last executing test programs: 1m30.580765499s ago: executing program 1 (id=224): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000038000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a0002070000000000ffffffff000005001a00ff"], 0x38}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) r7 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x6000000e}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r9, 0x8b2a, &(0x7f0000000040)) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) r11 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r11, &(0x7f0000000240)={0xa0000000}) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000300)=""/110, &(0x7f00000001c0)=0x6e) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r11, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r5}, 0x10) 1m21.370238699s ago: executing program 1 (id=224): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000038000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a0002070000000000ffffffff000005001a00ff"], 0x38}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) r7 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x6000000e}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r9, 0x8b2a, &(0x7f0000000040)) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) r11 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r11, &(0x7f0000000240)={0xa0000000}) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000300)=""/110, &(0x7f00000001c0)=0x6e) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r11, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r5}, 0x10) 32.963644861s ago: executing program 1 (id=224): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000038000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a0002070000000000ffffffff000005001a00ff"], 0x38}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) r7 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x6000000e}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r9, 0x8b2a, &(0x7f0000000040)) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) r11 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r11, &(0x7f0000000240)={0xa0000000}) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000300)=""/110, &(0x7f00000001c0)=0x6e) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r11, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r5}, 0x10) 21.386678854s ago: executing program 1 (id=224): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000038000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a0002070000000000ffffffff000005001a00ff"], 0x38}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) r7 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x6000000e}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r9, 0x8b2a, &(0x7f0000000040)) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) r11 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r11, &(0x7f0000000240)={0xa0000000}) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000300)=""/110, &(0x7f00000001c0)=0x6e) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r11, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r5}, 0x10) 12.197137949s ago: executing program 1 (id=224): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000038000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a0002070000000000ffffffff000005001a00ff"], 0x38}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) r7 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x6000000e}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r9, 0x8b2a, &(0x7f0000000040)) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) r11 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r11, &(0x7f0000000240)={0xa0000000}) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000300)=""/110, &(0x7f00000001c0)=0x6e) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r11, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r5}, 0x10) 5.292284374s ago: executing program 0 (id=2087): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="34ff0000c4b92cc1e2c1f708164015350cb0ad830ef4d03bc16d5a61776f2f1b2215f3cf4c20772d9bbc4c261e1259e731963af7b600"/68, @ANYRES16=r3, @ANYBLOB="010000000000000000000d000000050007000000000006000a000000000006000800000000000500170000000000"], 0x34}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r4) sendmsg$NFC_CMD_GET_SE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, r5, 0x5953a6d8b15e6715, 0x70bd2c}, 0x14}}, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r6, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000280)=0x80000001, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0xecf9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x2c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d08428353b1c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000013887ad6d2d440fedce51a3aa57b00ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b44925129677b7b3d2f8e7792c7827862eae80134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498d357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac36f8859c7d5444c12bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d4768540c540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f0a000000000000009e0b1a8c8f55f30e7c25275ed49b71828b375be03ef903cc8244b1269376d01b674cff9cb82eef0fe55c8b751053004ca6cef28d9a52c3771e9c73d03fdf74f48306560fb6cd86658afa895efa47f3a43e686df5b727ba4ec99620270334fce56c9f86b8a2c8aaede5a48a29b75734fbe1f59e43dc5a39b083848b0ebb14d845df7606e4d58f1a03f2dd337c3a10f3b15d388e43059aa88b42d26d4ccda6d60f996ed444d7f40e0cdbf69e11252a6c0e2d882d93b4f22dc95a191b1e6ff59d7880b4ce587f7ef05c46088268805cf089c4b3cd60cd3fc0c6d81fb2f961abcb0133f3f7a594b8475d6853b2e4fafc52a6851e8cfe1aebe3a4539634a535f8ac496793001c1a4b26216d1cd382c1e6a15697ef0a9b26474e1dbfa422e952b0f742ef52388584673f6333299042099aa073c152e1b61851a4519fe67e47f1446bb7b80b804b1b4503df784c8604bf26578b1fa7dce5313ecdf297cc63bf2b472f8f56bebeec16dc5fa22ee9c3c304d6629db7215eebfbd480c4ac"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r8}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r10, @ANYRES32, @ANYBLOB='\x00'/18], 0x48) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r6, 0xc0046686, &(0x7f0000001740)={0x1, 0xf00, "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"}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r11, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r11}, 0x4) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x28, r15, 0x701, 0x70bd2b, 0x800, {0x5}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004074}, 0x40) 5.291018193s ago: executing program 4 (id=2088): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x40) mmap(&(0x7f0000537000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x12504000) socket$isdn(0x22, 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=r2, 0xd, 0x1, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@fallback, r2, 0x35, 0x2020, 0x0, @void, @void, @value, @void, r3}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pi6 \x00'}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r9, 0x891c, &(0x7f0000000300)) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000180)="4db50797214f36ba517e7a04625fb11deea4e71053c0792a22086479a268e3b059c619565c225511fdba4a6df91b11b97a81b27cac5110ecc263fc2979390f19c2453b38ed99d377f1ffb014967f3184e46e399078ba52b51e0c040562a90a2679db282ef07fc011", 0x68, 0x4000, &(0x7f0000000280)={0x11, 0x0, r8, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000040)="c67f0d7df974c298a289e47034e7", 0xe}], 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r4, r1, 0x4, 0x2000, 0xffffffffffffffff, @value=r5, @void, @void, @void, r3}, 0x20) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004200500e1000c0400070280000f00", 0x33a) 4.640335776s ago: executing program 4 (id=2092): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x800}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000003c0), 0x4) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ff7afedf}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x2000020}, 0x7) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000180)=0x67c, 0x2b) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r10) r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r11, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}, 0x7ff}, 0x1c) 3.129843653s ago: executing program 3 (id=2094): unshare(0x22020400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00', 0x0}, 0x30) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000004c0)={0x1f, 0x0, @fixed, 0xfffd, 0x3}, 0xe) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x34, r3, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) unshare(0x580) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000190800410072786506140033006c6f0700000000000000feb62e000000"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x4}, {0x6}]}, 0x10) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x1c, 0x1e, 0x492dfc465ae32a8d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x40000}}, 0x1c}}, 0x0) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r0}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x71, 0x2d, &(0x7f0000000240)="5d2010f76ba084d0e7b345054c81394a26b71e09959a3768125275232980733e737ffd3ec1680b1de0db41b49140d489b483961687e045bba66f98cd7d3ac5e93efbb1c006f6d0df6f7caac5da3e78b779a54962849beefc65e7d0da311453a678dc9cc409d5086964a30f5e69bed90f22", &(0x7f0000000300)=""/45, 0x3, 0x0, 0xdd, 0x0, &(0x7f0000000340)="589efa485e43c76e03d900c0b6930e6fde261ed1309920faeac70ea21700531537681e96c2367a8e8c88822a095a085bb599c54c29766d8612200e7ba069207b8034f38c67290462d3fca2491aaa818afce8f5dce00fd4fa455c2f1b138d8123a64ed17a711891bc92f2365fef64f05bab67f384c31843b82fc7dd2904dae5267cc30868e0472ec223e075ac841c2385e6efca4ebf8d5006359d29511c1e3bd4895c25c9adaff377606e57dbb8277bf9d4bd50812580051f049915ad33d418769a10c4d73072e1c2b0e3a35d5181896f07b51d27f7eb490a880ad820b1", &(0x7f0000000440), 0x4, 0x0, 0xc}, 0x50) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x28}}, 0x0) 3.014252487s ago: executing program 2 (id=2095): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000b000000050000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000023d00a00020000000000000000000000000000aeb88c4bd7f3692dd344430ac8dd47abdebf6aed3b9fc8877f29c685996a8be61ae7e0eee69457e0c14125b4fe52c66524c7ed312c9f3fd9c9bfb0341717825a747b4340a640957eca18d450a88bdd5157762a26cde8368ddcf448a7ec0018a02c037173e4d26787b4b6a02e95d81c9d8c1fbf595256f04020f62e8be07d16047e3f5ed5924ccbbcb70286caf164f006951e25b104351692ba95f9f499289715f7dc5c"], 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000240), 0x20000000}, 0x20) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbff, 0x8}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @loopback}}, 0x1e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) unshare(0x60020c80) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f000000000000000000000000000039d1c723d667ee8b42bce1f54f75594182"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000004c0)='fsi_master_aspeed_opb_error\x00', r5, 0x0, 0x5}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000001000000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r8}, &(0x7f0000000600), &(0x7f0000000640)=r7}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000fffffff800000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32=r8, @ANYBLOB="050054000100b2ac08000100000000000900020073"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000000)=ANY=[@ANYBLOB='c *:* rwO'], 0xa) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000001380)) 2.978350755s ago: executing program 3 (id=2096): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000080000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x1c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x102, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2.909806292s ago: executing program 0 (id=2097): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f0000006e40)={0x0, 0x0, &(0x7f0000006e00)={&(0x7f0000006dc0)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket(0xa, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x4, 0x4, 0x2402b, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$inet(0x2, 0x4000000000000001, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x39) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r5, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) 2.866247807s ago: executing program 4 (id=2098): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}, {0x0, 0x2}]}, @int]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f0000000180), 0x4) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bond0\x00', 0x0}) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000040000b0000000000ffffffffffffffff"], 0x14}}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)='/', 0x1}], 0x1) (async, rerun: 64) r7 = socket$inet(0x2, 0x1, 0x0) (rerun: 64) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000180)='dctcp-reno\x00', 0xb) (async) setsockopt$sock_int(r7, 0x1, 0x44, &(0x7f0000000140)=0x1, 0x4) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', r5, r6, 0x1, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xc9}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) epoll_wait(r6, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) socket$packet(0x11, 0x2, 0x300) r8 = socket$packet(0x11, 0x3, 0x300) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000100)={r11, 0x2, 0x6}, 0x10) (async, rerun: 64) r12 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) (async) getsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 2.865575958s ago: executing program 2 (id=2099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 2.853119202s ago: executing program 3 (id=2100): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207, 0x11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={0x110, r4, 0xfe12482fe0801d67, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc}, {0xfdd5, 0x90, 0x17c0000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x7fffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x7}}, {@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x800}, {0xc, 0x90, 0x6}}]}, 0x110}, 0x1, 0x0, 0x0, 0x8011}, 0x4000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x603, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) getsockname$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.706996255s ago: executing program 2 (id=2101): close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r0, &(0x7f0000000180)="721af1dc798904fa63095b72acdc938f31fe4c90264031360b395592488dd92d2f13abf22522dbc7c12a41c7d0cbc5eb0a5eb3f4c74c25f05c8a93f26782c770907c05941ec28aa2c61a8a524f3d7cfbeef18d6568", 0x55, 0x4008800, 0x0, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000009c0)=@gcm_256={{0x303}, "43ce5cca7bd4a3b6", "89dbaa91bc0416e2700d196cb3b59a8cfec413977e74051a7d55f7a8f829096d", "052a7ee7", "45c52edc8b7d6575"}, 0x38) listen(0xffffffffffffffff, 0x0) close(0x3) 2.675151515s ago: executing program 1 (id=224): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000038000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a0002070000000000ffffffff000005001a00ff"], 0x38}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) r7 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x6000000e}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r9, 0x8b2a, &(0x7f0000000040)) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) r11 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r11, &(0x7f0000000240)={0xa0000000}) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000300)=""/110, &(0x7f00000001c0)=0x6e) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r11, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r5}, 0x10) 1.080019967s ago: executing program 0 (id=2102): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0000000000000000000000000000100004800c00018007000100637400000900010073797a30000000000900020073797a3200000000050007402d0000001400000000000a"], 0x6c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014", 0x1d, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4a700000}]}, 0x70}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a00000001900010000000000000000001c140000fe000001000000"], 0xa0}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080100000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5164}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000400)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x51, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) getsockopt$inet6_opts(r6, 0x29, 0x39, 0x0, &(0x7f0000000080)) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r7, 0x29, 0xc8, &(0x7f0000000080), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}, 0x7}, 0x80, 0x0}, 0x0) r8 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r8, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0xb}}, @ip_tos_u8={{0x14, 0x29, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4, &(0x7f0000001140)=0x5, 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r9, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xfffd, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@cswp={0x58, 0x114, 0x7, {{}, &(0x7f0000000100)=0x7, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x89, 0x5}}], 0x58}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 1.079531417s ago: executing program 2 (id=2103): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}]}}]}, 0x58}}, 0x44080) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x64, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x14, 0x11, &(0x7f00000001c0)=@raw=[@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ldst={0x0, 0x0, 0x0, 0x4, 0x5, 0x4, 0xfffffffffffffffc}, @alu={0x4, 0x0, 0x6, 0xb, 0x4, 0x1, 0x1}], &(0x7f0000000b00)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x1a, '\x00', r6, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.079077474s ago: executing program 3 (id=2104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x207) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'veth1_vlan\x00', @remote}) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000180)=0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x50, 0x0, '.\x00'}}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'pim6reg\x00', @multicast}) 1.078079082s ago: executing program 4 (id=2105): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="ebfeffff140010"], 0x10}], 0x1, 0x0, 0x0, 0x800}, 0x4000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x138) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000e000000087b65000040000009500000000200000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x98, r3, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x2}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020026bd7000090000000c0000004c00028008000700060000000800080009000000000005000d000000000008000400e80b00000800030003000000060002004e23000006000e004e2400000800050006000000"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4044000) socket$inet6(0xa, 0x3, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000000300)={0x7, 'ipvlan1\x00', {0x8}, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r8 = socket$key(0xf, 0x3, 0x2) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r9}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ea}, [], {0x14, 0x3f9}}, 0x28}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}}, 0x0) 689.774142ms ago: executing program 2 (id=2106): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbff, 0x8}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x20000840) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x74, r4, {}, {0xfff1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (fail_nth: 2) 666.069515ms ago: executing program 4 (id=2107): bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000440)={0x2, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 578.164812ms ago: executing program 0 (id=2108): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000009500000000000000e05efde577a368a219ba4a76be5a915309261b3339e57fda6e534e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) close(r4) (async) close(r4) close(r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071102800000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r6 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x75) (async) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x75) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x6, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r7, &(0x7f0000000340)="67072345dea20ed17e6ea47f70ba34610aa05ef98d0a00182aeb60f8e2b2f5f0d71908170c01d177461989d0d2ec2c90d88a50d27bb7b1945047c8c4ac58280af77c70ac468a7ce297d59464fdce844284525cdbed9de376ed4e19018728fcbd3c399072c00520417bce83", 0x6b, 0x4000, &(0x7f0000000240)={0xa, 0x4e20, 0x1ff, @loopback, 0x60000}, 0x1c) (async) sendto$inet6(r7, &(0x7f0000000340)="67072345dea20ed17e6ea47f70ba34610aa05ef98d0a00182aeb60f8e2b2f5f0d71908170c01d177461989d0d2ec2c90d88a50d27bb7b1945047c8c4ac58280af77c70ac468a7ce297d59464fdce844284525cdbed9de376ed4e19018728fcbd3c399072c00520417bce83", 0x6b, 0x4000, &(0x7f0000000240)={0xa, 0x4e20, 0x1ff, @loopback, 0x60000}, 0x1c) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="15010000ad190800140012800b0001006d61637365630000ff00028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n'], 0x44}}, 0x0) 319.43368ms ago: executing program 3 (id=2109): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x2, 0x1, 0x0) shutdown(r0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0500000003000000fd", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000000b9b7158f4e924dddc33ff8b000000082c10500000000", @ANYRES32=r6, @ANYBLOB], 0x20}}, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x192}}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$l2tp(0x2, 0x2, 0x73) 262.704522ms ago: executing program 2 (id=2110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'veth1_to_batadv\x00', &(0x7f00000002c0)=@ethtool_eeprom={0xc, 0x8, 0xffffdb49}}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8005}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000040000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000"], 0x64}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x3fe, 0x0, 0x1c, {[@timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4a) 196.716282ms ago: executing program 4 (id=2111): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x64, 0x0, 0x200, 0x20000000, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5}}}}, [@NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x24}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x0, 0x0, 0x8]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x20}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x6]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8}]}]}, 0x64}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x3c}}, 0x0) 113.372883ms ago: executing program 0 (id=2112): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7b6c}, @TCA_TBF_PBURST={0x8, 0x7, 0x1596}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x7c0, 0x58b1, 0x9d35, 0x8}, {0xae, 0x2, 0x8, 0x1, 0x5, 0x9f1}, 0xe00, 0x0, 0x1446}}]}}]}, 0x68}}, 0x800) r2 = socket$netlink(0x10, 0x3, 0x12) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10.02124ms ago: executing program 3 (id=2113): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0xc8, 0x10, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r1, 0x204}, [@IFLA_AF_SPEC={0xa8, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x4}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x12}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x38, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}]}]}]}, 0xc8}}, 0x88e4) 0s ago: executing program 0 (id=2114): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="a6bea8a120e5f8320c30e4500800", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x11, 0x6, @local}, 0x14) r3 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000080000002d0301000000000095000000000000006916000000000000bf670000000000004506000023ff07006706000002000000070300000ee60060bf050000000000000f650000000000006507f9ff01000000070700004c0000001f75000000000000bf54000000000000070000000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb10dc8c27df8ecf264e0f8cf9f17d3c30e3c7bdd2d17f2f1754558f1e78af0100008000000000b1d89bd4601d295c45a6a0b9bdb7dd39974bc903d6c4f6f3be4b369289aa684bafb9f759fc5b12b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a249a3cca76d8bf260000c6c60bf70d742a810000000000000081b75dbc54e3ec8f3915db069c3b750b5b40d893ea8fe0185473d51b546cad3f1d5af65727546e7c955ccefa1f6ab689fde4de4e63ede20271a51445dc8da39e5b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb735fd552bdc2064b004aeb0743eb2dc819b6cf5c8ac86d8a297dff0445a13d0045fb3cda32a673a6bb55d8c85f21dce431e56723888f00010000000000049bc1172ba7cbebe1e1f82da672748f4405e0d6b03233f9aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57ab282e9ae0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000000000bc00f674629709e7e78f4ddc211bc3ebf09dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7ec8d3e9e645a1d91875b82bf2d1c7ab04871bc47287cd31cc43ea0ffb567b40407d130000000000000009cb3826df5f37d83f84e98a3a3d80bd0d0da62a34ea643839c3990cdb79ab3f2f95c6b0c94cce6994521628ab028acfc1d926a0f6a5480a55c22fe394ac00000000000000000000be82ac4d00defb79ea2420ff8e41a2847c00be697e0acc2a9572ec1b6b218ca5977d7849ded5127bb70d51856bdd0400000054451462e6f8f4d08eb99dfbb255b7f314ba3f3e230b0e1cda051104af4ce8e87c532d019cd9c302002600006551bae7bac239ec79017a8238b577af0b032c171f09bd3bf8c1992f2b3a0c8187b684e7c3a8c3a4c2df9df903dea152c1328142c066268262f0c0abd86b8d79e802d11bd5cb3378ce029c02f6a00291c8e292697e2b593087d8811da049c2a2bc3f65c09454fe5635df7946c14bb98deb61cf70c7e6603d6624b6051a6f9d1abbd4e8de431d73279079d028cc6d48d4e04e0fe709d8cf71f005e627b060c8a29eca275177744d0e233eee30151ec8af6567514242436d49e1994bc85cd820c46f84308245be7abdb071484bb54364adb4d95b4fd10473fef89660acacb3b24ac7b45b8f0e8538960e9150f43318621f1074de26010088bce9d123b595a9a0602d63c4836541769566044cd6930fdcc9b2d810c1ba013d8f49ada983858596e086f2f0a5007146f009a31c1b06cacc3aef772ccf9c46c33d71b9be24a958b40b3947e6889cd3c34df63f4b17ec2b5b8984edff055233d044bd533548c9608cac4a7ccd9ceb9323a75eeb6084125dee0b4ef0543e473bec317e3dd74f152e24fe2752bfecff7ba32ca56b2a56e787e265966af7c5f4257266e76952a40096d34ee55ea0a327814cc15bc07394d9b59e34a58415195ba9617f21fa1f0effa67d2bee51068cc00f07acc76dbb8247e29b428a8b5d0a9f226928a1757fb5d9f4724d637770af4b21e707d681a48f186d9be250efa86cc3a25b74376aa1028d44b42d1e2a63a35c7bf61ecc0a98404fbe1571c8465db33c405dd9466d86c33b15f1d346dda990f27a0862f59e7067653b795456c01c696183ff13f9d75160a195b23f668f7e042525f5ac823cec23e52816c45ef08754975bee4bb593c3247667d96c1e963bdc4dd401b97e0f51b817c4d5df7f5b1e31cdc05b889ecc7a9505da27bbb3fc283a161c90eab72807d4a240586d9f3f11a50c85e2696ec31844090a619f84cf7ac3802a9244e6d0311ef64c6d72161d897d34c3438f733e193f1a1e769dee6871d7af0545b7a2486fd872be7d4972d3d00d69a2b2187d39d3467636f2d18bb5da8af3e313327775ef6232c024c2bfe45cdf01c2ae5496ec62f1d12bfada519a61c167f8c8964fb08586a5acb1de735af4d464b4d6f9f5adf0d4210000000000000000000000d1a5880b1db3a40656118c614a98bb2b06e77c8399f2d5d5df23269d6320492eb36a861d19f9986287cf8b25ace555cd2e9b6f7de733eaf7e6bd24e99338d285f552c2da1f06611862703f8df7c149c785ebdec82eb82056866cf6c6da1b3b7b2566948ee0f9d042302651b0b5f4775051b51172b595381b31cc997d541b9059eb2ae5d97d9a0d80870ba088986ba98e190edb3b52f04486995965efd278f2d3060caefb38526203e242f7e306c0e9606abd935e728c6df146e3bb2a1200000000009661ec772d9261b24d9dd5f5ac74b2222a69e1deee9a1d6e68e3e5024c745d46ca5a3a484c0e81815d21165aa7fadc49cba1272517d079114cae7928dc70f8141aa6fec6da716a8ad9ff9010a2e07763755c78921275101ec25d77cbdecf0e92c63b9db99cacd72b62f7ef95e0955625ffffffff284511bc245d1f3b9351a3d3c8dd22b00f66df1b59bda8cc1a2dd8cc985b8ddaa10aa46a4c4e34c8d50034fd2fbca5a557c0ca84be0ecfd5cbe573da6bdf2abdd4a8ae92e30d1cea4ba9ce0dcaa940f7af67cddc0faa6c032e7183b6d4c2d8638c07611684108ef7a71b332b74acee0cdd5ee7e64cb1bbfb4bcaf3c1094262d9350c97848ac98c5c30e4d016bbc94f92c2f5d300fd767fa948ccb5d889669503386152e38d97f5e38b95e8e62a50c1612ad80b95fe7f8648a3bd004c0cd402e90b754034a94b248671bfbb41edfe7d0150e6ee48ead44333f6dd0c273ad5c5affef57d52ecdf55b60bfa7172864838a080bcdcb42be68b0ee6286f28933a9563feaf3d27ce782013bc47567ef65ed40000000000000000000000000000000000000000d3fc35e8ed2229e633af6a8722d044b9cf146ea6fd7ee51f284fa5d54649d9d23ed3eaf0bf4b0a2b2b77b5ba1880430033ad3b6f64188024fa7be0dc2fb8154a15ab5fbe0bbaeabca55a6211df4e68fd982e903dede5096b23aa294a11dbe101685891c199d644d40cd3721eba27c23c2daf56147b856b33a2aa010ab55478e551ca69d8f588e77c3f6c0ad72e55626b3e397b858192b7498d4da2123133a3e9cb8060d4a1fba148dde9369789c6d3b2b5f0322a59654eec2d6793766833b5b928092814ae1b03e4548b55885518de596b99f18055844a8a0e4a54277dd3e8f68a2a8a2f0bbb3b42c650d0bfd89ee0d29d97c98a0dae2afde4b4e28a0ad4b1525c58b4d3997e86123b6975803f49e3f164c5d18f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) writev(r4, &(0x7f0000001980)=[{&(0x7f00000005c0)="87", 0x1}], 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9540700000000000400b55467", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x8919, &(0x7f0000000040)={'veth1\x00', {0x2, 0x0, @empty=0xac141419}}) socket$rds(0x15, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) (async) sendto$packet(r0, &(0x7f0000000140)="a6bea8a120e5f8320c30e4500800", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x11, 0x6, @local}, 0x14) (async) socket$packet(0x11, 0x3, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) pipe(&(0x7f0000000040)) (async) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) writev(r4, &(0x7f0000001980)=[{&(0x7f00000005c0)="87", 0x1}], 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9540700000000000400b55467", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) recvmmsg$unix(r6, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x8919, &(0x7f0000000040)={'veth1\x00', {0x2, 0x0, @empty=0xac141419}}) (async) socket$rds(0x15, 0x5, 0x0) (async) kernel console output (not intermixed with test programs): 11 has an invalid length. [ 159.839170][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.998'. [ 159.858544][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.998'. [ 159.868104][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.998'. [ 160.108447][ T6043] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.380325][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 161.402635][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 161.418734][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 161.431984][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 161.448665][ T5842] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 161.460252][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 161.679962][ T6043] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.696667][ T9646] 0·: renamed from hsr_slave_1 (while UP) [ 161.705406][ T9646] 0·: entered allmulticast mode [ 161.711035][ T9646] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 161.839588][ T6043] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.859591][ T9666] team0: Device wg2 is of different type [ 161.867964][ T9665] netlink: 'syz.2.1007': attribute type 10 has an invalid length. [ 161.890681][ T9657] lo speed is unknown, defaulting to 1000 [ 161.921039][ T6043] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.979270][ T9661] lo speed is unknown, defaulting to 1000 [ 162.143263][ T9681] __nla_validate_parse: 10 callbacks suppressed [ 162.143283][ T9681] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1011'. [ 162.165934][ T6043] bridge_slave_1: left allmulticast mode [ 162.171652][ T6043] bridge_slave_1: left promiscuous mode [ 162.195854][ T6043] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.213372][ T9681] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1011'. [ 162.223625][ T6043] bridge_slave_0: left allmulticast mode [ 162.229293][ T6043] bridge_slave_0: left promiscuous mode [ 162.270918][ T6043] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.672937][ T6043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.684179][ T6043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.697003][ T6043] bond0 (unregistering): Released all slaves [ 162.714404][ T9689] lo speed is unknown, defaulting to 1000 [ 162.739032][ T9702] syz.0.1013 (9702) used obsolete PPPIOCDETACH ioctl [ 162.869971][ T9689] lo speed is unknown, defaulting to 1000 [ 162.907375][ T9689] lo speed is unknown, defaulting to 1000 [ 162.920418][ T9689] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 162.943996][ T9689] lo speed is unknown, defaulting to 1000 [ 162.950805][ T9689] lo speed is unknown, defaulting to 1000 [ 162.958278][ T9689] lo speed is unknown, defaulting to 1000 [ 162.965106][ T9689] lo speed is unknown, defaulting to 1000 [ 162.984514][ T9689] lo speed is unknown, defaulting to 1000 [ 162.993347][ T9689] lo speed is unknown, defaulting to 1000 [ 163.035441][ T9689] lo speed is unknown, defaulting to 1000 [ 163.066125][ T9657] chnl_net:caif_netlink_parms(): no params data found [ 163.188545][ T9715] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 163.210735][ T6043] hsr_slave_0: left promiscuous mode [ 163.217274][ T6043] hsr_slave_1: left promiscuous mode [ 163.240668][ T6043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.258702][ T6043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.280033][ T6043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.289733][ T6043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.322103][ T6043] veth1_macvtap: left promiscuous mode [ 163.328021][ T6043] veth0_macvtap: left promiscuous mode [ 163.333813][ T6043] veth1_vlan: left promiscuous mode [ 163.339283][ T6043] veth0_vlan: left promiscuous mode [ 163.514039][ T5852] Bluetooth: hci3: command tx timeout [ 163.796355][ T6043] team0 (unregistering): Port device team_slave_1 removed [ 163.837318][ T6043] team0 (unregistering): Port device team_slave_0 removed [ 164.177684][ T9735] tun0: tun_chr_ioctl cmd 1074025677 [ 164.189456][ T9735] tun0: linktype set to 774 [ 164.198931][ T9739] tun0: tun_chr_ioctl cmd 1074025681 [ 164.329538][ T9657] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.353435][ T9657] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.360650][ T9657] bridge_slave_0: entered allmulticast mode [ 164.394951][ T9761] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 164.406417][ T9657] bridge_slave_0: entered promiscuous mode [ 164.418265][ T9657] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.443218][ T9657] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.453590][ T9657] bridge_slave_1: entered allmulticast mode [ 164.463353][ T9657] bridge_slave_1: entered promiscuous mode [ 164.536861][ T9765] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 164.631986][ T9657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.650387][ T9772] netlink: 'syz.2.1036': attribute type 1 has an invalid length. [ 164.660712][ T9657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.683798][ T9779] netlink: 'syz.0.1037': attribute type 1 has an invalid length. [ 164.696154][ T9772] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1036'. [ 164.734914][ T9772] netlink: 3084 bytes leftover after parsing attributes in process `syz.2.1036'. [ 164.751648][ T9779] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1037'. [ 164.854995][ T9657] team0: Port device team_slave_0 added [ 164.885098][ T9657] team0: Port device team_slave_1 added [ 164.977077][ T9794] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.984597][ T9792] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1040'. [ 164.994518][ T9657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.001495][ T9657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.029051][ T9657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.029960][ T9802] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1043'. [ 165.042762][ T9657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.056565][ T9657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.082894][ T9657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.216582][ T9794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.268282][ T9657] hsr_slave_0: entered promiscuous mode [ 165.313946][ T9657] hsr_slave_1: entered promiscuous mode [ 165.324878][ T9657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.332790][ T9657] Cannot create hsr debugfs directory [ 165.412808][ T9811] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 165.472689][ T9810] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 165.593261][ T5852] Bluetooth: hci3: command tx timeout [ 165.695109][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1053'. [ 165.696686][ T9837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1052'. [ 165.719725][ T9835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1052'. [ 165.787556][ T9841] lo speed is unknown, defaulting to 1000 [ 165.845454][ T9841] lo speed is unknown, defaulting to 1000 [ 166.005653][ T9852] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 166.012500][ T9852] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 166.101883][ T9859] syzkaller1: entered promiscuous mode [ 166.110540][ T9859] syzkaller1: entered allmulticast mode [ 166.128981][ T9861] syz.0.1058 (9861) used greatest stack depth: 17840 bytes left [ 166.261914][ T9872] trusted_key: syz.4.1060 sent an empty control message without MSG_MORE. [ 166.309399][ T9871] ip6gre1: entered allmulticast mode [ 166.385395][ T9657] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 166.398240][ T9657] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 166.428584][ T9657] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 166.452661][ T9875] lo speed is unknown, defaulting to 1000 [ 166.460549][ T9875] lo speed is unknown, defaulting to 1000 [ 166.471686][ T9657] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 167.032060][ T9657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.076161][ T9657] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.095860][ T8430] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.102989][ T8430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.159558][ T8902] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.166790][ T8902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.439179][ T9925] tipc: Failed to remove unknown binding: 66,1,1/0:966745551/966745553 [ 167.463186][ T9925] tipc: Failed to remove unknown binding: 66,1,1/0:966745551/966745553 [ 167.626826][ T5895] IPVS: starting estimator thread 0... [ 167.673459][ T5852] Bluetooth: hci3: command tx timeout [ 167.679105][ T29] audit: type=1107 audit(1731685540.520:2): pid=9928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='§' [ 167.713643][ T9657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.733493][ T9931] IPVS: using max 19 ests per chain, 45600 per kthread [ 167.741501][ T9935] netlink: 'syz.2.1077': attribute type 1 has an invalid length. [ 167.757866][ T9930] lo speed is unknown, defaulting to 1000 [ 167.807640][ T9935] 8021q: adding VLAN 0 to HW filter on device bond4 [ 167.842408][ T9930] lo speed is unknown, defaulting to 1000 [ 167.849051][ T9937] netlink: 'syz.3.1078': attribute type 10 has an invalid length. [ 167.869766][ T9657] veth0_vlan: entered promiscuous mode [ 167.881420][ T9935] bond4: (slave bridge0): making interface the new active one [ 167.895986][ T9935] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 167.932032][ T9657] veth1_vlan: entered promiscuous mode [ 167.995766][ T9657] veth0_macvtap: entered promiscuous mode [ 168.010645][ T9657] veth1_macvtap: entered promiscuous mode [ 168.025323][ T9942] netlink: 'syz.4.1079': attribute type 322 has an invalid length. [ 168.042965][ T9657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.059148][ T9657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.070262][ T9657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.099683][ T9657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.110701][ T9657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.122608][ T9657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.132980][ T9657] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.141976][ T9657] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.152168][ T9657] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.161295][ T9657] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.364579][ T9950] lo speed is unknown, defaulting to 1000 [ 168.401635][ T8902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.415955][ T8902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.549662][ T9950] lo speed is unknown, defaulting to 1000 [ 168.617628][ T8430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.626365][ T8430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.816819][ T9967] netlink: 'syz.3.1086': attribute type 1 has an invalid length. [ 168.869549][ T9969] __nla_validate_parse: 1 callbacks suppressed [ 168.869570][ T9969] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1088'. [ 168.977152][ T9974] xt_HMARK: proto mask must be zero with L3 mode [ 169.021492][ T9973] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 169.054767][ T9973] bond4: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 169.080925][ T9973] bond4: (slave gre1): making interface the new active one [ 169.093950][ T9973] bond4: (slave gre1): Enslaving as an active interface with an up link [ 169.118296][ T9979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1090'. [ 169.146459][ T9979] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1090'. [ 169.182944][ T9980] netlink: 'syz.2.1090': attribute type 3 has an invalid length. [ 169.213378][ T9980] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1090'. [ 169.337478][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1092'. [ 169.474806][ T8415] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.989666][ T8415] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.169280][ T8415] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.466186][ T8415] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.798513][ T8415] bridge_slave_1: left allmulticast mode [ 170.804269][ T8415] bridge_slave_1: left promiscuous mode [ 170.810040][ T8415] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.821518][ T8415] bridge_slave_0: left allmulticast mode [ 170.829039][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 170.837598][T10020] xt_TPROXY: Can be used only with -p tcp or -p udp [ 170.838299][ T8415] bridge_slave_0: left promiscuous mode [ 170.851170][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 170.854709][T10019] xt_TPROXY: Can be used only with -p tcp or -p udp [ 170.859470][ T8415] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.874289][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 170.888492][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 170.896368][ T5842] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 170.908890][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 171.246096][T10033] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1100'. [ 171.271859][T10033] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.413465][ T8415] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.428309][ T8415] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.440784][ T8415] bond0 (unregistering): Released all slaves [ 171.517526][T10016] lo speed is unknown, defaulting to 1000 [ 171.539466][T10016] lo speed is unknown, defaulting to 1000 [ 171.591658][T10044] sctp: [Deprecated]: syz.3.1105 (pid 10044) Use of int in maxseg socket option. [ 171.591658][T10044] Use struct sctp_assoc_value instead [ 171.674155][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1106'. [ 171.754510][T10055] syzkaller0: refused to change device tx_queue_len [ 171.976014][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'. [ 172.019091][T10066] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1112'. [ 172.053467][T10080] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1114'. [ 172.082337][ T8415] hsr_slave_0: left promiscuous mode [ 172.106713][ T8415] hsr_slave_1: left promiscuous mode [ 172.130673][ T8415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.139729][ T8415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.147717][ T8415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.155453][ T8415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.178973][ T8415] veth1_macvtap: left promiscuous mode [ 172.185531][ T8415] veth0_macvtap: left promiscuous mode [ 172.191354][ T8415] veth1_vlan: left promiscuous mode [ 172.196823][ T8415] veth0_vlan: left promiscuous mode [ 172.559445][ T8415] team0 (unregistering): Port device team_slave_1 removed [ 172.598727][ T8415] team0 (unregistering): Port device team_slave_0 removed [ 172.953546][ T5852] Bluetooth: hci3: command tx timeout [ 172.976778][T10085] macvtap1: entered promiscuous mode [ 172.990338][T10085] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 173.003422][T10085] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 173.157368][T10090] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 173.167785][T10090] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 173.180857][T10090] bond0 (unregistering): Released all slaves [ 173.210841][T10016] chnl_net:caif_netlink_parms(): no params data found [ 173.226823][T10102] syzkaller1: entered promiscuous mode [ 173.232803][T10102] syzkaller1: entered allmulticast mode [ 173.375145][T10112] veth0_vlan: entered allmulticast mode [ 173.497404][T10016] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.530719][T10016] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.538101][T10016] bridge_slave_0: entered allmulticast mode [ 173.557294][T10016] bridge_slave_0: entered promiscuous mode [ 173.597357][T10125] netlink: 'syz.2.1126': attribute type 21 has an invalid length. [ 173.607380][T10016] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.625580][T10016] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.643241][T10016] bridge_slave_1: entered allmulticast mode [ 173.649999][T10016] bridge_slave_1: entered promiscuous mode [ 173.724005][T10016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.741690][T10016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.802103][T10016] team0: Port device team_slave_0 added [ 173.831404][T10016] team0: Port device team_slave_1 added [ 173.884244][T10016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.903167][T10016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.934145][T10016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.960439][T10016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.977892][T10016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.009852][T10016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.050111][T10150] FAULT_INJECTION: forcing a failure. [ 174.050111][T10150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.074596][T10150] CPU: 1 UID: 0 PID: 10150 Comm: syz.4.1135 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 174.085423][T10150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 174.095507][T10150] Call Trace: [ 174.098807][T10150] [ 174.101776][T10150] dump_stack_lvl+0x241/0x360 [ 174.106511][T10150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.111775][T10150] ? __pfx__printk+0x10/0x10 [ 174.116402][T10150] ? __pfx_lock_release+0x10/0x10 [ 174.121473][T10150] ? __lock_acquire+0x1384/0x2050 [ 174.126552][T10150] should_fail_ex+0x3b0/0x4e0 [ 174.131268][T10150] _copy_from_iter+0x21f/0x1e70 [ 174.136174][T10150] ? __pfx__copy_from_iter+0x10/0x10 [ 174.141541][T10150] ? tun_get_user+0x86e/0x4890 [ 174.146354][T10150] ? __pfx_lock_release+0x10/0x10 [ 174.151429][T10150] ? page_copy_sane+0x46/0x260 [ 174.156237][T10150] copy_page_from_iter+0x7a/0x100 [ 174.161310][T10150] tun_get_user+0x203c/0x4890 [ 174.166033][T10150] ? tun_get_user+0x86e/0x4890 [ 174.170842][T10150] ? __lock_acquire+0x1384/0x2050 [ 174.175922][T10150] ? __pfx_tun_get_user+0x10/0x10 [ 174.181015][T10150] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 174.186559][T10150] ? tun_get+0x1e/0x2f0 [ 174.190734][T10150] ? __pfx_lock_release+0x10/0x10 [ 174.195773][T10150] ? tun_get+0x1e/0x2f0 [ 174.199933][T10150] ? tun_get+0x27d/0x2f0 [ 174.204204][T10150] tun_chr_write_iter+0x10d/0x1f0 [ 174.209250][T10150] vfs_write+0xaeb/0xd30 [ 174.213505][T10150] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 174.219055][T10150] ? __pfx_vfs_write+0x10/0x10 [ 174.223826][T10150] ? fdget_pos+0x19a/0x320 [ 174.228244][T10150] ksys_write+0x183/0x2b0 [ 174.232590][T10150] ? __pfx_ksys_write+0x10/0x10 [ 174.237446][T10150] ? do_syscall_64+0x100/0x230 [ 174.242213][T10150] ? do_syscall_64+0xb6/0x230 [ 174.246898][T10150] do_syscall_64+0xf3/0x230 [ 174.251426][T10150] ? clear_bhb_loop+0x35/0x90 [ 174.256121][T10150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.262070][T10150] RIP: 0033:0x7f183257d1ff [ 174.266516][T10150] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 174.286144][T10150] RSP: 002b:00007f18332b4000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 174.294566][T10150] RAX: ffffffffffffffda RBX: 00007f1832735f80 RCX: 00007f183257d1ff [ 174.302535][T10150] RDX: 000000000000002e RSI: 0000000020000080 RDI: 00000000000000c8 [ 174.310504][T10150] RBP: 00007f18332b4090 R08: 0000000000000000 R09: 0000000000000000 [ 174.318497][T10150] R10: 000000000000002e R11: 0000000000000293 R12: 0000000000000001 [ 174.326473][T10150] R13: 0000000000000000 R14: 00007f1832735f80 R15: 00007ffdb23aacc8 [ 174.334471][T10150] [ 174.359676][T10016] hsr_slave_0: entered promiscuous mode [ 174.386701][T10016] hsr_slave_1: entered promiscuous mode [ 174.407986][T10016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.419553][T10016] Cannot create hsr debugfs directory [ 174.533810][T10156] syzkaller1: entered promiscuous mode [ 174.539329][T10156] syzkaller1: entered allmulticast mode [ 174.615967][T10158] lo: entered allmulticast mode [ 174.634267][T10158] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 174.913271][T10178] __nla_validate_parse: 3 callbacks suppressed [ 174.913290][T10178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1140'. [ 174.975306][T10183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1144'. [ 175.033648][ T5852] Bluetooth: hci3: command tx timeout [ 175.190546][T10194] xt_TCPMSS: Only works on TCP SYN packets [ 175.231129][T10016] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 175.302110][T10016] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 175.319620][T10016] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 175.335253][T10204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1152'. [ 175.360223][T10016] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 175.401960][T10210] syzkaller1: entered promiscuous mode [ 175.417152][T10210] syzkaller1: entered allmulticast mode [ 175.582064][T10016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.622717][T10016] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.637936][ T8419] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.645071][ T8419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.686485][T10016] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.697017][T10016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.714359][ T8415] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.715649][T10224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1157'. [ 175.721514][ T8415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.778820][T10228] lo speed is unknown, defaulting to 1000 [ 175.812549][T10228] lo speed is unknown, defaulting to 1000 [ 176.009338][T10016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.062122][T10244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1163'. [ 176.129751][T10016] veth0_vlan: entered promiscuous mode [ 176.169441][T10016] veth1_vlan: entered promiscuous mode [ 176.265963][T10016] veth0_macvtap: entered promiscuous mode [ 176.286974][T10016] veth1_macvtap: entered promiscuous mode [ 176.332634][T10016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.359489][T10016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.383942][T10016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.409784][T10016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.430565][T10016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.455397][T10262] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1169'. [ 176.466145][T10016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.495108][T10263] syzkaller1: entered promiscuous mode [ 176.500614][T10263] syzkaller1: entered allmulticast mode [ 176.511219][T10016] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.524886][T10016] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.547831][T10016] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.559890][T10016] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.749746][ T8430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.781073][ T8430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.832287][T10283] netlink: 'syz.3.1176': attribute type 21 has an invalid length. [ 176.854922][T10283] netlink: 'syz.3.1176': attribute type 10 has an invalid length. [ 176.874651][ T8417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.886037][ T8417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.022086][T10296] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 177.116302][ T5849] Bluetooth: hci3: command tx timeout [ 177.206763][T10308] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 177.232373][T10304] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1183'. [ 177.755378][T10343] lo speed is unknown, defaulting to 1000 [ 177.782830][T10343] lo speed is unknown, defaulting to 1000 [ 177.948019][T10351] netlink: 420 bytes leftover after parsing attributes in process `syz.2.1193'. [ 178.309347][T10363] bridge4: entered promiscuous mode [ 178.319257][T10343] tipc: Started in network mode [ 178.325560][T10343] tipc: Node identity ac1414aa, cluster identity 4711 [ 178.332459][T10343] tipc: Enabling of bearer rejected, failed to enable media [ 178.620395][ T8417] tipc: Left network mode [ 178.662226][T10385] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 178.882202][T10397] IPv6: Can't replace route, no match found [ 178.890683][T10397] IPv6: Can't replace route, no match found [ 178.927864][T10399] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.990945][T10403] netlink: 'syz.2.1209': attribute type 12 has an invalid length. [ 179.023806][T10403] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1209'. [ 179.040249][T10406] netlink: 'syz.4.1210': attribute type 1 has an invalid length. [ 179.105929][T10406] 8021q: adding VLAN 0 to HW filter on device bond4 [ 179.120278][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 179.131285][T10406] bond0: (slave bond4): making interface the new active one [ 179.152386][T10406] bond0: (slave bond4): Enslaving as an active interface with an up link [ 179.165176][T10415] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1213'. [ 179.183549][T10415] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 179.190774][T10415] IPv6: NLM_F_CREATE should be set when creating new route [ 179.198132][T10415] IPv6: NLM_F_CREATE should be set when creating new route [ 179.214143][T10412] bond0: option miimon: invalid value (18446744073357230079) [ 179.222196][T10412] bond0: option miimon: allowed values 0 - 2147483647 [ 179.284488][T10420] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma? [ 179.488644][T10434] netlink: 'syz.4.1221': attribute type 21 has an invalid length. [ 179.502281][T10434] netlink: 'syz.4.1221': attribute type 20 has an invalid length. [ 179.671375][T10445] netlink: 'syz.3.1223': attribute type 2 has an invalid length. [ 179.684957][T10445] netlink: 'syz.3.1223': attribute type 1 has an invalid length. [ 179.870424][T10467] netlink: 'syz.4.1229': attribute type 1 has an invalid length. [ 179.906797][T10467] 8021q: adding VLAN 0 to HW filter on device bond5 [ 179.940336][T10467] lo speed is unknown, defaulting to 1000 [ 179.948372][T10467] lo speed is unknown, defaulting to 1000 [ 180.149952][T10483] netlink: 'syz.4.1234': attribute type 1 has an invalid length. [ 180.160968][T10483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 180.168241][T10483] IPv6: NLM_F_CREATE should be set when creating new route [ 180.181235][T10483] netlink: 'syz.4.1234': attribute type 1 has an invalid length. [ 180.190627][T10483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 180.203538][T10483] __nla_validate_parse: 3 callbacks suppressed [ 180.203555][T10483] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1234'. [ 180.284747][T10488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1236'. [ 180.502848][T10502] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1239'. [ 180.513421][T10502] 0·: left allmulticast mode [ 180.591866][T10506] netlink: 'syz.2.1242': attribute type 1 has an invalid length. [ 180.612521][T10506] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.1242'. [ 180.664749][T10509] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1241'. [ 180.707757][T10509] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 180.731570][T10509] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 180.839236][T10517] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.868309][ T25] lo speed is unknown, defaulting to 1000 [ 180.882012][T10521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.248257][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1252'. [ 181.364941][T10548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.372889][T10548] bond5: (slave batadv0): making interface the new active one [ 181.381885][T10548] bond5: (slave batadv0): Enslaving as an active interface with an up link [ 181.475002][T10556] netlink: 18 bytes leftover after parsing attributes in process `syz.0.1259'. [ 181.485127][T10556] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1259'. [ 181.627582][T10559] IPVS: length: 85 != 8 [ 181.698592][T10569] syz_tun: entered promiscuous mode [ 182.411307][T10562] syz_tun: left promiscuous mode [ 182.581877][T10586] tap0: tun_chr_ioctl cmd 1074025673 [ 182.645146][T10591] ax25_connect(): syz.4.1269 uses autobind, please contact jreuter@yaina.de [ 182.794510][ T8430] wlan1: Trigger new scan to find an IBSS to join [ 182.894240][T10608] Cannot find add_set index 0 as target [ 183.177583][T10622] 8021q: adding VLAN 0 to HW filter on device bond6 [ 183.408000][ T5892] hid-generic 0005:07C0:0058.0001: item fetching failed at offset 0/1 [ 183.435704][ T5892] hid-generic 0005:07C0:0058.0001: probe with driver hid-generic failed with error -22 [ 183.545099][T10638] Cannot find add_set index 0 as target [ 183.569825][T10640] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1284'. [ 183.928573][T10654] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1289'. [ 184.417619][T10685] vlan1: entered promiscuous mode [ 184.466254][T10685] vlan1: left promiscuous mode [ 185.109798][T10728] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.118760][T10728] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.127725][T10728] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.136919][T10728] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.290656][T10746] validate_nla: 4 callbacks suppressed [ 185.290676][T10746] netlink: 'syz.4.1312': attribute type 2 has an invalid length. [ 185.341072][T10746] netlink: 'syz.4.1312': attribute type 1 has an invalid length. [ 185.352265][T10751] __nla_validate_parse: 8 callbacks suppressed [ 185.352280][T10751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1314'. [ 185.415722][T10755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1315'. [ 185.495737][T10761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1317'. [ 185.512631][T10759] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1316'. [ 185.528030][ T5842] Bluetooth: hci4: link tx timeout [ 185.533583][ T5842] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 185.542689][ T5842] Bluetooth: hci4: link tx timeout [ 185.548041][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 185.585170][T10766] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1319'. [ 185.844464][ T8435] wlan1: Trigger new scan to find an IBSS to join [ 185.855403][T10785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1322'. [ 186.109369][T10799] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 186.124112][ T5895] IPVS: starting estimator thread 0... [ 186.131691][T10801] tipc: Started in network mode [ 186.143383][T10801] tipc: Node identity ac1414aa, cluster identity 4711 [ 186.150951][T10801] tipc: Enabled bearer , priority 10 [ 186.164228][T10801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1328'. [ 186.171157][T10799] netdevsim netdevsim4: Direct firmware load for . [ 186.171157][T10799] failed with error -2 [ 186.189842][T10799] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 186.189842][T10799] [ 186.213548][T10802] IPVS: using max 19 ests per chain, 45600 per kthread [ 186.234719][T10805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1329'. [ 186.420470][T10815] netlink: 'syz.3.1333': attribute type 2 has an invalid length. [ 186.436591][T10815] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1333'. [ 186.452502][T10818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1335'. [ 186.508335][T10818] bond5: (slave batadv0): Releasing active interface [ 186.529359][T10822] pimreg: entered allmulticast mode [ 186.540232][T10822] vlan3: entered promiscuous mode [ 186.545465][T10822] ip6gretap0: entered promiscuous mode [ 186.758105][ T193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.878416][T10839] tipc: Enabled bearer , priority 0 [ 186.956494][T10839] tipc: Resetting bearer [ 186.992817][T10841] lo speed is unknown, defaulting to 1000 [ 187.017001][T10841] lo speed is unknown, defaulting to 1000 [ 187.259113][ T8419] tipc: Resetting bearer [ 187.424666][T10861] netlink: 'syz.0.1349': attribute type 1 has an invalid length. [ 187.466050][T10861] netlink: 'syz.0.1349': attribute type 1 has an invalid length. [ 187.593899][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 187.601096][T10871] netlink: 'syz.4.1350': attribute type 11 has an invalid length. [ 187.629556][T10833] tipc: Resetting bearer [ 187.918363][ T5895] tipc: Node number set to 2886997162 [ 189.099207][T10833] tipc: Disabling bearer [ 189.107452][T10869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.128338][T10869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.136724][T10869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.144383][T10869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.264223][T10890] xt_CONNSECMARK: invalid mode: 0 [ 189.294191][T10890] ip6gretap0: entered promiscuous mode [ 189.305526][T10890] batadv_slave_0: entered promiscuous mode [ 189.312356][T10890] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 189.320355][T10890] Cannot create hsr debugfs directory [ 189.512966][T10914] pim6reg1: entered promiscuous mode [ 189.543535][T10914] pim6reg1: entered allmulticast mode [ 189.620909][T10918] pim6reg1: entered promiscuous mode [ 189.629289][T10918] pim6reg1: entered allmulticast mode [ 189.673189][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 190.152770][T10955] geneve3: entered promiscuous mode [ 190.169338][T10955] geneve3: entered allmulticast mode [ 190.222606][T10958] netlink: 'syz.0.1374': attribute type 1 has an invalid length. [ 190.309309][T10963] bridge0: port 1(vlan3) entered blocking state [ 190.318777][T10963] bridge0: port 1(vlan3) entered disabled state [ 190.328105][T10963] vlan3: entered allmulticast mode [ 190.342978][T10963] vlan3: left allmulticast mode [ 190.351884][T10968] xt_NFQUEUE: number of total queues is 0 [ 190.486207][T10977] IPVS: length: 215 != 24 [ 190.534316][T10983] __nla_validate_parse: 10 callbacks suppressed [ 190.534336][T10983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1381'. [ 190.569225][T10983] 8021q: adding VLAN 0 to HW filter on device bond5 [ 190.590530][T10983] 8021q: adding VLAN 0 to HW filter on device bond5 [ 190.610057][T10983] bond5: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 190.621282][T10983] bond5: (slave ip6tnl1): Error -95 calling set_mac_address [ 190.684384][T10990] netlink: 'syz.0.1382': attribute type 10 has an invalid length. [ 190.861677][T11012] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1386'. [ 190.882973][T11011] tipc: Enabled bearer , priority 10 [ 190.894326][T11012] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1386'. [ 190.974435][T11014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1389'. [ 191.197181][ T5842] Bluetooth: hci0: command 0x0c20 tx timeout [ 191.197860][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 191.203474][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 191.240068][T11030] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 191.604238][T11067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1401'. [ 191.771720][T11075] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 192.268443][T11091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1411'. [ 192.277973][T11091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1411'. [ 192.303201][T11091] netlink: 'syz.0.1411': attribute type 25 has an invalid length. [ 192.616356][T11120] netlink: 'syz.0.1416': attribute type 1 has an invalid length. [ 192.651670][T11120] 8021q: adding VLAN 0 to HW filter on device bond4 [ 192.681419][T11120] bond3: (slave bond4): making interface the new active one [ 192.701452][T11120] bond3: (slave bond4): Enslaving as an active interface with an up link [ 192.765771][T11125] lo speed is unknown, defaulting to 1000 [ 192.790863][T11125] lo speed is unknown, defaulting to 1000 [ 192.851728][T11133] syzkaller1: entered promiscuous mode [ 192.859320][T11133] syzkaller1: entered allmulticast mode [ 192.870077][T11134] lo speed is unknown, defaulting to 1000 [ 192.894325][T11136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1418'. [ 192.947483][T11134] lo speed is unknown, defaulting to 1000 [ 193.080218][T11145] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1423'. [ 193.090460][T11145] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1423'. [ 193.100645][T11147] netlink: 'syz.0.1422': attribute type 11 has an invalid length. [ 193.506889][T11169] x_tables: duplicate underflow at hook 2 [ 193.645367][T11173] tipc: Cannot configure node identity twice [ 193.651532][T11172] syzkaller1: entered promiscuous mode [ 193.660779][T11172] syzkaller1: entered allmulticast mode [ 194.466115][T11217] vlan4: entered promiscuous mode [ 194.491605][T11217] gretap0: entered promiscuous mode [ 194.786787][T11227] netlink: 'syz.2.1449': attribute type 11 has an invalid length. [ 195.043909][T11232] team0 (unregistering): Port device C removed [ 195.086058][T11232] team0 (unregistering): Port device team_slave_1 removed [ 195.141484][T11232] team0 (unregistering): Port device wlan1 removed [ 195.725390][T11264] __nla_validate_parse: 46 callbacks suppressed [ 195.725409][T11264] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1461'. [ 196.253730][T11272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1463'. [ 197.119495][T11270] vlan0: entered promiscuous mode [ 197.130303][T11270] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 197.561573][T11307] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1476'. [ 197.596734][T11311] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1479'. [ 197.667694][T11311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.924068][T11336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1486'. [ 197.955660][T11338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1484'. [ 198.130459][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1489'. [ 198.194643][T11349] xt_nfacct: accounting object `syz1' does not exists [ 198.203458][T11349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'. [ 198.852558][T11375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1500'. [ 199.004079][T11386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1502'. [ 199.174969][ T8902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.200781][ T8902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.582285][T11402] sctp: [Deprecated]: syz.0.1505 (pid 11402) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.582285][T11402] Use struct sctp_sack_info instead [ 200.137419][T11435] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 200.147165][T11435] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 200.266201][T11440] batadv_slave_1 (unregistering): left promiscuous mode [ 200.455017][T11453] syzkaller1: entered promiscuous mode [ 200.460542][T11453] syzkaller1: entered allmulticast mode [ 200.627349][T11465] FAULT_INJECTION: forcing a failure. [ 200.627349][T11465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.651548][T11465] CPU: 0 UID: 0 PID: 11465 Comm: syz.2.1523 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 200.662375][T11465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 200.672464][T11465] Call Trace: [ 200.675751][T11465] [ 200.678684][T11465] dump_stack_lvl+0x241/0x360 [ 200.683374][T11465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.688578][T11465] ? __pfx__printk+0x10/0x10 [ 200.693173][T11465] ? __pfx_lock_release+0x10/0x10 [ 200.698209][T11465] should_fail_ex+0x3b0/0x4e0 [ 200.702897][T11465] _copy_from_user+0x2f/0xc0 [ 200.707502][T11465] generic_map_update_batch+0x5ba/0x900 [ 200.713161][T11465] ? __pfx_generic_map_update_batch+0x10/0x10 [ 200.719256][T11465] ? __fget_files+0x29/0x470 [ 200.723862][T11465] ? __pfx_generic_map_update_batch+0x10/0x10 [ 200.730022][T11465] bpf_map_do_batch+0x39a/0x660 [ 200.734894][T11465] __sys_bpf+0x377/0x810 [ 200.739144][T11465] ? __pfx___sys_bpf+0x10/0x10 [ 200.743925][T11465] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 200.749916][T11465] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 200.756255][T11465] ? do_syscall_64+0x100/0x230 [ 200.761030][T11465] __x64_sys_bpf+0x7c/0x90 [ 200.765450][T11465] do_syscall_64+0xf3/0x230 [ 200.769959][T11465] ? clear_bhb_loop+0x35/0x90 [ 200.774649][T11465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.780546][T11465] RIP: 0033:0x7f0680d7e719 [ 200.784965][T11465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.804581][T11465] RSP: 002b:00007f0681b8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 200.813040][T11465] RAX: ffffffffffffffda RBX: 00007f0680f35f80 RCX: 00007f0680d7e719 [ 200.821014][T11465] RDX: 0000000000000038 RSI: 0000000020000100 RDI: 000000000000001a [ 200.828993][T11465] RBP: 00007f0681b8c090 R08: 0000000000000000 R09: 0000000000000000 [ 200.836975][T11465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.844969][T11465] R13: 0000000000000000 R14: 00007f0680f35f80 R15: 00007fff3a4cf018 [ 200.852958][T11465] [ 201.031107][T11483] __nla_validate_parse: 5 callbacks suppressed [ 201.031126][T11483] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1529'. [ 201.091660][T11484] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 201.357170][T11508] netlink: 'syz.0.1537': attribute type 3 has an invalid length. [ 201.369859][T11508] netlink: 'syz.0.1537': attribute type 21 has an invalid length. [ 201.379803][T11508] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1537'. [ 201.386839][T11509] FAULT_INJECTION: forcing a failure. [ 201.386839][T11509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.402278][T11509] CPU: 1 UID: 0 PID: 11509 Comm: syz.4.1538 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 201.413168][T11509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 201.423267][T11509] Call Trace: [ 201.426577][T11509] [ 201.429533][T11509] dump_stack_lvl+0x241/0x360 [ 201.434242][T11509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.439494][T11509] ? __pfx__printk+0x10/0x10 [ 201.444114][T11509] ? __pfx_lock_release+0x10/0x10 [ 201.449180][T11509] should_fail_ex+0x3b0/0x4e0 [ 201.453884][T11509] _copy_from_user+0x2f/0xc0 [ 201.458506][T11509] generic_map_update_batch+0x567/0x900 [ 201.464077][T11509] ? __pfx_generic_map_update_batch+0x10/0x10 [ 201.470160][T11509] ? __fget_files+0x29/0x470 [ 201.474761][T11509] ? __pfx_generic_map_update_batch+0x10/0x10 [ 201.480832][T11509] bpf_map_do_batch+0x39a/0x660 [ 201.485693][T11509] __sys_bpf+0x377/0x810 [ 201.489937][T11509] ? __pfx___sys_bpf+0x10/0x10 [ 201.494714][T11509] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 201.500703][T11509] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 201.507062][T11509] ? do_syscall_64+0x100/0x230 [ 201.511853][T11509] __x64_sys_bpf+0x7c/0x90 [ 201.516280][T11509] do_syscall_64+0xf3/0x230 [ 201.520790][T11509] ? clear_bhb_loop+0x35/0x90 [ 201.525495][T11509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.531386][T11509] RIP: 0033:0x7f183257e719 [ 201.535806][T11509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.555442][T11509] RSP: 002b:00007f18332b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 201.563862][T11509] RAX: ffffffffffffffda RBX: 00007f1832735f80 RCX: 00007f183257e719 [ 201.571837][T11509] RDX: 0000000000000038 RSI: 0000000020000100 RDI: 000000000000001a [ 201.579808][T11509] RBP: 00007f18332b4090 R08: 0000000000000000 R09: 0000000000000000 [ 201.587789][T11509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.595760][T11509] R13: 0000000000000000 R14: 00007f1832735f80 R15: 00007ffdb23aacc8 [ 201.603754][T11509] [ 201.695015][T11516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1540'. [ 202.151980][T11547] netlink: 'syz.0.1549': attribute type 21 has an invalid length. [ 202.178155][T11547] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1549'. [ 202.203629][T11546] netlink: 'syz.2.1550': attribute type 7 has an invalid length. [ 202.236595][T11550] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1551'. [ 202.454171][T11570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1554'. [ 203.000317][T11602] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1562'. [ 203.021793][T11602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1562'. [ 203.149344][T11608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1565'. [ 203.196965][T11611] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1566'. [ 203.370482][T11622] FAULT_INJECTION: forcing a failure. [ 203.370482][T11622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.390448][T11622] CPU: 0 UID: 0 PID: 11622 Comm: syz.2.1570 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 203.401251][T11622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 203.411321][T11622] Call Trace: [ 203.414621][T11622] [ 203.417578][T11622] dump_stack_lvl+0x241/0x360 [ 203.422285][T11622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.427493][T11622] ? __pfx__printk+0x10/0x10 [ 203.432097][T11622] ? __pfx_lock_release+0x10/0x10 [ 203.437152][T11622] should_fail_ex+0x3b0/0x4e0 [ 203.441846][T11622] _copy_from_user+0x2f/0xc0 [ 203.446460][T11622] generic_map_update_batch+0x567/0x900 [ 203.452062][T11622] ? __pfx_generic_map_update_batch+0x10/0x10 [ 203.458140][T11622] ? __fget_files+0x29/0x470 [ 203.462742][T11622] ? __pfx_generic_map_update_batch+0x10/0x10 [ 203.468817][T11622] bpf_map_do_batch+0x39a/0x660 [ 203.473679][T11622] __sys_bpf+0x377/0x810 [ 203.477960][T11622] ? __pfx___sys_bpf+0x10/0x10 [ 203.482740][T11622] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 203.488732][T11622] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 203.495074][T11622] ? do_syscall_64+0x100/0x230 [ 203.499848][T11622] __x64_sys_bpf+0x7c/0x90 [ 203.504274][T11622] do_syscall_64+0xf3/0x230 [ 203.508817][T11622] ? clear_bhb_loop+0x35/0x90 [ 203.513502][T11622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.519399][T11622] RIP: 0033:0x7f0680d7e719 [ 203.523821][T11622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.543517][T11622] RSP: 002b:00007f0681b8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 203.551941][T11622] RAX: ffffffffffffffda RBX: 00007f0680f35f80 RCX: 00007f0680d7e719 [ 203.559917][T11622] RDX: 0000000000000038 RSI: 0000000020000100 RDI: 000000000000001a [ 203.567886][T11622] RBP: 00007f0681b8c090 R08: 0000000000000000 R09: 0000000000000000 [ 203.575858][T11622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.583950][T11622] R13: 0000000000000000 R14: 00007f0680f35f80 R15: 00007fff3a4cf018 [ 203.591932][T11622] [ 203.598145][T11624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.699852][T11628] lo speed is unknown, defaulting to 1000 [ 203.709548][T11628] lo speed is unknown, defaulting to 1000 [ 204.560754][T11663] FAULT_INJECTION: forcing a failure. [ 204.560754][T11663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.583346][T11663] CPU: 0 UID: 0 PID: 11663 Comm: syz.3.1583 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 204.594153][T11663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 204.604238][T11663] Call Trace: [ 204.607546][T11663] [ 204.610498][T11663] dump_stack_lvl+0x241/0x360 [ 204.615257][T11663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.620571][T11663] ? __pfx__printk+0x10/0x10 [ 204.625202][T11663] ? __pfx_lock_release+0x10/0x10 [ 204.630291][T11663] should_fail_ex+0x3b0/0x4e0 [ 204.635017][T11663] _copy_from_user+0x2f/0xc0 [ 204.639656][T11663] generic_map_update_batch+0x5ba/0x900 [ 204.645255][T11663] ? __pfx_generic_map_update_batch+0x10/0x10 [ 204.651367][T11663] ? __fget_files+0x29/0x470 [ 204.656008][T11663] ? __pfx_generic_map_update_batch+0x10/0x10 [ 204.662133][T11663] bpf_map_do_batch+0x39a/0x660 [ 204.667029][T11663] __sys_bpf+0x377/0x810 [ 204.671314][T11663] ? __pfx___sys_bpf+0x10/0x10 [ 204.676127][T11663] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 204.682152][T11663] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 204.688515][T11663] ? do_syscall_64+0x100/0x230 [ 204.693309][T11663] __x64_sys_bpf+0x7c/0x90 [ 204.697748][T11663] do_syscall_64+0xf3/0x230 [ 204.702279][T11663] ? clear_bhb_loop+0x35/0x90 [ 204.706994][T11663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.712922][T11663] RIP: 0033:0x7f4cf057e719 [ 204.717359][T11663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.731563][T11670] tun0: tun_chr_ioctl cmd 1074025675 [ 204.736969][T11663] RSP: 002b:00007f4cf1351038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 204.737001][T11663] RAX: ffffffffffffffda RBX: 00007f4cf0735f80 RCX: 00007f4cf057e719 [ 204.737031][T11663] RDX: 0000000000000038 RSI: 0000000020000100 RDI: 000000000000001a [ 204.737060][T11663] RBP: 00007f4cf1351090 R08: 0000000000000000 R09: 0000000000000000 [ 204.737075][T11663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.737096][T11663] R13: 0000000000000000 R14: 00007f4cf0735f80 R15: 00007ffc8ba03fd8 [ 204.737137][T11663] [ 204.842823][T11670] tun0: persist enabled [ 204.847498][T11669] tun0: tun_chr_ioctl cmd 1074025675 [ 204.852959][T11669] tun0: persist disabled [ 205.162396][T11685] bond0: (slave bond_slave_0): Releasing backup interface [ 205.654366][T11703] lo speed is unknown, defaulting to 1000 [ 205.674136][T11703] lo speed is unknown, defaulting to 1000 [ 205.755066][T11713] FAULT_INJECTION: forcing a failure. [ 205.755066][T11713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.778825][T11713] CPU: 1 UID: 0 PID: 11713 Comm: syz.3.1599 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 205.789733][T11713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 205.799828][T11713] Call Trace: [ 205.803128][T11713] [ 205.806104][T11713] dump_stack_lvl+0x241/0x360 [ 205.810854][T11713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.816084][T11713] ? __pfx__printk+0x10/0x10 [ 205.820725][T11713] ? __pfx_lock_release+0x10/0x10 [ 205.825803][T11713] should_fail_ex+0x3b0/0x4e0 [ 205.830548][T11713] _copy_from_user+0x2f/0xc0 [ 205.835180][T11713] generic_map_update_batch+0x567/0x900 [ 205.840779][T11713] ? __pfx_generic_map_update_batch+0x10/0x10 [ 205.846887][T11713] ? __fget_files+0x29/0x470 [ 205.851540][T11713] ? __pfx_generic_map_update_batch+0x10/0x10 [ 205.857649][T11713] bpf_map_do_batch+0x39a/0x660 [ 205.862630][T11713] __sys_bpf+0x377/0x810 [ 205.866926][T11713] ? __pfx___sys_bpf+0x10/0x10 [ 205.871741][T11713] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 205.877754][T11713] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 205.884117][T11713] ? do_syscall_64+0x100/0x230 [ 205.888896][T11713] __x64_sys_bpf+0x7c/0x90 [ 205.893340][T11713] do_syscall_64+0xf3/0x230 [ 205.897852][T11713] ? clear_bhb_loop+0x35/0x90 [ 205.902532][T11713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.908511][T11713] RIP: 0033:0x7f4cf057e719 [ 205.912928][T11713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.932538][T11713] RSP: 002b:00007f4cf1351038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 205.940963][T11713] RAX: ffffffffffffffda RBX: 00007f4cf0735f80 RCX: 00007f4cf057e719 [ 205.948948][T11713] RDX: 0000000000000038 RSI: 0000000020000100 RDI: 000000000000001a [ 205.956928][T11713] RBP: 00007f4cf1351090 R08: 0000000000000000 R09: 0000000000000000 [ 205.964908][T11713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 205.972881][T11713] R13: 0000000000000000 R14: 00007f4cf0735f80 R15: 00007ffc8ba03fd8 [ 205.980862][T11713] [ 206.080873][T11725] xt_l2tp: v2 doesn't support IP mode [ 206.111312][T11725] xt_l2tp: v2 doesn't support IP mode [ 206.246818][T11737] __nla_validate_parse: 11 callbacks suppressed [ 206.246839][T11737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1607'. [ 206.334998][T11744] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1604'. [ 206.440437][T11738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1604'. [ 206.475383][T11756] wg0: entered promiscuous mode [ 206.480278][T11756] wg0: entered allmulticast mode [ 206.589755][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1609'. [ 207.113832][T11807] geneve1: entered allmulticast mode [ 207.158749][T11809] netlink: 'syz.2.1623': attribute type 11 has an invalid length. [ 207.175595][T11809] netlink: 'syz.2.1623': attribute type 9 has an invalid length. [ 207.210708][T11809] macvlan3: entered promiscuous mode [ 207.217560][T11809] bond0: entered promiscuous mode [ 207.225877][T11809] bond_slave_1: entered promiscuous mode [ 207.233468][T11809] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 207.282007][T11820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1624'. [ 207.289313][T11815] lo speed is unknown, defaulting to 1000 [ 207.314716][T11815] lo speed is unknown, defaulting to 1000 [ 207.659920][T11844] netlink: 'syz.3.1634': attribute type 10 has an invalid length. [ 207.683643][T11844] team0: Device netdevsim0 is of different type [ 207.818463][T11856] geneve1: entered allmulticast mode [ 207.983832][T11863] netlink: 'syz.4.1640': attribute type 10 has an invalid length. [ 208.006677][T11866] netlink: 'syz.0.1641': attribute type 1 has an invalid length. [ 208.017699][T11866] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1641'. [ 208.031907][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1639'. [ 208.040998][T11866] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1641'. [ 208.414826][T11887] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1644'. [ 208.434960][T11887] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.690754][T11903] netlink: 'syz.2.1647': attribute type 1 has an invalid length. [ 208.712278][T11903] pim6reg: entered allmulticast mode [ 209.206215][T11933] FAULT_INJECTION: forcing a failure. [ 209.206215][T11933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.227934][T11933] CPU: 1 UID: 0 PID: 11933 Comm: syz.3.1655 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 209.238746][T11933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 209.248828][T11933] Call Trace: [ 209.252131][T11933] [ 209.255078][T11933] dump_stack_lvl+0x241/0x360 [ 209.259798][T11933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.265021][T11933] ? __pfx__printk+0x10/0x10 [ 209.269640][T11933] ? __pfx_lock_release+0x10/0x10 [ 209.274718][T11933] should_fail_ex+0x3b0/0x4e0 [ 209.279433][T11933] _copy_from_user+0x2f/0xc0 [ 209.284081][T11933] generic_map_update_batch+0x567/0x900 [ 209.289678][T11933] ? __pfx_generic_map_update_batch+0x10/0x10 [ 209.295771][T11933] ? __fget_files+0x29/0x470 [ 209.300401][T11933] ? __pfx_generic_map_update_batch+0x10/0x10 [ 209.306486][T11933] bpf_map_do_batch+0x39a/0x660 [ 209.311357][T11933] __sys_bpf+0x377/0x810 [ 209.315617][T11933] ? __pfx___sys_bpf+0x10/0x10 [ 209.320404][T11933] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 209.326402][T11933] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 209.332746][T11933] ? do_syscall_64+0x100/0x230 [ 209.337526][T11933] __x64_sys_bpf+0x7c/0x90 [ 209.341962][T11933] do_syscall_64+0xf3/0x230 [ 209.346488][T11933] ? clear_bhb_loop+0x35/0x90 [ 209.351177][T11933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.357082][T11933] RIP: 0033:0x7f4cf057e719 [ 209.361502][T11933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.381118][T11933] RSP: 002b:00007f4cf1351038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 209.389548][T11933] RAX: ffffffffffffffda RBX: 00007f4cf0735f80 RCX: 00007f4cf057e719 [ 209.397535][T11933] RDX: 0000000000000038 RSI: 0000000020000100 RDI: 000000000000001a [ 209.405519][T11933] RBP: 00007f4cf1351090 R08: 0000000000000000 R09: 0000000000000000 [ 209.413564][T11933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 209.421623][T11933] R13: 0000000000000000 R14: 00007f4cf0735f80 R15: 00007ffc8ba03fd8 [ 209.429616][T11933] [ 209.606861][T11944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1659'. [ 209.942669][T11977] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 209.978700][T11962] team0 (unregistering): Port device wg2 removed [ 210.158034][T11992] FAULT_INJECTION: forcing a failure. [ 210.158034][T11992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.172853][T11992] CPU: 1 UID: 0 PID: 11992 Comm: syz.2.1673 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 210.183671][T11992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 210.193765][T11992] Call Trace: [ 210.197074][T11992] [ 210.200031][T11992] dump_stack_lvl+0x241/0x360 [ 210.204762][T11992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.210002][T11992] ? __pfx__printk+0x10/0x10 [ 210.214639][T11992] ? __pfx_lock_release+0x10/0x10 [ 210.219728][T11992] should_fail_ex+0x3b0/0x4e0 [ 210.224469][T11992] _copy_from_user+0x2f/0xc0 [ 210.229110][T11992] generic_map_update_batch+0x5ba/0x900 [ 210.234727][T11992] ? __pfx_generic_map_update_batch+0x10/0x10 [ 210.240848][T11992] ? __fget_files+0x29/0x470 [ 210.245510][T11992] ? __pfx_generic_map_update_batch+0x10/0x10 [ 210.251642][T11992] bpf_map_do_batch+0x39a/0x660 [ 210.256545][T11992] __sys_bpf+0x377/0x810 [ 210.260832][T11992] ? __pfx___sys_bpf+0x10/0x10 [ 210.265657][T11992] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 210.271656][T11992] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 210.278001][T11992] ? do_syscall_64+0x100/0x230 [ 210.282784][T11992] __x64_sys_bpf+0x7c/0x90 [ 210.287243][T11992] do_syscall_64+0xf3/0x230 [ 210.291749][T11992] ? clear_bhb_loop+0x35/0x90 [ 210.296441][T11992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.302366][T11992] RIP: 0033:0x7f0680d7e719 [ 210.306795][T11992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.326427][T11992] RSP: 002b:00007f0681b8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 210.334856][T11992] RAX: ffffffffffffffda RBX: 00007f0680f35f80 RCX: 00007f0680d7e719 [ 210.342828][T11992] RDX: 0000000000000038 RSI: 0000000020000100 RDI: 000000000000001a [ 210.350796][T11992] RBP: 00007f0681b8c090 R08: 0000000000000000 R09: 0000000000000000 [ 210.358764][T11992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 210.366734][T11992] R13: 0000000000000000 R14: 00007f0680f35f80 R15: 00007fff3a4cf018 [ 210.374723][T11992] [ 210.445318][T12000] geneve1: entered allmulticast mode [ 210.612676][T12012] bridge0: port 1(ip6gretap0) entered blocking state [ 210.622943][T12012] bridge0: port 1(ip6gretap0) entered disabled state [ 210.630401][T12012] ip6gretap0: entered allmulticast mode [ 210.654190][T12012] ip6gretap0: entered promiscuous mode [ 210.677110][T12012] bridge0: port 1(ip6gretap0) entered blocking state [ 210.683988][T12012] bridge0: port 1(ip6gretap0) entered forwarding state [ 210.839439][T12021] netlink: 'syz.3.1682': attribute type 10 has an invalid length. [ 210.856615][T12021] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 210.999560][T12036] FAULT_INJECTION: forcing a failure. [ 210.999560][T12036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.017175][T12036] CPU: 1 UID: 0 PID: 12036 Comm: syz.2.1688 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 211.027981][T12036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 211.038066][T12036] Call Trace: [ 211.041370][T12036] [ 211.044332][T12036] dump_stack_lvl+0x241/0x360 [ 211.049048][T12036] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.054284][T12036] ? __pfx__printk+0x10/0x10 [ 211.058908][T12036] ? __pfx_lock_release+0x10/0x10 [ 211.063974][T12036] should_fail_ex+0x3b0/0x4e0 [ 211.068683][T12036] _copy_from_user+0x2f/0xc0 [ 211.073427][T12036] generic_map_update_batch+0x567/0x900 [ 211.079045][T12036] ? __pfx_generic_map_update_batch+0x10/0x10 [ 211.085151][T12036] ? __fget_files+0x29/0x470 [ 211.089792][T12036] ? __pfx_generic_map_update_batch+0x10/0x10 [ 211.095994][T12036] bpf_map_do_batch+0x39a/0x660 [ 211.100891][T12036] __sys_bpf+0x377/0x810 [ 211.105165][T12036] ? __pfx___sys_bpf+0x10/0x10 [ 211.109981][T12036] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 211.116014][T12036] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 211.122360][T12036] ? do_syscall_64+0x100/0x230 [ 211.127155][T12036] __x64_sys_bpf+0x7c/0x90 [ 211.131610][T12036] do_syscall_64+0xf3/0x230 [ 211.136124][T12036] ? clear_bhb_loop+0x35/0x90 [ 211.140811][T12036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.146729][T12036] RIP: 0033:0x7f0680d7e719 [ 211.151150][T12036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.170756][T12036] RSP: 002b:00007f0681b8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 211.179182][T12036] RAX: ffffffffffffffda RBX: 00007f0680f35f80 RCX: 00007f0680d7e719 [ 211.187203][T12036] RDX: 0000000000000038 RSI: 0000000020000100 RDI: 000000000000001a [ 211.195204][T12036] RBP: 00007f0681b8c090 R08: 0000000000000000 R09: 0000000000000000 [ 211.203187][T12036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.211162][T12036] R13: 0000000000000000 R14: 00007f0680f35f80 R15: 00007fff3a4cf018 [ 211.219161][T12036] [ 211.292254][T12047] netlink: 'syz.0.1692': attribute type 10 has an invalid length. [ 211.308418][T12047] __nla_validate_parse: 7 callbacks suppressed [ 211.308438][T12047] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1692'. [ 211.325541][T12047] ipvlan1: entered promiscuous mode [ 211.330835][T12047] ipvlan1: entered allmulticast mode [ 211.337529][T12047] veth0_vlan: entered allmulticast mode [ 211.346876][T12047] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 211.743993][T12080] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 211.765828][T12080] macvlan4: entered allmulticast mode [ 211.771290][T12080] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 211.814747][T12080] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 211.821811][T12080] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 212.061765][T12108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1707'. [ 212.235411][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1706'. [ 212.338553][T12133] tap0: tun_chr_ioctl cmd 1074025673 [ 212.374284][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1715'. [ 212.780163][T12149] netlink: 'syz.4.1719': attribute type 11 has an invalid length. [ 212.909537][T12156] netlink: 'syz.3.1721': attribute type 1 has an invalid length. [ 212.919737][T12156] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1721'. [ 212.929819][T12156] NCSI netlink: No device for ifindex 0 [ 212.936091][T12157] IPVS: set_ctl: invalid protocol: 195 10.1.1.1:20001 [ 213.100636][T12165] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1725'. [ 213.118149][T12166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1725'. [ 213.371308][T12189] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 213.535533][T12199] vxcan2: entered allmulticast mode [ 213.555102][T12201] hsr0: left promiscuous mode [ 213.564793][T12201] hsr0: entered promiscuous mode [ 213.569872][T12201] vlan4: entered promiscuous mode [ 213.685639][T12205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1738'. [ 213.706226][T12205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1738'. [ 213.772889][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1741'. [ 214.096452][T12229] xt_CT: No such helper "pptp" [ 214.210792][T12236] macsec1: entered promiscuous mode [ 214.219041][T12236] bond_slave_1: entered promiscuous mode [ 214.226612][T12236] macsec1: entered allmulticast mode [ 214.231970][T12236] bond_slave_1: entered allmulticast mode [ 214.240715][T12236] bond_slave_1: left allmulticast mode [ 214.259733][T12236] bond_slave_1: left promiscuous mode [ 214.409137][T12252] netlink: 'syz.2.1752': attribute type 11 has an invalid length. [ 214.835877][T12288] rose3: entered allmulticast mode [ 214.909111][T12292] xt_TCPMSS: Only works on TCP SYN packets [ 215.813635][T12327] bridge0: port 1(ip6gretap0) entered disabled state [ 215.840542][T12327] hsr0: left promiscuous mode [ 215.915800][T11801] bond4: (slave bridge0): link status definitely down, disabling slave [ 215.936854][T11801] bond4: now running without any active interface! [ 216.288153][T12356] netlink: 'syz.3.1785': attribute type 39 has an invalid length. [ 216.637471][T12362] netlink: 'syz.4.1787': attribute type 1 has an invalid length. [ 216.737306][T12370] __nla_validate_parse: 11 callbacks suppressed [ 216.737327][T12370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1790'. [ 216.757299][T12368] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1788'. [ 216.765135][T12370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1790'. [ 216.778022][T12368] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1788'. [ 216.865404][T12368] ip6gretap1: entered allmulticast mode [ 217.022012][T12387] FAULT_INJECTION: forcing a failure. [ 217.022012][T12387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.037392][T12387] CPU: 0 UID: 0 PID: 12387 Comm: syz.2.1795 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 217.048193][T12387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 217.058265][T12387] Call Trace: [ 217.061570][T12387] [ 217.064520][T12387] dump_stack_lvl+0x241/0x360 [ 217.069230][T12387] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.074459][T12387] ? __pfx__printk+0x10/0x10 [ 217.079080][T12387] ? __pfx_lock_release+0x10/0x10 [ 217.084147][T12387] should_fail_ex+0x3b0/0x4e0 [ 217.088851][T12387] _copy_from_user+0x2f/0xc0 [ 217.093564][T12387] generic_map_update_batch+0x5ba/0x900 [ 217.099191][T12387] ? __pfx_generic_map_update_batch+0x10/0x10 [ 217.105305][T12387] ? __fget_files+0x29/0x470 [ 217.109945][T12387] ? __pfx_generic_map_update_batch+0x10/0x10 [ 217.116063][T12387] bpf_map_do_batch+0x39a/0x660 [ 217.120963][T12387] __sys_bpf+0x377/0x810 [ 217.125260][T12387] ? __pfx___sys_bpf+0x10/0x10 [ 217.130070][T12387] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 217.136096][T12387] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 217.142484][T12387] ? do_syscall_64+0x100/0x230 [ 217.147284][T12387] __x64_sys_bpf+0x7c/0x90 [ 217.151763][T12387] do_syscall_64+0xf3/0x230 [ 217.156313][T12387] ? clear_bhb_loop+0x35/0x90 [ 217.161043][T12387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.166970][T12387] RIP: 0033:0x7f0680d7e719 [ 217.171427][T12387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.191078][T12387] RSP: 002b:00007f0681b8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 217.199599][T12387] RAX: ffffffffffffffda RBX: 00007f0680f35f80 RCX: 00007f0680d7e719 [ 217.207612][T12387] RDX: 0000000000000038 RSI: 0000000020000100 RDI: 000000000000001a [ 217.215601][T12387] RBP: 00007f0681b8c090 R08: 0000000000000000 R09: 0000000000000000 [ 217.223590][T12387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 217.231578][T12387] R13: 0000000000000000 R14: 00007f0680f35f80 R15: 00007fff3a4cf018 [ 217.239674][T12387] [ 217.407807][T12396] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.416729][T12396] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.420655][T12405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1802'. [ 217.425564][T12396] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.451905][T12406] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1801'. [ 217.702956][T12417] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1807'. [ 217.809412][T11790] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.842197][T12420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1806'. [ 217.902945][T11790] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.959942][T11790] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.013699][T11790] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.095556][T11790] bridge_slave_1: left allmulticast mode [ 218.101262][T11790] bridge_slave_1: left promiscuous mode [ 218.108390][T11790] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.117495][T11790] bridge_slave_0: left allmulticast mode [ 218.123994][T11790] bridge_slave_0: left promiscuous mode [ 218.129671][T11790] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.456770][T11790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.468674][T11790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.480985][T11790] bond0 (unregistering): Released all slaves [ 218.730957][T11790] hsr_slave_0: left promiscuous mode [ 218.737132][T11790] hsr_slave_1: left promiscuous mode [ 218.743282][T11790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.750688][T11790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.758462][T11790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.765971][T11790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.788499][T11790] veth1_macvtap: left promiscuous mode [ 218.795325][T11790] veth0_macvtap: left promiscuous mode [ 218.800963][T11790] veth1_vlan: left promiscuous mode [ 218.833928][T11790] veth0_vlan: left promiscuous mode [ 218.855022][T12428] FAULT_INJECTION: forcing a failure. [ 218.855022][T12428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.891785][T12428] CPU: 1 UID: 0 PID: 12428 Comm: syz.4.1811 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 218.902681][T12428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 218.912807][T12428] Call Trace: [ 218.916107][T12428] [ 218.919062][T12428] dump_stack_lvl+0x241/0x360 [ 218.923773][T12428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.929000][T12428] ? __pfx__printk+0x10/0x10 [ 218.933618][T12428] ? __pfx_lock_release+0x10/0x10 [ 218.938773][T12428] should_fail_ex+0x3b0/0x4e0 [ 218.943480][T12428] _copy_from_user+0x2f/0xc0 [ 218.947323][T12433] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1810'. [ 218.948090][T12428] generic_map_update_batch+0x567/0x900 [ 218.962592][T12428] ? __pfx_generic_map_update_batch+0x10/0x10 [ 218.968669][T12428] ? __fget_files+0x29/0x470 [ 218.973267][T12428] ? __pfx_generic_map_update_batch+0x10/0x10 [ 218.979338][T12428] bpf_map_do_batch+0x39a/0x660 [ 218.984206][T12428] __sys_bpf+0x377/0x810 [ 218.988450][T12428] ? __pfx___sys_bpf+0x10/0x10 [ 218.993227][T12428] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 218.999223][T12428] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 219.005571][T12428] ? do_syscall_64+0x100/0x230 [ 219.010365][T12428] __x64_sys_bpf+0x7c/0x90 [ 219.014788][T12428] do_syscall_64+0xf3/0x230 [ 219.019294][T12428] ? clear_bhb_loop+0x35/0x90 [ 219.023979][T12428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.029873][T12428] RIP: 0033:0x7f183257e719 [ 219.034286][T12428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.053933][T12428] RSP: 002b:00007f18332b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 219.062381][T12428] RAX: ffffffffffffffda RBX: 00007f1832735f80 RCX: 00007f183257e719 [ 219.070358][T12428] RDX: 0000000000000038 RSI: 0000000020000100 RDI: 000000000000001a [ 219.078339][T12428] RBP: 00007f18332b4090 R08: 0000000000000000 R09: 0000000000000000 [ 219.086318][T12428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 219.094301][T12428] R13: 0000000000000000 R14: 00007f1832735f80 R15: 00007ffdb23aacc8 [ 219.102281][T12428] [ 219.149279][T12433] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1810'. [ 219.218415][T12440] netlink: 'syz.0.1812': attribute type 10 has an invalid length. [ 219.245065][T12433] xt_addrtype: ipv6 does not support BROADCAST matching [ 219.269590][T12442] netlink: 'syz.4.1813': attribute type 4 has an invalid length. [ 219.279536][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.288574][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.297837][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.308770][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.320852][ T5849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.328370][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.710896][T11790] team0 (unregistering): Port device team_slave_1 removed [ 219.745039][T11790] team0 (unregistering): Port device team_slave_0 removed [ 220.144999][T12443] lo speed is unknown, defaulting to 1000 [ 220.151667][T12443] lo speed is unknown, defaulting to 1000 [ 220.506272][T12443] chnl_net:caif_netlink_parms(): no params data found [ 220.533600][T12487] netlink: 'syz.3.1821': attribute type 1 has an invalid length. [ 220.577242][T12492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.598231][T12488] FAULT_INJECTION: forcing a failure. [ 220.598231][T12488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.616955][T12488] CPU: 0 UID: 0 PID: 12488 Comm: syz.2.1823 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 220.627854][T12488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 220.637930][T12488] Call Trace: [ 220.641228][T12488] [ 220.644177][T12488] dump_stack_lvl+0x241/0x360 [ 220.648879][T12488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.654094][T12488] ? __pfx__printk+0x10/0x10 [ 220.658693][T12488] ? __pfx_lock_release+0x10/0x10 [ 220.663744][T12488] should_fail_ex+0x3b0/0x4e0 [ 220.668438][T12488] _copy_from_user+0x2f/0xc0 [ 220.673057][T12488] generic_map_update_batch+0x5ba/0x900 [ 220.678631][T12488] ? __pfx_generic_map_update_batch+0x10/0x10 [ 220.684703][T12488] ? __fget_files+0x29/0x470 [ 220.689297][T12488] ? __pfx_generic_map_update_batch+0x10/0x10 [ 220.695480][T12488] bpf_map_do_batch+0x39a/0x660 [ 220.700374][T12488] __sys_bpf+0x377/0x810 [ 220.704640][T12488] ? __pfx___sys_bpf+0x10/0x10 [ 220.709412][T12488] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 220.715408][T12488] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 220.721767][T12488] ? do_syscall_64+0x100/0x230 [ 220.726559][T12488] __x64_sys_bpf+0x7c/0x90 [ 220.730985][T12488] do_syscall_64+0xf3/0x230 [ 220.735494][T12488] ? clear_bhb_loop+0x35/0x90 [ 220.740187][T12488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.746077][T12488] RIP: 0033:0x7f0680d7e719 [ 220.750491][T12488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.770096][T12488] RSP: 002b:00007f0681b8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 220.778600][T12488] RAX: ffffffffffffffda RBX: 00007f0680f35f80 RCX: 00007f0680d7e719 [ 220.786572][T12488] RDX: 0000000000000038 RSI: 0000000020000100 RDI: 000000000000001a [ 220.794634][T12488] RBP: 00007f0681b8c090 R08: 0000000000000000 R09: 0000000000000000 [ 220.802599][T12488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 220.810571][T12488] R13: 0000000000000000 R14: 00007f0680f35f80 R15: 00007fff3a4cf018 [ 220.818569][T12488] [ 220.955274][T12506] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 221.005350][T12443] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.028881][T12443] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.041799][T12511] netlink: 'syz.4.1825': attribute type 30 has an invalid length. [ 221.049995][T12443] bridge_slave_0: entered allmulticast mode [ 221.058013][T12443] bridge_slave_0: entered promiscuous mode [ 221.127086][T12443] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.136765][T12443] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.144989][T12443] bridge_slave_1: entered allmulticast mode [ 221.152167][T12443] bridge_slave_1: entered promiscuous mode [ 221.209992][T12443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.239894][T12443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.353405][ T5849] Bluetooth: hci3: command tx timeout [ 221.375352][T12443] team0: Port device team_slave_0 added [ 221.386426][T12443] team0: Port device team_slave_1 added [ 221.437716][T12532] FAULT_INJECTION: forcing a failure. [ 221.437716][T12532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.451239][T12532] CPU: 1 UID: 0 PID: 12532 Comm: syz.0.1836 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 221.462051][T12532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 221.472127][T12532] Call Trace: [ 221.475426][T12532] [ 221.478382][T12532] dump_stack_lvl+0x241/0x360 [ 221.483091][T12532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.488320][T12532] ? __pfx__printk+0x10/0x10 [ 221.492944][T12532] ? __pfx_lock_release+0x10/0x10 [ 221.498037][T12532] should_fail_ex+0x3b0/0x4e0 [ 221.502743][T12532] _copy_from_user+0x2f/0xc0 [ 221.507358][T12532] generic_map_update_batch+0x567/0x900 [ 221.512933][T12532] ? __pfx_generic_map_update_batch+0x10/0x10 [ 221.519019][T12532] ? __fget_files+0x29/0x470 [ 221.523628][T12532] ? __pfx_generic_map_update_batch+0x10/0x10 [ 221.529710][T12532] bpf_map_do_batch+0x39a/0x660 [ 221.534575][T12532] __sys_bpf+0x377/0x810 [ 221.538830][T12532] ? __pfx___sys_bpf+0x10/0x10 [ 221.543614][T12532] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 221.549611][T12532] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 221.556042][T12532] ? do_syscall_64+0x100/0x230 [ 221.560840][T12532] __x64_sys_bpf+0x7c/0x90 [ 221.565269][T12532] do_syscall_64+0xf3/0x230 [ 221.569799][T12532] ? clear_bhb_loop+0x35/0x90 [ 221.574485][T12532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.580382][T12532] RIP: 0033:0x7f328377e719 [ 221.584798][T12532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.604413][T12532] RSP: 002b:00007f32844fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 221.612847][T12532] RAX: ffffffffffffffda RBX: 00007f3283935f80 RCX: 00007f328377e719 [ 221.620828][T12532] RDX: 0000000000000038 RSI: 0000000020000100 RDI: 000000000000001a [ 221.628799][T12532] RBP: 00007f32844fd090 R08: 0000000000000000 R09: 0000000000000000 [ 221.636772][T12532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.644834][T12532] R13: 0000000000000000 R14: 00007f3283935f80 R15: 00007fff29cee988 [ 221.652844][T12532] [ 221.660716][T12443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.670204][T12443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.712193][T12443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.729012][T12534] tipc: Enabling of bearer rejected, already enabled [ 221.753849][T12542] __nla_validate_parse: 10 callbacks suppressed [ 221.753867][T12542] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1837'. [ 221.755082][T12443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.777170][T12443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.803930][T12443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.907030][T12443] hsr_slave_0: entered promiscuous mode [ 221.921058][T12443] hsr_slave_1: entered promiscuous mode [ 221.929033][T12443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.946006][T12443] Cannot create hsr debugfs directory [ 222.017351][T12556] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1844'. [ 222.054221][T12559] lo speed is unknown, defaulting to 1000 [ 222.101938][T12559] lo speed is unknown, defaulting to 1000 [ 222.124127][T12570] netlink: 'syz.2.1845': attribute type 39 has an invalid length. [ 222.250195][T12577] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1847'. [ 222.269650][T12577] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1847'. [ 222.279135][T12573] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1846'. [ 222.299619][T12573] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1846'. [ 222.451385][T12582] FAULT_INJECTION: forcing a failure. [ 222.451385][T12582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.485025][T12582] CPU: 1 UID: 0 PID: 12582 Comm: syz.4.1848 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 222.495845][T12582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 222.505966][T12582] Call Trace: [ 222.509273][T12582] [ 222.512233][T12582] dump_stack_lvl+0x241/0x360 [ 222.516948][T12582] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.522186][T12582] ? __pfx__printk+0x10/0x10 [ 222.526808][T12582] ? __pfx_lock_release+0x10/0x10 [ 222.531885][T12582] should_fail_ex+0x3b0/0x4e0 [ 222.536603][T12582] _copy_from_user+0x2f/0xc0 [ 222.541245][T12582] generic_map_update_batch+0x5ba/0x900 [ 222.546852][T12582] ? __pfx_generic_map_update_batch+0x10/0x10 [ 222.552956][T12582] ? __fget_files+0x29/0x470 [ 222.557560][T12582] ? __pfx_generic_map_update_batch+0x10/0x10 [ 222.563649][T12582] bpf_map_do_batch+0x39a/0x660 [ 222.568500][T12582] __sys_bpf+0x377/0x810 [ 222.572773][T12582] ? __pfx___sys_bpf+0x10/0x10 [ 222.577557][T12582] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 222.583554][T12582] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 222.589893][T12582] ? do_syscall_64+0x100/0x230 [ 222.594679][T12582] __x64_sys_bpf+0x7c/0x90 [ 222.599094][T12582] do_syscall_64+0xf3/0x230 [ 222.603609][T12582] ? clear_bhb_loop+0x35/0x90 [ 222.608287][T12582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.614205][T12582] RIP: 0033:0x7f183257e719 [ 222.618628][T12582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.638243][T12582] RSP: 002b:00007f18332b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 222.646670][T12582] RAX: ffffffffffffffda RBX: 00007f1832735f80 RCX: 00007f183257e719 [ 222.654642][T12582] RDX: 0000000000000038 RSI: 0000000020000100 RDI: 000000000000001a [ 222.662635][T12582] RBP: 00007f18332b4090 R08: 0000000000000000 R09: 0000000000000000 [ 222.670603][T12582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 222.678581][T12582] R13: 0000000000000000 R14: 00007f1832735f80 R15: 00007ffdb23aacc8 [ 222.686564][T12582] [ 222.980446][T12612] netlink: 15754 bytes leftover after parsing attributes in process `syz.4.1857'. [ 223.133961][T12614] nbd: socks must be embedded in a SOCK_ITEM attr [ 223.171454][T12443] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 223.222070][T12443] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 223.250862][T12622] syz_tun: entered allmulticast mode [ 223.270767][T12631] FAULT_INJECTION: forcing a failure. [ 223.270767][T12631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.303393][T12443] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 223.323596][T12631] CPU: 0 UID: 0 PID: 12631 Comm: syz.2.1862 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 223.334394][T12631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 223.344471][T12631] Call Trace: [ 223.347767][T12631] [ 223.350720][T12631] dump_stack_lvl+0x241/0x360 [ 223.355434][T12631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.360671][T12631] ? __pfx__printk+0x10/0x10 [ 223.364214][T12637] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1863'. [ 223.365267][T12631] ? __pfx_lock_release+0x10/0x10 [ 223.378119][T12637] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1863'. [ 223.379225][T12631] should_fail_ex+0x3b0/0x4e0 [ 223.379257][T12631] _copy_from_user+0x2f/0xc0 [ 223.397481][T12631] generic_map_update_batch+0x567/0x900 [ 223.403039][T12631] ? __pfx_generic_map_update_batch+0x10/0x10 [ 223.409151][T12631] ? __fget_files+0x29/0x470 [ 223.413759][T12631] ? __pfx_generic_map_update_batch+0x10/0x10 [ 223.419854][T12631] bpf_map_do_batch+0x39a/0x660 [ 223.424720][T12631] __sys_bpf+0x377/0x810 [ 223.428969][T12631] ? __pfx___sys_bpf+0x10/0x10 [ 223.433747][T12631] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 223.435164][ T5849] Bluetooth: hci3: command tx timeout [ 223.439733][T12631] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 223.439769][T12631] ? do_syscall_64+0x100/0x230 [ 223.456281][T12631] __x64_sys_bpf+0x7c/0x90 [ 223.460734][T12631] do_syscall_64+0xf3/0x230 [ 223.465286][T12631] ? clear_bhb_loop+0x35/0x90 [ 223.469994][T12631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.475952][T12631] RIP: 0033:0x7f0680d7e719 [ 223.480403][T12631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.500027][T12631] RSP: 002b:00007f0681b8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 223.508464][T12631] RAX: ffffffffffffffda RBX: 00007f0680f35f80 RCX: 00007f0680d7e719 [ 223.516462][T12631] RDX: 0000000000000038 RSI: 0000000020000100 RDI: 000000000000001a [ 223.524453][T12631] RBP: 00007f0681b8c090 R08: 0000000000000000 R09: 0000000000000000 [ 223.532438][T12631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 223.540402][T12631] R13: 0000000000000000 R14: 00007f0680f35f80 R15: 00007fff3a4cf018 [ 223.548421][T12631] [ 225.339458][T12443] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 225.506176][T12443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.513740][ T5849] Bluetooth: hci3: command tx timeout [ 225.537941][T12443] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.552796][ T8435] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.559953][ T8435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.576802][ T8435] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.583991][ T8435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.642732][T12669] netlink: 'syz.2.1872': attribute type 7 has an invalid length. [ 225.714704][T12669] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 225.729462][T12677] FAULT_INJECTION: forcing a failure. [ 225.729462][T12677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.748166][T12677] CPU: 0 UID: 0 PID: 12677 Comm: syz.0.1874 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 225.758957][T12677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 225.769019][T12677] Call Trace: [ 225.772312][T12677] [ 225.775245][T12677] dump_stack_lvl+0x241/0x360 [ 225.779939][T12677] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.785147][T12677] ? __pfx__printk+0x10/0x10 [ 225.789754][T12677] ? __pfx_lock_release+0x10/0x10 [ 225.794799][T12677] should_fail_ex+0x3b0/0x4e0 [ 225.799480][T12677] _copy_from_user+0x2f/0xc0 [ 225.804084][T12677] generic_map_update_batch+0x5ba/0x900 [ 225.809753][T12677] ? __pfx_generic_map_update_batch+0x10/0x10 [ 225.815830][T12677] ? __fget_files+0x29/0x470 [ 225.820449][T12677] ? __pfx_generic_map_update_batch+0x10/0x10 [ 225.826530][T12677] bpf_map_do_batch+0x39a/0x660 [ 225.831400][T12677] __sys_bpf+0x377/0x810 [ 225.835666][T12677] ? __pfx___sys_bpf+0x10/0x10 [ 225.840453][T12677] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 225.846534][T12677] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 225.852875][T12677] ? do_syscall_64+0x100/0x230 [ 225.857653][T12677] __x64_sys_bpf+0x7c/0x90 [ 225.862070][T12677] do_syscall_64+0xf3/0x230 [ 225.866579][T12677] ? clear_bhb_loop+0x35/0x90 [ 225.871274][T12677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.877167][T12677] RIP: 0033:0x7f328377e719 [ 225.881583][T12677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.901189][T12677] RSP: 002b:00007f32844fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.909620][T12677] RAX: ffffffffffffffda RBX: 00007f3283935f80 RCX: 00007f328377e719 [ 225.917593][T12677] RDX: 0000000000000038 RSI: 0000000020000100 RDI: 000000000000001a [ 225.925574][T12677] RBP: 00007f32844fd090 R08: 0000000000000000 R09: 0000000000000000 [ 225.933543][T12677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 225.941512][T12677] R13: 0000000000000000 R14: 00007f3283935f80 R15: 00007fff29cee988 [ 225.949495][T12677] [ 226.007584][T12680] xt_CT: No such helper "netbios-ns" [ 226.219551][T12701] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1880'. [ 226.247735][T12443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.290262][T12443] veth0_vlan: entered promiscuous mode [ 226.301250][T12443] veth1_vlan: entered promiscuous mode [ 226.411654][T12698] syzkaller0: entered promiscuous mode [ 226.418911][T12698] syzkaller0: entered allmulticast mode [ 226.427929][T12443] veth0_macvtap: entered promiscuous mode [ 227.594810][ T5849] Bluetooth: hci3: command tx timeout [ 228.009598][T12713] netlink: 'syz.3.1885': attribute type 4 has an invalid length. [ 228.018082][T12443] veth1_macvtap: entered promiscuous mode [ 228.111042][T12443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.134548][T12736] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1892'. [ 228.144584][T12736] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1892'. [ 228.161799][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1891'. [ 228.171785][T12734] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1891'. [ 228.175238][T12443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.219196][T12443] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.232105][T12443] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.256504][T12443] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.266899][T12443] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.329595][T12745] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1895'. [ 228.349807][T12747] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1895'. [ 228.500686][T12746] delete_channel: no stack [ 228.516607][T11790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.551081][T11790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.568029][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1899'. [ 228.618928][T12760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1899'. [ 228.631653][T11790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.645250][T12760] netlink: 'syz.2.1899': attribute type 6 has an invalid length. [ 228.647759][T11790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.795706][T12770] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1903'. [ 228.829489][T12772] netlink: 'syz.3.1904': attribute type 6 has an invalid length. [ 228.854981][T12772] netlink: 'syz.3.1904': attribute type 7 has an invalid length. [ 228.870241][T12772] netlink: 'syz.3.1904': attribute type 8 has an invalid length. [ 229.224131][T11790] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.330962][T11790] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.760450][T11790] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.120056][T11790] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.452170][T11790] bridge_slave_1: left allmulticast mode [ 230.458779][T11790] bridge_slave_1: left promiscuous mode [ 230.465112][T11790] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.474656][T11790] bridge_slave_0: left allmulticast mode [ 230.480299][T11790] bridge_slave_0: left promiscuous mode [ 230.487363][T11790] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.710187][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 230.721692][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 230.732034][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 230.740138][T12812] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1914'. [ 230.750661][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 230.758920][ T5852] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 230.767647][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 231.135259][T12842] netlink: 'syz.0.1921': attribute type 4 has an invalid length. [ 231.198433][T11790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.210391][T11790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.220531][T11790] bond0 (unregistering): Released all slaves [ 231.240680][T12839] batadv_slave_0: entered promiscuous mode [ 231.402683][T12813] lo speed is unknown, defaulting to 1000 [ 231.461405][T12813] lo speed is unknown, defaulting to 1000 [ 231.537317][T11790] hsr_slave_0: left promiscuous mode [ 231.548585][T11790] hsr_slave_1: left promiscuous mode [ 231.555833][T11790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.564053][T11790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.572525][T11790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.585418][T11790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.614480][T11790] veth1_macvtap: left promiscuous mode [ 231.620846][T11790] veth0_macvtap: left promiscuous mode [ 231.627174][T11790] veth1_vlan: left promiscuous mode [ 231.632637][T11790] veth0_vlan: left promiscuous mode [ 232.176395][T11790] team0 (unregistering): Port device team_slave_1 removed [ 232.224185][T11790] team0 (unregistering): Port device team_slave_0 removed [ 232.705510][T12832] batadv_slave_0: left promiscuous mode [ 232.793844][T12872] ip6t_REJECT: ECHOREPLY is not supported [ 232.803271][ T5849] Bluetooth: hci3: command tx timeout [ 233.017036][T12886] lo speed is unknown, defaulting to 1000 [ 233.059800][T12886] lo speed is unknown, defaulting to 1000 [ 233.088711][T12813] chnl_net:caif_netlink_parms(): no params data found [ 233.179446][T12896] xt_l2tp: missing protocol rule (udp|l2tpip) [ 233.477609][T12907] __nla_validate_parse: 4 callbacks suppressed [ 233.477629][T12907] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1937'. [ 233.496511][T12813] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.523948][T12813] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.531166][T12813] bridge_slave_0: entered allmulticast mode [ 233.551464][T12813] bridge_slave_0: entered promiscuous mode [ 233.567569][T12910] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 233.579594][T12813] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.587294][T12813] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.594639][T12813] bridge_slave_1: entered allmulticast mode [ 233.601632][T12813] bridge_slave_1: entered promiscuous mode [ 233.686309][T12813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.722202][T12813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.968423][T12813] team0: Port device team_slave_0 added [ 234.015241][T12813] team0: Port device team_slave_1 added [ 234.098237][T12939] bridge11: entered promiscuous mode [ 234.105003][T12939] bridge11: entered allmulticast mode [ 234.139751][T12939] team0: Port device bridge11 added [ 234.200378][T12813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.225023][T12813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.266299][T12813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.310623][T12813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.321387][T12813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.351571][T12813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.494345][T12813] hsr_slave_0: entered promiscuous mode [ 234.509225][T12813] hsr_slave_1: entered promiscuous mode [ 234.529193][T12813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.542914][T12813] Cannot create hsr debugfs directory [ 234.612181][T12973] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.664943][T12972] syzkaller1: entered promiscuous mode [ 234.670467][T12972] syzkaller1: entered allmulticast mode [ 234.681522][ T5920] lo speed is unknown, defaulting to 1000 [ 234.804886][T12991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1958'. [ 234.873640][ T5849] Bluetooth: hci3: command tx timeout [ 235.027913][T12998] batadv_slave_1: entered promiscuous mode [ 235.135676][T13012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1965'. [ 235.242428][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1969'. [ 235.412472][T13029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1969'. [ 235.439741][T13022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1969'. [ 235.502323][T13031] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 235.527716][T13031] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 235.540416][T13031] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 235.551531][T13031] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 235.569370][T13031] geneve3: entered promiscuous mode [ 235.575540][T13031] geneve3: entered allmulticast mode [ 235.594841][T13031] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 235.614883][T13031] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 235.639322][T13031] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 235.652079][T13031] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 235.698198][T12992] batadv_slave_1: left promiscuous mode [ 235.847866][T12813] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 235.869878][T12813] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 235.890915][T12813] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 235.919762][T12813] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 236.089731][T13063] lo speed is unknown, defaulting to 1000 [ 236.106885][T13063] lo speed is unknown, defaulting to 1000 [ 236.110511][T12813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.218098][T12813] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.239564][ T8417] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.246740][ T8417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.265505][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.272606][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.452959][T13079] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 236.582290][T12813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.592277][T13090] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1986'. [ 236.652161][T13090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1986'. [ 236.661396][T12813] veth0_vlan: entered promiscuous mode [ 236.717689][T13095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1987'. [ 236.721782][T12813] veth1_vlan: entered promiscuous mode [ 236.771505][T12813] veth0_macvtap: entered promiscuous mode [ 236.789360][T12813] veth1_macvtap: entered promiscuous mode [ 236.807933][T12813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.828344][T12813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.850877][T12813] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.860057][T12813] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.886111][T12813] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.895486][T12813] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.953524][ T5849] Bluetooth: hci3: command tx timeout [ 237.003115][ T8435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.010983][ T8435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.070604][ T6043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.088873][ T6043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.392990][T13099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1988'. [ 237.829397][T13147] netem: incorrect ge model size [ 237.837314][T13147] netem: change failed [ 237.952071][T13158] gtp0: entered promiscuous mode [ 237.973763][T13158] gtp0: entered allmulticast mode [ 237.989742][T13158] batadv_slave_1: entered promiscuous mode [ 238.003853][T13158] lo: entered promiscuous mode [ 238.032959][T13157] lo: left promiscuous mode [ 238.038925][T13157] batadv_slave_1: left promiscuous mode [ 238.057360][T13166] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 238.077549][T13166] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 238.103215][T13166] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 238.127217][T13166] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 238.140530][T13166] geneve3: entered promiscuous mode [ 238.147475][T13166] geneve3: entered allmulticast mode [ 238.310986][T13178] netlink: 'syz.0.2012': attribute type 3 has an invalid length. [ 238.444670][ T8435] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.799421][ T8435] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.906184][T13195] __nla_validate_parse: 3 callbacks suppressed [ 239.906206][T13195] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2016'. [ 240.025984][T13202] netlink: 'syz.2.2019': attribute type 10 has an invalid length. [ 240.046848][T13202] wlan1: mtu less than device minimum [ 240.052273][T13202] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 240.107920][T13201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.151801][T13207] netlink: 'syz.4.2021': attribute type 1 has an invalid length. [ 240.173762][T13207] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2021'. [ 240.197378][ T8435] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.230593][T13214] xt_l2tp: v2 sid > 0xffff: 262144 [ 240.245445][T13207] netlink: 'syz.4.2021': attribute type 10 has an invalid length. [ 240.257791][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.267825][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.294047][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.303797][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.319029][ T5852] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 240.328331][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.330072][ T8435] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.395720][T13215] lo speed is unknown, defaulting to 1000 [ 240.402364][T13215] lo speed is unknown, defaulting to 1000 [ 240.429384][T13220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2023'. [ 240.466667][T13223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2024'. [ 240.533727][T13230] syz.0.2026[13230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.533817][T13230] syz.0.2026[13230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.545514][T13230] syz.0.2026[13230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.628864][ T8435] bridge_slave_1: left allmulticast mode [ 240.646429][ T8435] bridge_slave_1: left promiscuous mode [ 240.652135][ T8435] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.674264][ T8435] bridge_slave_0: left allmulticast mode [ 240.679941][ T8435] bridge_slave_0: left promiscuous mode [ 240.685767][ T8435] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.709122][T13236] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2028'. [ 240.957026][T13249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2032'. [ 241.144421][ T8435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.158292][ T8435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.173881][ T8435] bond0 (unregistering): Released all slaves [ 241.303194][T13215] chnl_net:caif_netlink_parms(): no params data found [ 241.358469][T13262] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2036'. [ 241.376199][T13262] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2036'. [ 241.403551][T13262] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2036'. [ 241.419863][T13264] vlan4: entered promiscuous mode [ 241.425891][T13264] vlan4: entered allmulticast mode [ 241.496276][T13272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2038'. [ 241.647695][T13215] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.660474][T13215] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.669129][T13215] bridge_slave_0: entered allmulticast mode [ 241.677249][T13215] bridge_slave_0: entered promiscuous mode [ 241.697660][ T8435] hsr_slave_0: left promiscuous mode [ 241.712019][ T8435] hsr_slave_1: left promiscuous mode [ 241.741713][ T8435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.750759][ T8435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.759052][ T8435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.767813][ T8435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.794159][ T8435] veth1_macvtap: left promiscuous mode [ 241.799708][ T8435] veth0_macvtap: left promiscuous mode [ 241.806401][ T8435] veth1_vlan: left promiscuous mode [ 241.811742][ T8435] veth0_vlan: left promiscuous mode [ 242.202940][ T8435] team0 (unregistering): Port device team_slave_1 removed [ 242.240144][ T8435] team0 (unregistering): Port device team_slave_0 removed [ 242.393362][ T5849] Bluetooth: hci3: command tx timeout [ 242.599802][T13215] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.607225][T13215] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.614550][T13215] bridge_slave_1: entered allmulticast mode [ 242.634871][T13215] bridge_slave_1: entered promiscuous mode [ 242.787350][T13297] IPVS: length: 251 != 24 [ 242.804417][T13215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.851143][T13215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.973289][T13215] team0: Port device team_slave_0 added [ 243.004497][T13215] team0: Port device team_slave_1 added [ 243.036451][T13323] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 243.123593][T13215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.130602][T13215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.176135][T13215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.196207][T13331] netlink: 'syz.2.2053': attribute type 11 has an invalid length. [ 243.229030][T13215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.239316][T13215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.288340][T13215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.520670][T13215] hsr_slave_0: entered promiscuous mode [ 243.557346][T13215] hsr_slave_1: entered promiscuous mode [ 243.598264][T13215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.615369][T13215] Cannot create hsr debugfs directory [ 244.452569][T13420] 8021q: adding VLAN 0 to HW filter on device bond10 [ 244.467951][T13420] bond9: (slave bond10): Enslaving as an active interface with an up link [ 244.477505][T13215] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 244.484372][ T5849] Bluetooth: hci3: command tx timeout [ 244.495560][T13421] 8021q: adding VLAN 0 to HW filter on device bond9 [ 244.503872][T13215] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 244.528642][T13215] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 244.544070][T13215] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 244.657489][T13215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.683370][T13215] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.698642][ T193] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.705846][ T193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.728192][ T8435] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.735372][ T8435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.920951][T13449] __nla_validate_parse: 12 callbacks suppressed [ 244.920972][T13449] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2085'. [ 244.976763][T13215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.990662][T13453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2086'. [ 245.000465][T13452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2086'. [ 245.035092][T13215] veth0_vlan: entered promiscuous mode [ 245.048674][T13215] veth1_vlan: entered promiscuous mode [ 245.076329][T13215] veth0_macvtap: entered promiscuous mode [ 245.095421][T13215] veth1_macvtap: entered promiscuous mode [ 245.125194][T13215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.157361][T13215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.201254][T13215] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.210373][T13215] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.219392][T13215] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.228531][T13215] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.283865][ T8417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.301283][ T8417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.350925][T13457] lo speed is unknown, defaulting to 1000 [ 245.370073][ T193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.376758][T13457] lo speed is unknown, defaulting to 1000 [ 245.390441][ T193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.667496][T13472] netlink: 'syz.2.2090': attribute type 29 has an invalid length. [ 245.751955][T13470] syzkaller0: entered promiscuous mode [ 245.763468][T13470] syzkaller0: entered allmulticast mode [ 245.849101][T13478] netlink: 'syz.4.2092': attribute type 1 has an invalid length. [ 247.378211][T13478] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 247.559333][T13487] siw: device registration error -23 [ 247.735030][T13499] hsr0: entered promiscuous mode [ 247.778338][T13505] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2100'. [ 248.006539][ T193] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.981593][ T193] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.099051][ T193] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.165091][ T193] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.230419][ T193] bridge_slave_1: left allmulticast mode [ 249.236351][ T193] bridge_slave_1: left promiscuous mode [ 249.242120][ T193] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.252964][ T193] bridge_slave_0: left allmulticast mode [ 249.258799][ T193] bridge_slave_0: left promiscuous mode [ 249.264782][ T193] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.665857][ T193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.681586][ T193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.689901][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 249.700069][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 249.704502][ T193] bond0 (unregistering): Released all slaves [ 249.714836][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 249.723898][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 249.733457][ T5852] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 249.740565][T13518] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 249.748450][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 249.756127][T13521] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2102'. [ 249.770441][T13522] vlan2: entered promiscuous mode [ 249.954787][T13537] FAULT_INJECTION: forcing a failure. [ 249.954787][T13537] name failslab, interval 1, probability 0, space 0, times 0 [ 249.981798][T13537] CPU: 0 UID: 0 PID: 13537 Comm: syz.2.2106 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 249.992617][T13537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 250.002695][T13537] Call Trace: [ 250.006009][T13537] [ 250.008976][T13537] dump_stack_lvl+0x241/0x360 [ 250.013686][T13537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.018914][T13537] ? __pfx__printk+0x10/0x10 [ 250.023531][T13537] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 250.029545][T13537] ? __pfx___might_resched+0x10/0x10 [ 250.034863][T13537] ? aa_label_sk_perm+0x4f3/0x6c0 [ 250.039924][T13537] should_fail_ex+0x3b0/0x4e0 [ 250.044626][T13537] should_failslab+0xac/0x100 [ 250.049310][T13537] ? __alloc_skb+0x1c3/0x440 [ 250.053907][T13537] kmem_cache_alloc_node_noprof+0x71/0x320 [ 250.059721][T13537] __alloc_skb+0x1c3/0x440 [ 250.064148][T13537] ? __pfx___alloc_skb+0x10/0x10 [ 250.069096][T13537] netlink_sendmsg+0x638/0xcb0 [ 250.073875][T13537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.079168][T13537] ? aa_sock_msg_perm+0x91/0x160 [ 250.084113][T13537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.089410][T13537] __sock_sendmsg+0x221/0x270 [ 250.094102][T13537] ____sys_sendmsg+0x52a/0x7e0 [ 250.098881][T13537] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.104185][T13537] __sys_sendmsg+0x292/0x380 [ 250.108787][T13537] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.113944][T13537] ? __pfx_vfs_write+0x10/0x10 [ 250.118743][T13537] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 250.125081][T13537] ? do_syscall_64+0x100/0x230 [ 250.129846][T13537] ? do_syscall_64+0xb6/0x230 [ 250.134535][T13537] do_syscall_64+0xf3/0x230 [ 250.139038][T13537] ? clear_bhb_loop+0x35/0x90 [ 250.143716][T13537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.149608][T13537] RIP: 0033:0x7f0680d7e719 [ 250.154023][T13537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.173653][T13537] RSP: 002b:00007f0681b6b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.182097][T13537] RAX: ffffffffffffffda RBX: 00007f0680f36058 RCX: 00007f0680d7e719 [ 250.190178][T13537] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 250.198168][T13537] RBP: 00007f0681b6b090 R08: 0000000000000000 R09: 0000000000000000 [ 250.206154][T13537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.214137][T13537] R13: 0000000000000000 R14: 00007f0680f36058 R15: 00007fff3a4cf018 [ 250.222121][T13537] [ 250.257459][T13538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2108'. [ 250.306481][T13527] lo speed is unknown, defaulting to 1000 [ 250.325138][T13544] batadv_slave_0: entered promiscuous mode [ 250.364482][T13527] lo speed is unknown, defaulting to 1000 [ 250.405904][T13551] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2111'. [ 250.455611][ T193] hsr_slave_0: left promiscuous mode [ 250.475307][ T193] hsr_slave_1: left promiscuous mode [ 250.485761][ T193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.500519][ T193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.511839][ T193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.519674][ T193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.552442][ T193] veth1_macvtap: left promiscuous mode [ 250.558898][ T193] veth0_macvtap: left promiscuous mode [ 250.566263][ T193] veth1_vlan: left promiscuous mode [ 250.572038][ T193] veth0_vlan: left promiscuous mode [ 251.001333][ T193] team0 (unregistering): Port device team_slave_1 removed [ 251.039036][ T193] team0 (unregistering): Port device team_slave_0 removed [ 251.395976][T13551] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004b: 0000 [#1] PREEMPT SMP KASAN PTI [ 251.408611][T13551] KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f] [ 251.417055][T13551] CPU: 0 UID: 0 PID: 13551 Comm: syz.4.2111 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 251.427817][T13551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 251.437870][T13551] RIP: 0010:dev_prep_valid_name+0x3e3/0xa40 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 251.443783][T13551] Code: 20 08 00 00 e8 0e 63 27 fb 48 85 c0 0f 84 8f 04 00 00 48 89 44 24 38 48 8b 5c 24 30 48 81 c3 68 02 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 6e e7 6b f8 48 8b 03 48 89 5c 24 [ 251.463417][T13551] RSP: 0018:ffffc900187ce980 EFLAGS: 00010207 [ 251.469509][T13551] RAX: 000000000000004b RBX: 000000000000025f RCX: 0000000000002000 [ 251.477498][T13551] RDX: 0000000000001000 RSI: ffffffff8c610a80 RDI: ffffffff8c610a40 [ 251.485494][T13551] RBP: ffffc900187cea90 R08: 0000000000000920 R09: 00000000ffffffff [ 251.493494][T13551] R10: dffffc0000000000 R11: fffffbfff203acf6 R12: dffffc0000000000 [ 251.501501][T13551] R13: 1ffff920030f9d40 R14: ffff888030188127 R15: 1ffff920030f9d3c [ 251.509480][T13551] FS: 00007f18332b46c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 251.518420][T13551] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.525001][T13551] CR2: 0000000000000000 CR3: 000000002f558000 CR4: 00000000003526f0 [ 251.532967][T13551] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 251.540936][T13551] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 251.548907][T13551] Call Trace: [ 251.552183][T13551] [ 251.555108][T13551] ? __die_body+0x5f/0xb0 [ 251.559446][T13551] ? die_addr+0xb0/0xe0 [ 251.563598][T13551] ? exc_general_protection+0x3dd/0x5d0 [ 251.569156][T13551] ? asm_exc_general_protection+0x26/0x30 [ 251.574874][T13551] ? dev_prep_valid_name+0x3e3/0xa40 [ 251.580165][T13551] ? __pfx_dev_prep_valid_name+0x10/0x10 [ 251.585804][T13551] register_netdevice+0x542/0x1b00 [ 251.590948][T13551] ? rcu_is_watching+0x15/0xb0 [ 251.595718][T13551] ? trace_kmalloc+0x1f/0xd0 [ 251.600307][T13551] ? __kmalloc_node_noprof+0x247/0x440 [ 251.605767][T13551] ? validate_linkmsg+0x825/0xa30 [ 251.610798][T13551] ? sized_strscpy+0x8d/0x220 [ 251.615472][T13551] ? __pfx_validate_linkmsg+0x10/0x10 [ 251.620846][T13551] ? __pfx_register_netdevice+0x10/0x10 [ 251.626399][T13551] ? rtnl_create_link+0x91c/0xc20 [ 251.631437][T13551] vxcan_newlink+0x314/0x5c0 [ 251.636026][T13551] ? rtnl_newlink_create+0x210/0xa30 [ 251.641331][T13551] ? __pfx_vxcan_newlink+0x10/0x10 [ 251.646468][T13551] ? __pfx_validate_linkmsg+0x10/0x10 [ 251.651859][T13551] ? alloc_netdev_mqs+0xcd0/0x1080 [ 251.656985][T13551] ? rtnl_create_link+0x91c/0xc20 [ 251.662051][T13551] ? __pfx_vxcan_newlink+0x10/0x10 [ 251.667162][T13551] rtnl_newlink_create+0x2df/0xa30 [ 251.672358][T13551] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 251.678023][T13551] ? ns_capable+0x8a/0xf0 [ 251.682378][T13551] rtnl_newlink+0x17dd/0x24f0 [ 251.687083][T13551] ? __pfx_rtnl_newlink+0x10/0x10 [ 251.692102][T13551] ? __pfx_validate_chain+0x10/0x10 [ 251.697327][T13551] ? __pfx_lock_release+0x10/0x10 [ 251.702362][T13551] ? __pfx_rtnl_newlink+0x10/0x10 [ 251.707419][T13551] rtnetlink_rcv_msg+0x791/0xcf0 [ 251.712361][T13551] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 251.717466][T13551] ? __lock_acquire+0x1384/0x2050 [ 251.722502][T13551] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 251.727973][T13551] netlink_rcv_skb+0x1e3/0x430 [ 251.732741][T13551] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 251.738206][T13551] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 251.743515][T13551] ? netlink_deliver_tap+0x2e/0x1b0 [ 251.748720][T13551] netlink_unicast+0x7f6/0x990 [ 251.753525][T13551] ? __pfx_netlink_unicast+0x10/0x10 [ 251.758824][T13551] ? __virt_addr_valid+0x183/0x530 [ 251.763941][T13551] ? __check_object_size+0x48e/0x900 [ 251.769240][T13551] netlink_sendmsg+0x8e4/0xcb0 [ 251.774014][T13551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.779310][T13551] ? aa_sock_msg_perm+0x91/0x160 [ 251.784247][T13551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.789536][T13551] __sock_sendmsg+0x221/0x270 [ 251.794213][T13551] ____sys_sendmsg+0x52a/0x7e0 [ 251.799002][T13551] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.804383][T13551] __sys_sendmsg+0x292/0x380 [ 251.808988][T13551] ? __pfx___sys_sendmsg+0x10/0x10 [ 251.814117][T13551] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 251.820448][T13551] ? do_syscall_64+0x100/0x230 [ 251.825233][T13551] ? do_syscall_64+0xb6/0x230 [ 251.829938][T13551] do_syscall_64+0xf3/0x230 [ 251.834450][T13551] ? clear_bhb_loop+0x35/0x90 [ 251.839127][T13551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.845023][T13551] RIP: 0033:0x7f183257e719 [ 251.849438][T13551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.869039][T13551] RSP: 002b:00007f18332b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.877450][T13551] RAX: ffffffffffffffda RBX: 00007f1832735f80 RCX: 00007f183257e719 [ 251.885417][T13551] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 251.893476][T13551] RBP: 00007f18325f175e R08: 0000000000000000 R09: 0000000000000000 [ 251.901447][T13551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.909411][T13551] R13: 0000000000000000 R14: 00007f1832735f80 R15: 00007ffdb23aacc8 [ 251.917384][T13551] [ 251.920394][T13551] Modules linked in: [ 251.925833][T13551] ---[ end trace 0000000000000000 ]--- [ 251.931463][T13551] RIP: 0010:dev_prep_valid_name+0x3e3/0xa40 [ 251.938580][T13551] Code: 20 08 00 00 e8 0e 63 27 fb 48 85 c0 0f 84 8f 04 00 00 48 89 44 24 38 48 8b 5c 24 30 48 81 c3 68 02 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 6e e7 6b f8 48 8b 03 48 89 5c 24 [ 251.961683][ T5849] Bluetooth: hci3: command tx timeout [ 251.972078][T13551] RSP: 0018:ffffc900187ce980 EFLAGS: 00010207 [ 251.989586][T13551] RAX: 000000000000004b RBX: 000000000000025f RCX: 0000000000002000 [ 251.998070][T13551] RDX: 0000000000001000 RSI: ffffffff8c610a80 RDI: ffffffff8c610a40 [ 252.006105][T13551] RBP: ffffc900187cea90 R08: 0000000000000920 R09: 00000000ffffffff [ 252.014643][T13551] R10: dffffc0000000000 R11: fffffbfff203acf6 R12: dffffc0000000000 [ 252.022652][T13551] R13: 1ffff920030f9d40 R14: ffff888030188127 R15: 1ffff920030f9d3c [ 252.031555][T13551] FS: 00007f18332b46c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 252.040740][T13551] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.047462][T13551] CR2: 00007ffcb77eeff8 CR3: 000000002f558000 CR4: 00000000003526f0 [ 252.055493][T13551] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 252.063948][T13551] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 252.071942][T13551] Kernel panic - not syncing: Fatal exception [ 252.078321][T13551] Kernel Offset: disabled [ 252.082649][T13551] Rebooting in 86400 seconds..