last executing test programs: 2.449367626s ago: executing program 2 (id=2869): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000080)=0x13, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061103000000000009700000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800cd0c3ec43d9c96b200007b00b77018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000001880)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd600a90750028000000000000000000000000fffffffffffffe88000000000000000000000000000100030000000000000708000000000000000007"], 0x0) socket(0x1d, 0x2, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000"], 0x0}, 0x90) socket(0x0, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400fe806800090300000000000000000a00000000000000040004000800010001000000"], 0x24}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x78, &(0x7f0000000680)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e21, 0x800, @private1, 0x5}, @in, @in6={0xa, 0x4e23, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}]}, &(0x7f0000000500)=0x10) 2.122414165s ago: executing program 2 (id=2872): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000001801000020646c2500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='ext4_discard_preallocations\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00'}) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x6000, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400004810000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 1.886716901s ago: executing program 4 (id=2875): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@ipv4_newrule={0x24, 0x20, 0xced3ea6bb4dcd0c1, 0x0, 0x600, {0x2, 0x0, 0x20}, [@FRA_SRC={0x8, 0x2, @dev}]}, 0x24}}, 0x0) 1.849772028s ago: executing program 2 (id=2876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10012122}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x3, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x916}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0xfffffe32}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000140)={0x0, 'netpci0\x00', 0x2}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xe}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4084045}, 0x24000040) r5 = socket$kcm(0x29, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r7, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x6f}}}}, [@NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xc0}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040010}, 0x10000) setsockopt$sock_void(r3, 0x1, 0x24, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000500)={'#! ', './file0', [{0x20, '+,]'}], 0xa, "0758b5ad1183ebf9f790d6de68437c84dcaeb6a13a5035334fb8a78092a05d650b9d87a5ea887af0c7796bd66417b2d93731c046e77cda6b6755c48456e5245bc8c8bb0e811f674e375c96077461830606be75e10ca3209fbcdc462c104b1e07c6dddd957bdeff2c43bdb2a2ac1920c517a1e57f82672969a821153a1f38f9f54430be3f435c77abd2d54e41f00a1660be34a5c8c049c5148aa14c10a05fbdfdf504675ae7d969256cb36b4a06f1a56e58e0fb0a0d266b7cff122d2a5934186601399bb3b77c20545efa906bce94607bae70558c91ccdbc0f1983088bf1a2842570b2d5f51d8d72905eb868729485fbf9ccd5c7ad8d7256b0b0c39e658c45968eaa5267133a3b5eec4ad4576c14497fe9bfac4d9bc3b18e5db9147cec38e84bc2fe837dc06f758eaac2a5e36c2418ccf5afece5fb6d8a6b10b7e4495b70f2af333bf68a45ac666c39a017a95e4d5d36d3f8ebb863a839eb7577ec480e296e53eab0e9e40c2613d29645e9309a7b73e4b9e323f0cc8873ef28e6c67c3aed09ae0e6c137c8a6c7413e36f3237e190ed48341e5279630b22aedc06d3fdd98e61e62ebd7104502a3e511625d7a425840d70e5729e31555bd1ce035d1b68c210691a576139ea52f4a27398d4bb032c3ef45cccbd790a61acc598d0e3c7734eae2e6799862fc3b467e2c10abd4137dea7f7dbaea26043769244fb02d3a33e7f3c6cf1023f38325f519b12e673d15fc368eb0fdb13c44e5fcc0af61e4ef04dd424c5c7fbcfb00a6c85430d0e9d16ffda351c4c493d2500169b41d5b8f8afcb99962cf0ce0ee5e4ef70cfe6734132e0ea95858ca9344e4aeab0c3260cec6fe21fe6727dac5f43bcd0a267d95482d5d2dc45f1bc2ec61b0d991f8958de10bdf25aa051d4ae826d729954278066bf942cbdb61aad212a7071f458133a894fb7879643e6a9c4cfcf4a9b6980061495774b43f1bec252161b81ce82243a2eea98a8a8d77489deb34be5ff455ea5f9ee87363a542cba9475b93200d58b3d05ba386d06bbce48afd8917d40392782c635d7d673e0042a5ae3d2bbc850b93b6b1f7e4b4dda77c72be5181ec10d249bc6398843ad9993528f11efd904c6196b14094686f314ef5b1374ceffb611d140e5c745ad271a3c80af011879272a41521681a592e17cb931cd0c031a2da41de234616112602f9226cda3c6836251d7809746dfa86d302c14270b9b6175160fbf70e133dbf669565c2d48acef808230b59268ffc21bc491b4aaa233db6d1eae342b83f42a16737d47749b7858e023bf48384af8ff9db0554dd927a4b62e5ab45cea90e905d4f37aca92b08832e2d544f58e00ed8574a25599733bfa17b7e264ba70081b23242ccc3e6d02b4186e6334778cc05ac22334022b26b7e243ae84e97e9c37e22a0df3f402570242047862e80399aa33a154e5d632e7cbe832d606b1cf5142c393df5b4b6d39ba267d7a92db37f8d1a25a5416b3fab3c8fc42ddb739b24fdf1c62b5e771ac089c8f30ac8bbaa234ad3a944b5571c606cec4dcd109eb4c1f57c9744ad95857e43d5f79bc629f10b5d7afd05ecd10a455f5e625e50d74cdf47896a30158300727fb49eb2d801c2dfe612f0800cc21521bed530974d38f3f52a958d9f72810dae1dfb25a76bee4572ccb5f9dc043743b565a7057d9a00a32896b2bd385233d0e7227629f76f180c1395a8308fc47612719d67d58e55abe998853d3c9cb665e746f9e399337414b42db3e0a75d375f17ab0da754d6c95e39b3720fd08884dd13345a739e69bb1cf72be43bf887df49dc8c2264ced7df878fc9910f577a313a82848f35da6b50a30d0b9e9fb7c7b53d52a2085a015b2c938d5167017dcbe80d148606cfb0d1868e43f7c783c131e74202174aa09cf69d40e80e80c83be745f8fcca9e97a9d3d8a35566b8da3074eb2a0744d0c4c1086e10e555a3e1b4d79f22fafb645defaebfe7888c73aff99b7e0b3438be6fb000d0ec101e5441e56123d4cc05334567a23b635a5c0f84c4a56a069dde6f4f9effe84a118c89dddbfcd626a31ef1cede2b9b120a17959139913b147640a1d98d7a576a0f1a27d26896242a39e7fb6c60ddb160041028825ef8e6d1b0926a369a6a1d57566c6df6810e940cd7606393355712bde2bd620108ac8ed9bba5afa6d5831501eaa13a759848be8bf20894a693fc2b2fdf70d86966a19f8bd2b54431b158919b4b0e8c51d1f993782422cd49e0e88e730c5a561423b10b0abf7f052b0a99201d770776e924a0712868733c6be722241d7a82b1bbde8944a926798822c5093ef5986992f2182528a2fea3e6379b6b36218f726fc987f642decd378b288aca225b0c857e39da571399ccbd00b17a78bc7a105af1fd869bb93f3539f280137740ef244fd8a6c8723af084e0b367ea6529da556f0687e3c8cee06c027d542d2f02e7f151a1ffc14f143c87f6f5408c657c194af62d185274583a4cf7bc2c03ad16a5562fa6b522d17af380cd8d8fdd065963ca222267d28645d8c13d086911d058b5e57970203a5be05ec0de1bd89d449b21147f496b045dbed1fd906f6934e8a714c765ad15061c0787d1cb99dd64256d46c9ffee34ae0959ab2431c92220a947c8277e69279ca78f1f3f1af2a394c6b517495c426f7003ea4eb48bd70b42c7aab4e70b9109360fc3c72eb6ae638d15ac4c00370849b9cd627b4406fde893c8ffc473f774ed946f035765d4073bfa10586652d3093f6bc29a15b1175e9ca817b9a48991222ce5cc93b50ad4d19b54ec1b9656dc2a081bb49c413455a5756f59750e2ff950bb5e82eac8dbd05f6c03ec178b7464009a9b3f5a49744666a5415c528c379f37137a7549253f7f3d23ce3e10700165b46a5a8cd717d2ef1d2c8fc6506bef5400fe63a8ade9f7b30ce794ace363cd7b0aaab17570579f62b7a953f4aeab3c3c51b1022887f8b8f8fccf47e549ac25f0e70c0deceeb71a3c023348827dc3b336f570434316300b88c5ff7932672986898072d42a814ac4efc0c827a9c79fb884d1dbb72f8edd5649316b076ef78925c074f7aad69b967c72e860bc1fb1f85b8d89da434d46869d1150ded0213c0b1eca0b979e9f7ac3d76bff11d51a2ed06dc8bd2de0dcea0388ee8246bfcd3534263b4d01b52a75ba2f93f696a593e2b300e8cf432e44569ae51b8c41e0a67b04819fc2d8b1a160b8ff66f8ea3625482311f29edbf1aed9270674f8e01efdd763e7299cbeaf33b57f5f3100519b0f2d34c0da0c7ddc957d5cf885560891b9a1a5daf5dbe3c6318919ec740839169793d5b46e7bcbf9c5b1f74d94a3430fcf0ef8a16a54a4265b62d3ef7425ff7d5d8ba0dbcba509dd88df6f85a8cbe03aa1e548e6d59dc7f7891bd86e14f1d6cfd2e84ca3f7a9baceb4894228e0c75d0cc2cbdc1f02efd53976018b6dc6b26654af83bfeed3d57b14b25e6c6116504c8529657af74ac238e39cf96ab86633708817ea638a87f2a83f2dbfbaddc90e94d78a32782cb0372e30cb2b9f8e60f9c50d69811c3fb844841079f1a471def684ac52dfe2eb0832891190bf9aa1e2041f09df6aeefcf58c5648b4f8c68c07a2f3fa8f8c9af61a32099e8cc48b3e6411a0f8d8a260f50a56828b42e9c05330cd543db6a58311ebe3283179d7b2b19efac66106c7d09f2bb03965b1fa64e94be00b262d22083ab509160b540e263db33ae49f625c4698d97ecf1a7080a2532d98f33e8ece8c058f360096b59fb25ea3d45ba68a0cd59ce7d30170a472128b7afb8683b335b5c8ada15b303e0b28a4e08a1a52bb6e081871b4f1fec06eb9846a96fa4c9e5ba8afd6dfe367026a78a8634a98cf03ec19b1ecbb057bfacd05f27d66ada2ef4171ec0afac6d2c07784a99d92353d9e2aebfcfe8cee5dbfa881e8bfcc013304f3a6dcb4b0ef5aab106e16593eb2a35d4a3b7074e375d757175cacf1c0d44145eb88b9088d2af6c377cf318c18770e295ff963b44812e6898f4c79c1abd06d2d0cc89c420b0bad00fd19534ac773e71f6aa56ce12e116c8814bcce3edfda6ddc0b496f610362dac669facbe23617306e5133fad891fbc5e57b159a369459e176c6447034972d02d0efdfd4537e33036cc38f67120c139514119837b5ab65144830e6ca77cb9a33f9bd5e8794b3111d1688ea2443799b21e23559bd472399ea61b40f726d15da4c61945e2ea96a1358d73e377455e0bd6b4771f02074448439b54bd3ee4fb4b28f97d23b19e453357f8b3be46896c5c87a5c02a06471fb9ef8097a49edecd3c5655e4b16479b2520b0b6c4e279b22fc4a2b918718466a6c3dc09d8418532acc612d0c2cfc3df6248ec2ca87510abb0cd57b57e55993f20f00140a18baa9ae279de11281dad7386b83aef4a4c81e0c61c859fa56ef74ace74c6c70255ae9f6a3fa22c23b59ed25de9bad7cb083efcb84c17d38cf6016ed531a6bc08484e2ce22f878970ba7aacd68c3183d7bb4ec6b7226fec914310a2a8bceaa9f0d47b4a3a3e8c6cc6c337327c0c6cdc19cf127bb1314b2d5ea7aa679fd93f401fc29f2d5985ef3008730cf82bc3fc47a84ce8f13c304acd04e78bc79da8a1276343c6aa5577720af9d093f4d0eb0e468ae7bac250255702aa5eb6146ad6e9b440039209f2f5068685a781ee8c4d5a661193baa1ded285d318d080dd9571be0c5f73b9599597c60c31c1d5cffe75c7c822892e403828c0e0d5b54d298c05372e9d95800a71838ecf3928f22b755e8e2b2c9e8936894039869310dd7974babd2e96270031d021c7950ebbc835fd72d1100373c992154197b989cfa75fa79f2ea6608410cc26ae0f8fa2bd821ae5e35a05b66cfc973fc9b916d6e97b257c44b93d4c73fd5ad265236d05e48dd7158fdc544f5cb5a95ba7c7a0289401160de9e97825883115de8cf7b5272989e07ed0489074199b31281f6a6b45a3a9a1510d3ac28b18817f1e3f003aadd83b0afaa11464b6ca56d3beeb8b83a330863e5ae5333f2c555f865c831e156031f26a2688ed719f65460ba513d73cdf42efa48876af0e768400d07c2a341a32467aeaf1ed49fc43d3c8991600de38fc52361953382b129c11d8e2f3c7bf931cee9aa05f0c907313052b45d2ecdf91709e99edca6e670975198a5dfbee9e849ddaac039a2571811010d930f572dae00793226ef9d97caa5288a57659271159894caf09a894cbd61c702fc0997e648ee43bfda30ae724fc916107de111ddbe134845c02deb734048acd54c4765805c8dbfc2f5c4cdb57dea9fdfc20e9fdd3eb56c7675fffc7c1b5806485e962f55f84ab29975f12258c51d8c3457e61b0a8da25c04f802d8291117dd9de39a28e2c917dbd7be3c6e44a0439321490124a585247da63034bc6c24c0e3ed110b7a8b07dbc0b98914466c80c343f92a0909443dfafec3a1b6885bd575b5e753d00c7f83802bd0e17939214ac40097e1e11890bd70890460705617eb5f957d329074aca69f1d203047748c1d177a50f1d3ad8736438f18d253b24d5799d2fbb683081c2b7541db841755831d0f5c9696ec7bc7e0ca1dd6221e4c0a29e3481c9de9e1908e70fd6763c0fdfc2686b9c7ba143274d9db6d66673019913509a1b97901e4aa46ef211fdd1bc9ce5ca2b8bff24e63eee1384a3322cce1dec5a51738f116180b65dbbfd270efe2e6e21399030ab97728402422e437d426c2b43bdd55a84481ac77fc4a1e6ccc5e7c0de857b33b09ec5fb31760a959172a2399961efdb7038d9eb81e748f170ed353ee7d53f54af9daf5ed8a646ec17"}, 0x100f) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000001540), &(0x7f0000001580)=0x4) r10 = accept4$llc(0xffffffffffffffff, &(0x7f00000015c0), &(0x7f0000001600)=0x10, 0x800) bind$llc(r10, &(0x7f0000001640)={0x1a, 0x3, 0x2, 0x0, 0x5, 0x1, @broadcast}, 0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000001680)=@assoc_value={0x0, 0xffffffff}, &(0x7f00000016c0)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001700)={'wlan1\x00'}) sendmsg$kcm(r6, &(0x7f0000001a40)={&(0x7f0000001740)=@in={0x2, 0x4e22, @rand_addr=0x64010101}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000017c0)="e3f7eae83973da3faa6a07cfa2ca058a926951ca29fc00683d40d24d646768bca4c4b46ba123fcfb0320a3c483f9eb4aacd940aa09a38ed62ea667e16dca81", 0x3f}, {&(0x7f0000001800)="0fc56d0bc441494ea7f137aeeabf4c5a29b7a5fd3309023ea5fe3deeddd0ff6b4ed16c68d5264ad1dabb0ebab4c5224e158021a8937e638c208eed03ab30fd8c27ef8762ee54896b921a68ae84afeadc6a94d95da31b36337580915572", 0x5d}, {&(0x7f0000001880)="5f414974f1c53fe243fe9b59428eaa73dbffff8c9d9eb20ce69c3c446b967d23dc74097a7dfd0ca5dffc17d7c5cc9684356c0770c79ef6d9aeee1f0971cb7a7db51d260188f1afc9750055b8e340b8258da9144274235f02e08af127fe13c0447383b115cdc0d308c7f6eba8e9fcc0add58902415ae91620a616af653371260e0b95f27799b63fa4b4d3e778b703d73c55d2b64692ee0d01f2606169c417d5abfe26e8f7b6127a60d235ff5925d356266e714524697f3f705da61fa5d0234f7d05c12929ff763845bc", 0xc9}, {&(0x7f0000001980)="329ba55af096ec33e899c7309e9fa2ce98394056ffb4461dda0989f91e9330269c0d20d9fd5fc873e4d69c7bdb7f4fa7965aef3f8b074437364a62234bd60c889298be10851f3b49fe741ecd6e6ba0e2a2b16a880757010031afdb7a159f433310e32c5b60e71116", 0x68}], 0x4}, 0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r9, 0x84, 0x1b, &(0x7f0000001a80)={r11, 0xea, "8904e1deb75d210eb13672f267ac1048469ba3d123c5e229a6912b98cbbe2105bee69a09246a7ce7b06531938df6efb6023ba108095c99b8ab34d60604d5973d8a00212850cfd4908587dc8d2299e88e7f5f9f1c91a095e706ed5db98c8cd880c79908ca400fa8e41f6413ea473fff702430638da0472fbd29923db70a93214fd424d65f59c692b9e82fecba6bf521998e19441380000857d4f408aff0db8b5db109336a2f9e6a6b8db52d24436c132e3a66e3b418f6310577413889072188c5ea5891040de2f188116f4846f9887d2654a8c5ff800929ff947f953bfb0802a3ef640e6f534ae849006a"}, &(0x7f0000001b80)=0xf2) r12 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001bc0)='memory.swap.high\x00', 0x2, 0x0) write$cgroup_int(r12, &(0x7f0000001c00)=0xffffffffffffff20, 0x12) r13 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000001c40), &(0x7f0000001c80)=0x10, 0x100000) ioctl$SIOCPNENABLEPIPE(r13, 0x89ed, 0x0) pwritev(r9, &(0x7f0000003180)=[{&(0x7f0000001cc0)}, {&(0x7f0000001d00)="7b042b4f20cab846b6fae41705a9e6de6eac8a0f8d921fe4901551abb4c7c066818378806ac45ab5a0c912e93f097a33915eee65a3955671983539a657dfd2e16bde7a9906d7fc13b42c7cd84cd73cedaccb568b5ea6efef11a6e9ff0ee76e698226dae582855f5ad9a0e48fd40cf59d81ea8cb9fe5db660bad91f5a04ee7a7e45ef8df0f785feecf4a3ce2470aa3778e4982b4cbe8ee81cff344f46da9e09", 0x9f}, {&(0x7f0000001dc0)="39293ffc84e76db3135b2ed6072ecd9e4655111357ac38974cc67681e5f5e1cdc01e225f871af607a8c55996206182c8e45e0dde82375c10b85ddf5a2a639479471c659709742795a9e5862d30781744fc8e7c9bb1f0d32123d98711d08f0f7cd0ef63cf57e151a456bef071b6297f8cefb45402a970a4d708954d789b4d8a7ff5d1ab306443aa723ef73ce05f8b", 0x8e}, {&(0x7f0000001e80)="376604cd7f1f1cb0c24f709d072a8014f1a0459e60cd32eee5db2de5d6b7021b059a28004de289bd025f28655f879459d5eafdc28190a78ef0ec6ca0fbf65aa7a27e8b4fa06a818504f4e7f73cdd815ab0e962eb57a7e99748ed41a58411663e6115cee558b2865db7535c64a26e0632b96502a1691d078b233ae24efa69e5eceb337366b486d81ea0", 0x89}, {&(0x7f0000001f40)="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", 0xfa}, {&(0x7f0000002040)="0aa94cd02144ca6f7092ce40546a67f3ad06f87c35269acbdd7255824ac1c4a1b2822d50dba45a8a3075a05837cb0b00646c1ac1b1154bacc7eeefdd3690cceaeae603f0b4a5c05c33065b7410d26c0d805767ecedb51bd1ca4e967fd84528d8dc414f899504c32ff73f873648f792580ddfe607db525805fa4e3bb373df5d640e0f9a8bee99903a40b8391fa8855e5613cb53c81c508819ef73", 0x9a}, {&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000003100)="57e8033737de251b5c4814559ac73dbc2bdefa6709d0546763c1519b12657d8d4538c2578cb67d5cc5cbf0d9e30e3fb0cf9a8d98e04054a55c41a5ace90e5fbdc497b9283c4ed7755240f166fea8dd555651b39781d02ad90fae51641f40bf97e8bc45a9fc", 0x65}], 0x8, 0xfffffff8, 0x31a8) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) bind$llc(r10, &(0x7f0000003200)={0x1a, 0x323, 0x9, 0x9d, 0x4, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) 1.658837674s ago: executing program 4 (id=2878): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], 0x0, 0x8, 0x8d, &(0x7f0000000680)=""/141}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000580)={0x6, 'veth1\x00', {0x7618}, 0x3}) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) 1.614200842s ago: executing program 2 (id=2879): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001f40)={0x114, 0x3c, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@generic="4c626c5cb18cbd41bc6468281e5b69b35687998d6a602ee6f8135873358428c850c47d2889688eb2efe5d001cb3ac33102aa388842876e1f89a760622355c2e4350b9f8771e0f2982331246178941b16134e7d770ab00397ce66d6bfe422e060c3f4b258ae641c41484185b8909da6e8f194b652771d1a3e56f14c917681b85fa661a50f5d14c48e3131d0914817bfcb4bb11f6149d4243dd42902e97424fafc138e849f48365b916a590d7e", @generic="e468e4f19301d7ab967d0ecd5b14319bb2aa723fae5634ccfea164a0bb1abd37d894a8cf48016441741cf7b5bd3631b4ecc008b9204dc315a0e1324404a275485ff18fa452bed65f1f4996db787de9c3d5e98c"]}]}, 0x33fe0}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x10, 0x80, 0x1, 0x9, {{0x25, 0x4, 0x1, 0x1, 0x94, 0x64, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}, {[@timestamp_addr={0x44, 0x3c, 0xb9, 0x1, 0x4, [{@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xee}, {@private=0xa010102, 0xae}, {@multicast2, 0x9}, {@private=0xa010102, 0xd}, {@multicast1, 0xfffffffb}, {@broadcast, 0x9}]}, @noop, @rr={0x7, 0xb, 0x4a, [@local, @dev={0xac, 0x14, 0x14, 0x40}]}, @ssrr={0x89, 0x13, 0x83, [@loopback, @local, @broadcast, @broadcast]}, @rr={0x7, 0x23, 0xfc, [@remote, @remote, @multicast1, @multicast1, @broadcast, @remote, @broadcast, @empty]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00'}) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000600)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x10, 0xf989, "6080356e793ca9d55b8ef24e"}, @nop, @generic={0x0, 0xc, "04f6fea52eb715ea7022"}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) r2 = socket(0x10, 0x2, 0x0) sendto$inet6(r2, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, 0x3, 0x6, 0x927588eab6e7e2af, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.391524074s ago: executing program 4 (id=2885): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r3, 0x1, 0x6, @link_local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xffffff01}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106}, 0x90) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000280)=0x90) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r9, 0x8907, &(0x7f0000000140)) sendmsg$NFT_BATCH(r9, &(0x7f0000000500)={0x0, 0x54, 0x0}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)=ANY=[@ANYBLOB="380000000314010000000000000000080900020073797a30000000000800410072786500140033006c6f"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r7, @ANYBLOB="08001b"], 0x34}}, 0x0) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r11, 0x103, 0x1, &(0x7f0000000080)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r12, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="6802000000050101000000000000000000000000540201000000000000000000040000000000000473797a30000000000000000038c88ef40000000000000000000000000000000000000000323da07a6be6244f96d511d2b7a167bb1634e69bdc123f2bb538bf3d04ffb6ac377838d60bddb02cf7a4afabf3726000af67484c1f59e9f6cf941471f0a0a35500000000000000000000000000000000000000000000000000000000000000000000000027d000000300000000000000000000000000000041fe2133000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000100000100000003000000feff0000000000000000000000000000030000000000000000000000000000000001010000000000000000000000000000000000000000000000000000000000020000400000000000008f18e7896d56a35ca4dc00000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e001000000000008000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdff00"/625], 0x268}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r13 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r13, 0x10e, 0xc, &(0x7f0000000000)=0x8, 0x4) sendmsg$nl_generic(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000003e0029de670e0000000000000a00000004000000"], 0x18}}, 0x0) 1.360582827s ago: executing program 2 (id=2886): setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x8a, &(0x7f0000000100), &(0x7f0000000080)=0x4) 1.264114307s ago: executing program 1 (id=2888): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@ipv4_newrule={0x24, 0x20, 0xced3ea6bb4dcd0c1, 0x0, 0x600, {0x2, 0x0, 0x20}, [@FRA_SRC={0x8, 0x2, @dev}]}, 0x24}}, 0x0) 1.228101463s ago: executing program 2 (id=2890): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x2, 0x4, 0x10007ffe, 0x0, 0xffffffffffffffff, 0x400000}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, 0x0, &(0x7f0000000100)=""/4096}, 0x20) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macvlan0\x00'}) syz_emit_ethernet(0x42, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800480000340000000000069078ac141400ac1e0001440c0503000000060000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000008090780000"], 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x130, 0x130, 0x130, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x58, "7328fd533d5d05a312d3e23535ee1f6932e80e200e19d3e4fa59594e588c7e72bfbaa0626bf677604bd26418b78dd86f36689f06d86feac163cb0c7f30d65905439b2f6002813e42836af95ab4328f7b3a3bf15cd968b1bf"}, &(0x7f0000000100)=0x60) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000580)={r4, @in6={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}, 0x6, 0x8}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000280)={0x0, 0x28, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x891}, 0x24040084) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000000000090", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c80)=@newqdisc={0x30, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r3) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000020000000c00020000000000040007800800010000000000000000000000000000000000cb48790616eee862cb54c759bb286efcb4e19b37420f82a246ec36185ea75dd4957c128727af7060594dd2fa3f86039f0fd1ecd80ab1957a2e7f41b1b20167204e5db0d970c778ae7f82a3148de752130c459aca8e859b042dbf66ef3390d926147a4ed6ab39fca52dbd3142f6435bc1f4ee14b28ef564a1a6d83cb39092", @ANYRES32, @ANYBLOB], 0x38}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 953.964861ms ago: executing program 1 (id=2891): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], 0x0, 0x8, 0x8d, &(0x7f0000000680)=""/141}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000580)={0x6, 'veth1\x00', {0x7618}, 0x3}) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) 940.418865ms ago: executing program 3 (id=2892): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x6100}], 0x62, 0x0) 847.701503ms ago: executing program 0 (id=2893): socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x0, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x4, &(0x7f0000000300)=@framed={{}, [@call]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x4, &(0x7f0000000300)=@framed={{}, [@call]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x4890) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x90) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) shutdown(r3, 0x1) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r5}, 0x8) (async) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r5}, 0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @broadcast}, 0x4}) (async) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @broadcast}, 0x4}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) accept4$unix(r0, &(0x7f0000000140)=@abs, &(0x7f0000000000)=0x6e, 0x800) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1100010000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1100010000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) 802.314919ms ago: executing program 4 (id=2894): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x4, 0xff, 0x20, 0xa39b, 0x22, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', 0x7, 0x7800, 0x40, 0x9}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a300000001b0a01080000020000000000020000000900010073797a30000000000c0002"], 0x58}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x14094}, 0x4040045) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1806000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007d9af8ff00000000b5080000000000007baaf0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf91000000000000b50200000000000028314baef7c8832500000010000000b700000000000c0095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000001080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r8}, 0x0) getsockopt$bt_hci(r7, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r9 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r9, 0x8917, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0xa0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r10, &(0x7f0000000200)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0xd) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r11, &(0x7f0000000200)=ANY=[@ANYBLOB='\''], 0xd) r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) sendfile(r2, r1, 0x0, 0x0) 680.056592ms ago: executing program 1 (id=2895): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="1800004e5be4bed4d8bd6ce9f646fe6f41230212000000000000180900002020701800000000002020207b1af8ff00000000bfa100000700000007010000f8ffffffb7020000040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xadb5485dae8f7179, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000004b00)={&(0x7f0000004b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004ac0)={&(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x1e4}, 0x1, 0x0, 0x0, 0x20008004}, 0x8080) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x5865, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f8484800fff05e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 679.688057ms ago: executing program 3 (id=2896): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001f40)={0x114, 0x3c, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@generic="4c626c5cb18cbd41bc6468281e5b69b35687998d6a602ee6f8135873358428c850c47d2889688eb2efe5d001cb3ac33102aa388842876e1f89a760622355c2e4350b9f8771e0f2982331246178941b16134e7d770ab00397ce66d6bfe422e060c3f4b258ae641c41484185b8909da6e8f194b652771d1a3e56f14c917681b85fa661a50f5d14c48e3131d0914817bfcb4bb11f6149d4243dd42902e97424fafc138e849f48365b916a590d7e", @generic="e468e4f19301d7ab967d0ecd5b14319bb2aa723fae5634ccfea164a0bb1abd37d894a8cf48016441741cf7b5bd3631b4ecc008b9204dc315a0e1324404a275485ff18fa452bed65f1f4996db787de9c3d5e98c"]}]}, 0x33fe0}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x10, 0x80, 0x1, 0x9, {{0x25, 0x4, 0x1, 0x1, 0x94, 0x64, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}, {[@timestamp_addr={0x44, 0x3c, 0xb9, 0x1, 0x4, [{@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xee}, {@private=0xa010102, 0xae}, {@multicast2, 0x9}, {@private=0xa010102, 0xd}, {@multicast1, 0xfffffffb}, {@broadcast, 0x9}]}, @noop, @rr={0x7, 0xb, 0x4a, [@local, @dev={0xac, 0x14, 0x14, 0x40}]}, @ssrr={0x89, 0x13, 0x83, [@loopback, @local, @broadcast, @broadcast]}, @rr={0x7, 0x23, 0xfc, [@remote, @remote, @multicast1, @multicast1, @broadcast, @remote, @broadcast, @empty]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00'}) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000600)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x10, 0xf989, "6080356e793ca9d55b8ef24e"}, @nop, @generic={0x0, 0xc, "04f6fea52eb715ea7022"}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) r2 = socket(0x10, 0x2, 0x0) sendto$inet6(r2, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, 0x3, 0x6, 0x927588eab6e7e2af, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 639.204802ms ago: executing program 0 (id=2897): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000de220000009500000000000000dae163fd1436054b2a5379120a88c3432851cf9577ac455e4f96e280988ce12603082fc2dbd83f38ed8de1d3a27ea7ede3618d244f8c000023971ee1f1f6b75a1134da0d2b11acc2", @ANYRES8, @ANYRESHEX, @ANYBLOB="547da7c105b37767ebd89b21f447a3eab99e0aa7d58b3c428aa16cbc2302c90075d23d1a85d0e3cfc1252b3f2a64504f807ce8519583502420717b9b7d1eed052b8ca0f3", @ANYRES16=0x0, @ANYRESDEC, @ANYBLOB="cc6e43e39f72472cf70fbc55ea05ff215af598aabe7b2b0ae5d3a3472635ce515725a12182a99c40d02297a61c8a3a465936d8365a0b7c1eb4f3e854d111ca5bbecc5c379b69c5509e2bd859104c72214c3f1068afa244ffdab25d0421a82b6f925b354fc274cfba7954b7dd4f90105c1b829c5da639dd3d921619c9f29fde23ed25bb4348582c6d91496749d8df5bb541c6dc4721127db38a74f7c9062712fcd1ce50d23d72c99ded15e8c7baac0a932752f53c5db4c019d903d151859c53cbb0769804c2a81e5d857c378a8115db76b800"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2}, 0x90) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x28, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa3e3}, 0xfffffffffffffeae) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="0e030e00c4e8120006001e0089e9aaa911d7c2290f0086dd1327c9167c642c4a1b7802000ccb6655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c15", 0x40, 0x2000c050, &(0x7f00000002c0)={0x11, 0x1b, r1, 0x1, 0x4, 0x6, @multicast}, 0x14) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x4044010}, 0xd1) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000440), 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000180)) 591.882017ms ago: executing program 1 (id=2898): r0 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x0, 0x1c, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa082, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, r0}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000dc0)='GPL\x00', 0x8, 0xf, &(0x7f0000000e00)=""/15, 0x41100, 0x0, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000e80)={0x4, 0x9, 0x80000001, 0xef5b}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000ec0)=[r0, r0, r0], 0x0, 0x10, 0x9}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x8, r0, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc, 0x80002}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000800000000000000000000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000f8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000240)={0x0, 0x8, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000f0080603000000000000000d00020000000500010007"], 0x1c}}, 0x0) 457.758985ms ago: executing program 0 (id=2899): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4a00000010000304120000000000000000400000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x4c}}, 0x0) 457.38849ms ago: executing program 3 (id=2900): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000681000010400"/20, @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 455.930438ms ago: executing program 4 (id=2901): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2400000019000a00000000000000000080200000000400f7ffffff0008"], 0x24}}, 0x0) 387.88578ms ago: executing program 1 (id=2902): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfdef) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000200)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x5, 0x20, 0x5, 0x822, 0xffffffffffffffff, 0x9, '\x00', 0x0, r1, 0x4, 0x4, 0x5, 0x5}, 0x48) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f0000000580)=""/23, 0x17, 0x0, &(0x7f00000006c0)=""/220, 0xdc}}, 0x10) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000008500000050"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1f000000}, @generic={0x7b}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000001f7b0a100000", @ANYRES32=r6, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0x6, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x1, 0x6, 0x0, 0x4, 0x20, 0xffffffffffffffff}, @alu={0x7, 0x0, 0x6, 0x7, 0x3, 0x10, 0x10}, @alu={0x4, 0x1, 0xc, 0x6, 0x7, 0x20, 0x8}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}], &(0x7f0000000280)='GPL\x00', 0x9, 0x20, &(0x7f0000000300)=""/32, 0x40f00, 0x5, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x0, 0x3}, 0x10, r3, r4, 0x0, &(0x7f00000007c0)=[r5, r6], 0x0, 0x10, 0x10001}, 0x90) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r7}, &(0x7f0000001840), &(0x7f0000001880)='%pB \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0xffffffffffffffff, 0x4, 0x10}, 0xc) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r10, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x48) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x17, 0x0, 0x1b, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r11}, 0x0, &(0x7f0000000040)}, 0x20) 356.2995ms ago: executing program 3 (id=2903): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) epoll_create(0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) socket$caif_stream(0x25, 0x1, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES64=r1], 0x40}}, 0x0) 351.876152ms ago: executing program 4 (id=2904): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00001300bfa200000002000007020000f8ffffffb703000008000000b70400000000000085000000039d45abc13504ddb2cc3d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000080001"], 0x28}}, 0x0) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async, rerun: 32) r4 = socket$inet6(0xa, 0x3, 0xff) (rerun: 32) sendmmsg$sock(r4, &(0x7f0000000240)=[{{&(0x7f0000000040)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x18}}], 0x18}}], 0x1, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x80010, r5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000300)='GPL\x00', 0xd}, 0x90) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, 0x0, &(0x7f0000000280)) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000180)=ANY=[], 0x8) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00'}, 0x90) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0471e7438246eb5596f7102fb8c5943494d88a8ab151e90dc17cf01dcce64458a38e7bf70c1bbe32b8b69d541955258ff60a1b1802bc207df74b3295cdffa72d1e57002468f9e4759b24bc1e428907eeb54a55ad4f5d1db78f03350f987bb7c8c6977e97a0a8616cccc29b8869", @ANYRES16=r8, @ANYBLOB="0000000000000000000006000000"], 0x14}}, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x44, r9, 0x41e9cd649d6146c1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r12}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x44}}, 0x0) 223.822367ms ago: executing program 1 (id=2905): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r3, 0x1, 0x6, @link_local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xffffff01}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106}, 0x90) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000280)=0x90) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r9, 0x8907, &(0x7f0000000140)) sendmsg$NFT_BATCH(r9, &(0x7f0000000500)={0x0, 0x54, 0x0}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)=ANY=[@ANYBLOB="380000000314010000000000000000080900020073797a30000000000800410072786500140033006c6f"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r7, @ANYBLOB="08001b"], 0x34}}, 0x0) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r11, 0x103, 0x1, &(0x7f0000000080)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r12, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="6802000000050101000000000000000000000000540201000000000000000000040000000000000473797a30000000000000000038c88ef40000000000000000000000000000000000000000323da07a6be6244f96d511d2b7a167bb1634e69bdc123f2bb538bf3d04ffb6ac377838d60bddb02cf7a4afabf3726000af67484c1f59e9f6cf941471f0a0a35500000000000000000000000000000000000000000000000000000000000000000000000027d000000300000000000000000000000000000041fe2133000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000100000100000003000000feff0000000000000000000000000000030000000000000000000000000000000001010000000000000000000000000000000000000000000000000000000000020000400000000000008f18e7896d56a35ca4dc00000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e001000000000008000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdff00"/625], 0x268}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r13 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r13, 0x10e, 0xc, &(0x7f0000000000)=0x8, 0x4) sendmsg$nl_generic(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000003e0029de670e0000000000000a00000004000000"], 0x18}}, 0x0) 223.371076ms ago: executing program 0 (id=2906): bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ni\x00'}, 0x58) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d8847007ea60864160af36514001ac00400020208000200000001000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 199.209622ms ago: executing program 3 (id=2907): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000080)=0xfff, 0x4) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000000c0)=0x9) write$binfmt_elf64(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x12}, [{}]}, 0x78) 146.362735ms ago: executing program 0 (id=2908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r0], 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)={0x20, 0x19, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket(0x1e, 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002c40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x1fba0a3a32597db1}]}}}]}]}], {0x14}}, 0x80}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0xe}, 0x48) r7 = socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r7}, 0x20) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x3, 0x5e55b37311de6d89, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x5, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0xfffffff8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r8, 0x6acd4b34}, &(0x7f0000000140)=0x8) 51.815244ms ago: executing program 3 (id=2909): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffeba, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES32=r0], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000000)="9c", 0xffffff7d}], 0x1) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000200)) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000640)=ANY=[@ANYRESHEX=r4], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x90) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, &(0x7f0000000380)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) getsockname$netlink(r1, &(0x7f0000000240), &(0x7f0000000280)=0xc) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r9) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r10, 0x1}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x6, 0x1, 0x5, 0x8, 0xffffffffffffffff, 0x8004, '\x00', r7, r6, 0x2, 0x5, 0x2, 0xa}, 0x48) 0s ago: executing program 0 (id=2910): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x10002, 0x0, 0x1}, 0x48) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0, 0x80}}, 0x2000c001) (async) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000000)=""/31, &(0x7f0000000040)=0x1f) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x0}, 0x90) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) (async) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) close(r5) (async) socket$netlink(0x10, 0x3, 0x0) (async) preadv(r6, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000340000000000800024000000000080001400000000008000440000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000a"], 0x8c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a8e4bb41211fbd9477c8771c4199ba1485e8cbe1d7477919e9d58d3e8b6d4c0f2a317bb1d50d00000000000000b4d95b9617a5d7fc18eefcf4bfe466dc3c0369dbd187f776e444b8b9927496a4f2091b5f5cc714094844771f1afa5c3d515431894bfa4759fc4bdcc665d154ca61eadefed2333b95d776c29c7391237c42eea9ca197a4ce54139afe243a58111948172a80df1a0969ca0535dc3a2d4cd5cc3f43211e06a8cf5dca77a5e7e2cd5b508dafdc0dedf88406203e7d1b19a14d897d26fee098ae38fb9802347ec2c7507dfe8f3ea4ce912897f5367ecec16c4ec9161fc0c42f401d954289d8824", @ANYRES32=r1, @ANYRES16, @ANYRES32=r7, @ANYBLOB="37df1aeba2a0"], 0x5c}}, 0x0) kernel console output (not intermixed with test programs): 0/0x10 [ 184.843564][ T9204] netlink_rcv_skb+0x262/0x430 [ 184.848347][ T9204] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 184.853829][ T9204] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 184.859157][ T9204] ? netlink_deliver_tap+0x2e/0x1b0 [ 184.864391][ T9204] netlink_unicast+0x7ea/0x980 [ 184.869178][ T9204] ? __pfx_netlink_unicast+0x10/0x10 [ 184.874471][ T9204] ? __virt_addr_valid+0x183/0x520 [ 184.879633][ T9204] ? __check_object_size+0x49c/0x900 [ 184.884941][ T9204] ? bpf_lsm_netlink_send+0x9/0x10 [ 184.890075][ T9204] netlink_sendmsg+0x8db/0xcb0 [ 184.894872][ T9204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.900178][ T9204] ? aa_sock_msg_perm+0x91/0x160 [ 184.905136][ T9204] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 184.910429][ T9204] ? security_socket_sendmsg+0x87/0xb0 [ 184.915902][ T9204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.921210][ T9204] __sock_sendmsg+0x221/0x270 [ 184.925940][ T9204] __sys_sendto+0x3a4/0x4f0 [ 184.930460][ T9204] ? __pfx___sys_sendto+0x10/0x10 [ 184.935545][ T9204] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 184.941542][ T9204] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 184.947911][ T9204] __x64_sys_sendto+0xde/0x100 [ 184.952690][ T9204] do_syscall_64+0xf3/0x230 [ 184.957213][ T9204] ? clear_bhb_loop+0x35/0x90 [ 184.961912][ T9204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.967848][ T9204] RIP: 0033:0x7f1d03375bd9 [ 184.972274][ T9204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.991899][ T9204] RSP: 002b:00007f1d0420c048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 185.000330][ T9204] RAX: ffffffffffffffda RBX: 00007f1d03503f60 RCX: 00007f1d03375bd9 [ 185.008344][ T9204] RDX: 0000000000010a73 RSI: 0000000020000000 RDI: 0000000000000003 [ 185.016352][ T9204] RBP: 00007f1d0420c0a0 R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 185.024333][ T9204] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 185.032314][ T9204] R13: 000000000000000b R14: 00007f1d03503f60 R15: 00007ffd820e3ee8 [ 185.040311][ T9204] [ 185.134339][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1432'. [ 185.143285][ T9211] netlink: 'syz.4.1432': attribute type 13 has an invalid length. [ 185.228292][ T9211] netlink: 'syz.4.1432': attribute type 11 has an invalid length. [ 185.355969][ T9216] netlink: 'syz.0.1435': attribute type 6 has an invalid length. [ 185.692893][ T9227] netlink: 'syz.0.1441': attribute type 4 has an invalid length. [ 185.778796][ T9235] netlink: 'syz.4.1444': attribute type 11 has an invalid length. [ 185.798450][ T9237] netlink: 'syz.4.1444': attribute type 11 has an invalid length. [ 185.813560][ T9235] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1444'. [ 185.833010][ T9237] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1444'. [ 186.383253][ T9256] netlink: 'syz.4.1452': attribute type 10 has an invalid length. [ 186.404032][ T9256] geneve0: entered promiscuous mode [ 186.430840][ T9256] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 186.899834][ T9280] tc_dump_action: action bad kind [ 186.924873][ T9282] netlink: 'syz.1.1461': attribute type 21 has an invalid length. [ 187.000575][ T9282] syz_tun: entered promiscuous mode [ 187.034169][ T9282] syz_tun: left promiscuous mode [ 187.085765][ T9287] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1463'. [ 187.425231][ T9311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1471'. [ 187.760632][ T9334] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1480'. [ 188.168061][ T9350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.192976][ T9350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.641303][ T9368] netlink: 616 bytes leftover after parsing attributes in process `syz.2.1492'. [ 188.756789][ T9372] validate_nla: 3 callbacks suppressed [ 188.756823][ T9372] netlink: 'syz.0.1494': attribute type 21 has an invalid length. [ 188.796838][ T9372] syz_tun: entered promiscuous mode [ 188.810477][ T9372] syz_tun: left promiscuous mode [ 188.841673][ T9376] netlink: 'syz.4.1495': attribute type 10 has an invalid length. [ 189.131873][ T9384] IPVS: Scheduler module ip_vs_sip not found [ 189.273911][ T9393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1501'. [ 189.412041][ T9399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.441678][ T9399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.553988][ T9408] netlink: 'syz.3.1508': attribute type 21 has an invalid length. [ 189.595994][ T9408] syz_tun: entered promiscuous mode [ 189.610387][ T9408] syz_tun: left promiscuous mode [ 189.640234][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1507'. [ 189.708643][ T9415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1512'. [ 190.502411][ T9454] netlink: 'syz.4.1528': attribute type 21 has an invalid length. [ 190.538177][ T9454] syz_tun: entered promiscuous mode [ 190.557410][ T9454] syz_tun: left promiscuous mode [ 190.639636][ T9459] netlink: 'syz.1.1530': attribute type 1 has an invalid length. [ 190.666593][ T9459] netlink: 616 bytes leftover after parsing attributes in process `syz.1.1530'. [ 190.689307][ T9461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.101940][ T9491] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1537'. [ 191.420966][ T9505] netlink: 'syz.3.1543': attribute type 2 has an invalid length. [ 191.576817][ T9515] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1548'. [ 192.156110][ T9548] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1561'. [ 192.470198][ T9563] netlink: 'syz.0.1564': attribute type 1 has an invalid length. [ 192.509874][ T9560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1565'. [ 192.738538][ T9568] IPVS: Scheduler module ip_vs_sip not found [ 193.110249][ T9597] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1575'. [ 193.561334][ T9621] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 193.781404][ T9634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1587'. [ 193.926669][ T9638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1588'. [ 194.053049][ T9643] netlink: 'syz.3.1591': attribute type 20 has an invalid length. [ 194.285847][ T9660] netlink: 'syz.0.1595': attribute type 3 has an invalid length. [ 194.312136][ T9660] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.1595'. [ 194.441932][ T9666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1598'. [ 194.593934][ T9679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1601'. [ 194.648777][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.656277][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.699470][ T9675] netlink: 'syz.1.1603': attribute type 21 has an invalid length. [ 194.770758][ T9677] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 194.785024][ T9677] bond1: (slave vcan1): Error -95 calling set_mac_address [ 194.816126][ T9684] syz_tun: entered promiscuous mode [ 194.837208][ T9684] syz_tun: left promiscuous mode [ 195.011551][ T9700] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1609'. [ 195.529025][ T9736] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1617'. [ 196.687557][ T5112] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 196.704126][ T5112] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 196.712540][ T5112] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 196.722040][ T5112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 196.731570][ T5112] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 196.741249][ T5112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 197.077301][ T9822] netlink: 'syz.1.1636': attribute type 21 has an invalid length. [ 197.095451][ T9824] netlink: 'syz.0.1633': attribute type 1 has an invalid length. [ 197.134438][ T9822] syz_tun: entered promiscuous mode [ 197.143772][ T9822] syz_tun: left promiscuous mode [ 197.461665][ T9798] chnl_net:caif_netlink_parms(): no params data found [ 197.665452][ T9853] __nla_validate_parse: 4 callbacks suppressed [ 197.665473][ T9853] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1644'. [ 197.685984][ T9853] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1644'. [ 197.687144][ T9855] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 197.727257][ T9798] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.734941][ T9798] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.743166][ T9798] bridge_slave_0: entered allmulticast mode [ 197.751674][ T9798] bridge_slave_0: entered promiscuous mode [ 197.779766][ T9798] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.791184][ T9798] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.807971][ T9798] bridge_slave_1: entered allmulticast mode [ 197.827563][ T9798] bridge_slave_1: entered promiscuous mode [ 197.853303][ T9853] netlink: 'syz.3.1644': attribute type 10 has an invalid length. [ 197.995361][ T9798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.043125][ T9798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.173688][ T9868] ɶƣ0GC¦: entered promiscuous mode [ 198.221377][ T9868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1651'. [ 198.225680][ T9798] team0: Port device team_slave_0 added [ 198.257321][ T9868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1651'. [ 198.294493][ T9798] team0: Port device team_slave_1 added [ 198.429742][ T9798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.444758][ T9798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.481145][ T9798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.515358][ T9798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.522491][ T9798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.549859][ T9798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.696840][ T9798] hsr_slave_0: entered promiscuous mode [ 198.712982][ T9798] hsr_slave_1: entered promiscuous mode [ 198.733092][ T9798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.742637][ T9798] Cannot create hsr debugfs directory [ 198.780594][ T9896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.806543][ T5112] Bluetooth: hci4: command tx timeout [ 198.890974][ T9900] netlink: 'syz.1.1662': attribute type 1 has an invalid length. [ 198.931553][ T9900] bond1: entered promiscuous mode [ 199.008355][ T9900] lo: entered promiscuous mode [ 199.019516][ T9900] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 199.039908][ T9900] bond1: (slave lo): making interface the new active one [ 199.049964][ T9900] bond1: (slave lo): Enslaving as an active interface with an up link [ 199.148795][ T9911] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1665'. [ 199.185856][ T9798] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.218626][ T9914] FAULT_INJECTION: forcing a failure. [ 199.218626][ T9914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.254305][ T9914] CPU: 1 PID: 9914 Comm: syz.0.1667 Not tainted 6.10.0-rc6-syzkaller-00166-g83c36e7cfd74 #0 [ 199.264449][ T9914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 199.274647][ T9914] Call Trace: [ 199.277969][ T9914] [ 199.280933][ T9914] dump_stack_lvl+0x241/0x360 [ 199.285663][ T9914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.290913][ T9914] ? __pfx__printk+0x10/0x10 [ 199.295557][ T9914] ? __pfx_lock_release+0x10/0x10 [ 199.300640][ T9914] should_fail_ex+0x3b0/0x4e0 [ 199.305381][ T9914] _copy_from_user+0x2f/0xe0 [ 199.310018][ T9914] copy_msghdr_from_user+0xae/0x680 [ 199.315270][ T9914] ? __pfx___might_resched+0x10/0x10 [ 199.320608][ T9914] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 199.326483][ T9914] ? __might_fault+0xaa/0x120 [ 199.331207][ T9914] do_recvmmsg+0x40f/0xae0 [ 199.335661][ T9914] ? __pfx_lock_release+0x10/0x10 [ 199.340710][ T9914] ? __pfx_do_recvmmsg+0x10/0x10 [ 199.345698][ T9914] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 199.351612][ T9914] ? ksys_write+0x23e/0x2c0 [ 199.356136][ T9914] ? __pfx_lock_release+0x10/0x10 [ 199.361179][ T9914] ? vfs_write+0x7c4/0xc90 [ 199.365618][ T9914] ? __mutex_unlock_slowpath+0x21d/0x750 [ 199.371271][ T9914] ? __fget_files+0x3f6/0x470 [ 199.375975][ T9914] __x64_sys_recvmmsg+0x199/0x250 [ 199.381040][ T9914] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 199.386614][ T9914] ? do_syscall_64+0x100/0x230 [ 199.391484][ T9914] ? do_syscall_64+0xb6/0x230 [ 199.396218][ T9914] do_syscall_64+0xf3/0x230 [ 199.400749][ T9914] ? clear_bhb_loop+0x35/0x90 [ 199.405453][ T9914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.411373][ T9914] RIP: 0033:0x7f7946d75bd9 [ 199.415815][ T9914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.435534][ T9914] RSP: 002b:00007f7947b6e048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 199.443996][ T9914] RAX: ffffffffffffffda RBX: 00007f7946f03f60 RCX: 00007f7946d75bd9 [ 199.451978][ T9914] RDX: 000000000000f000 RSI: 0000000020001880 RDI: 0000000000000004 [ 199.459957][ T9914] RBP: 00007f7947b6e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 199.467954][ T9914] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000002 [ 199.475942][ T9914] R13: 000000000000000b R14: 00007f7946f03f60 R15: 00007ffe3cef53d8 [ 199.483945][ T9914] [ 199.566542][ T9798] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.637120][ T9918] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 199.657007][ T9925] bridge0: entered allmulticast mode [ 199.735693][ T9798] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.808718][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1671'. [ 199.837846][ T9935] nbd: nbd0 already in use [ 199.889959][ T9940] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1673'. [ 199.969092][ T9798] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.041123][ T9942] netlink: 'syz.1.1674': attribute type 21 has an invalid length. [ 200.045120][ T9946] FAULT_INJECTION: forcing a failure. [ 200.045120][ T9946] name failslab, interval 1, probability 0, space 0, times 0 [ 200.062327][ T9946] CPU: 1 PID: 9946 Comm: syz.4.1676 Not tainted 6.10.0-rc6-syzkaller-00166-g83c36e7cfd74 #0 [ 200.072440][ T9946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 200.082521][ T9946] Call Trace: [ 200.085805][ T9946] [ 200.088740][ T9946] dump_stack_lvl+0x241/0x360 [ 200.093439][ T9946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.098666][ T9946] ? __pfx__printk+0x10/0x10 [ 200.103298][ T9946] ? ref_tracker_alloc+0x332/0x490 [ 200.108452][ T9946] should_fail_ex+0x3b0/0x4e0 [ 200.113189][ T9946] ? skb_clone+0x20c/0x390 [ 200.117655][ T9946] should_failslab+0x9/0x20 [ 200.122223][ T9946] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 200.127630][ T9946] skb_clone+0x20c/0x390 [ 200.131980][ T9946] __netlink_deliver_tap+0x3cc/0x7c0 [ 200.137299][ T9946] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.142514][ T9946] netlink_deliver_tap+0x19d/0x1b0 [ 200.147647][ T9946] netlink_unicast+0x7b8/0x980 [ 200.152449][ T9946] ? __pfx_netlink_unicast+0x10/0x10 [ 200.157764][ T9946] ? __virt_addr_valid+0x183/0x520 [ 200.162913][ T9946] ? __check_object_size+0x49c/0x900 [ 200.168319][ T9946] ? bpf_lsm_netlink_send+0x9/0x10 [ 200.173467][ T9946] netlink_sendmsg+0x8db/0xcb0 [ 200.178267][ T9946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.183574][ T9946] ? __import_iovec+0x536/0x820 [ 200.188438][ T9946] ? aa_sock_msg_perm+0x91/0x160 [ 200.193402][ T9946] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 200.198709][ T9946] ? security_socket_sendmsg+0x87/0xb0 [ 200.204181][ T9946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.209478][ T9946] __sock_sendmsg+0x221/0x270 [ 200.214176][ T9946] ____sys_sendmsg+0x525/0x7d0 [ 200.219047][ T9946] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.224359][ T9946] __sys_sendmsg+0x2b0/0x3a0 [ 200.228965][ T9946] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.234171][ T9946] ? vfs_write+0x7c4/0xc90 [ 200.238639][ T9946] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 200.244976][ T9946] ? do_syscall_64+0x100/0x230 [ 200.249757][ T9946] ? do_syscall_64+0xb6/0x230 [ 200.254453][ T9946] do_syscall_64+0xf3/0x230 [ 200.258985][ T9946] ? clear_bhb_loop+0x35/0x90 [ 200.263693][ T9946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.269617][ T9946] RIP: 0033:0x7efda0775bd9 [ 200.274041][ T9946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.293655][ T9946] RSP: 002b:00007efda15eb048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.302084][ T9946] RAX: ffffffffffffffda RBX: 00007efda0903f60 RCX: 00007efda0775bd9 [ 200.310061][ T9946] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 200.318046][ T9946] RBP: 00007efda15eb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 200.326042][ T9946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.334045][ T9946] R13: 000000000000000b R14: 00007efda0903f60 R15: 00007ffc0f9954a8 [ 200.342071][ T9946] [ 200.364961][ T9943] syz_tun: entered promiscuous mode [ 200.372243][ T9943] syz_tun: left promiscuous mode [ 200.387857][ T9947] netlink: 'syz.3.1675': attribute type 3 has an invalid length. [ 200.396752][ T9947] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1675'. [ 200.742872][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1678'. [ 200.779631][ T9798] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 200.839023][ T9798] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 200.876193][ T9798] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 200.884347][ T5097] Bluetooth: hci4: command tx timeout [ 200.900736][ T9798] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 201.131041][ T9798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.154050][ T9980] netlink: 'syz.0.1687': attribute type 29 has an invalid length. [ 201.171439][ T9980] netlink: 'syz.0.1687': attribute type 29 has an invalid length. [ 201.208676][ T9798] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.254383][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.261625][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.293311][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.300605][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.641433][ T9998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1693'. [ 201.844565][ T5097] Bluetooth: hci2: command 0x0406 tx timeout [ 201.851846][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 201.940321][ T9798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.017620][T10013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.035222][ T9798] veth0_vlan: entered promiscuous mode [ 202.080132][ T9798] veth1_vlan: entered promiscuous mode [ 202.214690][ T9798] veth0_macvtap: entered promiscuous mode [ 202.242131][ T9798] veth1_macvtap: entered promiscuous mode [ 202.270324][ T9798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.309874][ T9798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.325400][T10031] netlink: 'syz.1.1704': attribute type 29 has an invalid length. [ 202.332762][ T9798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.351804][ T9798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.362192][ T9798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.393388][ T9798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.407625][ T9798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.418708][ T9798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.429024][ T9798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.440914][ T9798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.454262][ T9798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.462107][T10031] netlink: 'syz.1.1704': attribute type 29 has an invalid length. [ 202.512072][ T9798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.537311][ T9798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.553697][ T9798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.570004][ T9798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.588299][ T9798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.610176][ T9798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.621628][ T9798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.640086][ T9798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.670475][ T9798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.681426][ T9798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.694773][ T9798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.702994][T10038] __nla_validate_parse: 3 callbacks suppressed [ 202.703014][T10038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1707'. [ 202.768200][ T9798] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.787226][ T9798] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.797824][ T9798] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.807956][ T9798] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.965219][ T5112] Bluetooth: hci4: command tx timeout [ 202.996973][T10056] Cannot find add_set index 0 as target [ 203.052761][T10058] netlink: 'syz.1.1715': attribute type 1 has an invalid length. [ 203.066622][T10058] netlink: 9352 bytes leftover after parsing attributes in process `syz.1.1715'. [ 203.080151][ T3869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.098177][ T3869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.110315][T10058] netlink: 'syz.1.1715': attribute type 1 has an invalid length. [ 203.139749][T10058] netlink: 'syz.1.1715': attribute type 2 has an invalid length. [ 203.153681][T10058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1715'. [ 203.248950][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.276253][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.347848][T10068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1718'. [ 203.375564][T10069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.520291][T10077] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1720'. [ 203.621039][T10084] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1721'. [ 204.098622][T10106] netlink: 'syz.4.1732': attribute type 29 has an invalid length. [ 204.211934][T10110] IPVS: Error joining to the multicast group [ 204.565964][T10131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.571118][T10132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1741'. [ 204.865976][T10151] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1746'. [ 205.043699][ T5112] Bluetooth: hci4: command tx timeout [ 205.291516][T10164] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1750'. [ 205.383124][T10168] veth0_vlan: entered allmulticast mode [ 205.637242][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1753'. [ 205.669113][T10168] veth0_vlan: left promiscuous mode [ 205.721147][T10168] veth0_vlan: entered promiscuous mode [ 205.961719][T10194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.975951][T10197] validate_nla: 1 callbacks suppressed [ 205.975979][T10197] netlink: 'syz.0.1762': attribute type 10 has an invalid length. [ 207.180068][T10255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.322401][T10269] netlink: 'syz.4.1789': attribute type 21 has an invalid length. [ 207.362092][T10269] syz_tun: entered promiscuous mode [ 207.382288][T10269] syz_tun: left promiscuous mode [ 207.784712][T10294] __nla_validate_parse: 5 callbacks suppressed [ 207.784736][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1796'. [ 207.839954][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1796'. [ 208.031617][T10307] nftables ruleset with unbound chain [ 208.045942][T10312] FAULT_INJECTION: forcing a failure. [ 208.045942][T10312] name failslab, interval 1, probability 0, space 0, times 0 [ 208.068915][T10312] CPU: 0 PID: 10312 Comm: syz.1.1803 Not tainted 6.10.0-rc6-syzkaller-00166-g83c36e7cfd74 #0 [ 208.079137][T10312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 208.089241][T10312] Call Trace: [ 208.092563][T10312] [ 208.095530][T10312] dump_stack_lvl+0x241/0x360 [ 208.100270][T10312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.105525][T10312] ? __pfx__printk+0x10/0x10 [ 208.110185][T10312] ? netlink_insert+0x10b7/0x14b0 [ 208.115271][T10312] should_fail_ex+0x3b0/0x4e0 [ 208.120009][T10312] ? __alloc_skb+0x1c3/0x440 [ 208.124650][T10312] should_failslab+0x9/0x20 [ 208.129207][T10312] kmem_cache_alloc_node_noprof+0x71/0x320 [ 208.135077][T10312] __alloc_skb+0x1c3/0x440 [ 208.139559][T10312] ? __pfx___alloc_skb+0x10/0x10 [ 208.144555][T10312] ? netlink_autobind+0xd6/0x2f0 [ 208.149551][T10312] ? netlink_autobind+0x2b0/0x2f0 [ 208.154638][T10312] netlink_sendmsg+0x631/0xcb0 [ 208.159468][T10312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.164979][T10312] ? __import_iovec+0x536/0x820 [ 208.169883][T10312] ? aa_sock_msg_perm+0x91/0x160 [ 208.174882][T10312] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 208.180213][T10312] ? security_socket_sendmsg+0x87/0xb0 [ 208.185721][T10312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.191059][T10312] __sock_sendmsg+0x221/0x270 [ 208.195800][T10312] ____sys_sendmsg+0x525/0x7d0 [ 208.200638][T10312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.205995][T10312] __sys_sendmsg+0x2b0/0x3a0 [ 208.210648][T10312] ? __pfx___sys_sendmsg+0x10/0x10 [ 208.215829][T10312] ? vfs_write+0x7c4/0xc90 [ 208.220327][T10312] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 208.226685][T10312] ? do_syscall_64+0x100/0x230 [ 208.231483][T10312] ? do_syscall_64+0xb6/0x230 [ 208.236188][T10312] do_syscall_64+0xf3/0x230 [ 208.240733][T10312] ? clear_bhb_loop+0x35/0x90 [ 208.245444][T10312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.251361][T10312] RIP: 0033:0x7fa4b3575bd9 [ 208.255788][T10312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.275497][T10312] RSP: 002b:00007fa4b431e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.283935][T10312] RAX: ffffffffffffffda RBX: 00007fa4b3703f60 RCX: 00007fa4b3575bd9 [ 208.291919][T10312] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 208.299900][T10312] RBP: 00007fa4b431e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 208.307879][T10312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.315859][T10312] R13: 000000000000000b R14: 00007fa4b3703f60 R15: 00007ffeb7d7fac8 [ 208.323862][T10312] [ 208.500188][T10324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.546273][T10329] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1809'. [ 208.876114][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1815'. [ 208.934689][T10348] netlink: 'syz.4.1818': attribute type 4 has an invalid length. [ 209.077914][T10360] syzkaller1: entered promiscuous mode [ 209.276632][T10367] netlink: 'syz.2.1822': attribute type 4 has an invalid length. [ 209.662583][T10389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.968171][T10403] netlink: 'syz.4.1835': attribute type 4 has an invalid length. [ 210.216458][T10420] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 210.888199][T10453] netlink: 'syz.0.1847': attribute type 21 has an invalid length. [ 210.950496][T10453] syz_tun: entered promiscuous mode [ 210.972907][T10453] syz_tun: left promiscuous mode [ 211.061099][T10459] netlink: 'syz.2.1851': attribute type 4 has an invalid length. [ 211.238876][T10466] syzkaller1: entered promiscuous mode [ 211.396557][T10472] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1857'. [ 211.816035][T10490] netlink: 'syz.2.1864': attribute type 1 has an invalid length. [ 211.829845][T10490] netlink: 'syz.2.1864': attribute type 1 has an invalid length. [ 211.871226][T10502] netlink: 'syz.0.1868': attribute type 4 has an invalid length. [ 211.999401][T10508] netlink: 67 bytes leftover after parsing attributes in process `syz.2.1871'. [ 212.023612][T10508] IPv6: NLM_F_CREATE should be specified when creating new route [ 212.031577][T10508] IPv6: Can't replace route, no match found [ 212.100190][T10508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1871'. [ 212.162629][T10515] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1874'. [ 212.521639][T10533] FAULT_INJECTION: forcing a failure. [ 212.521639][T10533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.594101][T10533] CPU: 0 PID: 10533 Comm: syz.3.1882 Not tainted 6.10.0-rc6-syzkaller-00166-g83c36e7cfd74 #0 [ 212.604337][T10533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 212.614436][T10533] Call Trace: [ 212.617755][T10533] [ 212.620719][T10533] dump_stack_lvl+0x241/0x360 [ 212.625493][T10533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.630722][T10533] ? __pfx__printk+0x10/0x10 [ 212.635339][T10533] ? __pfx_lock_release+0x10/0x10 [ 212.640388][T10533] should_fail_ex+0x3b0/0x4e0 [ 212.645102][T10533] _copy_from_user+0x2f/0xe0 [ 212.649721][T10533] copy_msghdr_from_user+0xae/0x680 [ 212.654947][T10533] ? __pfx___might_resched+0x10/0x10 [ 212.660252][T10533] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 212.666094][T10533] ? __might_fault+0xaa/0x120 [ 212.670792][T10533] do_recvmmsg+0x40f/0xae0 [ 212.675229][T10533] ? __pfx_lock_release+0x10/0x10 [ 212.680302][T10533] ? __pfx_do_recvmmsg+0x10/0x10 [ 212.685276][T10533] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 212.691187][T10533] ? ksys_write+0x23e/0x2c0 [ 212.695704][T10533] ? __pfx_lock_release+0x10/0x10 [ 212.700746][T10533] ? vfs_write+0x7c4/0xc90 [ 212.705183][T10533] ? __mutex_unlock_slowpath+0x21d/0x750 [ 212.710837][T10533] ? __fget_files+0x3f6/0x470 [ 212.715543][T10533] __x64_sys_recvmmsg+0x199/0x250 [ 212.720589][T10533] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 212.726151][T10533] ? do_syscall_64+0x100/0x230 [ 212.730939][T10533] ? do_syscall_64+0xb6/0x230 [ 212.735647][T10533] do_syscall_64+0xf3/0x230 [ 212.740173][T10533] ? clear_bhb_loop+0x35/0x90 [ 212.744873][T10533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.750899][T10533] RIP: 0033:0x7f1d03375bd9 [ 212.755323][T10533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.775377][T10533] RSP: 002b:00007f1d0420c048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 212.783917][T10533] RAX: ffffffffffffffda RBX: 00007f1d03503f60 RCX: 00007f1d03375bd9 [ 212.791896][T10533] RDX: 040000000000012d RSI: 0000000020000080 RDI: 0000000000000003 [ 212.799880][T10533] RBP: 00007f1d0420c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 212.807858][T10533] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 212.815923][T10533] R13: 000000000000000b R14: 00007f1d03503f60 R15: 00007ffd820e3ee8 [ 212.823919][T10533] [ 213.480809][T10580] netlink: 'syz.2.1895': attribute type 29 has an invalid length. [ 213.512695][T10580] netlink: 'syz.2.1895': attribute type 29 has an invalid length. [ 213.548652][T10580] netlink: 'syz.2.1895': attribute type 29 has an invalid length. [ 214.147187][T10621] netlink: 'syz.4.1909': attribute type 10 has an invalid length. [ 214.155432][T10621] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1909'. [ 214.179133][T10621] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 214.422049][T10637] macvtap2: entered promiscuous mode [ 214.462043][T10637] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 214.542560][T10640] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1913'. [ 214.566154][T10640] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.1913'. [ 214.599705][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1914'. [ 215.053057][T10674] syzkaller1: entered promiscuous mode [ 215.095826][T10674] syzkaller1: entered allmulticast mode [ 215.134225][T10678] netlink: 'syz.2.1926': attribute type 2 has an invalid length. [ 215.155484][T10678] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1926'. [ 215.275733][T10684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1928'. [ 216.591217][T10744] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1948'. [ 216.994977][T10765] netlink: 'syz.2.1957': attribute type 3 has an invalid length. [ 217.282329][T10783] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1961'. [ 217.403251][T10791] raw_sendmsg: syz.3.1965 forgot to set AF_INET. Fix it! [ 217.811150][T10815] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1974'. [ 217.867476][T10815] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1974'. [ 217.896220][T10815] IPVS: Error connecting to the multicast addr [ 218.058462][T10835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.103415][ T9] IPVS: starting estimator thread 0... [ 218.193637][T10838] IPVS: using max 16 ests per chain, 38400 per kthread [ 218.478950][T10871] netlink: 'syz.1.1994': attribute type 9 has an invalid length. [ 218.489730][T10871] netlink: 'syz.1.1994': attribute type 7 has an invalid length. [ 218.500351][T10871] netlink: 'syz.1.1994': attribute type 8 has an invalid length. [ 218.632794][T10879] netlink: 'syz.4.1998': attribute type 21 has an invalid length. [ 218.689895][T10879] syz_tun: entered promiscuous mode [ 218.718574][T10879] syz_tun: left promiscuous mode [ 219.185082][T10910] __nla_validate_parse: 1 callbacks suppressed [ 219.185107][T10910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2010'. [ 219.808485][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2020'. [ 220.272876][T10956] netlink: 204744 bytes leftover after parsing attributes in process `syz.4.2024'. [ 220.599227][T10965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2030'. [ 220.613652][T10965] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2030'. [ 220.627841][T10965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2030'. [ 220.656114][T10965] netlink: 'syz.2.2030': attribute type 10 has an invalid length. [ 220.698301][T10965] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.706538][T10965] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.855006][T10965] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.862814][T10965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.870474][T10965] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.877736][T10965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.908527][T10965] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 221.181888][T10991] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2040'. [ 221.539084][T11006] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2047'. [ 221.625780][T11007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2044'. [ 221.888938][T11021] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2052'. [ 222.101705][T11025] netlink: 'syz.1.2055': attribute type 10 has an invalid length. [ 222.278049][T11034] netlink: 'syz.4.2059': attribute type 8 has an invalid length. [ 222.560208][T11035] team0: Port device team_slave_1 removed [ 222.850945][T11065] FAULT_INJECTION: forcing a failure. [ 222.850945][T11065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.885806][T11065] CPU: 0 PID: 11065 Comm: syz.0.2067 Not tainted 6.10.0-rc6-syzkaller-00166-g83c36e7cfd74 #0 [ 222.896127][T11065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 222.906225][T11065] Call Trace: [ 222.909593][T11065] [ 222.912551][T11065] dump_stack_lvl+0x241/0x360 [ 222.917285][T11065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.922551][T11065] ? __pfx__printk+0x10/0x10 [ 222.927189][T11065] ? __pfx_lock_release+0x10/0x10 [ 222.932263][T11065] should_fail_ex+0x3b0/0x4e0 [ 222.936998][T11065] _copy_from_iter+0x1f6/0x1960 [ 222.941905][T11065] ? __virt_addr_valid+0x183/0x520 [ 222.947067][T11065] ? __pfx_lock_release+0x10/0x10 [ 222.952138][T11065] ? __alloc_skb+0x28f/0x440 [ 222.956765][T11065] ? __pfx__copy_from_iter+0x10/0x10 [ 222.962100][T11065] ? __virt_addr_valid+0x183/0x520 [ 222.967253][T11065] ? __virt_addr_valid+0x183/0x520 [ 222.972406][T11065] ? __virt_addr_valid+0x44e/0x520 [ 222.977563][T11065] ? __check_object_size+0x49c/0x900 [ 222.982882][T11065] netlink_sendmsg+0x743/0xcb0 [ 222.987677][T11065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.992982][T11065] ? __import_iovec+0x536/0x820 [ 222.997844][T11065] ? aa_sock_msg_perm+0x91/0x160 [ 223.002797][T11065] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 223.008090][T11065] ? security_socket_sendmsg+0x87/0xb0 [ 223.013568][T11065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.018869][T11065] __sock_sendmsg+0x221/0x270 [ 223.023570][T11065] ____sys_sendmsg+0x525/0x7d0 [ 223.028354][T11065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.033669][T11065] __sys_sendmsg+0x2b0/0x3a0 [ 223.038274][T11065] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.043439][T11065] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 223.049785][T11065] ? rcu_is_watching+0x15/0xb0 [ 223.054564][T11065] ? trace_sys_enter+0x1f/0xd0 [ 223.059365][T11065] do_syscall_64+0xf3/0x230 [ 223.063976][T11065] ? clear_bhb_loop+0x35/0x90 [ 223.068698][T11065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.074635][T11065] RIP: 0033:0x7f7946d75bd9 [ 223.079060][T11065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.098679][T11065] RSP: 002b:00007f7947b6e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.107108][T11065] RAX: ffffffffffffffda RBX: 00007f7946f03f60 RCX: 00007f7946d75bd9 [ 223.115155][T11065] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000009 [ 223.123135][T11065] RBP: 00007f7947b6e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 223.131113][T11065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.139090][T11065] R13: 000000000000000b R14: 00007f7946f03f60 R15: 00007ffe3cef53d8 [ 223.147084][T11065] [ 223.545506][T11078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.563988][T11078] team0: Device bond0 failed to register rx_handler [ 223.902854][T11099] netlink: 'syz.2.2080': attribute type 3 has an invalid length. [ 223.948980][T11109] netlink: 'syz.4.2085': attribute type 10 has an invalid length. [ 224.258740][T11130] __nla_validate_parse: 5 callbacks suppressed [ 224.258762][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2091'. [ 224.285709][T11127] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2093'. [ 224.357769][T11130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.375022][T11130] team0: Device bond0 failed to register rx_handler [ 224.527105][T11147] netlink: 'syz.4.2098': attribute type 21 has an invalid length. [ 224.569102][T11147] syz_tun: entered promiscuous mode [ 224.579800][T11147] syz_tun: left promiscuous mode [ 224.828648][T11159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2103'. [ 225.004209][T11169] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2106'. [ 225.149261][T11176] netlink: 'syz.4.2111': attribute type 21 has an invalid length. [ 225.184841][T11176] syz_tun: entered promiscuous mode [ 225.208460][T11176] syz_tun: left promiscuous mode [ 225.244405][T11180] netlink: 'syz.1.2112': attribute type 9 has an invalid length. [ 225.252774][T11180] netlink: 'syz.1.2112': attribute type 7 has an invalid length. [ 225.261667][T11180] netlink: 'syz.1.2112': attribute type 8 has an invalid length. [ 225.327442][T11186] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2114'. [ 225.386615][T11187] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2114'. [ 225.479554][T11187] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2114'. [ 225.578964][T11199] netlink: 'syz.4.2117': attribute type 13 has an invalid length. [ 225.601867][T11199] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2117'. [ 225.611067][T11199] gretap0: entered allmulticast mode [ 225.619358][T11199] gretap0: refused to change device tx_queue_len [ 225.627167][T11199] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 225.645875][T11203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2118'. [ 225.787364][T11211] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2122'. [ 226.240936][T11235] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.248642][T11235] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.788086][T11256] bond0: entered promiscuous mode [ 226.795059][T11256] bond_slave_0: entered promiscuous mode [ 226.801199][T11256] bond_slave_1: entered promiscuous mode [ 226.811238][T11256] bridge0: entered promiscuous mode [ 226.820841][T11256] team0: entered promiscuous mode [ 226.828636][T11256] team_slave_0: entered promiscuous mode [ 226.836991][T11256] team_slave_1: entered promiscuous mode [ 226.848670][T11256] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 226.867375][T11256] Cannot create hsr debugfs directory [ 226.947915][T11261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.105480][T11267] syz_tun: entered promiscuous mode [ 227.132471][T11267] syz_tun: left promiscuous mode [ 227.259512][T11279] validate_nla: 3 callbacks suppressed [ 227.259538][T11279] netlink: 'syz.0.2148': attribute type 2 has an invalid length. [ 227.606108][T11299] netlink: 'syz.1.2157': attribute type 7 has an invalid length. [ 227.670047][ C1] Unknown status report in ack skb [ 228.098157][T11324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.091301][T11374] netlink: 'syz.4.2188': attribute type 10 has an invalid length. [ 229.264990][T11384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.668065][T11400] __nla_validate_parse: 13 callbacks suppressed [ 229.668090][T11400] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2197'. [ 230.312102][T11430] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2208'. [ 230.356546][T11431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2207'. [ 230.510900][T11437] netlink: 'syz.1.2209': attribute type 21 has an invalid length. [ 230.580442][T11441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.610060][T11437] syz_tun: entered promiscuous mode [ 230.651781][T11437] syz_tun: left promiscuous mode [ 230.867917][T11454] netlink: 'syz.3.2215': attribute type 1 has an invalid length. [ 230.928715][T11454] bond2: entered promiscuous mode [ 230.936035][T11454] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.961894][T11460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2215'. [ 230.988301][T11460] bond2: left promiscuous mode [ 231.010884][T11464] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2220'. [ 231.021674][T11454] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2215'. [ 231.082050][T11454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2215'. [ 231.297542][T11479] netlink: 'syz.4.2227': attribute type 21 has an invalid length. [ 231.372322][T11479] syz_tun: entered promiscuous mode [ 231.391161][T11479] syz_tun: left promiscuous mode [ 231.439055][T11484] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2228'. [ 231.666445][T11500] netlink: 'syz.3.2232': attribute type 9 has an invalid length. [ 231.706825][T11504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.121971][T11532] netlink: 'syz.2.2244': attribute type 10 has an invalid length. [ 232.130727][T11532] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2244'. [ 232.200569][T11532] syz_tun: entered promiscuous mode [ 232.218791][T11532] team0: Port device syz_tun added [ 232.246046][T11536] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2246'. [ 232.483239][T11549] macvlan2: entered allmulticast mode [ 232.494971][T11549] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 232.502201][T11549] mac80211_hwsim hwsim22 wlan0: entered allmulticast mode [ 232.522610][T11549] macvlan2: entered promiscuous mode [ 232.542716][T11549] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 232.715815][T11549] netlink: 'syz.2.2252': attribute type 25 has an invalid length. [ 232.724743][T11549] netlink: 'syz.2.2252': attribute type 7 has an invalid length. [ 233.102838][T11588] netlink: 'syz.2.2264': attribute type 2 has an invalid length. [ 233.460157][T11605] macvlan3: entered allmulticast mode [ 233.480379][T11605] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 233.546778][T11608] netlink: 'syz.2.2271': attribute type 25 has an invalid length. [ 233.565769][T11608] netlink: 'syz.2.2271': attribute type 7 has an invalid length. [ 234.895117][T11675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.438456][T11703] netlink: 'syz.4.2309': attribute type 21 has an invalid length. [ 235.467277][T11703] syz_tun: entered promiscuous mode [ 235.468169][T11706] netlink: 'syz.2.2310': attribute type 1 has an invalid length. [ 235.496418][T11703] syz_tun: left promiscuous mode [ 235.736359][T11720] vcan0: entered promiscuous mode [ 235.746463][T11720] vlan2: entered promiscuous mode [ 235.774347][T11720] vcan0: left promiscuous mode [ 235.887406][T11723] __nla_validate_parse: 3 callbacks suppressed [ 235.887429][T11723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2317'. [ 236.034751][T11733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.231919][T11743] netlink: 'syz.1.2325': attribute type 21 has an invalid length. [ 236.278326][T11743] syz_tun: entered promiscuous mode [ 236.303068][T11743] syz_tun: left promiscuous mode [ 236.358622][T11751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.456617][T11756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2330'. [ 236.691097][T11767] netlink: 'syz.2.2334': attribute type 1 has an invalid length. [ 236.936979][T11782] netlink: 'syz.2.2341': attribute type 21 has an invalid length. [ 237.080975][T11797] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2342'. [ 237.125678][T11797] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2342'. [ 237.176915][T11797] 0ª: renamed from bond_slave_0 (while UP) [ 237.198336][T11797] 0ª: entered allmulticast mode [ 237.542314][T11823] syz_tun: entered promiscuous mode [ 237.551716][T11823] syz_tun: left promiscuous mode [ 237.849265][T11836] validate_nla: 2 callbacks suppressed [ 237.849287][T11836] netlink: 'syz.1.2360': attribute type 3 has an invalid length. [ 237.873842][T11836] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.2360'. [ 237.997016][T11846] netlink: 296 bytes leftover after parsing attributes in process `syz.2.2365'. [ 238.068768][T11850] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2367'. [ 238.215811][T11859] netlink: 'syz.1.2370': attribute type 21 has an invalid length. [ 238.257758][T11859] syz_tun: entered promiscuous mode [ 238.269416][T11859] syz_tun: left promiscuous mode [ 238.317922][T11863] netlink: 'syz.0.2371': attribute type 21 has an invalid length. [ 238.372725][T11866] syz_tun: entered promiscuous mode [ 238.409087][T11866] syz_tun: left promiscuous mode [ 238.474969][T11874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.894262][T11890] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 238.953750][T11894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2382'. [ 239.001787][T11896] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2383'. [ 239.201498][T11902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2385'. [ 239.424517][T11914] veth1: mtu less than device minimum [ 240.364260][T11953] nbd: nbd0 already in use [ 240.382433][T11953] netlink: 'syz.3.2402': attribute type 7 has an invalid length. [ 240.413536][T11953] netlink: 'syz.3.2402': attribute type 5 has an invalid length. [ 241.098103][T11994] __nla_validate_parse: 3 callbacks suppressed [ 241.098126][T11994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2418'. [ 241.148282][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2418'. [ 241.538952][T12013] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 241.631476][T12015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2424'. [ 241.738836][T12016] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 241.845387][T12025] netlink: 'syz.3.2425': attribute type 4 has an invalid length. [ 242.041568][T12028] netlink: 'syz.0.2428': attribute type 1 has an invalid length. [ 242.245328][T12038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2432'. [ 242.452613][T12053] FAULT_INJECTION: forcing a failure. [ 242.452613][T12053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.472699][T12053] CPU: 0 PID: 12053 Comm: syz.1.2439 Not tainted 6.10.0-rc6-syzkaller-00166-g83c36e7cfd74 #0 [ 242.482972][T12053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 242.493062][T12053] Call Trace: [ 242.496359][T12053] [ 242.499390][T12053] dump_stack_lvl+0x241/0x360 [ 242.504099][T12053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.509318][T12053] ? __pfx__printk+0x10/0x10 [ 242.513947][T12053] ? snprintf+0xda/0x120 [ 242.518202][T12053] should_fail_ex+0x3b0/0x4e0 [ 242.522900][T12053] _copy_to_user+0x2f/0xb0 [ 242.527343][T12053] simple_read_from_buffer+0xca/0x150 [ 242.532739][T12053] proc_fail_nth_read+0x1e9/0x250 [ 242.537809][T12053] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.543382][T12053] ? rw_verify_area+0x520/0x6b0 [ 242.548289][T12053] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.553850][T12053] vfs_read+0x204/0xbc0 [ 242.558020][T12053] ? __pfx_lock_release+0x10/0x10 [ 242.563069][T12053] ? __pfx_vfs_read+0x10/0x10 [ 242.567763][T12053] ? __fget_files+0x29/0x470 [ 242.572434][T12053] ? __fget_files+0x3f6/0x470 [ 242.577227][T12053] ksys_read+0x1a0/0x2c0 [ 242.581487][T12053] ? __pfx_ksys_read+0x10/0x10 [ 242.586352][T12053] ? do_syscall_64+0x100/0x230 [ 242.591139][T12053] ? do_syscall_64+0xb6/0x230 [ 242.595866][T12053] do_syscall_64+0xf3/0x230 [ 242.600391][T12053] ? clear_bhb_loop+0x35/0x90 [ 242.605089][T12053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.611003][T12053] RIP: 0033:0x7fa4b35746bc [ 242.615451][T12053] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 242.635073][T12053] RSP: 002b:00007fa4b431e040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 242.643517][T12053] RAX: ffffffffffffffda RBX: 00007fa4b3703f60 RCX: 00007fa4b35746bc [ 242.651505][T12053] RDX: 000000000000000f RSI: 00007fa4b431e0b0 RDI: 0000000000000004 [ 242.659485][T12053] RBP: 00007fa4b431e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 242.667464][T12053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.675441][T12053] R13: 000000000000000b R14: 00007fa4b3703f60 R15: 00007ffeb7d7fac8 [ 242.683440][T12053] [ 242.728758][T12055] openvswitch: netlink: ct_state flags 0000d2dc unsupported [ 242.931014][T12064] can: request_module (can-proto-0) failed. [ 243.452514][T12094] netlink: 'syz.3.2452': attribute type 3 has an invalid length. [ 243.469430][T12094] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2452'. [ 243.962778][T12122] netlink: 'syz.1.2460': attribute type 10 has an invalid length. [ 244.044932][T12122] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 244.076780][T12123] netlink: 'syz.1.2460': attribute type 10 has an invalid length. [ 244.091650][T12131] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2464'. [ 244.269727][T12142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2466'. [ 244.285767][T12142] netlink: 'syz.4.2466': attribute type 13 has an invalid length. [ 244.312793][T12142] netlink: 'syz.4.2466': attribute type 11 has an invalid length. [ 244.365496][T12145] netlink: 'syz.0.2471': attribute type 3 has an invalid length. [ 244.375768][T12145] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2471'. [ 244.532074][T12156] FAULT_INJECTION: forcing a failure. [ 244.532074][T12156] name failslab, interval 1, probability 0, space 0, times 0 [ 244.545240][T12156] CPU: 0 PID: 12156 Comm: syz.3.2473 Not tainted 6.10.0-rc6-syzkaller-00166-g83c36e7cfd74 #0 [ 244.555448][T12156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 244.565553][T12156] Call Trace: [ 244.568903][T12156] [ 244.571893][T12156] dump_stack_lvl+0x241/0x360 [ 244.576642][T12156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.581900][T12156] ? __pfx__printk+0x10/0x10 [ 244.586576][T12156] should_fail_ex+0x3b0/0x4e0 [ 244.591330][T12156] ? skb_clone+0x20c/0x390 [ 244.595895][T12156] should_failslab+0x9/0x20 [ 244.600463][T12156] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 244.605900][T12156] skb_clone+0x20c/0x390 [ 244.610199][T12156] ? dev_queue_xmit_nit+0x220/0xc10 [ 244.615553][T12156] dev_queue_xmit_nit+0x419/0xc10 [ 244.620637][T12156] ? dev_queue_xmit_nit+0x2b/0xc10 [ 244.625802][T12156] ? validate_xmit_skb+0xa04/0x1120 [ 244.631060][T12156] dev_hard_start_xmit+0x15f/0x7e0 [ 244.636230][T12156] ? __pfx_validate_xmit_skb+0x10/0x10 [ 244.641752][T12156] __dev_queue_xmit+0x1b0e/0x3d30 [ 244.646850][T12156] ? __dev_queue_xmit+0x2d2/0x3d30 [ 244.652021][T12156] ? __pfx___dev_queue_xmit+0x10/0x10 [ 244.657452][T12156] ? __copy_skb_header+0x437/0x5b0 [ 244.662619][T12156] ? __asan_memcpy+0x40/0x70 [ 244.667267][T12156] ? __copy_skb_header+0x437/0x5b0 [ 244.672444][T12156] ? __skb_clone+0x454/0x6c0 [ 244.677098][T12156] ? skb_clone+0x240/0x390 [ 244.681575][T12156] __netlink_deliver_tap+0x54d/0x7c0 [ 244.686934][T12156] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.692185][T12156] netlink_deliver_tap+0x19d/0x1b0 [ 244.697360][T12156] netlink_unicast+0x7b8/0x980 [ 244.702186][T12156] ? __pfx_netlink_unicast+0x10/0x10 [ 244.707527][T12156] ? __virt_addr_valid+0x183/0x520 [ 244.712690][T12156] ? __check_object_size+0x49c/0x900 [ 244.718125][T12156] ? bpf_lsm_netlink_send+0x9/0x10 [ 244.723296][T12156] netlink_sendmsg+0x8db/0xcb0 [ 244.728139][T12156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.733479][T12156] ? __import_iovec+0x536/0x820 [ 244.738376][T12156] ? aa_sock_msg_perm+0x91/0x160 [ 244.743456][T12156] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 244.748783][T12156] ? security_socket_sendmsg+0x87/0xb0 [ 244.754295][T12156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.759635][T12156] __sock_sendmsg+0x221/0x270 [ 244.764378][T12156] ____sys_sendmsg+0x525/0x7d0 [ 244.769220][T12156] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.774579][T12156] __sys_sendmsg+0x2b0/0x3a0 [ 244.779233][T12156] ? __pfx___sys_sendmsg+0x10/0x10 [ 244.784393][T12156] ? vfs_write+0x7c4/0xc90 [ 244.788905][T12156] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 244.795295][T12156] ? do_syscall_64+0x100/0x230 [ 244.800131][T12156] ? do_syscall_64+0xb6/0x230 [ 244.804876][T12156] do_syscall_64+0xf3/0x230 [ 244.809605][T12156] ? clear_bhb_loop+0x35/0x90 [ 244.814344][T12156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.820286][T12156] RIP: 0033:0x7f1d03375bd9 [ 244.824750][T12156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.844403][T12156] RSP: 002b:00007f1d0420c048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.852868][T12156] RAX: ffffffffffffffda RBX: 00007f1d03503f60 RCX: 00007f1d03375bd9 [ 244.860886][T12156] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 244.868898][T12156] RBP: 00007f1d0420c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 244.876930][T12156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.884941][T12156] R13: 000000000000000b R14: 00007f1d03503f60 R15: 00007ffd820e3ee8 [ 244.893018][T12156] [ 245.339331][T12174] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2478'. [ 245.364550][T12176] bridge0: port 1(team0) entered blocking state [ 245.388119][T12176] bridge0: port 1(team0) entered disabled state [ 245.434752][T12176] team0: entered allmulticast mode [ 245.462573][T12176] team_slave_0: entered allmulticast mode [ 245.537669][T12176] team0: left allmulticast mode [ 245.573553][T12176] team_slave_0: left allmulticast mode [ 245.757076][T12201] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2485'. [ 245.788484][T12204] netlink: 'syz.4.2486': attribute type 29 has an invalid length. [ 245.800076][T12204] netlink: 'syz.4.2486': attribute type 29 has an invalid length. [ 246.032891][T12214] syz_tun: entered promiscuous mode [ 246.047391][T12214] syz_tun: left promiscuous mode [ 246.353274][T12236] netlink: 'syz.3.2497': attribute type 1 has an invalid length. [ 246.378948][T12236] __nla_validate_parse: 1 callbacks suppressed [ 246.378970][T12236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2497'. [ 246.419601][T12240] netlink: 'syz.3.2497': attribute type 1 has an invalid length. [ 246.437964][T12240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2497'. [ 246.584956][T12253] bridge0: port 1(team0) entered blocking state [ 246.593729][T12253] bridge0: port 1(team0) entered disabled state [ 246.600263][T12253] team0: entered allmulticast mode [ 246.615382][T12253] team_slave_0: entered allmulticast mode [ 246.621187][T12253] team_slave_1: entered allmulticast mode [ 246.636581][T12253] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 246.651743][T12253] team0: left allmulticast mode [ 246.673650][T12253] team_slave_0: left allmulticast mode [ 246.702701][T12253] team_slave_1: left allmulticast mode [ 246.712388][T12253] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 246.715152][T12258] Cannot find del_set index 0 as target [ 246.845143][T12260] syz_tun: entered promiscuous mode [ 246.850650][T12260] vlan0: entered promiscuous mode [ 246.879704][T12260] syz_tun: left promiscuous mode [ 247.422713][T12283] syz_tun: entered promiscuous mode [ 247.443970][T12283] syz_tun: left promiscuous mode [ 248.355268][T12319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2525'. [ 248.384334][T12319] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 248.408841][T12319] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 248.444469][T12320] bridge0: port 3(team0) entered blocking state [ 248.454300][T12320] bridge0: port 3(team0) entered disabled state [ 248.460848][T12320] team0: entered allmulticast mode [ 248.487841][T12320] team_slave_0: entered allmulticast mode [ 248.515253][T12320] team_slave_1: entered allmulticast mode [ 248.522264][T12320] syz_tun: entered allmulticast mode [ 248.555236][T12320] team0: left allmulticast mode [ 248.571730][T12320] team_slave_0: left allmulticast mode [ 248.595503][T12320] team_slave_1: left allmulticast mode [ 248.601037][T12320] syz_tun: left allmulticast mode [ 248.646377][T12326] syz_tun: entered promiscuous mode [ 248.658841][T12326] syz_tun: left promiscuous mode [ 248.893189][T12340] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2531'. [ 248.937304][T12341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2530'. [ 248.961369][T12341] validate_nla: 1 callbacks suppressed [ 248.961391][T12341] netlink: 'syz.1.2530': attribute type 1 has an invalid length. [ 248.993008][T12341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2530'. [ 249.060122][T12341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.152245][T12350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2535'. [ 249.402545][T12368] No such timeout policy "syz0" [ 249.703145][T12381] bridge0: port 3(team0) entered blocking state [ 249.723087][T12381] bridge0: port 3(team0) entered disabled state [ 249.744178][T12381] team0: entered allmulticast mode [ 249.754117][T12381] team_slave_0: entered allmulticast mode [ 249.769959][T12381] team_slave_1: entered allmulticast mode [ 249.785328][T12381] syz_tun: entered allmulticast mode [ 249.805873][T12381] team0: left allmulticast mode [ 249.820585][T12381] team_slave_0: left allmulticast mode [ 249.827064][T12381] team_slave_1: left allmulticast mode [ 249.832734][T12381] syz_tun: left allmulticast mode [ 249.840348][T12392] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2545'. [ 249.894170][T12387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2545'. [ 249.980574][T12396] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2547'. [ 250.555687][T12422] netlink: 'syz.0.2556': attribute type 1 has an invalid length. [ 250.653619][T12441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.805696][T12449] x_tables: duplicate underflow at hook 2 [ 250.836015][T12449] netlink: 'syz.4.2565': attribute type 9 has an invalid length. [ 250.930386][T12456] netlink: 'syz.4.2565': attribute type 9 has an invalid length. [ 251.255641][T12478] syzkaller1: entered promiscuous mode [ 251.287978][T12478] syzkaller1: entered allmulticast mode [ 252.009257][T12516] syzkaller1: entered promiscuous mode [ 252.361348][T12533] ip6gretap0: entered promiscuous mode [ 252.382877][T12533] bond0: entered promiscuous mode [ 252.388378][T12533] bond_slave_0: entered promiscuous mode [ 252.400218][T12533] bond_slave_1: entered promiscuous mode [ 252.407208][T12533] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 252.418053][T12533] bond0: left promiscuous mode [ 252.423036][T12533] bond_slave_0: left promiscuous mode [ 252.466732][T12533] bond_slave_1: left promiscuous mode [ 252.472481][T12533] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 252.509438][T12533] ip6gretap0: left promiscuous mode [ 252.545435][T12535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.736229][T12553] __nla_validate_parse: 7 callbacks suppressed [ 252.736251][T12553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2601'. [ 252.759133][T12554] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2600'. [ 253.028731][T12565] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2604'. [ 253.060153][T12564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2606'. [ 253.259380][T12571] tipc: Started in network mode [ 253.268645][T12571] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 253.283287][T12573] xt_bpf: check failed: parse error [ 253.294683][T12571] tipc: Enabling of bearer rejected, failed to enable media [ 253.443144][T12577] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2611'. [ 253.506311][T12577] netlink: 'syz.0.2611': attribute type 1 has an invalid length. [ 253.548997][T12579] xt_TCPMSS: Only works on TCP SYN packets [ 253.601798][T12580] syzkaller1: entered promiscuous mode [ 253.630005][T12580] syzkaller1: entered allmulticast mode [ 253.656682][T12589] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2614'. [ 253.688098][T12591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2615'. [ 253.737005][T12589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2614'. [ 253.939151][T12600] netlink: 'syz.1.2618': attribute type 1 has an invalid length. [ 253.951593][T12600] netlink: 9352 bytes leftover after parsing attributes in process `syz.1.2618'. [ 253.961265][T12600] netlink: 'syz.1.2618': attribute type 1 has an invalid length. [ 253.969658][T12600] netlink: 'syz.1.2618': attribute type 2 has an invalid length. [ 253.979054][T12600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2618'. [ 254.055027][T12595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.512529][T12629] ip6gretap0: entered promiscuous mode [ 254.530394][T12629] ip6gretap0: left promiscuous mode [ 254.639790][T12637] netlink: 'syz.0.2631': attribute type 10 has an invalid length. [ 254.681681][T12632] x_tables: ip_tables: ah match: only valid for protocol 51 [ 255.135772][T12662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.277307][T12665] batman_adv: batadv1: Adding interface: netdevsim0 [ 255.304211][T12665] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.344535][T12665] batman_adv: batadv1: Not using interface netdevsim0 (retrying later): interface not active [ 255.703813][T12679] No such timeout policy "syz0" [ 256.097122][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.364444][T12714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.513483][T12754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.121548][T12775] __nla_validate_parse: 12 callbacks suppressed [ 258.121569][T12775] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2688'. [ 258.307191][T12787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2691'. [ 258.362163][T12789] syzkaller1: entered promiscuous mode [ 258.937436][T12816] veth0_to_team: entered promiscuous mode [ 258.976925][T12816] lo speed is unknown, defaulting to 1000 [ 259.006556][T12816] lo speed is unknown, defaulting to 1000 [ 259.014702][T12816] lo speed is unknown, defaulting to 1000 [ 259.546558][T12816] infiniband syz0: set down [ 259.580321][T12816] infiniband syz0: added lo [ 259.593405][ T9] lo speed is unknown, defaulting to 1000 [ 259.676178][T12841] lo speed is unknown, defaulting to 1000 [ 259.854080][T12815] veth0_to_team: left promiscuous mode [ 259.875277][T12816] RDS/IB: syz0: added [ 259.880718][T12816] smc: adding ib device syz0 with port count 1 [ 259.912342][T12816] smc: ib device syz0 port 1 has pnetid [ 259.946894][ T9] lo speed is unknown, defaulting to 1000 [ 260.054454][T12867] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2715'. [ 260.307500][T12871] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2716'. [ 260.711129][T12816] lo speed is unknown, defaulting to 1000 [ 261.264064][T12893] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2725'. [ 261.381088][T12896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2725'. [ 261.390820][T12816] lo speed is unknown, defaulting to 1000 [ 261.432980][T12898] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2726'. [ 261.662602][T12908] geneve0: entered allmulticast mode [ 261.841436][T12816] lo speed is unknown, defaulting to 1000 [ 262.025852][T12925] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2734'. [ 262.063134][T12927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2737'. [ 262.195638][T12933] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2740'. [ 262.363027][T12816] lo speed is unknown, defaulting to 1000 [ 262.442562][T12942] netlink: 'syz.3.2743': attribute type 5 has an invalid length. [ 262.472893][T12944] Cannot find del_set index 0 as target [ 262.688116][T12952] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 262.725428][T12816] lo speed is unknown, defaulting to 1000 [ 263.176620][T12973] __nla_validate_parse: 5 callbacks suppressed [ 263.176644][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2757'. [ 263.280761][T12816] lo speed is unknown, defaulting to 1000 [ 263.286380][T12973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.293968][T12973] IPv6: NLM_F_CREATE should be set when creating new route [ 263.302664][ T53] Bluetooth: hci3: command 0x0405 tx timeout [ 263.349417][T12984] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.356874][T12984] IPv6: NLM_F_CREATE should be set when creating new route [ 263.462244][T12990] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2762'. [ 263.530093][T12988] netlink: 'syz.0.2761': attribute type 10 has an invalid length. [ 263.562413][T12988] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2761'. [ 263.596363][T12995] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2765'. [ 263.615818][T12988] bridge0: port 4(batadv0) entered blocking state [ 263.622422][T12988] bridge0: port 4(batadv0) entered disabled state [ 263.650256][T12988] batadv0: entered allmulticast mode [ 263.659069][T12988] batadv0: entered promiscuous mode [ 263.676878][T12996] netlink: 'syz.3.2763': attribute type 24 has an invalid length. [ 263.690372][T10824] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 263.699807][T10824] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 264.424810][T13035] tipc: Started in network mode [ 264.430134][T13035] tipc: Node identity 020400bf05, cluster identity 4711 [ 264.461657][T13035] tipc: Enabled bearer , priority 0 [ 264.487771][T13046] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2779'. [ 264.575108][T13049] syzkaller1: entered promiscuous mode [ 264.600075][T13049] syzkaller1: entered allmulticast mode [ 264.629671][T13052] netlink: 'syz.2.2782': attribute type 7 has an invalid length. [ 264.802535][T13064] netlink: 'syz.3.2787': attribute type 10 has an invalid length. [ 264.812313][T13064] batman_adv: batadv1: Removing interface: netdevsim0 [ 264.830245][T13064] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 264.865792][T13064] team0: Port device netdevsim0 added [ 265.395649][T13094] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2796'. [ 265.510693][T13098] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2795'. [ 265.575233][ T5149] tipc: Node number set to 117702847 [ 265.971001][T13112] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2803'. [ 266.200412][T13117] netlink: 'syz.0.2806': attribute type 14 has an invalid length. [ 266.363743][T13122] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 266.479986][T13127] tipc: Started in network mode [ 266.504907][T13127] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 266.512368][T13127] tipc: Enabled bearer , priority 0 [ 266.585058][T13129] ipip0: entered promiscuous mode [ 266.870184][T13142] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2816'. [ 267.190464][T13155] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2823'. [ 267.231155][T13155] IPVS: Unknown mcast interface: vcan0 [ 267.514575][ T5099] tipc: Node number set to 8432298 [ 267.904887][T13187] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.914622][T13187] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.923604][T13187] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.932967][T13187] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.950558][T13187] vxlan0: entered promiscuous mode [ 267.957065][T13187] vxlan0: entered allmulticast mode [ 267.972273][T13187] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.981569][T13187] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.991388][T13187] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.000433][T13187] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.050257][T13190] netlink: 'syz.0.2836': attribute type 12 has an invalid length. [ 268.066432][T13190] netlink: 'syz.0.2836': attribute type 29 has an invalid length. [ 268.082806][T13190] netlink: 'syz.0.2836': attribute type 2 has an invalid length. [ 268.091282][T13190] netlink: 'syz.0.2836': attribute type 2 has an invalid length. [ 268.108980][T13190] netlink: 'syz.0.2836': attribute type 1 has an invalid length. [ 268.120204][T13190] netlink: 'syz.0.2836': attribute type 37 has an invalid length. [ 268.142495][T13190] netlink: 'syz.0.2836': attribute type 2 has an invalid length. [ 268.158042][T13190] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.169623][T13187] netlink: 'syz.0.2836': attribute type 4 has an invalid length. [ 268.312824][T13203] __nla_validate_parse: 3 callbacks suppressed [ 268.312840][T13203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2841'. [ 268.330524][T13190] netlink: 'syz.0.2836': attribute type 4 has an invalid length. [ 268.767331][T13230] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2853'. [ 268.808008][T13231] netlink: 'syz.1.2850': attribute type 3 has an invalid length. [ 268.841889][T13231] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2850'. [ 268.869254][T13236] tls_set_device_offload: netdev not found [ 268.937160][T13240] xt_l2tp: unknown flags: 42 [ 268.955271][T13239] netlink: 204488 bytes leftover after parsing attributes in process `syz.4.2854'. [ 269.019200][T13245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2858'. [ 269.063009][T13241] IPVS: Error joining to the multicast group [ 269.251362][T13257] pimreg: entered allmulticast mode [ 269.415085][T13259] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.424458][T13259] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.433253][T13259] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.442702][T13259] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.496315][T13259] vxlan0: entered promiscuous mode [ 269.508477][T13267] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2867'. [ 269.512630][T13259] vxlan0: entered allmulticast mode [ 269.557875][T13259] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.567481][T13259] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.576674][T13259] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.586241][T13259] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.663886][T13264] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.747571][T13275] netlink: 209848 bytes leftover after parsing attributes in process `syz.0.2868'. [ 269.794151][T13275] openvswitch: netlink: Message has 2 unknown bytes. [ 269.823149][T13278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2870'. [ 270.346864][T13292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2873'. [ 270.460104][T13298] sctp: [Deprecated]: syz.2.2876 (pid 13298) Use of struct sctp_assoc_value in delayed_ack socket option. [ 270.460104][T13298] Use struct sctp_sack_info instead [ 270.730003][T13311] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2879'. [ 270.819711][T13313] IPv6: NLM_F_REPLACE set, but no existing node found! [ 270.917563][T13318] veth0_to_team: entered promiscuous mode [ 270.952415][T13318] rdma_rxe: rxe_newlink: failed to add lo [ 271.125783][T13337] ipt_REJECT: TCP_RESET invalid for non-tcp [ 271.324208][T13330] block nbd0: NBD_DISCONNECT [ 271.329833][T13330] block nbd0: Send disconnect failed -32 [ 271.339957][T13317] veth0_to_team: left promiscuous mode [ 271.374770][T13330] block nbd0: Disconnected due to user request. [ 271.414244][T13330] block nbd0: shutting down sockets [ 271.850719][T13364] vlan0: entered promiscuous mode [ 271.857135][T13364] dummy0: entered promiscuous mode [ 272.002492][T13381] veth0_to_team: entered promiscuous mode [ 272.087697][T13388] rdma_rxe: rxe_newlink: failed to add lo [ 272.808482][T13380] veth0_to_team: left promiscuous mode [ 281.356161][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 281.367763][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 281.376381][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 281.385749][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 281.394977][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 281.402408][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 281.449115][T13401] lo speed is unknown, defaulting to 1000 [ 281.738407][T13401] chnl_net:caif_netlink_parms(): no params data found [ 281.826997][T13401] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.835080][T13401] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.842367][T13401] bridge_slave_0: entered allmulticast mode [ 281.856211][T13401] bridge_slave_0: entered promiscuous mode [ 281.869078][T13401] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.880967][T13401] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.888922][T13401] bridge_slave_1: entered allmulticast mode [ 281.896956][T13401] bridge_slave_1: entered promiscuous mode [ 281.934557][T13401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.948180][T13401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.994761][T13401] team0: Port device team_slave_0 added [ 282.003105][T13401] team0: Port device team_slave_1 added [ 282.041699][T13401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.048848][T13401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.076077][T13401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.089431][T13401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.098313][T13401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.125092][T13401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.243243][T13401] hsr_slave_0: entered promiscuous mode [ 282.324492][T13401] hsr_slave_1: entered promiscuous mode [ 282.343757][T13401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.351382][T13401] Cannot create hsr debugfs directory [ 282.715719][ T5112] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 282.726741][ T5112] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 282.737948][ T5112] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 282.765792][ T5112] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 282.774900][ T5097] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 282.784689][ T5097] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 282.792640][ T5097] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 282.802234][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 282.823740][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 282.835375][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 282.844677][ T5112] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 282.855609][ T5112] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 282.921806][ T5112] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 282.936142][ T5112] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 282.946554][ T5112] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 282.956051][ T5112] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 282.965285][ T5112] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 282.982725][ T5112] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 283.088082][ T5112] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 283.098562][ T5112] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 283.108256][ T5112] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 283.117426][T13401] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.119369][ T5112] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 283.137134][ T5112] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 283.144811][ T5112] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 283.185335][T13412] lo speed is unknown, defaulting to 1000 [ 283.341796][T13401] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.372763][T13415] lo speed is unknown, defaulting to 1000 [ 283.452879][ T5106] Bluetooth: hci5: command tx timeout [ 283.495471][T13401] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.608238][T13401] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.626839][T13417] lo speed is unknown, defaulting to 1000 [ 283.878327][T13419] lo speed is unknown, defaulting to 1000 [ 283.888200][T13412] chnl_net:caif_netlink_parms(): no params data found [ 284.218692][T13412] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.226181][T13412] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.233482][T13412] bridge_slave_0: entered allmulticast mode [ 284.241458][T13412] bridge_slave_0: entered promiscuous mode [ 284.274762][T13412] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.281963][T13412] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.300838][T13412] bridge_slave_1: entered allmulticast mode [ 284.309132][T13412] bridge_slave_1: entered promiscuous mode [ 284.359231][T13412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.399078][T13415] chnl_net:caif_netlink_parms(): no params data found [ 284.416585][T13412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.532033][T13412] team0: Port device team_slave_0 added [ 284.572552][T13412] team0: Port device team_slave_1 added [ 284.688902][T13412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.696181][T13412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.723175][T13412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.736650][T13412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.744327][T13412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.772575][T13412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.785808][T13415] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.793055][T13415] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.800687][T13415] bridge_slave_0: entered allmulticast mode [ 284.810001][T13415] bridge_slave_0: entered promiscuous mode [ 284.819563][T13417] chnl_net:caif_netlink_parms(): no params data found [ 284.883691][T13415] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.883949][ T5106] Bluetooth: hci6: command tx timeout [ 284.890934][T13415] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.906275][T13415] bridge_slave_1: entered allmulticast mode [ 284.914547][T13415] bridge_slave_1: entered promiscuous mode [ 284.963548][ T5106] Bluetooth: hci7: command tx timeout [ 285.019045][T13415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.043704][ T5106] Bluetooth: hci8: command tx timeout [ 285.045217][T13415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.072984][T13412] hsr_slave_0: entered promiscuous mode [ 285.083621][T13412] hsr_slave_1: entered promiscuous mode [ 285.090206][T13412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.098655][T13412] Cannot create hsr debugfs directory [ 285.176268][T13415] team0: Port device team_slave_0 added [ 285.204488][ T5106] Bluetooth: hci9: command tx timeout [ 285.246126][T13419] chnl_net:caif_netlink_parms(): no params data found [ 285.263007][T13415] team0: Port device team_slave_1 added [ 285.376494][T13417] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.384575][T13417] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.392076][T13417] bridge_slave_0: entered allmulticast mode [ 285.400125][T13417] bridge_slave_0: entered promiscuous mode [ 285.454701][T13415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.461706][T13415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.489076][T13415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.502743][T13417] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.510403][T13417] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.518747][T13417] bridge_slave_1: entered allmulticast mode [ 285.527455][T13417] bridge_slave_1: entered promiscuous mode [ 285.533698][ T5106] Bluetooth: hci5: command tx timeout [ 285.571545][T13415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.579140][T13415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.607596][T13415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.691674][T13417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.756692][T13417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.788922][T13415] hsr_slave_0: entered promiscuous mode [ 285.796865][T13415] hsr_slave_1: entered promiscuous mode [ 285.803237][T13415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.812221][T13415] Cannot create hsr debugfs directory [ 285.828453][T13419] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.836055][T13419] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.845174][T13419] bridge_slave_0: entered allmulticast mode [ 285.852962][T13419] bridge_slave_0: entered promiscuous mode [ 285.883030][T13417] team0: Port device team_slave_0 added [ 285.920311][T13419] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.928079][T13419] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.937676][T13419] bridge_slave_1: entered allmulticast mode [ 285.947634][T13419] bridge_slave_1: entered promiscuous mode [ 285.975028][T13417] team0: Port device team_slave_1 added [ 286.023776][T13412] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.135751][T13412] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.158338][T13419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.219338][T13419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.261124][T13412] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.291355][T13417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.299112][T13417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.326670][T13417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.340449][T13417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.347853][T13417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.376797][T13417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.429369][T13412] bond0: (slave netdevsim0): Releasing backup interface [ 286.441361][T13412] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.533088][T13417] hsr_slave_0: entered promiscuous mode [ 286.541355][T13417] hsr_slave_1: entered promiscuous mode [ 286.548736][T13417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.557353][T13417] Cannot create hsr debugfs directory [ 286.592554][T13419] team0: Port device team_slave_0 added [ 286.602711][T13419] team0: Port device team_slave_1 added [ 286.744414][T13419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.751465][T13419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.779036][T13419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.792572][T13419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.799676][T13419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.830608][T13419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.964374][ T5106] Bluetooth: hci6: command tx timeout [ 287.043908][ T5106] Bluetooth: hci7: command tx timeout [ 287.056553][T13415] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.085569][T13419] hsr_slave_0: entered promiscuous mode [ 287.092392][T13419] hsr_slave_1: entered promiscuous mode [ 287.102588][T13419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.110857][T13419] Cannot create hsr debugfs directory [ 287.123779][ T5106] Bluetooth: hci8: command tx timeout [ 287.180536][T13415] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.277009][T13415] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.287324][ T5106] Bluetooth: hci9: command tx timeout [ 287.365344][T13415] team0: Port device netdevsim0 removed [ 287.375036][T13415] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.565999][T13417] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.604009][ T5106] Bluetooth: hci5: command tx timeout [ 287.651784][T13417] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.741657][T13417] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.844299][T13417] team0: Port device netdevsim0 removed [ 287.852381][T13417] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.990419][T13419] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.075399][T13419] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.193010][T13419] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.258737][T13419] bond0: (slave netdevsim0): Releasing backup interface [ 288.267102][T13419] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 288.281343][T13419] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.043889][ T5106] Bluetooth: hci6: command tx timeout [ 289.123784][ T5106] Bluetooth: hci7: command tx timeout [ 289.204464][ T5106] Bluetooth: hci8: command tx timeout [ 289.364117][ T5106] Bluetooth: hci9: command tx timeout [ 289.683707][ T5106] Bluetooth: hci5: command tx timeout [ 291.123839][ T5106] Bluetooth: hci6: command tx timeout [ 291.204565][ T5106] Bluetooth: hci7: command tx timeout [ 291.283802][ T5106] Bluetooth: hci8: command tx timeout [ 291.443929][ T5106] Bluetooth: hci9: command tx timeout [ 317.528430][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.963937][ T5106] Bluetooth: hci4: command 0x0405 tx timeout [ 341.419972][ T5106] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 341.432053][ T5106] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 341.441834][ T5106] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 341.452124][ T5106] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 341.469189][ T5106] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 341.477954][ T5106] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 341.527973][T13446] lo speed is unknown, defaulting to 1000 [ 341.833863][T13446] chnl_net:caif_netlink_parms(): no params data found [ 341.948958][T13446] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.956346][T13446] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.964755][T13446] bridge_slave_0: entered allmulticast mode [ 341.971945][T13446] bridge_slave_0: entered promiscuous mode [ 341.982389][T13446] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.990436][T13446] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.998736][T13446] bridge_slave_1: entered allmulticast mode [ 342.007765][T13446] bridge_slave_1: entered promiscuous mode [ 342.050705][T13446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.067720][T13446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.111897][T13446] team0: Port device team_slave_0 added [ 342.127826][T13446] team0: Port device team_slave_1 added [ 342.163263][T13446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.170650][T13446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.208415][T13446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.223002][T13446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.231061][T13446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.261008][T13446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.355150][T13446] hsr_slave_0: entered promiscuous mode [ 342.364298][T13446] hsr_slave_1: entered promiscuous mode [ 342.390435][T13446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.398458][T13446] Cannot create hsr debugfs directory [ 342.565080][ T5112] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 342.576402][ T5112] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 342.585289][ T5112] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 342.597496][ T5112] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 342.605719][ T5112] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 342.614685][ T5112] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 342.717400][T13455] lo speed is unknown, defaulting to 1000 [ 343.115363][T13455] chnl_net:caif_netlink_parms(): no params data found [ 343.405686][T13455] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.412998][T13455] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.453741][T13455] bridge_slave_0: entered allmulticast mode [ 343.461505][T13455] bridge_slave_0: entered promiscuous mode [ 343.497815][T13455] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.524120][ T5112] Bluetooth: hci10: command tx timeout [ 343.533710][T13455] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.541069][T13455] bridge_slave_1: entered allmulticast mode [ 343.585743][T13455] bridge_slave_1: entered promiscuous mode [ 343.618479][ T5106] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 343.628829][ T5106] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 343.637335][ T5106] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 343.646964][ T5106] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 343.657804][ T5106] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 343.674682][ T5106] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 343.732338][T13455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.771078][T13455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.816182][ T5106] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 343.826768][ T5106] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 343.835520][ T5106] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 343.855635][ T5106] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 343.876169][T13466] lo speed is unknown, defaulting to 1000 [ 343.877960][ T5106] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 343.895073][ T5097] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 343.914369][ T5097] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 343.924694][ T5097] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 343.932740][ T5097] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 343.942790][ T5097] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 343.951738][ T5097] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 343.960823][ T5097] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 344.007160][T13455] team0: Port device team_slave_0 added [ 344.030348][T13455] team0: Port device team_slave_1 added [ 344.148205][T13455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.163531][T13455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.192029][T13455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.216413][T13455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.223559][T13455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.252023][T13455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.274738][T13468] lo speed is unknown, defaulting to 1000 [ 344.444880][T13455] hsr_slave_0: entered promiscuous mode [ 344.464864][T13455] hsr_slave_1: entered promiscuous mode [ 344.473470][T13455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.481077][T13455] Cannot create hsr debugfs directory [ 344.625981][T13470] lo speed is unknown, defaulting to 1000 [ 344.643955][ T5106] Bluetooth: hci11: command tx timeout [ 344.982731][T13466] chnl_net:caif_netlink_parms(): no params data found [ 345.347725][T13468] chnl_net:caif_netlink_parms(): no params data found [ 345.393547][T13466] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.400745][T13466] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.421683][T13466] bridge_slave_0: entered allmulticast mode [ 345.430214][T13466] bridge_slave_0: entered promiscuous mode [ 345.456509][T13466] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.464640][T13466] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.472004][T13466] bridge_slave_1: entered allmulticast mode [ 345.480513][T13466] bridge_slave_1: entered promiscuous mode [ 345.499956][T13470] chnl_net:caif_netlink_parms(): no params data found [ 345.604066][ T5106] Bluetooth: hci10: command tx timeout [ 345.635396][T13466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.701721][T13466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.764197][ T5106] Bluetooth: hci12: command tx timeout [ 345.815024][T13466] team0: Port device team_slave_0 added [ 345.876162][T13466] team0: Port device team_slave_1 added [ 345.882350][T13470] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.893959][T13470] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.901580][T13470] bridge_slave_0: entered allmulticast mode [ 345.910114][T13470] bridge_slave_0: entered promiscuous mode [ 345.924213][ T5106] Bluetooth: hci13: command tx timeout [ 345.960120][T13470] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.973460][T13470] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.980977][T13470] bridge_slave_1: entered allmulticast mode [ 345.990505][T13470] bridge_slave_1: entered promiscuous mode [ 346.012739][T13468] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.021163][T13468] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.028800][T13468] bridge_slave_0: entered allmulticast mode [ 346.036720][T13468] bridge_slave_0: entered promiscuous mode [ 346.076055][T13468] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.084478][ T5106] Bluetooth: hci14: command tx timeout [ 346.084790][T13468] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.098392][T13468] bridge_slave_1: entered allmulticast mode [ 346.107347][T13468] bridge_slave_1: entered promiscuous mode [ 346.129927][T13466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.137635][T13466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.165556][T13466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.180777][T13466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.188266][T13466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.215489][T13466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.249161][T13470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.291007][T13470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.305499][T13468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.355252][T13468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.435678][T13466] hsr_slave_0: entered promiscuous mode [ 346.442760][T13466] hsr_slave_1: entered promiscuous mode [ 346.449427][T13466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.457328][T13466] Cannot create hsr debugfs directory [ 346.469876][T13470] team0: Port device team_slave_0 added [ 346.498726][T13468] team0: Port device team_slave_0 added [ 346.508700][T13470] team0: Port device team_slave_1 added [ 346.533667][T13468] team0: Port device team_slave_1 added [ 346.601924][T13470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.610277][T13470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.638441][T13470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.691126][T13470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.704153][T13470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.730531][ T5106] Bluetooth: hci11: command tx timeout [ 346.737424][T13470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.756499][T13468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.764904][T13468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.791613][T13468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.815712][T13468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.822698][T13468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.849657][T13468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.925524][T13470] hsr_slave_0: entered promiscuous mode [ 346.932637][T13470] hsr_slave_1: entered promiscuous mode [ 346.939819][T13470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.948810][T13470] Cannot create hsr debugfs directory [ 347.035511][T13468] hsr_slave_0: entered promiscuous mode [ 347.042443][T13468] hsr_slave_1: entered promiscuous mode [ 347.051848][T13468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.059958][T13468] Cannot create hsr debugfs directory [ 347.694897][ T5106] Bluetooth: hci10: command tx timeout [ 347.843857][ T5106] Bluetooth: hci12: command tx timeout [ 348.004278][ T5106] Bluetooth: hci13: command tx timeout [ 348.163960][ T5106] Bluetooth: hci14: command tx timeout [ 348.803602][ T5106] Bluetooth: hci11: command tx timeout [ 349.763995][ T5106] Bluetooth: hci10: command tx timeout [ 349.923656][ T5106] Bluetooth: hci12: command tx timeout [ 350.083905][ T5106] Bluetooth: hci13: command tx timeout [ 350.253662][ T5106] Bluetooth: hci14: command tx timeout [ 350.883630][ T5106] Bluetooth: hci11: command tx timeout [ 352.003740][ T5106] Bluetooth: hci12: command tx timeout [ 352.164304][ T5106] Bluetooth: hci13: command tx timeout [ 352.324119][ T5106] Bluetooth: hci14: command tx timeout [ 378.967723][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 401.495133][ T5097] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 401.505028][ T5097] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 401.513474][ T5097] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 401.532383][ T5097] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 401.540525][ T5097] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 401.550174][ T5097] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 401.603933][T13497] lo speed is unknown, defaulting to 1000 [ 401.937289][T13497] chnl_net:caif_netlink_parms(): no params data found [ 402.047195][T13497] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.054863][T13497] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.062218][T13497] bridge_slave_0: entered allmulticast mode [ 402.071918][T13497] bridge_slave_0: entered promiscuous mode [ 402.082266][T13497] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.090572][T13497] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.099256][T13497] bridge_slave_1: entered allmulticast mode [ 402.107583][T13497] bridge_slave_1: entered promiscuous mode [ 402.151719][T13497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.165712][T13497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.216248][T13497] team0: Port device team_slave_0 added [ 402.228238][T13497] team0: Port device team_slave_1 added [ 402.268231][T13497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.275629][T13497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.313863][T13497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.329768][T13497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.354027][T13497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.403618][T13497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.522474][T13497] hsr_slave_0: entered promiscuous mode [ 402.545514][T13497] hsr_slave_1: entered promiscuous mode [ 402.552158][T13497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.582933][T13497] Cannot create hsr debugfs directory [ 402.781152][ T5097] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 402.791725][ T5097] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 402.800711][ T5097] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 402.815889][ T5097] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 402.844390][ T5097] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 402.852172][ T5097] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 402.956465][T13506] lo speed is unknown, defaulting to 1000 [ 403.500767][T13506] chnl_net:caif_netlink_parms(): no params data found [ 403.613810][ T5106] Bluetooth: hci15: command tx timeout [ 403.896085][ T5097] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 403.905741][ T5097] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 403.935869][ T5097] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 403.955855][T13506] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.963705][T13506] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.971080][T13506] bridge_slave_0: entered allmulticast mode [ 403.995730][T13506] bridge_slave_0: entered promiscuous mode [ 404.004603][ T5097] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 404.013903][ T5097] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 404.021867][ T5097] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 404.024068][T13506] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.078454][T13506] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.094112][T13506] bridge_slave_1: entered allmulticast mode [ 404.102864][ T5106] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 404.112893][ T5106] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 404.126590][ T5112] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 404.137213][ T5112] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 404.145757][ T5112] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 404.153365][ T5112] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 404.186014][ T5112] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 404.195824][T13506] bridge_slave_1: entered promiscuous mode [ 404.206228][ T5112] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 404.218684][ T5112] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 404.245947][ T5112] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 404.257935][ T5112] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 404.266706][ T5112] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 404.320860][T13517] lo speed is unknown, defaulting to 1000 [ 404.345142][T13506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.377988][T13506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.499275][T13506] team0: Port device team_slave_0 added [ 404.513149][T13506] team0: Port device team_slave_1 added [ 404.520200][T13520] lo speed is unknown, defaulting to 1000 [ 404.601613][T13506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.609175][T13506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.636593][T13506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.679195][T13506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.686587][T13506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.713942][T13506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.830247][T13506] hsr_slave_0: entered promiscuous mode [ 404.845249][T13506] hsr_slave_1: entered promiscuous mode [ 404.852026][T13506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 404.860424][T13506] Cannot create hsr debugfs directory [ 404.867190][T13519] lo speed is unknown, defaulting to 1000 [ 404.884050][T13526] Bluetooth: hci16: command tx timeout [ 405.249067][T13517] chnl_net:caif_netlink_parms(): no params data found [ 405.534896][T13517] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.542140][T13517] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.551751][T13517] bridge_slave_0: entered allmulticast mode [ 405.561411][T13517] bridge_slave_0: entered promiscuous mode [ 405.570973][T13517] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.579562][T13517] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.587482][T13517] bridge_slave_1: entered allmulticast mode [ 405.595701][T13517] bridge_slave_1: entered promiscuous mode [ 405.684915][T13526] Bluetooth: hci15: command tx timeout [ 405.761067][T13520] chnl_net:caif_netlink_parms(): no params data found [ 405.779062][T13517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.796782][T13517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.930040][T13517] team0: Port device team_slave_0 added [ 405.941514][T13517] team0: Port device team_slave_1 added [ 406.079813][T13519] chnl_net:caif_netlink_parms(): no params data found [ 406.083945][T13526] Bluetooth: hci17: command tx timeout [ 406.110579][T13517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.118448][T13517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.145121][T13517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.196181][T13517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.203181][T13517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.230570][T13517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.244190][T13526] Bluetooth: hci18: command tx timeout [ 406.250491][T13520] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.259334][T13520] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.267238][T13520] bridge_slave_0: entered allmulticast mode [ 406.275251][T13520] bridge_slave_0: entered promiscuous mode [ 406.304347][T13520] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.312271][T13520] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.321234][T13520] bridge_slave_1: entered allmulticast mode [ 406.324084][T13526] Bluetooth: hci19: command tx timeout [ 406.329840][T13520] bridge_slave_1: entered promiscuous mode [ 406.434704][T13520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.470575][T13517] hsr_slave_0: entered promiscuous mode [ 406.477984][T13517] hsr_slave_1: entered promiscuous mode [ 406.484897][T13517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.492579][T13517] Cannot create hsr debugfs directory [ 406.505647][T13520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.600370][T13520] team0: Port device team_slave_0 added [ 406.641477][T13520] team0: Port device team_slave_1 added [ 406.646830][T13526] Bluetooth: hci5: command 0x0406 tx timeout [ 406.653221][T13526] Bluetooth: hci6: command 0x0406 tx timeout [ 406.654955][T13519] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.660180][T13526] Bluetooth: hci7: command 0x0406 tx timeout [ 406.672474][T13526] Bluetooth: hci8: command 0x0406 tx timeout [ 406.679130][T13519] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.682225][T13526] Bluetooth: hci9: command 0x0406 tx timeout [ 406.700118][T13519] bridge_slave_0: entered allmulticast mode [ 406.707994][T13519] bridge_slave_0: entered promiscuous mode [ 406.774312][T13519] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.781832][T13519] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.791420][T13519] bridge_slave_1: entered allmulticast mode [ 406.800217][T13519] bridge_slave_1: entered promiscuous mode [ 406.830853][T13520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.838397][T13520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.866216][T13520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.901733][T13520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.909791][T13520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.936342][T13520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.963155][T13519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.972702][ T5097] Bluetooth: hci16: command tx timeout [ 407.014975][T13519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.109994][T13519] team0: Port device team_slave_0 added [ 407.125099][T13520] hsr_slave_0: entered promiscuous mode [ 407.132401][T13520] hsr_slave_1: entered promiscuous mode [ 407.142478][T13520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 407.150452][T13520] Cannot create hsr debugfs directory [ 407.181206][T13519] team0: Port device team_slave_1 added [ 407.309966][T13519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.317392][T13519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.349391][T13519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.390381][T13519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.398516][T13519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.431805][T13519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.546155][T13519] hsr_slave_0: entered promiscuous mode [ 407.554168][T13519] hsr_slave_1: entered promiscuous mode [ 407.560847][T13519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 407.569366][T13519] Cannot create hsr debugfs directory [ 407.771907][ T5097] Bluetooth: hci15: command tx timeout [ 408.164399][ T5097] Bluetooth: hci17: command tx timeout [ 408.324751][ T5097] Bluetooth: hci18: command tx timeout [ 408.404294][ T5097] Bluetooth: hci19: command tx timeout [ 409.054637][ T5097] Bluetooth: hci16: command tx timeout [ 409.843591][ T5097] Bluetooth: hci15: command tx timeout [ 410.244667][ T5097] Bluetooth: hci17: command tx timeout [ 410.403549][ T5097] Bluetooth: hci18: command tx timeout [ 410.483906][ T5097] Bluetooth: hci19: command tx timeout [ 411.123979][ T5097] Bluetooth: hci16: command tx timeout [ 412.323689][ T5097] Bluetooth: hci17: command tx timeout [ 412.483944][ T5097] Bluetooth: hci18: command tx timeout [ 412.563554][ T5097] Bluetooth: hci19: command tx timeout [ 421.844418][ T30] INFO: task syz.2.2890:13330 blocked for more than 143 seconds. [ 421.852220][ T30] Not tainted 6.10.0-rc6-syzkaller-00166-g83c36e7cfd74 #0 [ 421.861280][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 421.870469][ T30] task:syz.2.2890 state:D stack:24408 pid:13330 tgid:13329 ppid:9798 flags:0x00004006 [ 421.881457][ T30] Call Trace: [ 421.885175][ T30] [ 421.888149][ T30] __schedule+0x17e8/0x4a20 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 421.892720][ T30] ? __pfx___schedule+0x10/0x10 [ 421.903688][ T30] ? __pfx_lock_release+0x10/0x10 [ 421.908780][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 421.924274][ T30] ? schedule+0x90/0x320 [ 421.928581][ T30] schedule+0x14b/0x320 [ 421.932781][ T30] schedule_timeout+0xb0/0x310 [ 421.993367][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 421.998831][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 422.020758][ T30] ? wait_for_completion+0x2fe/0x620 [ 422.026360][ T30] ? wait_for_completion+0x2fe/0x620 [ 422.031705][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 422.038023][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 422.043399][ T30] ? wait_for_completion+0x2fe/0x620 [ 422.048733][ T30] wait_for_completion+0x355/0x620 [ 422.054387][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 422.060073][ T30] ? flush_workqueue_prep_pwqs+0x45c/0x4c0 [ 422.066906][ T30] ? check_flush_dependency+0xb2/0x390 [ 422.072428][ T30] __flush_workqueue+0x7d6/0x1710 [ 422.078213][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 422.084729][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 422.089991][ T30] ? __pfx___flush_workqueue+0x10/0x10 [ 422.096832][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 422.102887][ T30] ? __wake_up_common_lock+0x18c/0x1e0 [ 422.109050][ T30] nbd_disconnect_and_put+0xaa/0x250 [ 422.114945][ T30] nbd_genl_disconnect+0x451/0x720 [ 422.120201][ T30] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 422.127051][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 422.133921][ T30] genl_rcv_msg+0xb14/0xec0 [ 422.138488][ T30] ? mark_lock+0x9a/0x350 [ 422.143121][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 422.148905][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 422.154932][ T30] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 422.160627][ T30] ? __pfx___might_resched+0x10/0x10 [ 422.166855][ T30] netlink_rcv_skb+0x1e3/0x430 [ 422.171785][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 422.178039][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 422.184504][ T30] genl_rcv+0x28/0x40 [ 422.188545][ T30] netlink_unicast+0x7ea/0x980 [ 422.193972][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 422.199313][ T30] ? __virt_addr_valid+0x183/0x520 [ 422.204589][ T30] ? __check_object_size+0x49c/0x900 [ 422.210013][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 422.216725][ T30] netlink_sendmsg+0x8db/0xcb0 [ 422.221567][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.227738][ T30] ? __import_iovec+0x536/0x820 [ 422.232659][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 422.238265][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 422.245211][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 422.250825][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.256869][ T30] __sock_sendmsg+0x221/0x270 [ 422.261613][ T30] ____sys_sendmsg+0x525/0x7d0 [ 422.266989][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 422.272349][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 422.278337][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 422.284380][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 422.290775][ T30] ? do_syscall_64+0x100/0x230 [ 422.296384][ T30] ? do_syscall_64+0xb6/0x230 [ 422.301131][ T30] do_syscall_64+0xf3/0x230 [ 422.306887][ T30] ? clear_bhb_loop+0x35/0x90 [ 422.311696][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.318320][ T30] RIP: 0033:0x7f97bd175bd9 [ 422.322798][ T30] RSP: 002b:00007f97bdf85048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.339894][ T30] RAX: ffffffffffffffda RBX: 00007f97bd303f60 RCX: 00007f97bd175bd9 [ 422.349678][ T30] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 000000000000000d [ 422.358277][ T30] RBP: 00007f97bd1e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 422.366748][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.375947][ T30] R13: 000000000000000b R14: 00007f97bd303f60 R15: 00007fffa34eb308 [ 422.384484][ T30] [ 422.387577][ T30] INFO: task syz.2.2890:13337 blocked for more than 143 seconds. [ 422.396313][ T30] Not tainted 6.10.0-rc6-syzkaller-00166-g83c36e7cfd74 #0 [ 422.405499][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 422.414721][ T30] task:syz.2.2890 state:D stack:22160 pid:13337 tgid:13329 ppid:9798 flags:0x00000004 [ 422.425429][ T30] Call Trace: [ 422.428753][ T30] [ 422.431718][ T30] __schedule+0x17e8/0x4a20 [ 422.437942][ T30] ? __pfx___schedule+0x10/0x10 [ 422.442855][ T30] ? __pfx_lock_release+0x10/0x10 [ 422.448792][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 422.454843][ T30] ? schedule+0x90/0x320 [ 422.459135][ T30] schedule+0x14b/0x320 [ 422.464552][ T30] schedule_preempt_disabled+0x13/0x30 [ 422.470066][ T30] __mutex_lock+0x6a4/0xd70 [ 422.475173][ T30] ? __mutex_lock+0x527/0xd70 [ 422.479900][ T30] ? genl_rcv_msg+0x121/0xec0 [ 422.485259][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 422.490391][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 422.498050][ T30] ? radix_tree_lookup+0x238/0x290 [ 422.503229][ T30] genl_rcv_msg+0x121/0xec0 [ 422.508862][ T30] ? mark_lock+0x9a/0x350 [ 422.513731][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 422.518808][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 422.525093][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 422.530178][ T30] ? __pfx___might_resched+0x10/0x10 [ 422.536306][ T30] netlink_rcv_skb+0x1e3/0x430 [ 422.541138][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 422.546819][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 422.552434][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 422.559175][ T30] genl_rcv+0x28/0x40 [ 422.563203][ T30] netlink_unicast+0x7ea/0x980 [ 422.569233][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 422.575107][ T30] ? __virt_addr_valid+0x183/0x520 [ 422.580276][ T30] ? __check_object_size+0x49c/0x900 [ 422.586778][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 422.591951][ T30] netlink_sendmsg+0x8db/0xcb0 [ 422.598828][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.604549][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 422.609720][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 422.616780][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 422.622298][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.628262][ T30] __sock_sendmsg+0x221/0x270 [ 422.633003][ T30] __sys_sendto+0x3a4/0x4f0 [ 422.638085][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 422.643199][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 422.650766][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 422.657934][ T30] __x64_sys_sendto+0xde/0x100 [ 422.662758][ T30] do_syscall_64+0xf3/0x230 [ 422.667854][ T30] ? clear_bhb_loop+0x35/0x90 [ 422.672595][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.679745][ T30] RIP: 0033:0x7f97bd17796c [ 422.684561][ T30] RSP: 002b:00007f97bdf62ed0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 422.693022][ T30] RAX: ffffffffffffffda RBX: 00007f97bdf62fd0 RCX: 00007f97bd17796c [ 422.701807][ T30] RDX: 0000000000000020 RSI: 00007f97bdf63020 RDI: 000000000000000c [ 422.710931][ T30] RBP: 0000000000000000 R08: 00007f97bdf62f24 R09: 000000000000000c [ 422.719392][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000c [ 422.728250][ T30] R13: 00007f97bdf62f78 R14: 00007f97bdf63020 R15: 0000000000000000 [ 422.737567][ T30] [ 422.740659][ T30] INFO: task syz.4.2904:13375 blocked for more than 144 seconds. [ 422.750601][ T30] Not tainted 6.10.0-rc6-syzkaller-00166-g83c36e7cfd74 #0 [ 422.758971][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 422.768696][ T30] task:syz.4.2904 state:D stack:27360 pid:13375 tgid:13373 ppid:5093 flags:0x00000004 [ 422.779643][ T30] Call Trace: [ 422.782965][ T30] [ 422.786558][ T30] __schedule+0x17e8/0x4a20 [ 422.791227][ T30] ? __pfx___schedule+0x10/0x10 [ 422.797442][ T30] ? __pfx_lock_release+0x10/0x10 [ 422.802520][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 422.808940][ T30] ? schedule+0x90/0x320 [ 422.813870][ T30] schedule+0x14b/0x320 [ 422.818082][ T30] schedule_preempt_disabled+0x13/0x30 [ 422.824835][ T30] __mutex_lock+0x6a4/0xd70 [ 422.829399][ T30] ? __mutex_lock+0x527/0xd70 [ 422.834759][ T30] ? genl_rcv_msg+0x121/0xec0 [ 422.839483][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 422.845386][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 422.851773][ T30] ? radix_tree_lookup+0x238/0x290 [ 422.858502][ T30] genl_rcv_msg+0x121/0xec0 [ 422.863055][ T30] ? mark_lock+0x9a/0x350 [ 422.867844][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 422.872918][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 422.878689][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 422.885070][ T30] ? __pfx___might_resched+0x10/0x10 [ 422.890422][ T30] netlink_rcv_skb+0x1e3/0x430 [ 422.895984][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 422.901062][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 422.907027][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 422.912554][ T30] genl_rcv+0x28/0x40 [ 422.917720][ T30] netlink_unicast+0x7ea/0x980 [ 422.922548][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 422.928406][ T30] ? __virt_addr_valid+0x183/0x520 [ 422.934057][ T30] ? __check_object_size+0x49c/0x900 [ 422.939482][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 422.945995][ T30] netlink_sendmsg+0x8db/0xcb0 [ 422.950923][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.957445][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 422.962707][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 422.969109][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 422.979382][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.985165][ T30] __sock_sendmsg+0x221/0x270 [ 422.989908][ T30] __sys_sendto+0x3a4/0x4f0 [ 422.995002][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 423.000105][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 423.007385][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 423.014199][ T30] ? exc_page_fault+0x590/0x8c0 [ 423.019188][ T30] __x64_sys_sendto+0xde/0x100 [ 423.024795][ T30] do_syscall_64+0xf3/0x230 [ 423.029361][ T30] ? clear_bhb_loop+0x35/0x90 [ 423.035354][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.041304][ T30] RIP: 0033:0x7efda077796c [ 423.046669][ T30] RSP: 002b:00007efda15c8ed0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 423.055731][ T30] RAX: ffffffffffffffda RBX: 00007efda15c8fd0 RCX: 00007efda077796c [ 423.065420][ T30] RDX: 0000000000000020 RSI: 00007efda15c9020 RDI: 0000000000000005 [ 423.073820][ T30] RBP: 0000000000000000 R08: 00007efda15c8f24 R09: 000000000000000c [ 423.081838][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 423.090408][ T30] R13: 00007efda15c8f78 R14: 00007efda15c9020 R15: 0000000000000000 [ 423.099583][ T30] [ 423.102672][ T30] INFO: task syz.1.2905:13381 blocked for more than 144 seconds. [ 423.112255][ T30] Not tainted 6.10.0-rc6-syzkaller-00166-g83c36e7cfd74 #0 [ 423.120574][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.130852][ T30] task:syz.1.2905 state:D stack:26336 pid:13381 tgid:13380 ppid:7252 flags:0x00000004 [ 423.141630][ T30] Call Trace: [ 423.145336][ T30] [ 423.148315][ T30] __schedule+0x17e8/0x4a20 [ 423.152889][ T30] ? __pfx___schedule+0x10/0x10 [ 423.159108][ T30] ? __pfx_lock_release+0x10/0x10 [ 423.164922][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 423.170455][ T30] ? schedule+0x90/0x320 [ 423.175769][ T30] schedule+0x14b/0x320 [ 423.179996][ T30] schedule_preempt_disabled+0x13/0x30 [ 423.186782][ T30] __mutex_lock+0x6a4/0xd70 [ 423.191347][ T30] ? __mutex_lock+0x527/0xd70 [ 423.196690][ T30] ? genl_rcv_msg+0x121/0xec0 [ 423.201430][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 423.207178][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 423.214777][ T30] ? radix_tree_lookup+0x238/0x290 [ 423.220034][ T30] genl_rcv_msg+0x121/0xec0 [ 423.225137][ T30] ? mark_lock+0x9a/0x350 [ 423.229619][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 423.235385][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.240492][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 423.246725][ T30] ? __pfx___might_resched+0x10/0x10 [ 423.252079][ T30] netlink_rcv_skb+0x1e3/0x430 [ 423.257680][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.262755][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 423.268985][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 423.275612][ T30] genl_rcv+0x28/0x40 [ 423.279646][ T30] netlink_unicast+0x7ea/0x980 [ 423.285510][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 423.290845][ T30] ? __virt_addr_valid+0x183/0x520 [ 423.296686][ T30] ? __check_object_size+0x49c/0x900 [ 423.302031][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 423.308560][ T30] netlink_sendmsg+0x8db/0xcb0 [ 423.313987][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.319341][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 423.324998][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 423.330339][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 423.337145][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.342485][ T30] __sock_sendmsg+0x221/0x270 [ 423.347939][ T30] __sys_sendto+0x3a4/0x4f0 [ 423.352505][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 423.358271][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 423.373785][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 423.380285][ T30] ? exc_page_fault+0x590/0x8c0 [ 423.386478][ T30] __x64_sys_sendto+0xde/0x100 [ 423.391318][ T30] do_syscall_64+0xf3/0x230 [ 423.397465][ T30] ? clear_bhb_loop+0x35/0x90 [ 423.402209][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.408679][ T30] RIP: 0033:0x7fa4b357796c [ 423.413145][ T30] RSP: 002b:00007fa4b431ced0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 423.422434][ T30] RAX: ffffffffffffffda RBX: 00007fa4b431cfd0 RCX: 00007fa4b357796c [ 423.431465][ T30] RDX: 0000000000000020 RSI: 00007fa4b431d020 RDI: 0000000000000008 [ 423.439929][ T30] RBP: 0000000000000000 R08: 00007fa4b431cf24 R09: 000000000000000c [ 423.448626][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 423.457820][ T30] R13: 00007fa4b431cf78 R14: 00007fa4b431d020 R15: 0000000000000000 [ 423.466278][ T30] [ 423.469359][ T30] INFO: task syz.3.2909:13390 blocked for more than 144 seconds. [ 423.478734][ T30] Not tainted 6.10.0-rc6-syzkaller-00166-g83c36e7cfd74 #0 [ 423.487397][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.496681][ T30] task:syz.3.2909 state:D stack:26784 pid:13390 tgid:13389 ppid:5091 flags:0x00000004 [ 423.507713][ T30] Call Trace: [ 423.511033][ T30] [ 423.515313][ T30] __schedule+0x17e8/0x4a20 [ 423.519898][ T30] ? __pfx___schedule+0x10/0x10 [ 423.525415][ T30] ? __pfx_lock_release+0x10/0x10 [ 423.530493][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 423.536714][ T30] ? schedule+0x90/0x320 [ 423.541010][ T30] schedule+0x14b/0x320 [ 423.546457][ T30] schedule_preempt_disabled+0x13/0x30 [ 423.551970][ T30] __mutex_lock+0x6a4/0xd70 [ 423.557136][ T30] ? __mutex_lock+0x527/0xd70 [ 423.561866][ T30] ? genl_rcv_msg+0x121/0xec0 [ 423.567134][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 423.572215][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 423.580122][ T30] ? radix_tree_lookup+0x238/0x290 [ 423.585710][ T30] genl_rcv_msg+0x121/0xec0 [ 423.590255][ T30] ? mark_lock+0x9a/0x350 [ 423.595289][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 423.600362][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.607126][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 423.612209][ T30] ? __pfx___might_resched+0x10/0x10 [ 423.618586][ T30] netlink_rcv_skb+0x1e3/0x430 [ 423.623803][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.628882][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 423.635406][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 423.640940][ T30] genl_rcv+0x28/0x40 [ 423.645485][ T30] netlink_unicast+0x7ea/0x980 [ 423.650308][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 423.656350][ T30] ? __virt_addr_valid+0x183/0x520 [ 423.661519][ T30] ? __check_object_size+0x49c/0x900 [ 423.668028][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 423.673201][ T30] netlink_sendmsg+0x8db/0xcb0 [ 423.678884][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.684716][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 423.689710][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 423.696368][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 423.701878][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.707770][ T30] __sock_sendmsg+0x221/0x270 [ 423.712512][ T30] __sys_sendto+0x3a4/0x4f0 [ 423.717751][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 423.722857][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 423.730365][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 423.737293][ T30] ? exc_page_fault+0x590/0x8c0 [ 423.742207][ T30] __x64_sys_sendto+0xde/0x100 [ 423.747601][ T30] do_syscall_64+0xf3/0x230 [ 423.752163][ T30] ? clear_bhb_loop+0x35/0x90 [ 423.758117][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.764991][ T30] RIP: 0033:0x7f1d0337796c [ 423.769453][ T30] RSP: 002b:00007f1d0420aed0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 423.778899][ T30] RAX: ffffffffffffffda RBX: 00007f1d0420afd0 RCX: 00007f1d0337796c [ 423.788010][ T30] RDX: 0000000000000020 RSI: 00007f1d0420b020 RDI: 0000000000000005 [ 423.796471][ T30] RBP: 0000000000000000 R08: 00007f1d0420af24 R09: 000000000000000c [ 423.804864][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 423.812885][ T30] R13: 00007f1d0420af78 R14: 00007f1d0420b020 R15: 0000000000000000 [ 423.822275][ T30] [ 423.825857][ T30] INFO: task syz.3.2909:13398 blocked for more than 145 seconds. [ 423.834478][ T30] Not tainted 6.10.0-rc6-syzkaller-00166-g83c36e7cfd74 #0 [ 423.842193][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.852153][ T30] task:syz.3.2909 state:D stack:23680 pid:13398 tgid:13389 ppid:5091 flags:0x00000004 [ 423.862939][ T30] Call Trace: [ 423.868253][ T30] [ 423.871235][ T30] __schedule+0x17e8/0x4a20 [ 423.877016][ T30] ? __pfx___schedule+0x10/0x10 [ 423.882179][ T30] ? __pfx_lock_release+0x10/0x10 [ 423.887826][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 423.893883][ T30] ? schedule+0x90/0x320 [ 423.898169][ T30] schedule+0x14b/0x320 [ 423.902362][ T30] schedule_preempt_disabled+0x13/0x30 [ 423.909335][ T30] __mutex_lock+0x6a4/0xd70 [ 423.914318][ T30] ? __mutex_lock+0x527/0xd70 [ 423.919048][ T30] ? genl_rcv_msg+0x121/0xec0 [ 423.924341][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 423.929426][ T30] ? __pfx_validate_chain+0x10/0x10 [ 423.935966][ T30] ? __pfx_validate_chain+0x10/0x10 [ 423.941226][ T30] ? radix_tree_lookup+0x238/0x290 [ 423.947300][ T30] genl_rcv_msg+0x121/0xec0 [ 423.951856][ T30] ? mark_lock+0x9a/0x350 [ 423.956766][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 423.961843][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.968154][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 423.973233][ T30] ? __pfx___might_resched+0x10/0x10 [ 423.979419][ T30] netlink_rcv_skb+0x1e3/0x430 [ 423.984977][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.990070][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 423.996642][ T30] genl_rcv+0x28/0x40 [ 424.000678][ T30] netlink_unicast+0x7ea/0x980 [ 424.006106][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 424.011445][ T30] ? __virt_addr_valid+0x183/0x520 [ 424.017476][ T30] ? __check_object_size+0x49c/0x900 [ 424.022823][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 424.029513][ T30] netlink_sendmsg+0x8db/0xcb0 [ 424.034709][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.040050][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 424.045616][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 424.050941][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 424.058133][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.063869][ T30] __sock_sendmsg+0x221/0x270 [ 424.068615][ T30] __sys_sendto+0x3a4/0x4f0 [ 424.073163][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 424.078889][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 424.086477][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 424.092863][ T30] ? exc_page_fault+0x590/0x8c0 [ 424.098412][ T30] __x64_sys_sendto+0xde/0x100 [ 424.103517][ T30] do_syscall_64+0xf3/0x230 [ 424.108095][ T30] ? clear_bhb_loop+0x35/0x90 [ 424.112823][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.120224][ T30] RIP: 0033:0x7f1d0337796c [ 424.125023][ T30] RSP: 002b:00007f1d041c8ed0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 424.134016][ T30] RAX: ffffffffffffffda RBX: 00007f1d041c8fd0 RCX: 00007f1d0337796c [ 424.142040][ T30] RDX: 0000000000000024 RSI: 00007f1d041c9020 RDI: 000000000000000d [ 424.151331][ T30] RBP: 0000000000000000 R08: 00007f1d041c8f24 R09: 000000000000000c [ 424.159951][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000d [ 424.168845][ T30] R13: 00007f1d041c8f78 R14: 00007f1d041c9020 R15: 0000000000000000 [ 424.178002][ T30] [ 424.181098][ T30] INFO: task syz.0.2910:13393 blocked for more than 145 seconds. [ 424.189892][ T30] Not tainted 6.10.0-rc6-syzkaller-00166-g83c36e7cfd74 #0 [ 424.197997][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 424.207689][ T30] task:syz.0.2910 state:D stack:27200 pid:13393 tgid:13392 ppid:5090 flags:0x00000004 [ 424.218493][ T30] Call Trace: [ 424.221811][ T30] [ 424.225347][ T30] __schedule+0x17e8/0x4a20 [ 424.229926][ T30] ? __pfx___schedule+0x10/0x10 [ 424.236056][ T30] ? __pfx_lock_release+0x10/0x10 [ 424.241145][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 424.247704][ T30] ? schedule+0x90/0x320 [ 424.251997][ T30] schedule+0x14b/0x320 [ 424.256916][ T30] schedule_preempt_disabled+0x13/0x30 [ 424.262427][ T30] __mutex_lock+0x6a4/0xd70 [ 424.268128][ T30] ? __mutex_lock+0x527/0xd70 [ 424.272865][ T30] ? genl_rcv_msg+0x121/0xec0 [ 424.278592][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 424.284078][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 424.290715][ T30] ? radix_tree_lookup+0x238/0x290 [ 424.297195][ T30] genl_rcv_msg+0x121/0xec0 [ 424.301749][ T30] ? mark_lock+0x9a/0x350 [ 424.306697][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 424.311783][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 424.317664][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 424.322757][ T30] ? __pfx___might_resched+0x10/0x10 [ 424.329553][ T30] netlink_rcv_skb+0x1e3/0x430 [ 424.334888][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 424.339985][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 424.346021][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 424.351572][ T30] genl_rcv+0x28/0x40 [ 424.356714][ T30] netlink_unicast+0x7ea/0x980 [ 424.361548][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 424.367617][ T30] ? __virt_addr_valid+0x183/0x520 [ 424.372793][ T30] ? __check_object_size+0x49c/0x900 [ 424.378831][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 424.385547][ T30] netlink_sendmsg+0x8db/0xcb0 [ 424.390393][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.396631][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 424.401632][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 424.417107][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 424.422645][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.428605][ T30] __sock_sendmsg+0x221/0x270 [ 424.433775][ T30] __sys_sendto+0x3a4/0x4f0 [ 424.438337][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 424.444577][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 424.450615][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 424.457747][ T30] ? exc_page_fault+0x590/0x8c0 [ 424.462660][ T30] __x64_sys_sendto+0xde/0x100 [ 424.468121][ T30] do_syscall_64+0xf3/0x230 [ 424.472702][ T30] ? clear_bhb_loop+0x35/0x90 [ 424.478630][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.485290][ T30] RIP: 0033:0x7f7946d7796c [ 424.489755][ T30] RSP: 002b:00007f7947b6ced0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 424.499424][ T30] RAX: ffffffffffffffda RBX: 00007f7947b6cfd0 RCX: 00007f7946d7796c [ 424.508485][ T30] RDX: 0000000000000020 RSI: 00007f7947b6d020 RDI: 0000000000000005 [ 424.516880][ T30] RBP: 0000000000000000 R08: 00007f7947b6cf24 R09: 000000000000000c [ 424.525455][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 424.534601][ T30] R13: 00007f7947b6cf78 R14: 00007f7947b6d020 R15: 0000000000000000 [ 424.542644][ T30] [ 424.546330][ T30] [ 424.546330][ T30] Showing all locks held in the system: [ 424.554749][ T30] 1 lock held by khungtaskd/30: [ 424.559636][ T30] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 424.570762][ T30] 3 locks held by kworker/u8:3/51: [ 424.576519][ T30] 2 locks held by getty/4846: [ 424.581243][ T30] #0: ffff88802a9c70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 424.591703][ T30] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 424.603238][ T30] 2 locks held by kworker/u9:6/5108: [ 424.609233][ T30] #0: ffff88802fa66948 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 424.621255][ T30] #1: ffffc9000435fd00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 424.634263][ T30] 3 locks held by syz.2.2890/13330: [ 424.639503][ T30] #0: ffffffff8f64d2f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.648898][ T30] #1: ffffffff8f64d1a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.658536][ T30] #2: ffff888057666998 (&nbd->config_lock){+.+.}-{3:3}, at: nbd_disconnect_and_put+0x34/0x250 [ 424.670041][ T30] 2 locks held by syz.2.2890/13337: [ 424.675715][ T30] #0: ffffffff8f64d2f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.684382][ T30] #1: ffffffff8f64d1a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.694570][ T30] 2 locks held by syz.4.2904/13375: [ 424.700055][ T30] #0: ffffffff8f64d2f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.708944][ T30] #1: ffffffff8f64d1a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.718882][ T30] 2 locks held by syz.1.2905/13381: [ 424.725233][ T30] #0: ffffffff8f64d2f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.734017][ T30] #1: ffffffff8f64d1a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.743087][ T30] 2 locks held by syz.3.2909/13390: [ 424.748973][ T30] #0: ffffffff8f64d2f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.758272][ T30] #1: ffffffff8f64d1a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.767722][ T30] 2 locks held by syz.3.2909/13398: [ 424.772949][ T30] #0: ffffffff8f64d2f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.781902][ T30] #1: ffffffff8f64d1a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.791969][ T30] 2 locks held by syz.0.2910/13393: [ 424.797602][ T30] #0: ffffffff8f64d2f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.806609][ T30] #1: ffffffff8f64d1a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.816788][ T30] 2 locks held by syz-executor/13401: [ 424.822217][ T30] #0: ffffffff8f64d2f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.831375][ T30] #1: ffffffff8f64d1a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.840810][ T30] 2 locks held by syz-executor/13412: [ 424.847294][ T30] #0: ffffffff8f64d2f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.856184][ T30] #1: ffffffff8f64d1a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.865636][ T30] 2 locks held by syz-executor/13415: [ 424.871049][ T30] #0: ffffffff8f64d2f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.880578][ T30] #1: ffffffff8f64d1a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.890293][ T30] 2 locks held by syz-executor/13417: [ 424.896268][ T30] #0: ffffffff8f64d2f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.905823][ T30] #1: ffffffff8f64d1a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.915303][ T30] 2 locks held by syz-executor/13419: [ 424.920807][ T30] #0: ffffffff8f64d2f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.929654][ T30] #1: ffffffff8f64d1a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.940190][ T30] 2 locks held by syz-executor/13446: [ 424.945986][ T30] #0: ffffffff8f64d2f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.954655][ T30] #1: ffffffff8f64d1a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.964772][ T30] 2 locks held by syz-executor/13455: [ 424.970185][ T30] #0: ffffffff8f64d2f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 424.979300][ T30] #1: ffffffff8f64d1a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 424.988825][ T30] 2 locks held by syz-executor/13466: [ 424.995273][ T30] #0: ffffffff8f64d2f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 425.003913][ T30] #1: ffffffff8f64d1a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 425.013925][ T30] 2 locks held by syz-executor/13468: [ 425.019340][ T30] #0: ffffffff8f64d2f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 425.029145][ T30] #1: ffffffff8f64d1a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 425.038590][ T30] 2 locks held by syz-executor/13470: [ 425.046056][ T30] #0: ffffffff8f64d2f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 425.055489][ T30] #1: ffffffff8f64d1a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 425.064926][ T30] 2 locks held by syz-executor/13497: [ 425.070335][ T30] #0: ffffffff8f64d2f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 425.079138][ T30] #1: ffffffff8f64d1a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 425.089248][ T30] 2 locks held by syz-executor/13506: [ 425.095141][ T30] #0: ffffffff8f64d2f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 425.103823][ T30] #1: ffffffff8f64d1a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 425.113197][ T30] 2 locks held by syz-executor/13517: [ 425.119933][ T30] #0: ffffffff8f64d2f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 425.129010][ T30] #1: ffffffff8f64d1a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 425.138624][ T30] 2 locks held by syz-executor/13519: [ 425.145055][ T30] #0: ffffffff8f64d2f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 425.154029][ T30] #1: ffffffff8f64d1a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 425.163092][ T30] 2 locks held by syz-executor/13520: [ 425.169198][ T30] #0: ffffffff8f64d2f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 425.178676][ T30] #1: ffffffff8f64d1a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 425.188195][ T30] [ 425.190558][ T30] ============================================= [ 425.190558][ T30] [ 425.199755][ T30] NMI backtrace for cpu 0 [ 425.204129][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00166-g83c36e7cfd74 #0 [ 425.214052][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 425.224130][ T30] Call Trace: [ 425.227424][ T30] [ 425.230370][ T30] dump_stack_lvl+0x241/0x360 [ 425.235096][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.240319][ T30] ? __pfx__printk+0x10/0x10 [ 425.244931][ T30] ? vprintk_emit+0x631/0x770 [ 425.249630][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 425.254679][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 425.259635][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 425.265110][ T30] ? _printk+0xd5/0x120 [ 425.269311][ T30] ? __pfx__printk+0x10/0x10 [ 425.273923][ T30] ? __wake_up_klogd+0xcc/0x110 [ 425.278801][ T30] ? __pfx__printk+0x10/0x10 [ 425.283421][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 425.288483][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 425.294487][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 425.300703][ T30] watchdog+0xfde/0x1020 [ 425.305066][ T30] ? watchdog+0x1ea/0x1020 [ 425.309510][ T30] ? __pfx_watchdog+0x10/0x10 [ 425.314207][ T30] kthread+0x2f0/0x390 [ 425.318301][ T30] ? __pfx_watchdog+0x10/0x10 [ 425.322995][ T30] ? __pfx_kthread+0x10/0x10 [ 425.327615][ T30] ret_from_fork+0x4b/0x80 [ 425.332053][ T30] ? __pfx_kthread+0x10/0x10 [ 425.336670][ T30] ret_from_fork_asm+0x1a/0x30 [ 425.341496][ T30] [ 425.346298][ T30] Sending NMI from CPU 0 to CPUs 1: [ 425.351557][ C1] NMI backtrace for cpu 1 [ 425.351570][ C1] CPU: 1 PID: 9754 Comm: kworker/u8:10 Not tainted 6.10.0-rc6-syzkaller-00166-g83c36e7cfd74 #0 [ 425.351591][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 425.351603][ C1] Workqueue: bat_events batadv_nc_worker [ 425.351631][ C1] RIP: 0010:lock_acquire+0xf4/0x550 [ 425.351653][ C1] Code: be 08 00 00 00 e8 0c 77 89 00 48 0f a3 1d ac e1 3a 0e 73 16 e8 1d ec 09 00 84 c0 75 0d 80 3d 6d 52 25 0e 00 0f 84 f9 02 00 00 <48> c7 c0 2c 7c ad 8f 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 ff 02 [ 425.351669][ C1] RSP: 0018:ffffc900137879e0 EFLAGS: 00000202 [ 425.351684][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff81726834 [ 425.351697][ C1] RDX: 0000000000000000 RSI: ffffffff8c1fe920 RDI: ffffffff8c1fe8e0 [ 425.351710][ C1] RBP: ffffc90013787b40 R08: ffffffff8fad49ef R09: 1ffffffff1f5a93d [ 425.351724][ C1] R10: dffffc0000000000 R11: fffffbfff1f5a93e R12: 1ffff920026f0f44 [ 425.351738][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 425.351751][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 425.351767][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 425.351780][ C1] CR2: 00007fff64375e08 CR3: 000000000e132000 CR4: 00000000003506f0 [ 425.351796][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 425.351807][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 425.351819][ C1] Call Trace: [ 425.351827][ C1] [ 425.351834][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 425.351854][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 425.351875][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 425.351894][ C1] ? nmi_handle+0x2a/0x5a0 [ 425.351931][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 425.351952][ C1] ? nmi_handle+0x14f/0x5a0 [ 425.351978][ C1] ? nmi_handle+0x2a/0x5a0 [ 425.352007][ C1] ? lock_acquire+0xf4/0x550 [ 425.352025][ C1] ? default_do_nmi+0x63/0x160 [ 425.352046][ C1] ? exc_nmi+0x123/0x1f0 [ 425.352064][ C1] ? end_repeat_nmi+0xf/0x53 [ 425.352096][ C1] ? lock_acquire+0xd4/0x550 [ 425.352115][ C1] ? lock_acquire+0xf4/0x550 [ 425.352134][ C1] ? lock_acquire+0xf4/0x550 [ 425.352154][ C1] ? lock_acquire+0xf4/0x550 [ 425.352172][ C1] [ 425.352178][ C1] [ 425.352189][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 425.352210][ C1] ? batadv_nc_worker+0xcb/0x610 [ 425.352238][ C1] ? __pfx_lock_release+0x10/0x10 [ 425.352259][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 425.352284][ C1] batadv_nc_worker+0xec/0x610 [ 425.352306][ C1] ? batadv_nc_worker+0xcb/0x610 [ 425.352327][ C1] ? batadv_nc_worker+0xcb/0x610 [ 425.352351][ C1] ? process_scheduled_works+0x945/0x1830 [ 425.352369][ C1] process_scheduled_works+0xa2c/0x1830 [ 425.352406][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 425.352430][ C1] ? assign_work+0x364/0x3d0 [ 425.352451][ C1] worker_thread+0x86d/0xd50 [ 425.352480][ C1] ? __kthread_parkme+0x169/0x1d0 [ 425.352502][ C1] ? __pfx_worker_thread+0x10/0x10 [ 425.352521][ C1] kthread+0x2f0/0x390 [ 425.352542][ C1] ? __pfx_worker_thread+0x10/0x10 [ 425.352561][ C1] ? __pfx_kthread+0x10/0x10 [ 425.352583][ C1] ret_from_fork+0x4b/0x80 [ 425.352606][ C1] ? __pfx_kthread+0x10/0x10 [ 425.352628][ C1] ret_from_fork_asm+0x1a/0x30 [ 425.352663][ C1] [ 425.680634][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 425.687522][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00166-g83c36e7cfd74 #0 [ 425.697478][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 425.707549][ T30] Call Trace: [ 425.710844][ T30] [ 425.713789][ T30] dump_stack_lvl+0x241/0x360 [ 425.718499][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.723720][ T30] ? __pfx__printk+0x10/0x10 [ 425.728325][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 425.734331][ T30] ? vscnprintf+0x5d/0x90 [ 425.738681][ T30] panic+0x349/0x860 [ 425.742599][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 425.748769][ T30] ? __pfx_panic+0x10/0x10 [ 425.753200][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 425.758597][ T30] ? __irq_work_queue_local+0x137/0x410 [ 425.764163][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 425.769548][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 425.775711][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 425.781875][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 425.788041][ T30] watchdog+0x101d/0x1020 [ 425.792386][ T30] ? watchdog+0x1ea/0x1020 [ 425.796849][ T30] ? __pfx_watchdog+0x10/0x10 [ 425.801535][ T30] kthread+0x2f0/0x390 [ 425.805623][ T30] ? __pfx_watchdog+0x10/0x10 [ 425.810307][ T30] ? __pfx_kthread+0x10/0x10 [ 425.814909][ T30] ret_from_fork+0x4b/0x80 [ 425.819348][ T30] ? __pfx_kthread+0x10/0x10 [ 425.823959][ T30] ret_from_fork_asm+0x1a/0x30 [ 425.828762][ T30] [ 425.832083][ T30] Kernel Offset: disabled [ 425.836459][ T30] Rebooting in 86400 seconds..