0x148) close(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd0}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e1212f0409000000e70bcf35ac837225dd355ad309a5ec6096633ba38e1ef5baf006020e5f45c993cb5680017c6720bea9b7c451516a8cff7f00000000000019f20b784b2336d43c8a0f7347801a596dfb0b078a967980ccec1d115c7a0000000000000000000000fed6260fdf140498f1274bc569d0d87656d0d18d903580f0ec0915e89bd286b2c25165043f6a001d53f84eaabf01cc310ff28c7c76867ce1a2c9c91b1db7295614e2a4f8711ec37ae999180cb5bbb9c5382120076e117539d423a2ec0f468db35960831f5f884c1fa9f46b3472327697495b8e8ba8e2f3defbe93e1fc733b06dfc74890a3f63b154e9681d69cdd9894c914ee45c286462888ff84e401a6d8895ffda88a171b7359f815d7b6f7562fba1bbff4cba08f7a39a8e88b66a4717b3c318f85aecbe8b5f3485f8d31bf5a57b9dd53b382ec017a33d1fabe09daf76b3b0"], 0x6b}, 0x0) close(r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x7, 0x0, &(0x7f0000000100)="e0b9547ed387db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x50) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000000)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0}, 0x0, @in=@local}}, 0xe8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x400000001, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000001480)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001440)={0x20, r6, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x20, 0x57}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0xc885) r8 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000001500)={'syz1', "cf1733d81b44f79e6c6e8cce327f6d7bb5ab77c2ed72c719e306f3f6a7a9b870d6660fcc5e83a54b7095d84438ef2ba04a1271345cd36473de1872878a20c00071a3bc"}, 0x47) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x80}}, 0x1c}}, 0x0) 154.485237ms ago: executing program 1 (id=1201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x158}}, 0x0) r1 = socket(0x2b, 0x1, 0x0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x8, 0xd6, 0x4, @vifc_lcl_ifindex=r2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup=r3, 0x2b, 0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) bind$xdp(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x1000000, r1}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x21c, r4, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x1ff}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x7fff}, {0x8, 0x0, 0x72}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x800}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x8000}, {0x8, 0x0, 0x1ff}]}, @NL80211_ATTR_IE={0x80, 0x2a, [@preq={0x82, 0x62, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x51, 0xe, 0x7, @device_a, 0x9, @value=@device_b, 0x765b235e, 0xfffffffa, 0x6, [{{0x1}, @device_a, 0xfffffff9}, {{}, @device_a, 0x15d2}, {{0x1}, @device_b, 0x6}, {{0x0, 0x0, 0x1}, @broadcast, 0x2bea}, {{}, @device_a, 0xe}, {{0x1}, @broadcast, 0x9}]}}, @mesh_chsw={0x76, 0x6, {0x6, 0x7, 0x2a, 0x4}}, @mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0x6, 0x0, 0x8, 0x3}}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x104, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x89, 0x3, "b78a9c6889222f30b8861273835361f5cf38e2d5b3b1f8a2efdd938d267aa7886901f11a954740fbc9311cebd062dd96203e630ec6af252fe826b0269ca8471c9335c2609918c6635693e362b67f267614d14f4810217563d4b8ce09d0029a6e5d5edd8c6306281b9e44669afe5a40b654da4d3f5658a758f60a4096f2e19c910b5c7e0b11"}, @NL80211_BAND_2GHZ={0x2a, 0x0, "64d47f8b56ef9c54ea0fa088385189b4b071fb0837020f6e415e5701a516c8c6c1aa03c7f2e9"}, @NL80211_BAND_2GHZ={0x47, 0x0, "467c9b1dc9f0b3b53c2a48f7d9749b52b0390b3f602935f9111389e2c049d1e869762ce44044ab1c94473fe0fb739a7f5dfeae75006411db1a45726c21360612243844"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}]}, 0x21c}}, 0x24040004) getpeername$packet(r1, &(0x7f0000000140), &(0x7f0000000180)=0x14) 0s ago: executing program 3 (id=1202): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x10}, 0x10}}, 0x0) getpeername(r0, 0x0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.184' (ED25519) to the list of known hosts. [ 49.727554][ T5062] cgroup: Unknown subsys name 'net' [ 49.900558][ T5062] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.289502][ T5062] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.450961][ T5093] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.460668][ T5096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.472733][ T5096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.484378][ T5099] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.493718][ T5102] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.501548][ T5102] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.510711][ T5102] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.519240][ T5102] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.521818][ T5108] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.526954][ T5102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.536715][ T5107] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.541802][ T5102] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.547878][ T5108] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.559760][ T5102] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.563759][ T5107] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.569348][ T5102] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.575844][ T5107] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.583436][ T5102] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.590335][ T5107] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.596234][ T5102] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.611706][ T5102] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.626532][ T5102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.634090][ T5102] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.641434][ T5102] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.648787][ T5110] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.649130][ T5102] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.663612][ T5102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.667635][ T5093] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.679019][ T5093] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.686787][ T5093] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.140919][ T5089] chnl_net:caif_netlink_parms(): no params data found [ 54.247998][ T5100] chnl_net:caif_netlink_parms(): no params data found [ 54.304690][ T5098] chnl_net:caif_netlink_parms(): no params data found [ 54.328519][ T5088] chnl_net:caif_netlink_parms(): no params data found [ 54.438756][ T5091] chnl_net:caif_netlink_parms(): no params data found [ 54.499974][ T5089] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.507507][ T5089] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.517672][ T5089] bridge_slave_0: entered allmulticast mode [ 54.524841][ T5089] bridge_slave_0: entered promiscuous mode [ 54.533726][ T5089] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.540928][ T5089] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.548531][ T5089] bridge_slave_1: entered allmulticast mode [ 54.555396][ T5089] bridge_slave_1: entered promiscuous mode [ 54.596831][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.604099][ T5100] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.611321][ T5100] bridge_slave_0: entered allmulticast mode [ 54.618636][ T5100] bridge_slave_0: entered promiscuous mode [ 54.627318][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.634474][ T5100] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.641604][ T5100] bridge_slave_1: entered allmulticast mode [ 54.648852][ T5100] bridge_slave_1: entered promiscuous mode [ 54.685221][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.692369][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.699640][ T5088] bridge_slave_0: entered allmulticast mode [ 54.706988][ T5088] bridge_slave_0: entered promiscuous mode [ 54.715717][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.722874][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.730016][ T5088] bridge_slave_1: entered allmulticast mode [ 54.737798][ T5088] bridge_slave_1: entered promiscuous mode [ 54.798278][ T5089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.809922][ T5100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.820263][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.827612][ T5098] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.835550][ T5098] bridge_slave_0: entered allmulticast mode [ 54.842219][ T5098] bridge_slave_0: entered promiscuous mode [ 54.876955][ T5088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.888473][ T5089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.910936][ T5100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.920482][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.928099][ T5098] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.935587][ T5098] bridge_slave_1: entered allmulticast mode [ 54.942265][ T5098] bridge_slave_1: entered promiscuous mode [ 54.964181][ T5088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.025761][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.033007][ T5091] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.040377][ T5091] bridge_slave_0: entered allmulticast mode [ 55.047701][ T5091] bridge_slave_0: entered promiscuous mode [ 55.068799][ T5089] team0: Port device team_slave_0 added [ 55.077634][ T5089] team0: Port device team_slave_1 added [ 55.104094][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.111302][ T5091] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.118699][ T5091] bridge_slave_1: entered allmulticast mode [ 55.126088][ T5091] bridge_slave_1: entered promiscuous mode [ 55.137147][ T5088] team0: Port device team_slave_0 added [ 55.164448][ T5100] team0: Port device team_slave_0 added [ 55.172891][ T5098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.206729][ T5088] team0: Port device team_slave_1 added [ 55.226061][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.233093][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.259779][ T5089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.272856][ T5100] team0: Port device team_slave_1 added [ 55.279265][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.286303][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.313185][ T5089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.326684][ T5098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.349305][ T5091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.414477][ T5091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.427074][ T5098] team0: Port device team_slave_0 added [ 55.447521][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.454820][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.481232][ T5088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.494397][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.501341][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.527253][ T5088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.538921][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.545947][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.572185][ T5100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.593788][ T5098] team0: Port device team_slave_1 added [ 55.615510][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.622456][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.651818][ T5093] Bluetooth: hci1: command tx timeout [ 55.651833][ T5099] Bluetooth: hci0: command tx timeout [ 55.657990][ T5100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.686569][ T5091] team0: Port device team_slave_0 added [ 55.722710][ T5099] Bluetooth: hci2: command tx timeout [ 55.722728][ T5093] Bluetooth: hci4: command tx timeout [ 55.722945][ T5093] Bluetooth: hci3: command tx timeout [ 55.761127][ T5091] team0: Port device team_slave_1 added [ 55.781622][ T5089] hsr_slave_0: entered promiscuous mode [ 55.787887][ T5089] hsr_slave_1: entered promiscuous mode [ 55.796399][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.804122][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.830384][ T5098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.843173][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.850123][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.876255][ T5098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.898591][ T5088] hsr_slave_0: entered promiscuous mode [ 55.904873][ T5088] hsr_slave_1: entered promiscuous mode [ 55.911046][ T5088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.919415][ T5088] Cannot create hsr debugfs directory [ 55.974197][ T5100] hsr_slave_0: entered promiscuous mode [ 55.980566][ T5100] hsr_slave_1: entered promiscuous mode [ 55.988937][ T5100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.996599][ T5100] Cannot create hsr debugfs directory [ 56.012241][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.019362][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.045606][ T5091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.084508][ T5098] hsr_slave_0: entered promiscuous mode [ 56.091050][ T5098] hsr_slave_1: entered promiscuous mode [ 56.097474][ T5098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.105199][ T5098] Cannot create hsr debugfs directory [ 56.116469][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.123600][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.150379][ T5091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.458175][ T5091] hsr_slave_0: entered promiscuous mode [ 56.464873][ T5091] hsr_slave_1: entered promiscuous mode [ 56.471238][ T5091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.478872][ T5091] Cannot create hsr debugfs directory [ 56.628284][ T5089] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.654786][ T5089] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.675362][ T5089] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.687763][ T5089] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.761408][ T5100] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.783164][ T5100] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.793379][ T5100] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.825625][ T5100] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.876553][ T5088] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.897496][ T5088] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.917974][ T5088] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.944883][ T5088] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.028300][ T5098] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.038801][ T5098] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.065735][ T5098] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.078429][ T5098] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.101115][ T5089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.198477][ T5089] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.248052][ T5100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.258106][ T5091] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.289250][ T5091] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.301132][ T929] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.308415][ T929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.319201][ T929] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.326382][ T929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.360587][ T5091] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.370657][ T5091] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.400846][ T5100] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.444295][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.451381][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.461972][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.469082][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.519813][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.556145][ T5089] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.594623][ T5098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.680291][ T5088] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.725810][ T5093] Bluetooth: hci0: command tx timeout [ 57.725819][ T5102] Bluetooth: hci1: command tx timeout [ 57.758833][ T5098] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.791167][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.798323][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.818205][ T5093] Bluetooth: hci4: command tx timeout [ 57.823461][ T5099] Bluetooth: hci3: command tx timeout [ 57.824240][ T5102] Bluetooth: hci2: command tx timeout [ 57.856908][ T929] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.864073][ T929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.874470][ T929] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.881609][ T929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.893669][ T929] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.900791][ T929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.962106][ T5091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.010701][ T5091] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.050530][ T929] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.057684][ T929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.067929][ T929] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.075436][ T929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.105453][ T5100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.136659][ T5089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.307446][ T5100] veth0_vlan: entered promiscuous mode [ 58.351552][ T5089] veth0_vlan: entered promiscuous mode [ 58.381347][ T5100] veth1_vlan: entered promiscuous mode [ 58.459381][ T5089] veth1_vlan: entered promiscuous mode [ 58.470174][ T5100] veth0_macvtap: entered promiscuous mode [ 58.492067][ T5100] veth1_macvtap: entered promiscuous mode [ 58.558682][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.591149][ T5098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.611283][ T5089] veth0_macvtap: entered promiscuous mode [ 58.626337][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.640802][ T5100] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.650441][ T5100] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.660652][ T5100] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.669455][ T5100] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.686965][ T5089] veth1_macvtap: entered promiscuous mode [ 58.727075][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.781696][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.793665][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.806780][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.826696][ T5091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.864148][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.883646][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.899969][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.947803][ T5089] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.964171][ T5089] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.975536][ T5089] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.984707][ T5089] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.038846][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.053099][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.062608][ T5098] veth0_vlan: entered promiscuous mode [ 59.119040][ T5088] veth0_vlan: entered promiscuous mode [ 59.159789][ T5098] veth1_vlan: entered promiscuous mode [ 59.174916][ T5088] veth1_vlan: entered promiscuous mode [ 59.197747][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.217459][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.259354][ T5098] veth0_macvtap: entered promiscuous mode [ 59.345391][ T5098] veth1_macvtap: entered promiscuous mode [ 59.377426][ T5091] veth0_vlan: entered promiscuous mode [ 59.390741][ T5091] veth1_vlan: entered promiscuous mode [ 59.403151][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.410964][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.476325][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.494719][ T5088] veth0_macvtap: entered promiscuous mode [ 59.527242][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.541879][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.567906][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.586081][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.597008][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.622226][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.641566][ T5088] veth1_macvtap: entered promiscuous mode [ 59.715979][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.731791][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.741741][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.753137][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.769683][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.792628][ T5098] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.801346][ T5098] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.813889][ T5098] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.819695][ T5102] Bluetooth: hci1: command tx timeout [ 59.823300][ T5099] Bluetooth: hci0: command tx timeout [ 59.839750][ T5098] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.884823][ T5099] Bluetooth: hci2: command tx timeout [ 59.885655][ T5102] Bluetooth: hci4: command tx timeout [ 59.890227][ T5099] Bluetooth: hci3: command tx timeout [ 59.913806][ T5091] veth0_macvtap: entered promiscuous mode [ 59.923996][ T5091] veth1_macvtap: entered promiscuous mode [ 59.951237][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.980969][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.997624][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.008464][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.020814][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.031555][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.044543][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.097410][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.134067][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.145574][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.156450][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.167569][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.178344][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.224285][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.277655][ T5088] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.312245][ T5088] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.322066][ T5088] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.342627][ T5088] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.395723][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.410328][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.423989][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.435136][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.445848][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.456516][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.467735][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.478938][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.491247][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.548378][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.559981][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.569992][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.588131][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.598881][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.625829][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.640355][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.658082][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.670673][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.738736][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.763143][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.769269][ T5091] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.797085][ T5091] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.813664][ T5091] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.822396][ T5091] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.938035][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.978000][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.047031][ T5220] wg2: entered promiscuous mode [ 61.051923][ T5220] wg2: entered allmulticast mode [ 61.072431][ T5221] pimreg: entered allmulticast mode [ 61.147120][ T5221] pimreg: left allmulticast mode [ 61.195484][ T2823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.211248][ T2823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.263774][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.285683][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.336370][ T1273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.356378][ T1273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.449607][ T1273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.512820][ T1273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.625990][ T5236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'. [ 61.884690][ T5099] Bluetooth: hci0: command tx timeout [ 61.892644][ T5099] Bluetooth: hci1: command tx timeout [ 61.970577][ T5099] Bluetooth: hci3: command tx timeout [ 61.970605][ T5093] Bluetooth: hci2: command tx timeout [ 61.982676][ T5102] Bluetooth: hci4: command tx timeout [ 62.256245][ T5266] pimreg: entered allmulticast mode [ 62.267283][ T5261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 62.289744][ T5261] ipvlan2: entered promiscuous mode [ 62.295579][ T5261] ipvlan2: entered allmulticast mode [ 62.301373][ T5261] team0: entered allmulticast mode [ 62.307328][ T5261] team_slave_0: entered allmulticast mode [ 62.314492][ T5261] team_slave_1: entered allmulticast mode [ 62.321735][ T5261] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 62.340721][ T5268] netlink: 32 bytes leftover after parsing attributes in process `syz.4.34'. [ 62.369579][ T5266] pimreg: left allmulticast mode [ 62.538292][ T5275] Zero length message leads to an empty skb [ 63.447464][ T5276] netlink: 20 bytes leftover after parsing attributes in process `syz.3.36'. [ 63.563303][ T5290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'. [ 63.607913][ T5290] ipvlan2: entered promiscuous mode [ 63.626323][ T5290] ipvlan2: entered allmulticast mode [ 63.631642][ T5290] team0: entered allmulticast mode [ 63.677245][ T5290] team_slave_0: entered allmulticast mode [ 63.685015][ T5290] team_slave_1: entered allmulticast mode [ 63.694588][ T5290] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 63.785262][ T5304] netlink: 56 bytes leftover after parsing attributes in process `syz.3.40'. [ 63.851085][ T5304] netlink: 56 bytes leftover after parsing attributes in process `syz.3.40'. [ 64.025550][ T5295] ipvlan3: entered promiscuous mode [ 64.041859][ T5295] ipvlan3: entered allmulticast mode [ 64.059683][ T5295] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 64.224150][ T5326] netlink: 32 bytes leftover after parsing attributes in process `syz.3.48'. [ 64.413781][ T5336] pimreg: entered allmulticast mode [ 64.481135][ T5336] pimreg: left allmulticast mode [ 64.600564][ T5339] netlink: 36 bytes leftover after parsing attributes in process `syz.0.51'. [ 64.710682][ T5348] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.781278][ T5348] vlan2: entered promiscuous mode [ 64.792428][ T5348] xfrm0: entered promiscuous mode [ 64.811642][ T5348] team0: Port device vlan2 added [ 64.828552][ T5349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.55'. [ 64.926285][ T5352] ipvlan3: entered promiscuous mode [ 64.952759][ T5352] ipvlan3: entered allmulticast mode [ 64.960231][ T5352] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 65.794164][ T5389] vlan2: entered promiscuous mode [ 65.823263][ T5389] xfrm0: entered promiscuous mode [ 65.846243][ T5389] vlan2: entered allmulticast mode [ 65.864123][ T5389] xfrm0: entered allmulticast mode [ 65.878625][ T5389] team0: Port device vlan2 added [ 66.262190][ T5408] sch_tbf: burst 0 is lower than device macvlan0 mtu (1514) ! [ 66.801046][ T5428] __nla_validate_parse: 12 callbacks suppressed [ 66.801064][ T5428] netlink: 56 bytes leftover after parsing attributes in process `syz.4.87'. [ 66.856441][ T5428] netlink: 56 bytes leftover after parsing attributes in process `syz.4.87'. [ 66.881729][ T5434] vlan2: entered promiscuous mode [ 66.890231][ T5434] xfrm0: entered promiscuous mode [ 66.911344][ T5434] vlan2: entered allmulticast mode [ 66.917118][ T5434] xfrm0: entered allmulticast mode [ 66.924286][ T5434] team0: Port device vlan2 added [ 66.938227][ T5438] netlink: 32 bytes leftover after parsing attributes in process `syz.1.90'. [ 67.123789][ T5444] netlink: 28 bytes leftover after parsing attributes in process `syz.1.94'. [ 67.157290][ T5444] sch_tbf: burst 0 is lower than device geneve1 mtu (1514) ! [ 67.268730][ T5448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.92'. [ 67.358752][ T5454] netlink: 56 bytes leftover after parsing attributes in process `syz.1.97'. [ 67.417565][ T5454] netlink: 56 bytes leftover after parsing attributes in process `syz.1.97'. [ 67.754049][ T5471] vlan2: entered promiscuous mode [ 67.759384][ T5471] xfrm0: entered promiscuous mode [ 67.770339][ T5471] team0: Port device vlan2 added [ 67.957332][ T5483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.107'. [ 67.994519][ T5482] netlink: 56 bytes leftover after parsing attributes in process `syz.4.106'. [ 68.009529][ T5482] netlink: 56 bytes leftover after parsing attributes in process `syz.4.106'. [ 68.023003][ T5483] sch_tbf: burst 0 is lower than device veth1_vlan mtu (1514) ! [ 68.481735][ T5495] ipvlan2: entered promiscuous mode [ 68.504975][ T5495] ipvlan2: entered allmulticast mode [ 68.510292][ T5495] team0: entered allmulticast mode [ 68.549205][ T5495] team_slave_0: entered allmulticast mode [ 68.572658][ T5495] team_slave_1: entered allmulticast mode [ 68.594501][ T5495] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 69.057805][ T5520] pimreg: entered allmulticast mode [ 69.130764][ T5520] pimreg: left allmulticast mode [ 70.622813][ T5571] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 70.698377][ T5538] syz.3.128 (5538) used greatest stack depth: 17744 bytes left [ 71.270240][ T5614] lo: entered allmulticast mode [ 71.285687][ T5614] lo: left allmulticast mode [ 71.339666][ T5616] pimreg: entered allmulticast mode [ 71.380369][ T5616] pimreg: left allmulticast mode [ 71.673517][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.680100][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.815828][ T5631] __nla_validate_parse: 14 callbacks suppressed [ 71.815847][ T5631] netlink: 28 bytes leftover after parsing attributes in process `syz.0.164'. [ 71.876289][ T5633] netlink: 32 bytes leftover after parsing attributes in process `syz.3.162'. [ 72.583433][ T5664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.176'. [ 72.709375][ T5671] netlink: 32 bytes leftover after parsing attributes in process `syz.4.177'. [ 73.188726][ T5702] netlink: 16 bytes leftover after parsing attributes in process `syz.0.186'. [ 73.228264][ T5700] netlink: 28 bytes leftover after parsing attributes in process `syz.1.190'. [ 73.316562][ T5707] netlink: 56 bytes leftover after parsing attributes in process `syz.3.192'. [ 73.326322][ T5707] netlink: 56 bytes leftover after parsing attributes in process `syz.3.192'. [ 73.463186][ T5710] netlink: 56 bytes leftover after parsing attributes in process `syz.4.193'. [ 73.483261][ T5710] netlink: 56 bytes leftover after parsing attributes in process `syz.4.193'. [ 75.288720][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 76.207933][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 76.783048][ T9] cfg80211: failed to load regulatory.db [ 76.883146][ T5862] pimreg: entered allmulticast mode [ 77.023694][ T5866] __nla_validate_parse: 9 callbacks suppressed [ 77.023719][ T5866] netlink: 56 bytes leftover after parsing attributes in process `syz.3.261'. [ 77.082130][ T5866] netlink: 56 bytes leftover after parsing attributes in process `syz.3.261'. [ 77.276941][ T5883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.268'. [ 77.933203][ T5910] pimreg: entered allmulticast mode [ 78.032753][ T5917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.281'. [ 78.551810][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.290'. [ 78.646397][ T5943] pimreg: left allmulticast mode [ 78.690592][ T5944] netlink: 16 bytes leftover after parsing attributes in process `syz.3.288'. [ 78.701763][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'. [ 78.950839][ T5955] pimreg: entered allmulticast mode [ 79.650404][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 80.245788][ T6010] netlink: 40 bytes leftover after parsing attributes in process `syz.3.315'. [ 80.420722][ T6024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.315'. [ 82.059392][ T6088] __nla_validate_parse: 5 callbacks suppressed [ 82.059410][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.348'. [ 82.425083][ T6110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.355'. [ 82.623401][ T6115] FAULT_INJECTION: forcing a failure. [ 82.623401][ T6115] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 82.719080][ T6115] CPU: 0 PID: 6115 Comm: syz.1.359 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 82.729099][ T6115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 82.739170][ T6115] Call Trace: [ 82.742465][ T6115] [ 82.745409][ T6115] dump_stack_lvl+0x241/0x360 [ 82.750125][ T6115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.755341][ T6115] ? __pfx__printk+0x10/0x10 [ 82.759952][ T6115] ? snprintf+0xda/0x120 [ 82.764222][ T6115] should_fail_ex+0x3b0/0x4e0 [ 82.768930][ T6115] _copy_to_user+0x2f/0xb0 [ 82.773364][ T6115] simple_read_from_buffer+0xca/0x150 [ 82.778756][ T6115] proc_fail_nth_read+0x1e9/0x250 [ 82.783802][ T6115] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.789366][ T6115] ? rw_verify_area+0x520/0x6b0 [ 82.794236][ T6115] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.799798][ T6115] vfs_read+0x204/0xbc0 [ 82.803968][ T6115] ? __pfx_lock_release+0x10/0x10 [ 82.809008][ T6115] ? do_sock_setsockopt+0x3e2/0x720 [ 82.814229][ T6115] ? __pfx_vfs_read+0x10/0x10 [ 82.818921][ T6115] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 82.824482][ T6115] ? __fget_files+0x29/0x470 [ 82.829093][ T6115] ? __fget_files+0x3f6/0x470 [ 82.833802][ T6115] ksys_read+0x1a0/0x2c0 [ 82.838069][ T6115] ? __pfx_ksys_read+0x10/0x10 [ 82.842850][ T6115] ? do_syscall_64+0x100/0x230 [ 82.847634][ T6115] ? do_syscall_64+0xb6/0x230 [ 82.852329][ T6115] do_syscall_64+0xf3/0x230 [ 82.856848][ T6115] ? clear_bhb_loop+0x35/0x90 [ 82.861545][ T6115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.867461][ T6115] RIP: 0033:0x7f5dfd3746bc [ 82.871900][ T6115] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 82.891518][ T6115] RSP: 002b:00007f5dfe06b040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.899950][ T6115] RAX: ffffffffffffffda RBX: 00007f5dfd503f60 RCX: 00007f5dfd3746bc [ 82.907938][ T6115] RDX: 000000000000000f RSI: 00007f5dfe06b0b0 RDI: 0000000000000005 [ 82.915924][ T6115] RBP: 00007f5dfe06b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 82.923904][ T6115] R10: 00000000200004c0 R11: 0000000000000246 R12: 0000000000000001 [ 82.931889][ T6115] R13: 000000000000000b R14: 00007f5dfd503f60 R15: 00007fff4a8a5b18 [ 82.939893][ T6115] [ 83.396669][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.366'. [ 83.452491][ T6146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.371'. [ 84.112116][ T6179] pimreg: entered allmulticast mode [ 84.156171][ T6179] pimreg: left allmulticast mode [ 84.865505][ T6219] pimreg: entered allmulticast mode [ 84.901049][ T6219] pimreg: left allmulticast mode [ 84.991182][ T6224] pimreg: left allmulticast mode [ 85.044472][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.403'. [ 85.139237][ T6233] pimreg: entered allmulticast mode [ 85.193551][ T6233] pimreg: left allmulticast mode [ 85.283186][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'. [ 85.321137][ T6237] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 85.340785][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'. [ 85.946373][ T6270] netlink: 28 bytes leftover after parsing attributes in process `syz.2.420'. [ 86.079914][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.422'. [ 86.131679][ T6274] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 86.146949][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.421'. [ 86.206910][ T6268] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 87.099510][ T6310] pimreg: entered allmulticast mode [ 87.856527][ T6340] pimreg: entered allmulticast mode [ 87.897745][ T6340] __nla_validate_parse: 3 callbacks suppressed [ 87.897762][ T6340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.447'. [ 88.231803][ T6360] pimreg: left allmulticast mode [ 88.552939][ T6373] Bluetooth: MGMT ver 1.22 [ 88.955773][ T6379] netlink: 40 bytes leftover after parsing attributes in process `syz.1.463'. [ 89.193083][ T6386] netlink: 16 bytes leftover after parsing attributes in process `syz.1.463'. [ 89.820026][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.474'. [ 90.021533][ T6418] pimreg: left allmulticast mode [ 91.028095][ T6438] netlink: 36 bytes leftover after parsing attributes in process `syz.3.483'. [ 91.129488][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.486'. [ 91.661167][ T6468] pimreg: entered allmulticast mode [ 91.694329][ T6468] pimreg: left allmulticast mode [ 92.320952][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.500'. [ 92.353932][ T6484] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 92.397105][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.500'. [ 92.512600][ T6489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.499'. [ 92.667056][ T6488] netlink: 36 bytes leftover after parsing attributes in process `syz.3.501'. [ 93.151097][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 93.842405][ T6534] netlink: 36 bytes leftover after parsing attributes in process `syz.1.516'. [ 94.184028][ T6541] netlink: 40 bytes leftover after parsing attributes in process `syz.2.519'. [ 94.358403][ T6547] pimreg: entered allmulticast mode [ 94.448096][ T6554] netlink: 16 bytes leftover after parsing attributes in process `syz.2.519'. [ 94.461100][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.521'. [ 94.922492][ T6571] netlink: 36 bytes leftover after parsing attributes in process `syz.1.531'. [ 95.264754][ T6588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.537'. [ 95.631731][ T6602] pimreg: entered allmulticast mode [ 95.705620][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.542'. [ 95.829814][ T6611] netlink: 36 bytes leftover after parsing attributes in process `syz.1.546'. [ 95.984211][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.550'. [ 96.184480][ T6627] ipvlan4: entered promiscuous mode [ 96.189762][ T6627] ipvlan4: entered allmulticast mode [ 96.232106][ T6627] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 96.689922][ T6652] syz.1.561 uses obsolete (PF_INET,SOCK_PACKET) [ 96.769697][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'. [ 96.871137][ T6659] FAULT_INJECTION: forcing a failure. [ 96.871137][ T6659] name failslab, interval 1, probability 0, space 0, times 1 [ 96.901710][ T6659] CPU: 1 PID: 6659 Comm: syz.2.565 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 96.911718][ T6659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 96.921785][ T6659] Call Trace: [ 96.925076][ T6659] [ 96.928017][ T6659] dump_stack_lvl+0x241/0x360 [ 96.932712][ T6659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.937930][ T6659] ? __pfx__printk+0x10/0x10 [ 96.942553][ T6659] should_fail_ex+0x3b0/0x4e0 [ 96.947258][ T6659] ? sctp_add_bind_addr+0x89/0x3a0 [ 96.952396][ T6659] should_failslab+0x9/0x20 [ 96.956912][ T6659] kmalloc_trace_noprof+0x6c/0x2c0 [ 96.962044][ T6659] sctp_add_bind_addr+0x89/0x3a0 [ 96.967005][ T6659] sctp_copy_local_addr_list+0x311/0x500 [ 96.972660][ T6659] ? sctp_copy_local_addr_list+0xab/0x500 [ 96.978403][ T6659] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 96.984584][ T6659] ? sctp_v6_is_any+0x60/0x70 [ 96.989302][ T6659] sctp_bind_addr_copy+0xad/0x3b0 [ 96.994349][ T6659] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 97.000701][ T6659] sctp_connect_new_asoc+0x2f3/0x6c0 [ 97.006007][ T6659] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 97.011809][ T6659] ? sctp_sendmsg+0xbb9/0x3520 [ 97.016567][ T6659] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 97.022104][ T6659] ? security_sctp_bind_connect+0x90/0xb0 [ 97.027817][ T6659] sctp_sendmsg+0x219a/0x3520 [ 97.032496][ T6659] ? __pfx_sctp_sendmsg+0x10/0x10 [ 97.037527][ T6659] ? __pfx_aa_sk_perm+0x10/0x10 [ 97.042475][ T6659] ? inet_sendmsg+0x330/0x390 [ 97.047151][ T6659] __sock_sendmsg+0x1a6/0x270 [ 97.051822][ T6659] __sys_sendto+0x3a4/0x4f0 [ 97.056324][ T6659] ? __pfx___sys_sendto+0x10/0x10 [ 97.061374][ T6659] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 97.067345][ T6659] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 97.073665][ T6659] __x64_sys_sendto+0xde/0x100 [ 97.078431][ T6659] do_syscall_64+0xf3/0x230 [ 97.082932][ T6659] ? clear_bhb_loop+0x35/0x90 [ 97.087602][ T6659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.093489][ T6659] RIP: 0033:0x7faa6d975bd9 [ 97.097893][ T6659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.117490][ T6659] RSP: 002b:00007faa6e784048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 97.125900][ T6659] RAX: ffffffffffffffda RBX: 00007faa6db03f60 RCX: 00007faa6d975bd9 [ 97.133857][ T6659] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 97.141812][ T6659] RBP: 00007faa6e7840a0 R08: 00000000200000c0 R09: 000000000000001c [ 97.149770][ T6659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 97.157730][ T6659] R13: 000000000000000b R14: 00007faa6db03f60 R15: 00007fff73632bd8 [ 97.165701][ T6659] [ 97.686891][ T6693] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 98.611042][ T6733] FAULT_INJECTION: forcing a failure. [ 98.611042][ T6733] name failslab, interval 1, probability 0, space 0, times 0 [ 98.656836][ T6733] CPU: 1 PID: 6733 Comm: syz.4.596 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 98.666862][ T6733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 98.676930][ T6733] Call Trace: [ 98.680223][ T6733] [ 98.683161][ T6733] dump_stack_lvl+0x241/0x360 [ 98.687858][ T6733] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.693076][ T6733] ? __pfx__printk+0x10/0x10 [ 98.697690][ T6733] should_fail_ex+0x3b0/0x4e0 [ 98.702391][ T6733] ? ethnl_default_notify+0x1c9/0x780 [ 98.707781][ T6733] should_failslab+0x9/0x20 [ 98.712295][ T6733] __kmalloc_noprof+0xd8/0x400 [ 98.717079][ T6733] ethnl_default_notify+0x1c9/0x780 [ 98.722304][ T6733] ? __pfx_ethnl_default_notify+0x10/0x10 [ 98.728058][ T6733] ? mutex_is_locked+0x12/0x50 [ 98.732842][ T6733] ethnl_default_set_doit+0x617/0x910 [ 98.738239][ T6733] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 98.744155][ T6733] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 98.750519][ T6733] genl_rcv_msg+0xb14/0xec0 [ 98.755041][ T6733] ? mark_lock+0x9a/0x350 [ 98.759397][ T6733] ? __pfx_genl_rcv_msg+0x10/0x10 [ 98.764467][ T6733] ? __pfx_lock_acquire+0x10/0x10 [ 98.769508][ T6733] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 98.775422][ T6733] ? __pfx___might_resched+0x10/0x10 [ 98.780737][ T6733] netlink_rcv_skb+0x1e3/0x430 [ 98.785525][ T6733] ? __pfx_genl_rcv_msg+0x10/0x10 [ 98.790577][ T6733] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 98.795893][ T6733] ? __netlink_deliver_tap+0x77e/0x7c0 [ 98.801391][ T6733] genl_rcv+0x28/0x40 [ 98.805394][ T6733] netlink_unicast+0x7f0/0x990 [ 98.810188][ T6733] ? __pfx_netlink_unicast+0x10/0x10 [ 98.815486][ T6733] ? __virt_addr_valid+0x183/0x520 [ 98.820623][ T6733] ? __check_object_size+0x49c/0x900 [ 98.825920][ T6733] ? bpf_lsm_netlink_send+0x9/0x10 [ 98.831045][ T6733] netlink_sendmsg+0x8e4/0xcb0 [ 98.835851][ T6733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.841164][ T6733] ? __import_iovec+0x536/0x820 [ 98.846030][ T6733] ? aa_sock_msg_perm+0x91/0x160 [ 98.851008][ T6733] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 98.856311][ T6733] ? security_socket_sendmsg+0x87/0xb0 [ 98.861795][ T6733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.867098][ T6733] __sock_sendmsg+0x221/0x270 [ 98.871796][ T6733] ____sys_sendmsg+0x525/0x7d0 [ 98.876589][ T6733] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.881909][ T6733] __sys_sendmsg+0x2b0/0x3a0 [ 98.886525][ T6733] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.891658][ T6733] ? vfs_write+0x7c4/0xc90 [ 98.896122][ T6733] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 98.902464][ T6733] ? do_syscall_64+0x100/0x230 [ 98.907248][ T6733] ? do_syscall_64+0xb6/0x230 [ 98.911945][ T6733] do_syscall_64+0xf3/0x230 [ 98.916466][ T6733] ? clear_bhb_loop+0x35/0x90 [ 98.921162][ T6733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.927068][ T6733] RIP: 0033:0x7f6398f75bd9 [ 98.931494][ T6733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.951112][ T6733] RSP: 002b:00007f6399cee048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.959541][ T6733] RAX: ffffffffffffffda RBX: 00007f6399103f60 RCX: 00007f6398f75bd9 [ 98.967527][ T6733] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 98.975513][ T6733] RBP: 00007f6399cee0a0 R08: 0000000000000000 R09: 0000000000000000 [ 98.983499][ T6733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.991480][ T6733] R13: 000000000000000b R14: 00007f6399103f60 R15: 00007ffd77c4f668 [ 98.999479][ T6733] [ 99.074514][ T6747] __nla_validate_parse: 5 callbacks suppressed [ 99.074529][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.599'. [ 99.345380][ T6756] netlink: 40 bytes leftover after parsing attributes in process `syz.1.600'. [ 99.396955][ T6759] netlink: 28 bytes leftover after parsing attributes in process `syz.2.598'. [ 99.561457][ T6764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.600'. [ 99.641810][ T6767] netlink: 36 bytes leftover after parsing attributes in process `syz.4.606'. [ 99.983293][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.608'. [ 100.351215][ T6781] trusted_key: syz.3.610 sent an empty control message without MSG_MORE. [ 100.653447][ T6791] IPVS: Error joining to the multicast group [ 101.045250][ T6781] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 101.185617][ T6806] netlink: 36 bytes leftover after parsing attributes in process `syz.2.618'. [ 101.917780][ T6852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.635'. [ 102.023252][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.636'. [ 102.186758][ T6864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.636'. [ 102.543012][ T6881] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.306228][ T6896] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 104.135847][ T6937] FAULT_INJECTION: forcing a failure. [ 104.135847][ T6937] name failslab, interval 1, probability 0, space 0, times 0 [ 104.148935][ T6937] CPU: 0 PID: 6937 Comm: syz.0.667 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 104.158921][ T6937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 104.168974][ T6937] Call Trace: [ 104.172244][ T6937] [ 104.175170][ T6937] dump_stack_lvl+0x241/0x360 [ 104.179845][ T6937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.185033][ T6937] ? __pfx__printk+0x10/0x10 [ 104.189620][ T6937] should_fail_ex+0x3b0/0x4e0 [ 104.194295][ T6937] ? nsim_fib_event_nb+0x287/0x10b0 [ 104.199483][ T6937] should_failslab+0x9/0x20 [ 104.203979][ T6937] __kmalloc_noprof+0xd8/0x400 [ 104.208736][ T6937] nsim_fib_event_nb+0x287/0x10b0 [ 104.213755][ T6937] ? fib6_purge_rt+0x7d4/0x890 [ 104.218536][ T6937] notifier_call_chain+0x19f/0x3e0 [ 104.223651][ T6937] ? atomic_notifier_call_chain+0x26/0x180 [ 104.229445][ T6937] atomic_notifier_call_chain+0xdb/0x180 [ 104.235083][ T6937] call_fib_notifiers+0x31/0x60 [ 104.239928][ T6937] fib6_del+0x106d/0x1600 [ 104.244255][ T6937] ? fib6_del+0x1141/0x1600 [ 104.248769][ T6937] ? __pfx_fib6_del+0x10/0x10 [ 104.253467][ T6937] fib6_clean_node+0x2f7/0x5e0 [ 104.258234][ T6937] ? __pfx_fib6_clean_node+0x10/0x10 [ 104.263517][ T6937] ? __local_bh_enable_ip+0x168/0x200 [ 104.268882][ T6937] ? lockdep_hardirqs_on+0x99/0x150 [ 104.274074][ T6937] ? __local_bh_enable_ip+0x168/0x200 [ 104.279441][ T6937] fib6_walk_continue+0x658/0x8f0 [ 104.284465][ T6937] fib6_walk+0x168/0x2b0 [ 104.288704][ T6937] __fib6_clean_all+0x31f/0x4b0 [ 104.293549][ T6937] ? mark_lock+0x9a/0x350 [ 104.297873][ T6937] ? __fib6_clean_all+0xae/0x4b0 [ 104.302814][ T6937] ? __pfx_fib6_ifdown+0x10/0x10 [ 104.307752][ T6937] ? __pfx___fib6_clean_all+0x10/0x10 [ 104.313128][ T6937] ? __pfx_fib6_clean_node+0x10/0x10 [ 104.318405][ T6937] ? __pfx_fib6_ifdown+0x10/0x10 [ 104.323345][ T6937] rt6_disable_ip+0x164/0x7e0 [ 104.328018][ T6937] ? __pfx___might_resched+0x10/0x10 [ 104.333311][ T6937] ? tee_netdev_event+0x43f/0x460 [ 104.338338][ T6937] ? __pfx_rt6_disable_ip+0x10/0x10 [ 104.343537][ T6937] addrconf_ifdown+0x15d/0x1bc0 [ 104.348386][ T6937] ? __mutex_unlock_slowpath+0x21d/0x750 [ 104.354020][ T6937] ? __pfx_addrconf_ifdown+0x10/0x10 [ 104.359298][ T6937] ? tls_dev_event+0x8f6/0x10b0 [ 104.364161][ T6937] addrconf_notify+0x3cb/0x1020 [ 104.369010][ T6937] notifier_call_chain+0x19f/0x3e0 [ 104.374123][ T6937] unregister_netdevice_many_notify+0xdc8/0x1d20 [ 104.380465][ T6937] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 104.387250][ T6937] ? __pfx_lock_acquire+0x10/0x10 [ 104.392290][ T6937] ? unregister_netdevice_queue+0x26b/0x370 [ 104.398191][ T6937] ? __nla_parse+0x40/0x60 [ 104.402601][ T6937] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 104.408850][ T6937] rtnl_dellink+0x52d/0x8e0 [ 104.413361][ T6937] ? __pfx_rtnl_dellink+0x10/0x10 [ 104.418446][ T6937] ? __pfx_lock_release+0x10/0x10 [ 104.423482][ T6937] ? __pfx___mutex_lock+0x10/0x10 [ 104.428527][ T6937] ? __pfx_rtnl_dellink+0x10/0x10 [ 104.433551][ T6937] rtnetlink_rcv_msg+0x89b/0x1180 [ 104.438574][ T6937] ? rtnetlink_rcv_msg+0x208/0x1180 [ 104.443764][ T6937] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 104.449216][ T6937] ? __local_bh_enable_ip+0x168/0x200 [ 104.454576][ T6937] ? lockdep_hardirqs_on+0x99/0x150 [ 104.459767][ T6937] ? __local_bh_enable_ip+0x168/0x200 [ 104.465129][ T6937] ? dev_hard_start_xmit+0x773/0x7e0 [ 104.470408][ T6937] ? __dev_queue_xmit+0x2da/0x3e90 [ 104.475518][ T6937] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 104.481236][ T6937] ? __dev_queue_xmit+0x2da/0x3e90 [ 104.486349][ T6937] ? __dev_queue_xmit+0x1763/0x3e90 [ 104.491546][ T6937] ? kasan_save_track+0x51/0x80 [ 104.496398][ T6937] ? do_syscall_64+0xf3/0x230 [ 104.501070][ T6937] ? __dev_queue_xmit+0x2da/0x3e90 [ 104.506180][ T6937] ? __pfx___dev_queue_xmit+0x10/0x10 [ 104.511560][ T6937] ? ref_tracker_free+0x643/0x7e0 [ 104.516578][ T6937] netlink_rcv_skb+0x1e3/0x430 [ 104.521335][ T6937] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 104.526785][ T6937] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 104.532077][ T6937] ? netlink_deliver_tap+0x2e/0x1b0 [ 104.537268][ T6937] netlink_unicast+0x7f0/0x990 [ 104.542029][ T6937] ? __pfx_netlink_unicast+0x10/0x10 [ 104.547299][ T6937] ? __virt_addr_valid+0x183/0x520 [ 104.552406][ T6937] ? __check_object_size+0x49c/0x900 [ 104.557680][ T6937] ? bpf_lsm_netlink_send+0x9/0x10 [ 104.562788][ T6937] netlink_sendmsg+0x8e4/0xcb0 [ 104.567553][ T6937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.572830][ T6937] ? __import_iovec+0x536/0x820 [ 104.577671][ T6937] ? aa_sock_msg_perm+0x91/0x160 [ 104.582611][ T6937] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 104.587891][ T6937] ? security_socket_sendmsg+0x87/0xb0 [ 104.593346][ T6937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.598621][ T6937] __sock_sendmsg+0x221/0x270 [ 104.603293][ T6937] ____sys_sendmsg+0x525/0x7d0 [ 104.608057][ T6937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.613348][ T6937] __sys_sendmsg+0x2b0/0x3a0 [ 104.617935][ T6937] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.623044][ T6937] ? vfs_write+0x7c4/0xc90 [ 104.627496][ T6937] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 104.633817][ T6937] ? do_syscall_64+0x100/0x230 [ 104.638571][ T6937] ? do_syscall_64+0xb6/0x230 [ 104.643240][ T6937] do_syscall_64+0xf3/0x230 [ 104.647733][ T6937] ? clear_bhb_loop+0x35/0x90 [ 104.652402][ T6937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.658283][ T6937] RIP: 0033:0x7f0de2d75bd9 [ 104.662688][ T6937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.682284][ T6937] RSP: 002b:00007f0de3b7f048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.690690][ T6937] RAX: ffffffffffffffda RBX: 00007f0de2f04038 RCX: 00007f0de2d75bd9 [ 104.698651][ T6937] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 104.706608][ T6937] RBP: 00007f0de3b7f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 104.714567][ T6937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.722526][ T6937] R13: 000000000000006e R14: 00007f0de2f04038 R15: 00007ffeac69f638 [ 104.730505][ T6937] [ 104.889571][ T6939] __nla_validate_parse: 3 callbacks suppressed [ 104.889589][ T6939] netlink: 16 bytes leftover after parsing attributes in process `syz.1.664'. [ 105.017611][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.668'. [ 105.040924][ T6943] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 105.378375][ T6970] pimreg: entered allmulticast mode [ 105.448900][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.680'. [ 105.522904][ T6972] FAULT_INJECTION: forcing a failure. [ 105.522904][ T6972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.559552][ T6972] CPU: 0 PID: 6972 Comm: syz.1.681 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 105.569570][ T6972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 105.579643][ T6972] Call Trace: [ 105.582934][ T6972] [ 105.585879][ T6972] dump_stack_lvl+0x241/0x360 [ 105.590581][ T6972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.595804][ T6972] ? __pfx__printk+0x10/0x10 [ 105.600418][ T6972] ? snprintf+0xda/0x120 [ 105.604685][ T6972] should_fail_ex+0x3b0/0x4e0 [ 105.609391][ T6972] _copy_to_user+0x2f/0xb0 [ 105.613827][ T6972] simple_read_from_buffer+0xca/0x150 [ 105.619222][ T6972] proc_fail_nth_read+0x1e9/0x250 [ 105.624266][ T6972] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.629830][ T6972] ? rw_verify_area+0x520/0x6b0 [ 105.634700][ T6972] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.640264][ T6972] vfs_read+0x204/0xbc0 [ 105.644440][ T6972] ? __pfx_lock_release+0x10/0x10 [ 105.649486][ T6972] ? __pfx_vfs_read+0x10/0x10 [ 105.654184][ T6972] ? __fget_files+0x29/0x470 [ 105.658796][ T6972] ? __fget_files+0x3f6/0x470 [ 105.663507][ T6972] ksys_read+0x1a0/0x2c0 [ 105.667774][ T6972] ? __pfx_ksys_read+0x10/0x10 [ 105.672556][ T6972] ? do_syscall_64+0x100/0x230 [ 105.677347][ T6972] ? do_syscall_64+0xb6/0x230 [ 105.682044][ T6972] do_syscall_64+0xf3/0x230 [ 105.686564][ T6972] ? clear_bhb_loop+0x35/0x90 [ 105.691266][ T6972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.697171][ T6972] RIP: 0033:0x7f5dfd3746bc [ 105.701596][ T6972] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 105.721214][ T6972] RSP: 002b:00007f5dfe06b040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.729643][ T6972] RAX: ffffffffffffffda RBX: 00007f5dfd503f60 RCX: 00007f5dfd3746bc [ 105.737630][ T6972] RDX: 000000000000000f RSI: 00007f5dfe06b0b0 RDI: 0000000000000004 [ 105.745619][ T6972] RBP: 00007f5dfe06b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 105.753606][ T6972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.761591][ T6972] R13: 000000000000000b R14: 00007f5dfd503f60 R15: 00007fff4a8a5b18 [ 105.769603][ T6972] [ 105.939282][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.688'. [ 105.969891][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.687'. [ 106.561794][ T7025] netlink: 44 bytes leftover after parsing attributes in process `syz.4.700'. [ 106.616229][ T7025] tc_dump_action: action bad kind [ 106.638928][ T7035] netlink: 32 bytes leftover after parsing attributes in process `syz.3.702'. [ 106.688079][ T7025] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 106.722640][ T7025] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 106.838742][ T7044] netlink: 28 bytes leftover after parsing attributes in process `syz.3.709'. [ 106.911789][ T7049] FAULT_INJECTION: forcing a failure. [ 106.911789][ T7049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.949125][ T7049] CPU: 1 PID: 7049 Comm: syz.2.710 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 106.959141][ T7049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 106.969206][ T7049] Call Trace: [ 106.972496][ T7049] [ 106.975436][ T7049] dump_stack_lvl+0x241/0x360 [ 106.980140][ T7049] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.985352][ T7049] ? __pfx__printk+0x10/0x10 [ 106.989959][ T7049] ? __pfx_lock_release+0x10/0x10 [ 106.995004][ T7049] should_fail_ex+0x3b0/0x4e0 [ 106.999705][ T7049] _copy_from_user+0x2f/0xe0 [ 107.004316][ T7049] copy_from_sockptr_offset+0x6b/0xb0 [ 107.009714][ T7049] do_ip6t_set_ctl+0xbe6/0x1270 [ 107.014585][ T7049] ? __pfx___might_resched+0x10/0x10 [ 107.019887][ T7049] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 107.025191][ T7049] ? __pfx_lock_release+0x10/0x10 [ 107.030318][ T7049] ? __mutex_unlock_slowpath+0x21d/0x750 [ 107.035982][ T7049] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 107.041990][ T7049] ? __pfx_aa_sk_perm+0x10/0x10 [ 107.046863][ T7049] nf_setsockopt+0x295/0x2c0 [ 107.051477][ T7049] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 107.057388][ T7049] do_sock_setsockopt+0x3af/0x720 [ 107.062441][ T7049] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 107.068013][ T7049] ? __fget_files+0x29/0x470 [ 107.072631][ T7049] ? __fget_files+0x3f6/0x470 [ 107.077338][ T7049] __sys_setsockopt+0x1ae/0x250 [ 107.082213][ T7049] __x64_sys_setsockopt+0xb5/0xd0 [ 107.087260][ T7049] do_syscall_64+0xf3/0x230 [ 107.091779][ T7049] ? clear_bhb_loop+0x35/0x90 [ 107.096472][ T7049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.102376][ T7049] RIP: 0033:0x7faa6d975bd9 [ 107.106801][ T7049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.126420][ T7049] RSP: 002b:00007faa6e784048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 107.134856][ T7049] RAX: ffffffffffffffda RBX: 00007faa6db03f60 RCX: 00007faa6d975bd9 [ 107.142839][ T7049] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 107.150823][ T7049] RBP: 00007faa6e7840a0 R08: 0000000000000662 R09: 0000000000000000 [ 107.158803][ T7049] R10: 00000000200006c0 R11: 0000000000000246 R12: 0000000000000001 [ 107.166782][ T7049] R13: 000000000000000b R14: 00007faa6db03f60 R15: 00007fff73632bd8 [ 107.174779][ T7049] [ 107.534642][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.718'. [ 107.656728][ T7072] team0: entered promiscuous mode [ 107.666317][ T7072] team_slave_0: entered promiscuous mode [ 107.672411][ T7072] team_slave_1: entered promiscuous mode [ 108.051347][ T7088] netlink: 56 bytes leftover after parsing attributes in process `syz.1.726'. [ 108.407027][ T7071] team0: left promiscuous mode [ 108.424382][ T7071] team_slave_0: left promiscuous mode [ 108.438752][ T7071] team_slave_1: left promiscuous mode [ 108.714504][ T7101] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 108.726980][ T7110] netlink: 'syz.2.736': attribute type 1 has an invalid length. [ 109.243625][ T7128] 0·: renamed from hsr0 (while UP) [ 109.264966][ T7128] 0·: entered allmulticast mode [ 109.269876][ T7128] hsr_slave_0: entered allmulticast mode [ 109.293198][ T7128] hsr_slave_1: entered allmulticast mode [ 109.300826][ T7128] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 109.343283][ T7146] x_tables: duplicate underflow at hook 1 [ 109.714368][ T7164] FAULT_INJECTION: forcing a failure. [ 109.714368][ T7164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.731927][ T7164] CPU: 0 PID: 7164 Comm: syz.4.758 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 109.741936][ T7164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 109.751989][ T7164] Call Trace: [ 109.755260][ T7164] [ 109.758179][ T7164] dump_stack_lvl+0x241/0x360 [ 109.762851][ T7164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.768038][ T7164] ? __pfx__printk+0x10/0x10 [ 109.772618][ T7164] ? __pfx_lock_release+0x10/0x10 [ 109.777634][ T7164] should_fail_ex+0x3b0/0x4e0 [ 109.782306][ T7164] _copy_from_user+0x2f/0xe0 [ 109.786887][ T7164] sk_setsockopt+0x2e0/0x3390 [ 109.791561][ T7164] ? __pfx___might_resched+0x10/0x10 [ 109.796844][ T7164] ? __pfx_sk_setsockopt+0x10/0x10 [ 109.801951][ T7164] ? aa_sk_perm+0x967/0xab0 [ 109.806455][ T7164] ? __pfx_aa_sk_perm+0x10/0x10 [ 109.811301][ T7164] ? __pfx_lock_acquire+0x10/0x10 [ 109.816313][ T7164] ? aa_sock_opt_perm+0x79/0x120 [ 109.821241][ T7164] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 109.826774][ T7164] ? security_socket_setsockopt+0x87/0xb0 [ 109.832485][ T7164] do_sock_setsockopt+0x2fb/0x720 [ 109.837513][ T7164] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 109.843062][ T7164] ? __fget_files+0x29/0x470 [ 109.847659][ T7164] ? __fget_files+0x3f6/0x470 [ 109.852334][ T7164] __sys_setsockopt+0x1ae/0x250 [ 109.857184][ T7164] __x64_sys_setsockopt+0xb5/0xd0 [ 109.862205][ T7164] do_syscall_64+0xf3/0x230 [ 109.866699][ T7164] ? clear_bhb_loop+0x35/0x90 [ 109.871370][ T7164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.877254][ T7164] RIP: 0033:0x7f6398f75bd9 [ 109.881657][ T7164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.901250][ T7164] RSP: 002b:00007f6399cee048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 109.909661][ T7164] RAX: ffffffffffffffda RBX: 00007f6399103f60 RCX: 00007f6398f75bd9 [ 109.917623][ T7164] RDX: 0000000000000041 RSI: 0000000000000001 RDI: 0000000000000003 [ 109.925584][ T7164] RBP: 00007f6399cee0a0 R08: 0000000000000004 R09: 0000000000000000 [ 109.933543][ T7164] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 109.941499][ T7164] R13: 000000000000000b R14: 00007f6399103f60 R15: 00007ffd77c4f668 [ 109.949473][ T7164] [ 110.379095][ T7177] __nla_validate_parse: 7 callbacks suppressed [ 110.379119][ T7177] netlink: 20 bytes leftover after parsing attributes in process `syz.3.764'. [ 110.409481][ T7182] netlink: 'syz.1.763': attribute type 10 has an invalid length. [ 110.436626][ T7181] netlink: 56 bytes leftover after parsing attributes in process `syz.0.766'. [ 110.452354][ T7182] team0: Port device netdevsim0 added [ 110.954258][ T7215] netlink: 56 bytes leftover after parsing attributes in process `syz.4.779'. [ 111.213638][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.783'. [ 111.249146][ T7222] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 111.301011][ T7227] netlink: 'syz.4.786': attribute type 1 has an invalid length. [ 111.340492][ T7227] netlink: 9328 bytes leftover after parsing attributes in process `syz.4.786'. [ 111.366658][ T7227] netlink: 'syz.4.786': attribute type 1 has an invalid length. [ 111.513427][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.789'. [ 111.536736][ T7239] netlink: 100 bytes leftover after parsing attributes in process `syz.4.789'. [ 111.558096][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.789'. [ 111.617233][ T7239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.647489][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.791'. [ 111.714445][ T7250] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.792'. [ 111.758888][ T7252] vlan3: entered promiscuous mode [ 111.768333][ T7252] bond0: entered promiscuous mode [ 111.775295][ T7252] bond_slave_0: entered promiscuous mode [ 111.781556][ T7252] bond_slave_1: entered promiscuous mode [ 111.791735][ T7252] bond0: left promiscuous mode [ 111.796819][ T7252] bond_slave_0: left promiscuous mode [ 111.802878][ T7252] bond_slave_1: left promiscuous mode [ 111.840375][ T7255] netlink: 'syz.0.794': attribute type 4 has an invalid length. [ 111.883965][ T7255] netlink: 'syz.0.794': attribute type 4 has an invalid length. [ 112.084678][ T7265] netlink: zone id is out of range [ 112.113642][ T7265] netlink: zone id is out of range [ 112.124304][ T7265] netlink: zone id is out of range [ 112.132033][ T7265] netlink: zone id is out of range [ 112.138453][ T7265] netlink: zone id is out of range [ 112.144798][ T7265] netlink: zone id is out of range [ 112.164638][ T7265] netlink: zone id is out of range [ 112.185348][ T7265] netlink: zone id is out of range [ 112.194552][ T7265] netlink: set zone limit has 4 unknown bytes [ 112.579970][ T7286] netlink: 'syz.1.803': attribute type 12 has an invalid length. [ 112.598186][ T7286] netlink: 'syz.1.803': attribute type 1 has an invalid length. [ 112.618960][ T7286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.983472][ T7299] netlink: 'syz.2.807': attribute type 4 has an invalid length. [ 113.103542][ T7299] netlink: 'syz.2.807': attribute type 4 has an invalid length. [ 113.270029][ T7304] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 113.439994][ T7309] lo speed is unknown, defaulting to 1000 [ 113.496706][ T7309] lo speed is unknown, defaulting to 1000 [ 113.537870][ T7309] lo speed is unknown, defaulting to 1000 [ 113.969805][ T7328] validate_nla: 3 callbacks suppressed [ 113.969823][ T7328] netlink: 'syz.3.820': attribute type 4 has an invalid length. [ 114.016916][ T7309] infiniband syz0: set active [ 114.023229][ T8] lo speed is unknown, defaulting to 1000 [ 114.032668][ T7309] infiniband syz0: added lo [ 114.279795][ T7334] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 114.301699][ T7309] RDS/IB: syz0: added [ 114.338545][ T7309] smc: adding ib device syz0 with port count 1 [ 114.369695][ T7309] smc: ib device syz0 port 1 has pnetid [ 114.397213][ T5147] lo speed is unknown, defaulting to 1000 [ 114.418108][ T7309] lo speed is unknown, defaulting to 1000 [ 114.501731][ T7343] team_slave_0: entered promiscuous mode [ 114.507678][ T7343] team_slave_1: entered promiscuous mode [ 114.582868][ T7343] vlan3: entered promiscuous mode [ 114.598139][ T7343] team0: entered promiscuous mode [ 114.701145][ T7355] netlink: 'syz.2.831': attribute type 4 has an invalid length. [ 114.824366][ T7362] FAULT_INJECTION: forcing a failure. [ 114.824366][ T7362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.884311][ T7362] CPU: 1 PID: 7362 Comm: syz.4.833 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 114.894318][ T7362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 114.904386][ T7362] Call Trace: [ 114.907674][ T7362] [ 114.910611][ T7362] dump_stack_lvl+0x241/0x360 [ 114.915312][ T7362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.920531][ T7362] ? __pfx__printk+0x10/0x10 [ 114.925151][ T7362] ? __pfx_lock_release+0x10/0x10 [ 114.930201][ T7362] should_fail_ex+0x3b0/0x4e0 [ 114.934907][ T7362] _copy_from_iter+0x1f6/0x1960 [ 114.939778][ T7362] ? __virt_addr_valid+0x183/0x520 [ 114.944909][ T7362] ? skb_set_owner_w+0x238/0x3e0 [ 114.949872][ T7362] ? __pfx__copy_from_iter+0x10/0x10 [ 114.955176][ T7362] ? __pfx__copy_from_iter+0x10/0x10 [ 114.960484][ T7362] ? page_copy_sane+0x154/0x260 [ 114.965353][ T7362] copy_page_from_iter+0x7a/0x100 [ 114.970397][ T7362] skb_copy_datagram_from_iter+0x2d8/0x6c0 [ 114.976230][ T7362] packet_sendmsg+0x4231/0x6710 [ 114.981126][ T7362] ? __pfx___might_resched+0x10/0x10 [ 114.986439][ T7362] ? aa_sk_perm+0x967/0xab0 [ 114.989954][ T7309] lo speed is unknown, defaulting to 1000 [ 114.990946][ T7362] ? __pfx_packet_sendmsg+0x10/0x10 [ 114.990982][ T7362] ? __fget_files+0x29/0x470 [ 115.006454][ T7362] ? aa_sock_msg_perm+0x91/0x160 [ 115.011420][ T7362] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 115.016723][ T7362] ? security_socket_sendmsg+0x87/0xb0 [ 115.022206][ T7362] ? __pfx_packet_sendmsg+0x10/0x10 [ 115.027428][ T7362] __sock_sendmsg+0x221/0x270 [ 115.032135][ T7362] __sys_sendto+0x3a4/0x4f0 [ 115.036660][ T7362] ? __pfx___sys_sendto+0x10/0x10 [ 115.041723][ T7362] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 115.047720][ T7362] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 115.054069][ T7362] __x64_sys_sendto+0xde/0x100 [ 115.058851][ T7362] do_syscall_64+0xf3/0x230 [ 115.063364][ T7362] ? clear_bhb_loop+0x35/0x90 [ 115.068054][ T7362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.073957][ T7362] RIP: 0033:0x7f6398f75bd9 [ 115.078385][ T7362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.098001][ T7362] RSP: 002b:00007f6399cee048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 115.106430][ T7362] RAX: ffffffffffffffda RBX: 00007f6399103f60 RCX: 00007f6398f75bd9 [ 115.114413][ T7362] RDX: 000000000000fce0 RSI: 00000000200002c0 RDI: 0000000000000004 [ 115.122394][ T7362] RBP: 00007f6399cee0a0 R08: 0000000020000140 R09: 0000000000000014 [ 115.130376][ T7362] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 115.138355][ T7362] R13: 000000000000000b R14: 00007f6399103f60 R15: 00007ffd77c4f668 [ 115.146366][ T7362] [ 115.333773][ T7309] lo speed is unknown, defaulting to 1000 [ 115.685601][ T7384] tipc: Started in network mode [ 115.695527][ T7384] tipc: Node identity ffffffff, cluster identity 4711 [ 115.712695][ T7384] tipc: Node number set to 4294967295 [ 115.778834][ T7309] lo speed is unknown, defaulting to 1000 [ 116.089794][ T7309] lo speed is unknown, defaulting to 1000 [ 116.187342][ T7396] __nla_validate_parse: 49 callbacks suppressed [ 116.187360][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.849'. [ 116.296620][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.851'. [ 116.813505][ T7428] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 116.951214][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.864'. [ 117.223385][ T7446] netlink: 'syz.2.869': attribute type 9 has an invalid length. [ 117.261379][ T7446] netlink: 'syz.2.869': attribute type 7 has an invalid length. [ 117.270082][ T7446] netlink: 'syz.2.869': attribute type 8 has an invalid length. [ 117.288729][ T7446] netlink: 10 bytes leftover after parsing attributes in process `syz.2.869'. [ 117.314041][ T7446] rdma_rxe: rxe_newlink: failed to add lo [ 117.349129][ T7446] net_ratelimit: 1 callbacks suppressed [ 117.349145][ T7446] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 117.382875][ T7450] xt_l2tp: missing protocol rule (udp|l2tpip) [ 117.407638][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 117.420128][ T7450] netlink: 'syz.1.871': attribute type 15 has an invalid length. [ 117.774844][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.877'. [ 118.049873][ T7478] netlink: 'syz.0.881': attribute type 10 has an invalid length. [ 118.355712][ T7487] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 118.683827][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.890'. [ 118.898642][ T7505] xt_SECMARK: invalid mode: 0 [ 118.930092][ T7507] netlink: 'syz.3.895': attribute type 10 has an invalid length. [ 119.029874][ T7507] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 119.072953][ T7507] team0: Port device netdevsim0 added [ 119.265319][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.899'. [ 119.523454][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'. [ 119.651126][ T7540] dccp_v4_rcv: dropped packet with invalid checksum [ 119.787729][ T7543] netlink: 40 bytes leftover after parsing attributes in process `syz.0.909'. [ 120.710959][ T7595] warning: `syz.2.929' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 120.936740][ T7603] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 121.222872][ T7607] __nla_validate_parse: 4 callbacks suppressed [ 121.222890][ T7607] netlink: 256 bytes leftover after parsing attributes in process `syz.2.933'. [ 121.512114][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.939'. [ 121.578465][ T7627] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 121.713898][ T7620] netlink: 28 bytes leftover after parsing attributes in process `syz.3.939'. [ 121.929775][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.944'. [ 121.983391][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.941'. [ 122.133737][ T7655] netlink: 72 bytes leftover after parsing attributes in process `syz.4.947'. [ 122.218687][ T7657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.317788][ T7658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.576991][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.955'. [ 122.602979][ T7672] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 122.651126][ T7672] netlink: 28 bytes leftover after parsing attributes in process `syz.1.955'. [ 122.823688][ T7682] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 122.831318][ T7682] IPv6: NLM_F_CREATE should be set when creating new route [ 122.838749][ T7682] IPv6: NLM_F_CREATE should be set when creating new route [ 122.993039][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.959'. [ 123.449515][ T7709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.963'. [ 124.321475][ T7742] netlink: 'syz.3.979': attribute type 2 has an invalid length. [ 124.800223][ T7754] lo speed is unknown, defaulting to 1000 [ 125.971046][ T7820] pimreg: entered allmulticast mode [ 126.792464][ T7843] __nla_validate_parse: 2 callbacks suppressed [ 126.792485][ T7843] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1006'. [ 127.383157][ T7866] ipvlan0: entered promiscuous mode [ 127.417336][ T7864] ipvlan0: left promiscuous mode [ 127.556391][ T7873] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1014'. [ 128.542276][ T7902] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1025'. [ 129.673993][ T7944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1040'. [ 129.989705][ T7953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1044'. [ 130.026342][ T7953] ipvlan2: entered promiscuous mode [ 130.042027][ T7953] ipvlan2: entered allmulticast mode [ 130.055390][ T7953] team0: entered allmulticast mode [ 130.063650][ T7953] team_slave_0: entered allmulticast mode [ 130.069697][ T7953] team_slave_1: entered allmulticast mode [ 130.089545][ T7953] vlan2: entered allmulticast mode [ 130.104723][ T7953] xfrm0: entered allmulticast mode [ 130.126359][ T7953] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 130.882861][ T7990] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1055'. [ 131.753410][ T8023] IPVS: set_ctl: invalid protocol: 33 100.1.1.2:20004 [ 132.304354][ T8051] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1074'. [ 132.370942][ T8058] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1077'. [ 132.423633][ T8057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1079'. [ 132.464503][ T8057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.527064][ T8061] FAULT_INJECTION: forcing a failure. [ 132.527064][ T8061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.578174][ T8061] CPU: 1 PID: 8061 Comm: syz.1.1081 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 132.588269][ T8061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 132.598336][ T8061] Call Trace: [ 132.601627][ T8061] [ 132.604567][ T8061] dump_stack_lvl+0x241/0x360 [ 132.609266][ T8061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.614515][ T8061] ? __pfx__printk+0x10/0x10 [ 132.619128][ T8061] ? __pfx_lock_release+0x10/0x10 [ 132.624177][ T8061] ? vfs_write+0x7c4/0xc90 [ 132.628617][ T8061] should_fail_ex+0x3b0/0x4e0 [ 132.633322][ T8061] _copy_from_user+0x2f/0xe0 [ 132.637932][ T8061] __sys_bpf+0x1a4/0x810 [ 132.642200][ T8061] ? __pfx___sys_bpf+0x10/0x10 [ 132.643500][ T8069] FAULT_INJECTION: forcing a failure. [ 132.643500][ T8069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.646979][ T8061] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 132.647005][ T8061] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 132.672280][ T8061] ? do_syscall_64+0x100/0x230 [ 132.677068][ T8061] __x64_sys_bpf+0x7c/0x90 [ 132.681506][ T8061] do_syscall_64+0xf3/0x230 [ 132.686028][ T8061] ? clear_bhb_loop+0x35/0x90 [ 132.690722][ T8061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.696632][ T8061] RIP: 0033:0x7f5dfd375bd9 [ 132.701063][ T8061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.720668][ T8061] RSP: 002b:00007f5dfe06b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 132.729088][ T8061] RAX: ffffffffffffffda RBX: 00007f5dfd503f60 RCX: 00007f5dfd375bd9 [ 132.737055][ T8061] RDX: 0000000000000020 RSI: 0000000020001280 RDI: 0000000000000012 [ 132.745017][ T8061] RBP: 00007f5dfe06b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 132.752978][ T8061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.760938][ T8061] R13: 000000000000000b R14: 00007f5dfd503f60 R15: 00007fff4a8a5b18 [ 132.768913][ T8061] [ 132.803113][ T8066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1079'. [ 132.822637][ T8069] CPU: 1 PID: 8069 Comm: syz.3.1083 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 132.832733][ T8069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 132.834880][ T8074] netlink: 'syz.2.1086': attribute type 10 has an invalid length. [ 132.842776][ T8069] Call Trace: [ 132.842789][ T8069] [ 132.842797][ T8069] dump_stack_lvl+0x241/0x360 [ 132.842826][ T8069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.842847][ T8069] ? __pfx__printk+0x10/0x10 [ 132.842868][ T8069] ? __pfx_lock_release+0x10/0x10 [ 132.842894][ T8069] should_fail_ex+0x3b0/0x4e0 [ 132.842925][ T8069] _copy_from_user+0x2f/0xe0 [ 132.842945][ T8069] copy_msghdr_from_user+0xae/0x680 [ 132.842974][ T8069] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 132.843010][ T8069] __sys_sendmsg+0x23d/0x3a0 [ 132.843039][ T8069] ? __pfx___sys_sendmsg+0x10/0x10 [ 132.843061][ T8069] ? vfs_write+0x7c4/0xc90 [ 132.843125][ T8069] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 132.843146][ T8069] ? do_syscall_64+0x100/0x230 [ 132.843169][ T8069] ? do_syscall_64+0xb6/0x230 [ 132.843192][ T8069] do_syscall_64+0xf3/0x230 [ 132.843212][ T8069] ? clear_bhb_loop+0x35/0x90 [ 132.843237][ T8069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.843258][ T8069] RIP: 0033:0x7fc2b5d75bd9 [ 132.843276][ T8069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.843291][ T8069] RSP: 002b:00007fc2b6a89048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.843312][ T8069] RAX: ffffffffffffffda RBX: 00007fc2b5f04038 RCX: 00007fc2b5d75bd9 [ 132.843327][ T8069] RDX: 0000000000000080 RSI: 0000000020000100 RDI: 0000000000000003 [ 132.843339][ T8069] RBP: 00007fc2b6a890a0 R08: 0000000000000000 R09: 0000000000000000 [ 132.843351][ T8069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.843362][ T8069] R13: 000000000000006e R14: 00007fc2b5f04038 R15: 00007fffac7b5508 [ 132.843392][ T8069] [ 133.101943][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.108499][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.183438][ T8074] netlink: 'syz.2.1086': attribute type 10 has an invalid length. [ 133.203607][ T8074] bridge0: port 3(team0) entered blocking state [ 133.218776][ T8074] bridge0: port 3(team0) entered disabled state [ 133.333574][ T8093] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1090'. [ 133.505278][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1093'. [ 133.523084][ T8103] FAULT_INJECTION: forcing a failure. [ 133.523084][ T8103] name failslab, interval 1, probability 0, space 0, times 0 [ 133.555270][ T8103] CPU: 0 PID: 8103 Comm: syz.4.1094 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 133.565358][ T8103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 133.575424][ T8103] Call Trace: [ 133.578714][ T8103] [ 133.581654][ T8103] dump_stack_lvl+0x241/0x360 [ 133.586359][ T8103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.591583][ T8103] ? __pfx__printk+0x10/0x10 [ 133.596194][ T8103] ? __pfx___might_resched+0x10/0x10 [ 133.601492][ T8103] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 133.607490][ T8103] ? alg_setsockopt+0x61/0x450 [ 133.612276][ T8103] should_fail_ex+0x3b0/0x4e0 [ 133.616981][ T8103] ? sock_kmalloc+0xd7/0x160 [ 133.621587][ T8103] should_failslab+0x9/0x20 [ 133.626102][ T8103] __kmalloc_noprof+0xd8/0x400 [ 133.630885][ T8103] sock_kmalloc+0xd7/0x160 [ 133.635316][ T8103] alg_setkey+0x59/0x1b0 [ 133.639590][ T8103] alg_setsockopt+0x383/0x450 [ 133.640721][ T8107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1092'. [ 133.644270][ T8103] ? __pfx_alg_setsockopt+0x10/0x10 [ 133.644320][ T8103] do_sock_setsockopt+0x3af/0x720 [ 133.644352][ T8103] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 133.644374][ T8103] ? __fget_files+0x29/0x470 [ 133.644399][ T8103] ? __fget_files+0x3f6/0x470 [ 133.644433][ T8103] __sys_setsockopt+0x1ae/0x250 [ 133.683157][ T8103] __x64_sys_setsockopt+0xb5/0xd0 [ 133.688182][ T8103] do_syscall_64+0xf3/0x230 [ 133.692690][ T8103] ? clear_bhb_loop+0x35/0x90 [ 133.697366][ T8103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.703259][ T8103] RIP: 0033:0x7f6398f75bd9 [ 133.707667][ T8103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.727263][ T8103] RSP: 002b:00007f6399cee048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 133.735669][ T8103] RAX: ffffffffffffffda RBX: 00007f6399103f60 RCX: 00007f6398f75bd9 [ 133.743632][ T8103] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 133.751592][ T8103] RBP: 00007f6399cee0a0 R08: 0000000000000004 R09: 0000000000000000 [ 133.759559][ T8103] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 133.767523][ T8103] R13: 000000000000000b R14: 00007f6399103f60 R15: 00007ffd77c4f668 [ 133.775503][ T8103] [ 133.824044][ T8104] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1092'. [ 133.868918][ T8109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1095'. [ 134.029773][ T8115] netlink: 'syz.0.1097': attribute type 21 has an invalid length. [ 134.049220][ T8117] FAULT_INJECTION: forcing a failure. [ 134.049220][ T8117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.065310][ T8115] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1097'. [ 134.089564][ T8117] CPU: 1 PID: 8117 Comm: syz.3.1098 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 134.099655][ T8117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 134.109718][ T8117] Call Trace: [ 134.113008][ T8117] [ 134.115950][ T8117] dump_stack_lvl+0x241/0x360 [ 134.120649][ T8117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.125859][ T8117] ? __pfx__printk+0x10/0x10 [ 134.130473][ T8117] ? vfs_write+0x7c4/0xc90 [ 134.134924][ T8117] should_fail_ex+0x3b0/0x4e0 [ 134.139627][ T8117] _copy_from_user+0x2f/0xe0 [ 134.144232][ T8117] move_addr_to_kernel+0x82/0x150 [ 134.149277][ T8117] __sys_connect+0xc1/0x310 [ 134.153805][ T8117] ? __pfx___sys_connect+0x10/0x10 [ 134.158936][ T8117] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 134.165260][ T8117] ? do_syscall_64+0x100/0x230 [ 134.170017][ T8117] __x64_sys_connect+0x7a/0x90 [ 134.174780][ T8117] do_syscall_64+0xf3/0x230 [ 134.179273][ T8117] ? clear_bhb_loop+0x35/0x90 [ 134.183942][ T8117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.189824][ T8117] RIP: 0033:0x7fc2b5d75bd9 [ 134.194231][ T8117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.213824][ T8117] RSP: 002b:00007fc2b6aaa048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 134.222226][ T8117] RAX: ffffffffffffffda RBX: 00007fc2b5f03f60 RCX: 00007fc2b5d75bd9 [ 134.230184][ T8117] RDX: 000000000000001c RSI: 0000000020000240 RDI: 0000000000000003 [ 134.238140][ T8117] RBP: 00007fc2b6aaa0a0 R08: 0000000000000000 R09: 0000000000000000 [ 134.246098][ T8117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.254055][ T8117] R13: 000000000000000b R14: 00007fc2b5f03f60 R15: 00007fffac7b5508 [ 134.262041][ T8117] [ 134.546896][ T8130] FAULT_INJECTION: forcing a failure. [ 134.546896][ T8130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.572415][ T8130] CPU: 0 PID: 8130 Comm: syz.2.1103 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 134.582514][ T8130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 134.592579][ T8130] Call Trace: [ 134.595870][ T8130] [ 134.598894][ T8130] dump_stack_lvl+0x241/0x360 [ 134.603598][ T8130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.608810][ T8130] ? __pfx__printk+0x10/0x10 [ 134.613422][ T8130] ? __pfx_lock_release+0x10/0x10 [ 134.618471][ T8130] should_fail_ex+0x3b0/0x4e0 [ 134.623171][ T8130] _copy_from_user+0x2f/0xe0 [ 134.627775][ T8130] copy_msghdr_from_user+0xae/0x680 [ 134.632988][ T8130] ? _parse_integer_limit+0x1b5/0x200 [ 134.638382][ T8130] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 134.644227][ T8130] __sys_sendmmsg+0x374/0x740 [ 134.648934][ T8130] ? __pfx___sys_sendmmsg+0x10/0x10 [ 134.654185][ T8130] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 134.660094][ T8130] ? ksys_write+0x23e/0x2c0 [ 134.664609][ T8130] ? __pfx_lock_release+0x10/0x10 [ 134.669659][ T8130] ? vfs_write+0x7c4/0xc90 [ 134.674095][ T8130] ? __mutex_unlock_slowpath+0x21d/0x750 [ 134.679723][ T8130] ? __pfx_vfs_write+0x10/0x10 [ 134.684503][ T8130] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 134.690477][ T8130] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 134.696794][ T8130] ? do_syscall_64+0x100/0x230 [ 134.701547][ T8130] __x64_sys_sendmmsg+0xa0/0xb0 [ 134.706395][ T8130] do_syscall_64+0xf3/0x230 [ 134.710889][ T8130] ? clear_bhb_loop+0x35/0x90 [ 134.715574][ T8130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.721465][ T8130] RIP: 0033:0x7faa6d975bd9 [ 134.725871][ T8130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.745473][ T8130] RSP: 002b:00007faa6e784048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 134.753882][ T8130] RAX: ffffffffffffffda RBX: 00007faa6db03f60 RCX: 00007faa6d975bd9 [ 134.761844][ T8130] RDX: 0000000000000001 RSI: 00000000200020c0 RDI: 0000000000000003 [ 134.769803][ T8130] RBP: 00007faa6e7840a0 R08: 0000000000000000 R09: 0000000000000000 [ 134.777772][ T8130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.785734][ T8130] R13: 000000000000000b R14: 00007faa6db03f60 R15: 00007fff73632bd8 [ 134.793707][ T8130] [ 135.120230][ T8144] FAULT_INJECTION: forcing a failure. [ 135.120230][ T8144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.146494][ T8144] CPU: 0 PID: 8144 Comm: syz.2.1107 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 135.156591][ T8144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 135.166640][ T8144] Call Trace: [ 135.169908][ T8144] [ 135.172831][ T8144] dump_stack_lvl+0x241/0x360 [ 135.177505][ T8144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.182692][ T8144] ? __pfx__printk+0x10/0x10 [ 135.187273][ T8144] ? vfs_write+0x7c4/0xc90 [ 135.191689][ T8144] should_fail_ex+0x3b0/0x4e0 [ 135.196370][ T8144] _copy_from_user+0x2f/0xe0 [ 135.200952][ T8144] move_addr_to_kernel+0x82/0x150 [ 135.205969][ T8144] __sys_connect+0xc1/0x310 [ 135.210467][ T8144] ? __pfx___sys_connect+0x10/0x10 [ 135.215591][ T8144] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 135.221914][ T8144] ? do_syscall_64+0x100/0x230 [ 135.226682][ T8144] __x64_sys_connect+0x7a/0x90 [ 135.231455][ T8144] do_syscall_64+0xf3/0x230 [ 135.235956][ T8144] ? clear_bhb_loop+0x35/0x90 [ 135.240628][ T8144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.246522][ T8144] RIP: 0033:0x7faa6d975bd9 [ 135.250930][ T8144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.270524][ T8144] RSP: 002b:00007faa6e742048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 135.278927][ T8144] RAX: ffffffffffffffda RBX: 00007faa6db04110 RCX: 00007faa6d975bd9 [ 135.286899][ T8144] RDX: 000000000000006e RSI: 0000000020000100 RDI: 0000000000000007 [ 135.294865][ T8144] RBP: 00007faa6e7420a0 R08: 0000000000000000 R09: 0000000000000000 [ 135.302826][ T8144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.310786][ T8144] R13: 000000000000006e R14: 00007faa6db04110 R15: 00007fff73632bd8 [ 135.318765][ T8144] [ 137.197336][ T8176] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.377420][ T8183] team0: Port device wlan1 added [ 137.704906][ T8204] __nla_validate_parse: 2 callbacks suppressed [ 137.704924][ T8204] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1128'. [ 137.836018][ T8204] netlink: 'syz.1.1128': attribute type 3 has an invalid length. [ 137.877470][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1129'. [ 137.981229][ T8219] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.989883][ T8213] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1129'. [ 138.187315][ T8224] FAULT_INJECTION: forcing a failure. [ 138.187315][ T8224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.271945][ T8224] CPU: 0 PID: 8224 Comm: syz.3.1134 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 138.282081][ T8224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 138.292147][ T8224] Call Trace: [ 138.295439][ T8224] [ 138.298378][ T8224] dump_stack_lvl+0x241/0x360 [ 138.303078][ T8224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.308290][ T8224] ? __pfx__printk+0x10/0x10 [ 138.312899][ T8224] ? __pfx_lock_release+0x10/0x10 [ 138.317941][ T8224] ? vfs_write+0x7c4/0xc90 [ 138.322380][ T8224] should_fail_ex+0x3b0/0x4e0 [ 138.327081][ T8224] _copy_from_user+0x2f/0xe0 [ 138.331690][ T8224] __sys_bpf+0x1a4/0x810 [ 138.335966][ T8224] ? __pfx___sys_bpf+0x10/0x10 [ 138.340765][ T8224] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 138.346763][ T8224] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 138.353091][ T8224] ? do_syscall_64+0x100/0x230 [ 138.357849][ T8224] __x64_sys_bpf+0x7c/0x90 [ 138.362260][ T8224] do_syscall_64+0xf3/0x230 [ 138.366754][ T8224] ? clear_bhb_loop+0x35/0x90 [ 138.371444][ T8224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.377332][ T8224] RIP: 0033:0x7fc2b5d75bd9 [ 138.381740][ T8224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.401348][ T8224] RSP: 002b:00007fc2b6aaa048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 138.409757][ T8224] RAX: ffffffffffffffda RBX: 00007fc2b5f03f60 RCX: 00007fc2b5d75bd9 [ 138.417725][ T8224] RDX: 0000000000000050 RSI: 0000000020000140 RDI: 000000000000000a [ 138.425686][ T8224] RBP: 00007fc2b6aaa0a0 R08: 0000000000000000 R09: 0000000000000000 [ 138.433644][ T8224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.441602][ T8224] R13: 000000000000000b R14: 00007fc2b5f03f60 R15: 00007fffac7b5508 [ 138.449576][ T8224] [ 138.617877][ T8233] netlink: 'syz.3.1137': attribute type 30 has an invalid length. [ 138.831491][ T8233] team_slave_1: mtu greater than device maximum [ 138.858831][ T8233] team0: Device team_slave_1 failed to change mtu [ 139.077793][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1145'. [ 139.267766][ T8257] netlink: 'syz.3.1147': attribute type 1 has an invalid length. [ 140.002438][ T8285] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1155'. [ 140.147256][ T8293] FAULT_INJECTION: forcing a failure. [ 140.147256][ T8293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.175128][ T8293] CPU: 1 PID: 8293 Comm: syz.0.1162 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 140.185222][ T8293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 140.195289][ T8293] Call Trace: [ 140.198575][ T8293] [ 140.201505][ T8293] dump_stack_lvl+0x241/0x360 [ 140.206187][ T8293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.211378][ T8293] ? __pfx__printk+0x10/0x10 [ 140.215962][ T8293] ? __pfx_lock_release+0x10/0x10 [ 140.220980][ T8293] ? vfs_write+0x7c4/0xc90 [ 140.225395][ T8293] should_fail_ex+0x3b0/0x4e0 [ 140.230071][ T8293] _copy_from_user+0x2f/0xe0 [ 140.234651][ T8293] __sys_bpf+0x1a4/0x810 [ 140.238887][ T8293] ? __pfx___sys_bpf+0x10/0x10 [ 140.243652][ T8293] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 140.249624][ T8293] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 140.255938][ T8293] ? do_syscall_64+0x100/0x230 [ 140.260694][ T8293] __x64_sys_bpf+0x7c/0x90 [ 140.265104][ T8293] do_syscall_64+0xf3/0x230 [ 140.269600][ T8293] ? clear_bhb_loop+0x35/0x90 [ 140.274271][ T8293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.280157][ T8293] RIP: 0033:0x7f0de2d75bd9 [ 140.284575][ T8293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.304175][ T8293] RSP: 002b:00007f0de3ba0048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 140.312577][ T8293] RAX: ffffffffffffffda RBX: 00007f0de2f03f60 RCX: 00007f0de2d75bd9 [ 140.320541][ T8293] RDX: 0000000000000048 RSI: 0000000020000040 RDI: 000000000000000a [ 140.328505][ T8293] RBP: 00007f0de3ba00a0 R08: 0000000000000000 R09: 0000000000000000 [ 140.336465][ T8293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.344422][ T8293] R13: 000000000000000b R14: 00007f0de2f03f60 R15: 00007ffeac69f638 [ 140.352390][ T8293] [ 140.467301][ T8296] FAULT_INJECTION: forcing a failure. [ 140.467301][ T8296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.491349][ T8296] CPU: 1 PID: 8296 Comm: syz.2.1164 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 140.501445][ T8296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 140.511511][ T8296] Call Trace: [ 140.514803][ T8296] [ 140.517746][ T8296] dump_stack_lvl+0x241/0x360 [ 140.522448][ T8296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.527660][ T8296] ? __pfx__printk+0x10/0x10 [ 140.532246][ T8296] ? __pfx_lock_release+0x10/0x10 [ 140.537265][ T8296] should_fail_ex+0x3b0/0x4e0 [ 140.541943][ T8296] _copy_from_user+0x2f/0xe0 [ 140.546526][ T8296] copy_msghdr_from_user+0xae/0x680 [ 140.551720][ T8296] ? __pfx___might_resched+0x10/0x10 [ 140.557008][ T8296] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 140.562816][ T8296] ? __might_fault+0xaa/0x120 [ 140.567491][ T8296] do_recvmmsg+0x40f/0xae0 [ 140.571903][ T8296] ? __pfx_lock_release+0x10/0x10 [ 140.576917][ T8296] ? __pfx_do_recvmmsg+0x10/0x10 [ 140.581852][ T8296] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 140.587738][ T8296] ? ksys_write+0x23e/0x2c0 [ 140.592231][ T8296] ? __pfx_lock_release+0x10/0x10 [ 140.597248][ T8296] ? vfs_write+0x7c4/0xc90 [ 140.601657][ T8296] ? __mutex_unlock_slowpath+0x21d/0x750 [ 140.607289][ T8296] ? __fget_files+0x3f6/0x470 [ 140.611967][ T8296] __x64_sys_recvmmsg+0x199/0x250 [ 140.616981][ T8296] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 140.622515][ T8296] ? do_syscall_64+0x100/0x230 [ 140.627286][ T8296] ? do_syscall_64+0xb6/0x230 [ 140.631957][ T8296] do_syscall_64+0xf3/0x230 [ 140.636452][ T8296] ? clear_bhb_loop+0x35/0x90 [ 140.641121][ T8296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.647005][ T8296] RIP: 0033:0x7faa6d975bd9 [ 140.651409][ T8296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.671001][ T8296] RSP: 002b:00007faa6e784048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 140.679401][ T8296] RAX: ffffffffffffffda RBX: 00007faa6db03f60 RCX: 00007faa6d975bd9 [ 140.687361][ T8296] RDX: 000000000400023c RSI: 00000000200055c0 RDI: 0000000000000004 [ 140.695321][ T8296] RBP: 00007faa6e7840a0 R08: 0000000000000000 R09: 0000000000000000 [ 140.703278][ T8296] R10: 0000000000000302 R11: 0000000000000246 R12: 0000000000000002 [ 140.711234][ T8296] R13: 000000000000000b R14: 00007faa6db03f60 R15: 00007fff73632bd8 [ 140.719205][ T8296] [ 140.940590][ T8310] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1165'. [ 140.980041][ T8309] FAULT_INJECTION: forcing a failure. [ 140.980041][ T8309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.017558][ T8309] CPU: 0 PID: 8309 Comm: syz.2.1166 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 141.027739][ T8309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 141.037799][ T8309] Call Trace: [ 141.041070][ T8309] [ 141.043993][ T8309] dump_stack_lvl+0x241/0x360 [ 141.048675][ T8309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.053864][ T8309] ? __pfx__printk+0x10/0x10 [ 141.058447][ T8309] ? __pfx_lock_release+0x10/0x10 [ 141.063468][ T8309] should_fail_ex+0x3b0/0x4e0 [ 141.068146][ T8309] _copy_from_user+0x2f/0xe0 [ 141.072732][ T8309] copy_msghdr_from_user+0xae/0x680 [ 141.077924][ T8309] ? __pfx___might_resched+0x10/0x10 [ 141.083211][ T8309] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 141.089028][ T8309] ? __might_fault+0xaa/0x120 [ 141.093701][ T8309] __sys_sendmmsg+0x374/0x740 [ 141.098381][ T8309] ? __pfx___sys_sendmmsg+0x10/0x10 [ 141.103598][ T8309] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 141.109484][ T8309] ? ksys_write+0x23e/0x2c0 [ 141.113978][ T8309] ? __pfx_lock_release+0x10/0x10 [ 141.118998][ T8309] ? vfs_write+0x7c4/0xc90 [ 141.123406][ T8309] ? __mutex_unlock_slowpath+0x21d/0x750 [ 141.129033][ T8309] ? __pfx_vfs_write+0x10/0x10 [ 141.133806][ T8309] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 141.139778][ T8309] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.146095][ T8309] ? do_syscall_64+0x100/0x230 [ 141.150852][ T8309] __x64_sys_sendmmsg+0xa0/0xb0 [ 141.155709][ T8309] do_syscall_64+0xf3/0x230 [ 141.160212][ T8309] ? clear_bhb_loop+0x35/0x90 [ 141.164883][ T8309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.170765][ T8309] RIP: 0033:0x7faa6d975bd9 [ 141.175181][ T8309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.194791][ T8309] RSP: 002b:00007faa6e784048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 141.203203][ T8309] RAX: ffffffffffffffda RBX: 00007faa6db03f60 RCX: 00007faa6d975bd9 [ 141.211160][ T8309] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005 [ 141.219120][ T8309] RBP: 00007faa6e7840a0 R08: 0000000000000000 R09: 0000000000000000 [ 141.227078][ T8309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.235035][ T8309] R13: 000000000000000b R14: 00007faa6db03f60 R15: 00007fff73632bd8 [ 141.243014][ T8309] [ 141.684959][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1173'. [ 141.727198][ T8332] FAULT_INJECTION: forcing a failure. [ 141.727198][ T8332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.755275][ T8332] CPU: 0 PID: 8332 Comm: syz.4.1175 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 141.765373][ T8332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 141.775441][ T8332] Call Trace: [ 141.778741][ T8332] [ 141.781687][ T8332] dump_stack_lvl+0x241/0x360 [ 141.786386][ T8332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.791607][ T8332] ? __pfx__printk+0x10/0x10 [ 141.796223][ T8332] ? snprintf+0xda/0x120 [ 141.800483][ T8332] should_fail_ex+0x3b0/0x4e0 [ 141.805191][ T8332] _copy_to_user+0x2f/0xb0 [ 141.809632][ T8332] simple_read_from_buffer+0xca/0x150 [ 141.815028][ T8332] proc_fail_nth_read+0x1e9/0x250 [ 141.820076][ T8332] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.825643][ T8332] ? rw_verify_area+0x520/0x6b0 [ 141.830521][ T8332] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.836087][ T8332] vfs_read+0x204/0xbc0 [ 141.840264][ T8332] ? __pfx_lock_release+0x10/0x10 [ 141.845313][ T8332] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 141.851228][ T8332] ? __pfx_vfs_read+0x10/0x10 [ 141.855926][ T8332] ? __fget_files+0x29/0x470 [ 141.860537][ T8332] ? __fget_files+0x3f6/0x470 [ 141.865246][ T8332] ksys_read+0x1a0/0x2c0 [ 141.869508][ T8332] ? __pfx_ksys_read+0x10/0x10 [ 141.874286][ T8332] ? do_syscall_64+0x100/0x230 [ 141.879066][ T8332] ? do_syscall_64+0xb6/0x230 [ 141.883756][ T8332] do_syscall_64+0xf3/0x230 [ 141.888271][ T8332] ? clear_bhb_loop+0x35/0x90 [ 141.892968][ T8332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.898878][ T8332] RIP: 0033:0x7f6398f746bc [ 141.903305][ T8332] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 141.922923][ T8332] RSP: 002b:00007f6399cee040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.931356][ T8332] RAX: ffffffffffffffda RBX: 00007f6399103f60 RCX: 00007f6398f746bc [ 141.939338][ T8332] RDX: 000000000000000f RSI: 00007f6399cee0b0 RDI: 0000000000000005 [ 141.947325][ T8332] RBP: 00007f6399cee0a0 R08: 0000000000000000 R09: 0000000000000000 [ 141.955315][ T8332] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.963299][ T8332] R13: 000000000000000b R14: 00007f6399103f60 R15: 00007ffd77c4f668 [ 141.971298][ T8332] [ 142.072371][ T8344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1179'. [ 142.633049][ T8374] lo speed is unknown, defaulting to 1000 [ 142.817014][ T8385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1193'. [ 142.916839][ T8387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1193'. [ 143.472216][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1198'. [ 143.837663][ T8409] [ 143.840030][ T8409] ====================================================== [ 143.847051][ T8409] WARNING: possible circular locking dependency detected [ 143.854063][ T8409] 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 Not tainted [ 143.861151][ T8409] ------------------------------------------------------ [ 143.868152][ T8409] syz.1.1201/8409 is trying to acquire lock: [ 143.874111][ T8409] ffffffff8f5e9108 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x15b/0x1190 [ 143.883424][ T8409] [ 143.883424][ T8409] but task is already holding lock: [ 143.890771][ T8409] ffff88805f784c50 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_setsockopt+0x1c3/0xe50 [ 143.900854][ T8409] [ 143.900854][ T8409] which lock already depends on the new lock. [ 143.900854][ T8409] [ 143.911239][ T8409] [ 143.911239][ T8409] the existing dependency chain (in reverse order) is: [ 143.920233][ T8409] [ 143.920233][ T8409] -> #2 (&smc->clcsock_release_lock){+.+.}-{3:3}: [ 143.928819][ T8409] lock_acquire+0x1ed/0x550 [ 143.933837][ T8409] __mutex_lock+0x136/0xd70 [ 143.938862][ T8409] smc_switch_to_fallback+0x35/0xd00 [ 143.944662][ T8409] smc_sendmsg+0x11f/0x530 [ 143.949588][ T8409] __sock_sendmsg+0x221/0x270 [ 143.954775][ T8409] __sys_sendto+0x3a4/0x4f0 [ 143.959790][ T8409] __x64_sys_sendto+0xde/0x100 [ 143.965065][ T8409] do_syscall_64+0xf3/0x230 [ 143.970074][ T8409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.976477][ T8409] [ 143.976477][ T8409] -> #1 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 143.984196][ T8409] lock_acquire+0x1ed/0x550 [ 143.989221][ T8409] lock_sock_nested+0x48/0x100 [ 143.994513][ T8409] do_ipv6_setsockopt+0xbf3/0x3630 [ 144.000133][ T8409] ipv6_setsockopt+0x5c/0x1a0 [ 144.005323][ T8409] do_sock_setsockopt+0x3af/0x720 [ 144.010859][ T8409] __sys_setsockopt+0x1ae/0x250 [ 144.016226][ T8409] __x64_sys_setsockopt+0xb5/0xd0 [ 144.021770][ T8409] do_syscall_64+0xf3/0x230 [ 144.026781][ T8409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.033181][ T8409] [ 144.033181][ T8409] -> #0 (rtnl_mutex){+.+.}-{3:3}: [ 144.040374][ T8409] validate_chain+0x18e0/0x5900 [ 144.045731][ T8409] __lock_acquire+0x1346/0x1fd0 [ 144.051085][ T8409] lock_acquire+0x1ed/0x550 [ 144.056093][ T8409] __mutex_lock+0x136/0xd70 [ 144.061102][ T8409] ip_mroute_setsockopt+0x15b/0x1190 [ 144.066891][ T8409] do_ip_setsockopt+0x129f/0x3cd0 [ 144.072422][ T8409] ip_setsockopt+0x63/0x100 [ 144.077429][ T8409] smc_setsockopt+0x275/0xe50 [ 144.082613][ T8409] do_sock_setsockopt+0x3af/0x720 [ 144.088143][ T8409] __sys_setsockopt+0x1ae/0x250 [ 144.093506][ T8409] __x64_sys_setsockopt+0xb5/0xd0 [ 144.099039][ T8409] do_syscall_64+0xf3/0x230 [ 144.104047][ T8409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.110447][ T8409] [ 144.110447][ T8409] other info that might help us debug this: [ 144.110447][ T8409] [ 144.120653][ T8409] Chain exists of: [ 144.120653][ T8409] rtnl_mutex --> sk_lock-AF_INET6 --> &smc->clcsock_release_lock [ 144.120653][ T8409] [ 144.134280][ T8409] Possible unsafe locking scenario: [ 144.134280][ T8409] [ 144.141708][ T8409] CPU0 CPU1 [ 144.147051][ T8409] ---- ---- [ 144.152396][ T8409] lock(&smc->clcsock_release_lock); [ 144.157754][ T8409] lock(sk_lock-AF_INET6); [ 144.164761][ T8409] lock(&smc->clcsock_release_lock); [ 144.172633][ T8409] lock(rtnl_mutex); [ 144.176598][ T8409] [ 144.176598][ T8409] *** DEADLOCK *** [ 144.176598][ T8409] [ 144.184720][ T8409] 1 lock held by syz.1.1201/8409: [ 144.189725][ T8409] #0: ffff88805f784c50 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_setsockopt+0x1c3/0xe50 [ 144.200240][ T8409] [ 144.200240][ T8409] stack backtrace: [ 144.206107][ T8409] CPU: 0 PID: 8409 Comm: syz.1.1201 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 144.216161][ T8409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 144.226198][ T8409] Call Trace: [ 144.229462][ T8409] [ 144.232379][ T8409] dump_stack_lvl+0x241/0x360 [ 144.237048][ T8409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.242235][ T8409] ? print_circular_bug+0x130/0x1a0 [ 144.247435][ T8409] check_noncircular+0x36a/0x4a0 [ 144.252368][ T8409] ? mark_lock+0x9a/0x350 [ 144.256688][ T8409] ? __pfx_check_noncircular+0x10/0x10 [ 144.262136][ T8409] ? lockdep_lock+0x123/0x2b0 [ 144.266804][ T8409] ? _find_first_zero_bit+0xd3/0x100 [ 144.272079][ T8409] validate_chain+0x18e0/0x5900 [ 144.276944][ T8409] ? __pfx_validate_chain+0x10/0x10 [ 144.282141][ T8409] ? __pfx_validate_chain+0x10/0x10 [ 144.287339][ T8409] ? __pfx_validate_chain+0x10/0x10 [ 144.292540][ T8409] ? mark_lock+0x9a/0x350 [ 144.296864][ T8409] ? __lock_acquire+0x1346/0x1fd0 [ 144.301877][ T8409] ? mark_lock+0x9a/0x350 [ 144.306196][ T8409] __lock_acquire+0x1346/0x1fd0 [ 144.311039][ T8409] lock_acquire+0x1ed/0x550 [ 144.315532][ T8409] ? ip_mroute_setsockopt+0x15b/0x1190 [ 144.320982][ T8409] ? __pfx_lock_acquire+0x10/0x10 [ 144.325992][ T8409] ? __pfx___might_resched+0x10/0x10 [ 144.331264][ T8409] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 144.337232][ T8409] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 144.343548][ T8409] ? do_raw_spin_unlock+0x13c/0x8b0 [ 144.348741][ T8409] __mutex_lock+0x136/0xd70 [ 144.353239][ T8409] ? ip_mroute_setsockopt+0x15b/0x1190 [ 144.358684][ T8409] ? finish_task_switch+0x1e5/0x870 [ 144.363870][ T8409] ? look_up_lock_class+0x77/0x160 [ 144.368968][ T8409] ? register_lock_class+0x102/0x980 [ 144.374242][ T8409] ? __schedule+0x17f0/0x4a20 [ 144.378934][ T8409] ? ip_mroute_setsockopt+0x15b/0x1190 [ 144.384389][ T8409] ? __pfx___mutex_lock+0x10/0x10 [ 144.389404][ T8409] ? mark_lock+0x9a/0x350 [ 144.393722][ T8409] ip_mroute_setsockopt+0x15b/0x1190 [ 144.399003][ T8409] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 144.404715][ T8409] ? __mutex_trylock_common+0x183/0x2e0 [ 144.410249][ T8409] ? __pfx___might_resched+0x10/0x10 [ 144.415534][ T8409] do_ip_setsockopt+0x129f/0x3cd0 [ 144.420551][ T8409] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 144.425908][ T8409] ? __mutex_lock+0x2ef/0xd70 [ 144.430576][ T8409] ? __pfx___might_resched+0x10/0x10 [ 144.435849][ T8409] ? smc_setsockopt+0x1c3/0xe50 [ 144.440687][ T8409] ? __pfx___mutex_lock+0x10/0x10 [ 144.445708][ T8409] ip_setsockopt+0x63/0x100 [ 144.450197][ T8409] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 144.456078][ T8409] smc_setsockopt+0x275/0xe50 [ 144.460746][ T8409] ? __pfx_smc_setsockopt+0x10/0x10 [ 144.465928][ T8409] ? aa_sock_opt_perm+0x79/0x120 [ 144.470852][ T8409] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 144.476380][ T8409] ? security_socket_setsockopt+0x87/0xb0 [ 144.482087][ T8409] ? __pfx_smc_setsockopt+0x10/0x10 [ 144.487272][ T8409] do_sock_setsockopt+0x3af/0x720 [ 144.492291][ T8409] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 144.497823][ T8409] ? __fget_files+0x29/0x470 [ 144.502418][ T8409] ? __fget_files+0x3f6/0x470 [ 144.507099][ T8409] __sys_setsockopt+0x1ae/0x250 [ 144.511947][ T8409] __x64_sys_setsockopt+0xb5/0xd0 [ 144.516967][ T8409] do_syscall_64+0xf3/0x230 [ 144.521463][ T8409] ? clear_bhb_loop+0x35/0x90 [ 144.526132][ T8409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.532013][ T8409] RIP: 0033:0x7f5dfd375bd9 [ 144.536433][ T8409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.556027][ T8409] RSP: 002b:00007f5dfe06b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 144.564427][ T8409] RAX: ffffffffffffffda RBX: 00007f5dfd503f60 RCX: 00007f5dfd375bd9 [ 144.572379][ T8409] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000004 [ 144.580331][ T8409] RBP: 00007f5dfd3e4e60 R08: 0000000000000010 R09: 0000000000000000 [ 144.588286][ T8409] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000 [ 144.596240][ T8409] R13: 000000000000000b R14: 00007f5dfd503f60 R15: 00007fff4a8a5b18 [ 144.604208][ T8409]