last executing test programs: 7.695842475s ago: executing program 2 (id=1009): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000680), 0x1c) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040), 0xfffffffffffffe6c) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1402, 0x10, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}]}, 0x20}, 0x1, 0x0, 0x0, 0x2050}, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) 7.559966114s ago: executing program 2 (id=1010): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x34, 0x6c, 0x1, 0x0, 0x0, {}, [@nested={0x20, 0x0, 0x0, 0x1, [@generic="e649486a8eec4041", @typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@remote}]}]}, 0x34}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000)=0x7, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x1, 0x0, 0x2) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = accept4$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000540)=0x1c, 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x29, 0x77, 0x7, 0x8, 0xa, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x8, 0x1, 0x101}}) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000880)={@mcast1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, 0x0, 0x9, 0x0, 0x14, 0x200, r7}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(r5, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0), 0x8) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000001c0)=@raw=[@ldst={0x1, 0x0, 0x6, 0xa, 0x5, 0x1, 0xfffffffffffffffc}, @generic={0x3, 0x0, 0x0, 0xe25a, 0x7}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000200)='syzkaller\x00', 0x40, 0x4e, &(0x7f0000000240)=""/78, 0x41100, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0xa, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x0, 0x2, 0x9, 0x3}, {0x2, 0x5, 0x7, 0xcd84d90982b72245}, {0x3, 0x4, 0x9, 0xa}, {0x3, 0x3, 0x3, 0x5}, {0x3, 0x4, 0xc, 0x2}, {0x2, 0x5, 0x3, 0x1}], 0x10, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='spmi_read_begin\x00', r8}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x3, 0x200}, 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) sendmsg$nl_route(r2, 0x0, 0x20040001) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020095}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 7.129790261s ago: executing program 2 (id=1011): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) r1 = socket$alg(0x26, 0x5, 0x0) accept$alg(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(0x0, r0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000240)={0x324, r2, 0x4, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1fe9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ffe000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x16c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa8a}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0xf7, 0x3, "dfc0b047685d951e0ddacdf01b11d9b08efdc9116f7f780f03d89b51ccbfe910c64225e5949d1cb648e2f4f83d5120254a39a9ad104be8470d2244daa8034da01a12eb0eaca865ac36bf5d5ad20bfa7e851a7f01085033b0e1f54a7728a27b337e8261f4b472c869e7e0172c31be6f0d35c952423124e04952d0e279956c1ce647835a43def532c9db0814426d7b8fa44180f5cf34cbc5fc49ef6d8896c9c5ff77bf69f2282df3cfb367a90bd5f8188c6e31a0d19e4107fcffa55923d46cf0abe8e090041eee74ebada18741778746373f0bfb5286efec7d82218338f72bdd1d56ac079fbf0f6b0bcc97daf1aeb4367708f22f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "2aa15952c654cdb507b718e3bc9abc8db08071d6891a67ee904b1ea29e74e2a9"}}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @mcast2, 0x40}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x805}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x31ef}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x48051}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x3a}, 0x90) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000640)) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) 6.933622438s ago: executing program 2 (id=1012): socket$packet(0x11, 0x0, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="0cc4c53e52cd4f1e2787e1cd1e55684e749d3b21ae068680fadc5cc648c79186f3d98ccd3a5b1732936dcf74538ffc97a9f82112023f2567972515712c7ec4e0ed2220f5425ba6ed76928e28b07ec50b135954b94c32030210aa0e2f4645f46be81d746c6b", 0x65}, {&(0x7f0000000340)="9c89ca312f027074ae7d79f183f678fc695c50a34d0e4133881f084b6d440ab6868186a9eabf0b8e5760adbc5a349da9d1620af787745bee2d6d2e6a84ee1fe7132e692fed0e0fe948d775263f5b67a91c4bd74ceeb68e733b2389262377b79861ddf5d86ca1a6388ab7257d5f1271a35a8c79a96e3e28f094fdfa96736ef41516bd3fbec3fd955247007a18dd527d224592b6fc09a05d5628e73b", 0x7fffef9b}], 0x2}, 0x0) getsockopt$nfc_llcp(r2, 0x118, 0x3, &(0x7f0000000000)=""/120, 0x78) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x44, r5, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x44}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448de, &(0x7f0000000000)={0x0, 0x0, '\x00', 0x0, 0x6}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r7, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="88000000", @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="6a00330050000000ffffffffffff080211000000505050505050"], 0x88}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x61}, {0x6}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socket$can_j1939(0x1d, 0x2, 0x7) 6.198758607s ago: executing program 1 (id=1018): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x18}, 0x0) connect$unix(r2, &(0x7f0000000280)=@abs={0x1}, 0x51) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r5) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000080)=""/195, 0xc3, 0x0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r8, 0x890b, &(0x7f0000000000)='bridge0\x00') r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="18f1ffffffffff621f0000000000181100000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000051000000bca900000000000035090100000000009500000000000000bf9800000000000056080000000000008500000000000000b70000000000000095000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x107d, r10}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001dc0)={r10, &(0x7f0000000d00), &(0x7f0000000dc0)=""/4096}, 0x20) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000076000907000000000000000007020000", @ANYRES32=0x0, @ANYBLOB="0c000d80081b030000090100"], 0x24}, 0x1, 0x5502000000000000}, 0x0) socket$kcm(0xa, 0x2, 0x0) r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r12, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @bcast}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x4, 0x5d, 0x4, 0x40, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x40, 0x7800, 0x0, 0x7fff}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0xffffffbb}, 0x8) socket(0x10, 0x3, 0x9) 5.854714444s ago: executing program 1 (id=1021): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000680), 0x1c) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040), 0xfffffffffffffe6c) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1402, 0x10, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x20}, 0x1, 0x0, 0x0, 0x2050}, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) 5.853782755s ago: executing program 2 (id=1022): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) r1 = socket$alg(0x26, 0x5, 0x0) accept$alg(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(0x0, r0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000240)={0x324, r2, 0x4, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1fe9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ffe000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x16c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa8a}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0xf7, 0x3, "dfc0b047685d951e0ddacdf01b11d9b08efdc9116f7f780f03d89b51ccbfe910c64225e5949d1cb648e2f4f83d5120254a39a9ad104be8470d2244daa8034da01a12eb0eaca865ac36bf5d5ad20bfa7e851a7f01085033b0e1f54a7728a27b337e8261f4b472c869e7e0172c31be6f0d35c952423124e04952d0e279956c1ce647835a43def532c9db0814426d7b8fa44180f5cf34cbc5fc49ef6d8896c9c5ff77bf69f2282df3cfb367a90bd5f8188c6e31a0d19e4107fcffa55923d46cf0abe8e090041eee74ebada18741778746373f0bfb5286efec7d82218338f72bdd1d56ac079fbf0f6b0bcc97daf1aeb4367708f22f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "2aa15952c654cdb507b718e3bc9abc8db08071d6891a67ee904b1ea29e74e2a9"}}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @mcast2, 0x40}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x805}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x31ef}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x48051}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x3a}, 0x90) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000640)) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) 5.713922338s ago: executing program 2 (id=1023): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000050019000100000008000400400d000018000180140002006e657464657673696d30"], 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x0, 0x0) 5.702019198s ago: executing program 1 (id=1024): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x34, 0x6c, 0x1, 0x0, 0x0, {}, [@nested={0x20, 0x0, 0x0, 0x1, [@generic="e649486a8eec4041", @typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@remote}]}]}, 0x34}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000)=0x7, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x1, 0x0, 0x2) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = accept4$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000540)=0x1c, 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x29, 0x77, 0x7, 0x8, 0xa, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x8, 0x1, 0x101}}) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000880)={@mcast1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, 0x0, 0x9, 0x0, 0x14, 0x200, r7}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(r5, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0), 0x8) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000001c0)=@raw=[@ldst={0x1, 0x0, 0x6, 0xa, 0x5, 0x1, 0xfffffffffffffffc}, @generic={0x3, 0x0, 0x0, 0xe25a, 0x7}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000200)='syzkaller\x00', 0x40, 0x4e, &(0x7f0000000240)=""/78, 0x41100, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0xa, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x0, 0x2, 0x9, 0x3}, {0x2, 0x5, 0x7, 0xcd84d90982b72245}, {0x3, 0x4, 0x9, 0xa}, {0x3, 0x3, 0x3, 0x5}, {0x3, 0x4, 0xc, 0x2}, {0x2, 0x5, 0x3, 0x1}], 0x10, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='spmi_read_begin\x00', r8}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x3, 0x200}, 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) sendmsg$nl_route(r2, 0x0, 0x20040001) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020095}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 5.63424468s ago: executing program 4 (id=1026): socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x39, 0xfc768fe990f47b25, 0x0, 0x0, {0xb, 0x7c}}, 0x14}}, 0x24004000) ppoll(&(0x7f0000000200)=[{r3, 0x80a9}], 0x1, 0x0, 0x0, 0x0) 5.316693792s ago: executing program 1 (id=1029): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) r1 = socket$alg(0x26, 0x5, 0x0) accept$alg(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(0x0, r0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000240)={0x334, r2, 0x4, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1fe9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ffe000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x16c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa8a}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0xf7, 0x3, "dfc0b047685d951e0ddacdf01b11d9b08efdc9116f7f780f03d89b51ccbfe910c64225e5949d1cb648e2f4f83d5120254a39a9ad104be8470d2244daa8034da01a12eb0eaca865ac36bf5d5ad20bfa7e851a7f01085033b0e1f54a7728a27b337e8261f4b472c869e7e0172c31be6f0d35c952423124e04952d0e279956c1ce647835a43def532c9db0814426d7b8fa44180f5cf34cbc5fc49ef6d8896c9c5ff77bf69f2282df3cfb367a90bd5f8188c6e31a0d19e4107fcffa55923d46cf0abe8e090041eee74ebada18741778746373f0bfb5286efec7d82218338f72bdd1d56ac079fbf0f6b0bcc97daf1aeb4367708f22f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "2aa15952c654cdb507b718e3bc9abc8db08071d6891a67ee904b1ea29e74e2a9"}}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @mcast2, 0x40}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x805}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x31ef}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x48051}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x3a}, 0x90) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000640)) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) 5.132992984s ago: executing program 1 (id=1030): setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="a4000000a5eeebdbe9badda5cff4287e32a162db2694c8297ae915e272184524a316d61abf104e8a16f2492d790536b851d09808069af9ac0d45388c2ebc90a216892d70eeab9f", @ANYRES16=r3, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="56000e008000000008021100000108021100000150505050505000000000000000000000640000000006010101010101010003010005030000002a010072060303030303037107000000000000007606000000000000000018000e800400010005000200e900000005000300d7000000080026007109000008000c006400000008000d0000000000"], 0xa4}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000001c00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="6b0000001000ee00000000000000800000001a00", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002801c0005800a000400aaaaaaaaaabb00000a0004000000000000000000"], 0x50}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan3\x00'}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x1c, r8, 0x329, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x0) 4.935440671s ago: executing program 1 (id=1032): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000050019000100000008000400400d000018000180140002006e657464657673696d30"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x0, 0x0) 3.89227544s ago: executing program 3 (id=1033): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x18}, 0x0) connect$unix(r2, &(0x7f0000000280)=@abs={0x1}, 0x51) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r5) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000080)=""/195, 0xc3, 0x0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r8, 0x890b, &(0x7f0000000000)='bridge0\x00') r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="18f1ffffffffff621f0000000000181100000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000051000000bca900000000000035090100000000009500000000000000bf9800000000000056080000000000008500000000000000b70000000000000095000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x107d, r10}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001dc0)={r10, &(0x7f0000000d00), &(0x7f0000000dc0)=""/4096}, 0x20) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000076000907000000000000000007020000", @ANYRES32=0x0, @ANYBLOB="0c000d80081b030000090100"], 0x24}, 0x1, 0x5502000000000000}, 0x0) socket$kcm(0xa, 0x2, 0x0) r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r12, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @bcast}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x4, 0x5d, 0x4, 0x40, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x40, 0x7800, 0x0, 0x7fff}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0xffffffbb}, 0x8) socket(0x10, 0x3, 0x9) 3.483234839s ago: executing program 3 (id=1034): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) r1 = socket$alg(0x26, 0x5, 0x0) accept$alg(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(0x0, r0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000240)={0x324, r2, 0x4, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1fe9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ffe000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x16c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa8a}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0xf7, 0x3, "dfc0b047685d951e0ddacdf01b11d9b08efdc9116f7f780f03d89b51ccbfe910c64225e5949d1cb648e2f4f83d5120254a39a9ad104be8470d2244daa8034da01a12eb0eaca865ac36bf5d5ad20bfa7e851a7f01085033b0e1f54a7728a27b337e8261f4b472c869e7e0172c31be6f0d35c952423124e04952d0e279956c1ce647835a43def532c9db0814426d7b8fa44180f5cf34cbc5fc49ef6d8896c9c5ff77bf69f2282df3cfb367a90bd5f8188c6e31a0d19e4107fcffa55923d46cf0abe8e090041eee74ebada18741778746373f0bfb5286efec7d82218338f72bdd1d56ac079fbf0f6b0bcc97daf1aeb4367708f22f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "2aa15952c654cdb507b718e3bc9abc8db08071d6891a67ee904b1ea29e74e2a9"}}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @mcast2, 0x40}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x805}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x31ef}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x48051}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x3a}, 0x90) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000640)) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) 3.455117192s ago: executing program 4 (id=1035): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000680), 0x1c) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040), 0xfffffffffffffe6c) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1402, 0x10, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x20}, 0x1, 0x0, 0x0, 0x2050}, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) 3.374434627s ago: executing program 3 (id=1036): socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x39, 0xfc768fe990f47b25, 0x0, 0x0, {0xb, 0x7c}}, 0x14}}, 0x24004000) ppoll(&(0x7f0000000200)=[{r3, 0x80a9}], 0x1, 0x0, 0x0, 0x0) 3.29628396s ago: executing program 4 (id=1037): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4), 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x28}}, 0x0) 3.152085127s ago: executing program 4 (id=1038): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0x12) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000e9255bb992464e73a02159d3720df19f7a1dfec30000000003000600000000000200000000000000000000000000000002000100000000fffffffb0d00000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000500)="c0", 0xfffffeb9}], 0x1}, 0x851) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r3, 0x8b2c, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040), 0x10) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0xfc, 0x3, 0x0, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0xc048880}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)}, 0x41) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x10000}) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)='8', 0x1}], 0xfffffdef}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r7, 0xffffffffffffffff}, &(0x7f0000000500), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000b3ea27b44f3ec421e4992be29400", @ANYRES32=r8, @ANYBLOB, @ANYRES32=r9, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0xa8, &(0x7f00000002c0)=""/168, 0x40f00, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x8, 0x4}, 0x10}, 0x90) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x80, 0xd, 0x2, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x10, 0x4853}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x6, '\x00', r10, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x48) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x0, 0x0, 0x3}}, 0x26) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r12, @ANYBLOB="000000000000000014001a8010000480"], 0x34}}, 0x0) socket$packet(0x11, 0x3, 0x300) 2.94024425s ago: executing program 4 (id=1040): socket$packet(0x11, 0x0, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="0cc4c53e52cd4f1e2787e1cd1e55684e749d3b21ae068680fadc5cc648c79186f3d98ccd3a5b1732936dcf74538ffc97a9f82112023f2567972515712c7ec4e0ed2220f5425ba6ed76928e28b07ec50b135954b94c32030210aa0e2f4645f46be81d746c6b", 0x65}, {&(0x7f0000000340)="9c89ca312f027074ae7d79f183f678fc695c50a34d0e4133881f084b6d440ab6868186a9eabf0b8e5760adbc5a349da9d1620af787745bee2d6d2e6a84ee1fe7132e692fed0e0fe948d775263f5b67a91c4bd74ceeb68e733b2389262377b79861ddf5d86ca1a6388ab7257d5f1271a35a8c79a96e3e28f094fdfa96736ef41516bd3fbec3fd955247007a18dd527d224592b6fc09a05d5628e73b", 0x7fffef9b}], 0x2}, 0x0) getsockopt$nfc_llcp(r2, 0x118, 0x3, &(0x7f0000000000)=""/120, 0x78) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x44, r5, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x44}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r7, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="88000000", @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="6a00330050000000ffffffffffff080211000000505050505050"], 0x88}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x61}, {0x6}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socket$can_j1939(0x1d, 0x2, 0x7) 2.904062711s ago: executing program 0 (id=1041): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x34, 0x6c, 0x1, 0x0, 0x0, {}, [@nested={0x20, 0x0, 0x0, 0x1, [@generic="e649486a8eec4041", @typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@remote}]}]}, 0x34}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000)=0x7, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x1, 0x0, 0x2) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = accept4$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000540)=0x1c, 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x29, 0x77, 0x7, 0x8, 0xa, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x8, 0x1, 0x101}}) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000880)={@mcast1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, 0x0, 0x9, 0x0, 0x14, 0x200, r7}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(r5, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0), 0x8) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000001c0)=@raw=[@ldst={0x1, 0x0, 0x6, 0xa, 0x5, 0x1, 0xfffffffffffffffc}, @generic={0x3, 0x0, 0x0, 0xe25a, 0x7}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000200)='syzkaller\x00', 0x40, 0x4e, &(0x7f0000000240)=""/78, 0x41100, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0xa, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x0, 0x2, 0x9, 0x3}, {0x2, 0x5, 0x7, 0xcd84d90982b72245}, {0x3, 0x4, 0x9, 0xa}, {0x3, 0x3, 0x3, 0x5}, {0x3, 0x4, 0xc, 0x2}, {0x2, 0x5, 0x3, 0x1}], 0x10, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='spmi_read_begin\x00', r8}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x3, 0x200}, 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) sendmsg$nl_route(r2, 0x0, 0x20040001) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020095}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 2.511134798s ago: executing program 0 (id=1042): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x108, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast1, [], 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x1}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x5}, 0x8) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000340)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x19, 0x4, 0x2, 0x3e, 0x2, 0x64, 0x9, 0x32, 0x84, 0x8f4, @local, @empty, {[@noop, @rr={0x7, 0xf, 0xd7, [@remote, @loopback, @remote]}, @end, @end, @lsrr={0x83, 0xf, 0x97, [@multicast1, @multicast1, @private=0xa010101]}, @cipso={0x86, 0x2c, 0x0, [{0x0, 0x7, "bf61e92c97"}, {0x0, 0x2}, {0x0, 0xc, "6ebee283e075042a132c"}, {0x0, 0x2}, {0x0, 0x8, "15873b41cb8f"}, {0x0, 0x7, "7777468621"}]}, @ssrr={0x89, 0x3, 0x6e}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x28013, r1, 0x28771000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r3, r5, 0x0, 0x5, &(0x7f0000000080)='$[{\xfd\x00'}, 0x30) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000240), 0x4) write$cgroup_int(r5, &(0x7f0000000100)=0x7fffffff, 0x12) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800e00010069703665727370616e0000003c000280060011004e210000050008002000000014000700fc00000000000000000000000000000008001400070000000800050009000000040012000a000100aa"], 0x7c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newaddr={0x34, 0x14, 0x385, 0x0, 0x0, {}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xffffffff}}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x34}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000004d40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000004e40)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000004d80)={0x3c, r7, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0) 2.351401578s ago: executing program 3 (id=1043): setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="a4000000a5eeebdbe9badda5cff4287e32a162db2694c8297ae915e272184524a316d61abf104e8a16f2492d790536b851d09808069af9ac0d45388c2ebc90a216892d70eeab9f", @ANYRES16=r3, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="56000e008000000008021100000108021100000150505050505000000000000000000000640000000006010101010101010003010005030000002a010072060303030303037107000000000000007606000000000000000018000e800400010005000200e900000005000300d7000000080026007109000008000c006400000008000d0000000000"], 0xa4}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000001c00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="6b0000001000ee00000000000000800000001a00", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002801c0005800a000400aaaaaaaaaabb00000a0004000000000000000000"], 0x50}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan3\x00'}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x1c, r8, 0x329, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x0) 2.303766048s ago: executing program 0 (id=1044): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x18}, 0x0) connect$unix(r2, &(0x7f0000000280)=@abs={0x1}, 0x51) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r5) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000080)=""/195, 0xc3, 0x0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r8, 0x890b, &(0x7f0000000000)='bridge0\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="18f1ffffffffff621f0000000000181100000000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000051000000bca900000000000035090100000000009500000000000000bf9800000000000056080000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x107d, r9}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001dc0)={r9, &(0x7f0000000d00), &(0x7f0000000dc0)=""/4096}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000076000907000000000000000007020000", @ANYRES32=0x0, @ANYBLOB="0c000d80081b030000090100"], 0x24}, 0x1, 0x5502000000000000}, 0x0) socket$kcm(0xa, 0x2, 0x0) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r11, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @bcast}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x4, 0x5d, 0x4, 0x40, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x40, 0x7800, 0x0, 0x7fff}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0xffffffbb}, 0x8) socket(0x10, 0x3, 0x9) 2.270204054s ago: executing program 4 (id=1045): socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x39, 0xfc768fe990f47b25, 0x0, 0x0, {0xb, 0x7c}}, 0x14}}, 0x24004000) ppoll(&(0x7f0000000200)=[{r3, 0x80a9}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080), 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='@'], 0x40}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0x2, 0x2, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000340000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c001f0090780000080a80ea83c13994304a1800"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x766, @empty, 0x9}, 0x1c) 2.169041174s ago: executing program 3 (id=1046): socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x39, 0xfc768fe990f47b25, 0x0, 0x0, {0xb, 0x7c}}, 0x14}}, 0x24004000) ppoll(&(0x7f0000000200)=[{r3, 0x80a9}], 0x1, 0x0, 0x0, 0x0) 1.811310346s ago: executing program 0 (id=1047): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) r1 = socket$alg(0x26, 0x5, 0x0) accept$alg(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(0x0, r0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000240)={0x32c, r2, 0x4, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1fe9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ffe000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x16c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa8a}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0xf7, 0x3, "dfc0b047685d951e0ddacdf01b11d9b08efdc9116f7f780f03d89b51ccbfe910c64225e5949d1cb648e2f4f83d5120254a39a9ad104be8470d2244daa8034da01a12eb0eaca865ac36bf5d5ad20bfa7e851a7f01085033b0e1f54a7728a27b337e8261f4b472c869e7e0172c31be6f0d35c952423124e04952d0e279956c1ce647835a43def532c9db0814426d7b8fa44180f5cf34cbc5fc49ef6d8896c9c5ff77bf69f2282df3cfb367a90bd5f8188c6e31a0d19e4107fcffa55923d46cf0abe8e090041eee74ebada18741778746373f0bfb5286efec7d82218338f72bdd1d56ac079fbf0f6b0bcc97daf1aeb4367708f22f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "2aa15952c654cdb507b718e3bc9abc8db08071d6891a67ee904b1ea29e74e2a9"}}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @mcast2, 0x40}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x805}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x31ef}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x48051}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x3a}, 0x90) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000640)) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) 1.575706712s ago: executing program 0 (id=1048): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4), 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200"], 0x28}}, 0x0) 1.196094115s ago: executing program 0 (id=1049): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x39, 0xfc768fe990f47b25, 0x0, 0x0, {0xb, 0x7c}}, 0x14}}, 0x24004000) ppoll(&(0x7f0000000200)=[{r4, 0x80a9}], 0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080), 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='@'], 0x40}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0x2, 0x2, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000340000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c001f0090780000080a80ea83c13994304a1800"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x766, @empty, 0x9}, 0x1c) 0s ago: executing program 3 (id=1050): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0x12) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000e9255bb992464e73a02159d3720df19f7a1dfec30000000003000600000000000200000000000000000000000000000002000100000000fffffffb0d00000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000500)="c0", 0xfffffeb9}], 0x1}, 0x851) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r3, 0x8b2c, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040), 0x10) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0xfc, 0x3, 0x0, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0xc048880}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)}, 0x41) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x10000}) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)='8', 0x1}], 0xfffffdef}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r7, 0xffffffffffffffff}, &(0x7f0000000500), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000b3ea27b44f3ec421e4992be29400", @ANYRES32=r8, @ANYBLOB, @ANYRES32=r9, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0xa8, &(0x7f00000002c0)=""/168, 0x40f00, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x8, 0x4}, 0x10}, 0x90) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x80, 0xd, 0x2, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x10, 0x4853}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x6, '\x00', r10, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x48) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x0, 0x0, 0x3}}, 0x26) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r12, @ANYBLOB="000000000000000014001a8010000480"], 0x34}}, 0x0) socket$packet(0x11, 0x3, 0x300) kernel console output (not intermixed with test programs): istering): j1939_xtp_rx_dat: no tx connection found [ 129.488929][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.496996][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.505006][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.513055][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.521024][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.529045][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.537002][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.545067][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.553016][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.561058][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.568968][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.577059][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.585034][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.593058][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.601025][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.609052][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.617012][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.625068][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.633032][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.641066][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.648979][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.661999][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.669951][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.678035][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.685999][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.694129][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.702165][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.710185][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.718176][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.726250][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.734220][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.742275][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.750199][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.758435][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.766396][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.774495][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.782448][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.790454][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.798410][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.806481][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.814462][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.822511][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.830429][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.838487][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.846440][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.854523][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.862483][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.870488][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.878443][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.886523][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.894489][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.902660][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.910625][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.918657][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.926639][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.934700][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.942671][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.950721][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.958643][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.966706][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.974659][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.982721][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 129.990681][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 129.998688][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 130.006665][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 130.014720][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 130.022685][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 130.030724][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 130.038652][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 130.046724][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 130.054671][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 130.062723][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 130.070683][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 130.078714][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 130.086721][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 130.094773][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 130.102734][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 130.110754][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 130.118679][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 130.128324][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 130.136280][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 130.144330][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 130.152269][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 130.160280][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 130.168251][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 130.180535][ T55] Bluetooth: hci0: command 0x0c20 tx timeout [ 130.571397][ T6540] dvmrp1: entered allmulticast mode [ 130.669126][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.414'. [ 130.784124][ T6546] netlink: 128 bytes leftover after parsing attributes in process `syz.4.415'. [ 130.853982][ T6553] netlink: 24 bytes leftover after parsing attributes in process `syz.3.418'. [ 130.900511][ T6535] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 131.363080][ T6579] netlink: 104 bytes leftover after parsing attributes in process `syz.2.423'. [ 132.231324][ T55] Bluetooth: hci0: command 0x0c20 tx timeout [ 132.445902][ T6611] netlink: 28 bytes leftover after parsing attributes in process `syz.1.428'. [ 132.495298][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.428'. [ 132.551096][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 132.552851][ T6138] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 133.203780][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.210365][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.395008][ T6626] syz_tun: entered promiscuous mode [ 133.441109][ T6626] syz_tun: left promiscuous mode [ 134.481824][ T6651] tap0: tun_chr_ioctl cmd 1074025677 [ 134.514044][ T6651] tap0: linktype set to 780 [ 134.731967][ T6638] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 135.167704][ T6677] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.442'. [ 135.470582][ T6688] netlink: 1068 bytes leftover after parsing attributes in process `syz.3.445'. [ 135.534846][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.445'. [ 135.992142][ T55] Bluetooth: hci0: command 0x0c20 tx timeout [ 137.723911][ T6712] netlink: 'syz.1.452': attribute type 4 has an invalid length. [ 137.937824][ T6719] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.454'. [ 138.311224][ T6149] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 138.825537][ T6747] FAULT_INJECTION: forcing a failure. [ 138.825537][ T6747] name failslab, interval 1, probability 0, space 0, times 0 [ 138.844004][ T6747] CPU: 1 PID: 6747 Comm: syz.0.465 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 138.853679][ T6747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 138.863761][ T6747] Call Trace: [ 138.867071][ T6747] [ 138.870016][ T6747] dump_stack_lvl+0x241/0x360 [ 138.874732][ T6747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.879981][ T6747] ? __pfx__printk+0x10/0x10 [ 138.884606][ T6747] ? ref_tracker_alloc+0x332/0x490 [ 138.889752][ T6747] should_fail_ex+0x3b0/0x4e0 [ 138.894488][ T6747] ? skb_clone+0x20c/0x390 [ 138.898944][ T6747] should_failslab+0x9/0x20 [ 138.903481][ T6747] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 138.908895][ T6747] skb_clone+0x20c/0x390 [ 138.913168][ T6747] __netlink_deliver_tap+0x3cc/0x7c0 [ 138.918544][ T6747] ? netlink_deliver_tap+0x2e/0x1b0 [ 138.923795][ T6747] netlink_deliver_tap+0x19d/0x1b0 [ 138.928946][ T6747] netlink_unicast+0x7be/0x990 [ 138.933751][ T6747] ? __pfx_netlink_unicast+0x10/0x10 [ 138.939068][ T6747] ? __virt_addr_valid+0x183/0x530 [ 138.944237][ T6747] ? __check_object_size+0x49c/0x900 [ 138.949562][ T6747] ? bpf_lsm_netlink_send+0x9/0x10 [ 138.954719][ T6747] netlink_sendmsg+0x8e4/0xcb0 [ 138.959540][ T6747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.964867][ T6747] ? __import_iovec+0x536/0x820 [ 138.969768][ T6747] ? aa_sock_msg_perm+0x91/0x160 [ 138.974736][ T6747] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 138.980052][ T6747] ? security_socket_sendmsg+0x87/0xb0 [ 138.985557][ T6747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.990877][ T6747] __sock_sendmsg+0x221/0x270 [ 138.995681][ T6747] ____sys_sendmsg+0x525/0x7d0 [ 139.000496][ T6747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.005842][ T6747] __sys_sendmsg+0x2b0/0x3a0 [ 139.010466][ T6747] ? __pfx___sys_sendmsg+0x10/0x10 [ 139.015614][ T6747] ? vfs_write+0x7c4/0xc90 [ 139.020100][ T6747] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 139.026462][ T6747] ? do_syscall_64+0x100/0x230 [ 139.031290][ T6747] ? do_syscall_64+0xb6/0x230 [ 139.036031][ T6747] do_syscall_64+0xf3/0x230 [ 139.040574][ T6747] ? clear_bhb_loop+0x35/0x90 [ 139.045296][ T6747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.051256][ T6747] RIP: 0033:0x7f81cf375f19 [ 139.055700][ T6747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.075379][ T6747] RSP: 002b:00007f81d0168048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.083830][ T6747] RAX: ffffffffffffffda RBX: 00007f81cf505f60 RCX: 00007f81cf375f19 [ 139.091823][ T6747] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 139.099812][ T6747] RBP: 00007f81d01680a0 R08: 0000000000000000 R09: 0000000000000000 [ 139.107803][ T6747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.115802][ T6747] R13: 000000000000000b R14: 00007f81cf505f60 R15: 00007ffc35f94a38 [ 139.123917][ T6747] [ 139.340985][ T6757] netlink: 'syz.4.470': attribute type 10 has an invalid length. [ 139.406243][ T6757] bond0: (slave netdevsim0): Releasing backup interface [ 139.438573][ T6757] team0: Port device netdevsim0 added [ 139.455955][ T6759] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 139.468637][ T6759] ipvlan0: entered promiscuous mode [ 139.476208][ T6759] ipvlan0: left promiscuous mode [ 139.482297][ T6759] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 139.499008][ T6760] netlink: 'syz.4.470': attribute type 10 has an invalid length. [ 139.522889][ T6760] team0: Port device netdevsim0 removed [ 139.537703][ T6760] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 139.609627][ T5191] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 139.731406][ T6770] netlink: 32 bytes leftover after parsing attributes in process `syz.4.474'. [ 139.899524][ T6779] batadv_slave_1: entered promiscuous mode [ 139.976863][ T6784] netlink: 248 bytes leftover after parsing attributes in process `syz.2.477'. [ 139.999106][ T6784] netlink: 24 bytes leftover after parsing attributes in process `syz.2.477'. [ 140.036627][ T6777] batadv_slave_1: left promiscuous mode [ 140.060157][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'. [ 140.267852][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.479'. [ 140.306611][ T6792] netlink: 40 bytes leftover after parsing attributes in process `syz.1.480'. [ 140.353763][ T6795] netlink: 48 bytes leftover after parsing attributes in process `syz.0.481'. [ 140.559024][ T6800] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 140.670268][ T6807] FAULT_INJECTION: forcing a failure. [ 140.670268][ T6807] name failslab, interval 1, probability 0, space 0, times 0 [ 140.714253][ T6807] CPU: 0 PID: 6807 Comm: syz.1.487 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 140.723942][ T6807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 140.734023][ T6807] Call Trace: [ 140.737343][ T6807] [ 140.740294][ T6807] dump_stack_lvl+0x241/0x360 [ 140.745014][ T6807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.750257][ T6807] ? __pfx__printk+0x10/0x10 [ 140.754881][ T6807] ? netlink_insert+0x10b7/0x14b0 [ 140.759933][ T6807] should_fail_ex+0x3b0/0x4e0 [ 140.764655][ T6807] ? __alloc_skb+0x1c3/0x440 [ 140.769279][ T6807] should_failslab+0x9/0x20 [ 140.773812][ T6807] kmem_cache_alloc_node_noprof+0x71/0x320 [ 140.779664][ T6807] __alloc_skb+0x1c3/0x440 [ 140.784110][ T6807] ? __pfx___alloc_skb+0x10/0x10 [ 140.789078][ T6807] ? netlink_autobind+0xd6/0x2f0 [ 140.794032][ T6807] ? netlink_autobind+0x2b0/0x2f0 [ 140.799090][ T6807] netlink_sendmsg+0x638/0xcb0 [ 140.803872][ T6807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.809184][ T6807] ? __import_iovec+0x536/0x820 [ 140.814053][ T6807] ? aa_sock_msg_perm+0x91/0x160 [ 140.819032][ T6807] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 140.824336][ T6807] ? security_socket_sendmsg+0x87/0xb0 [ 140.829806][ T6807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.835115][ T6807] __sock_sendmsg+0x221/0x270 [ 140.839805][ T6807] ____sys_sendmsg+0x525/0x7d0 [ 140.844588][ T6807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.849912][ T6807] __sys_sendmsg+0x2b0/0x3a0 [ 140.854522][ T6807] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.859647][ T6807] ? vfs_write+0x7c4/0xc90 [ 140.864093][ T6807] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 140.870437][ T6807] ? do_syscall_64+0x100/0x230 [ 140.875217][ T6807] ? do_syscall_64+0xb6/0x230 [ 140.879906][ T6807] do_syscall_64+0xf3/0x230 [ 140.884505][ T6807] ? clear_bhb_loop+0x35/0x90 [ 140.889222][ T6807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.895118][ T6807] RIP: 0033:0x7f0628b75f19 [ 140.899533][ T6807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.919132][ T6807] RSP: 002b:00007f06298cb048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.927562][ T6807] RAX: ffffffffffffffda RBX: 00007f0628d05f60 RCX: 00007f0628b75f19 [ 140.935534][ T6807] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000010 [ 140.943504][ T6807] RBP: 00007f06298cb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 140.951474][ T6807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.959445][ T6807] R13: 000000000000000b R14: 00007f0628d05f60 R15: 00007ffca702ffa8 [ 140.967429][ T6807] [ 141.306411][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.491'. [ 141.355902][ T6825] bond_slave_0: entered promiscuous mode [ 141.362202][ T6825] bond_slave_1: entered promiscuous mode [ 141.368890][ T6825] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 141.402671][ T6825] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 141.568046][ T6829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.495'. [ 141.591157][ T6832] Cannot find del_set index 0 as target [ 141.607761][ T6833] netlink: 'syz.3.496': attribute type 21 has an invalid length. [ 142.675578][ T6866] FAULT_INJECTION: forcing a failure. [ 142.675578][ T6866] name failslab, interval 1, probability 0, space 0, times 0 [ 142.740813][ T6866] CPU: 0 PID: 6866 Comm: syz.4.510 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 142.750497][ T6866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 142.760678][ T6866] Call Trace: [ 142.763978][ T6866] [ 142.766932][ T6866] dump_stack_lvl+0x241/0x360 [ 142.771739][ T6866] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.776970][ T6866] ? __pfx__printk+0x10/0x10 [ 142.781592][ T6866] ? __pfx___might_resched+0x10/0x10 [ 142.786914][ T6866] should_fail_ex+0x3b0/0x4e0 [ 142.791614][ T6866] ? xfrm_policy_alloc+0x77/0x2b0 [ 142.796661][ T6866] should_failslab+0x9/0x20 [ 142.801189][ T6866] __kmalloc_cache_noprof+0x6c/0x2c0 [ 142.806536][ T6866] xfrm_policy_alloc+0x77/0x2b0 [ 142.811426][ T6866] xfrm_policy_construct+0x31/0x10c0 [ 142.816737][ T6866] ? aa_get_newest_label+0xff/0x6f0 [ 142.821962][ T6866] ? verify_newpolicy_info+0x340/0x4b0 [ 142.827444][ T6866] xfrm_add_policy+0x270/0x980 [ 142.832242][ T6866] ? __pfx_xfrm_add_policy+0x10/0x10 [ 142.837559][ T6866] ? __nla_parse+0x40/0x60 [ 142.842010][ T6866] xfrm_user_rcv_msg+0x75b/0xa80 [ 142.846980][ T6866] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 142.852504][ T6866] ? __mutex_trylock_common+0x183/0x2e0 [ 142.858102][ T6866] ? __pfx___might_resched+0x10/0x10 [ 142.863429][ T6866] netlink_rcv_skb+0x1e3/0x430 [ 142.868225][ T6866] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 142.873721][ T6866] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 142.879071][ T6866] xfrm_netlink_rcv+0x79/0x90 [ 142.883779][ T6866] netlink_unicast+0x7f0/0x990 [ 142.888581][ T6866] ? __pfx_netlink_unicast+0x10/0x10 [ 142.893893][ T6866] ? __virt_addr_valid+0x183/0x530 [ 142.899054][ T6866] ? __check_object_size+0x49c/0x900 [ 142.904388][ T6866] ? bpf_lsm_netlink_send+0x9/0x10 [ 142.909546][ T6866] netlink_sendmsg+0x8e4/0xcb0 [ 142.914367][ T6866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.919695][ T6866] ? __import_iovec+0x536/0x820 [ 142.924597][ T6866] ? aa_sock_msg_perm+0x91/0x160 [ 142.929572][ T6866] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 142.934895][ T6866] ? security_socket_sendmsg+0x87/0xb0 [ 142.940396][ T6866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.945715][ T6866] __sock_sendmsg+0x221/0x270 [ 142.950435][ T6866] ____sys_sendmsg+0x525/0x7d0 [ 142.955250][ T6866] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.960611][ T6866] __sys_sendmsg+0x2b0/0x3a0 [ 142.965235][ T6866] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.970383][ T6866] ? vfs_write+0x7c4/0xc90 [ 142.974870][ T6866] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 142.981235][ T6866] ? do_syscall_64+0x100/0x230 [ 142.986036][ T6866] ? do_syscall_64+0xb6/0x230 [ 142.990747][ T6866] do_syscall_64+0xf3/0x230 [ 142.995275][ T6866] ? clear_bhb_loop+0x35/0x90 [ 143.000016][ T6866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.005953][ T6866] RIP: 0033:0x7f19dcf75f19 [ 143.010391][ T6866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.030017][ T6866] RSP: 002b:00007f19dddcf048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.038473][ T6866] RAX: ffffffffffffffda RBX: 00007f19dd105f60 RCX: 00007f19dcf75f19 [ 143.046473][ T6866] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 143.054479][ T6866] RBP: 00007f19dddcf0a0 R08: 0000000000000000 R09: 0000000000000000 [ 143.062488][ T6866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.070487][ T6866] R13: 000000000000000b R14: 00007f19dd105f60 R15: 00007ffd1d1c4278 [ 143.078506][ T6866] [ 143.288413][ T6876] __nla_validate_parse: 4 callbacks suppressed [ 143.288433][ T6876] netlink: 516 bytes leftover after parsing attributes in process `syz.4.515'. [ 143.582064][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.518'. [ 143.620710][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.518'. [ 143.703687][ T55] block nbd3: Receive control failed (result -107) [ 143.991451][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'. [ 144.047185][ T6904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.082401][ T6146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 144.121340][ T6906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.246541][ T6906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.327903][ T6899] netlink: 36 bytes leftover after parsing attributes in process `syz.3.523'. [ 147.169709][ T6908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.525'. [ 147.390354][ T6925] bridge_slave_0: left allmulticast mode [ 147.432319][ T6925] bridge_slave_0: left promiscuous mode [ 147.448454][ T6925] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.537358][ T6925] bridge_slave_1: left allmulticast mode [ 147.566038][ T6925] bridge_slave_1: left promiscuous mode [ 147.593853][ T6925] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.643773][ T6925] bond0: (slave bond_slave_0): Releasing backup interface [ 147.686567][ T6925] bond0: (slave bond_slave_1): Releasing backup interface [ 147.778316][ T6925] team0: Port device team_slave_0 removed [ 147.832789][ T6925] team0: Port device team_slave_1 removed [ 147.839526][ T6925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.868381][ T6925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.884820][ T6925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.897293][ T6925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.953497][ T6934] netlink: 28 bytes leftover after parsing attributes in process `syz.0.534'. [ 148.003451][ T6938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.534'. [ 148.177762][ T6953] netlink: 24 bytes leftover after parsing attributes in process `syz.4.538'. [ 148.385992][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.538'. [ 148.946846][ T6980] netlink: 104 bytes leftover after parsing attributes in process `syz.4.550'. [ 149.129314][ T6973] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 149.199359][ T6973] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 149.336243][ T6993] netlink: 'syz.0.552': attribute type 10 has an invalid length. [ 149.398129][ T6993] bond0: (slave netdevsim0): Releasing backup interface [ 149.414412][ T6992] netlink: 16 bytes leftover after parsing attributes in process `syz.4.553'. [ 149.602398][ T7002] FAULT_INJECTION: forcing a failure. [ 149.602398][ T7002] name failslab, interval 1, probability 0, space 0, times 0 [ 149.621344][ T7002] CPU: 1 PID: 7002 Comm: syz.0.556 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 149.631043][ T7002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 149.641124][ T7002] Call Trace: [ 149.644419][ T7002] [ 149.647364][ T7002] dump_stack_lvl+0x241/0x360 [ 149.652089][ T7002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.657317][ T7002] ? __pfx__printk+0x10/0x10 [ 149.661937][ T7002] ? __pfx___might_resched+0x10/0x10 [ 149.667337][ T7002] ? __kasan_kmalloc+0x98/0xb0 [ 149.672135][ T7002] ? __genradix_ptr_alloc+0x196/0x460 [ 149.677559][ T7002] should_fail_ex+0x3b0/0x4e0 [ 149.682275][ T7002] ? sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 149.688213][ T7002] should_failslab+0x9/0x20 [ 149.692766][ T7002] __kmalloc_cache_noprof+0x6c/0x2c0 [ 149.698097][ T7002] sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 149.703866][ T7002] sctp_association_new+0x15aa/0x23f0 [ 149.709298][ T7002] sctp_connect_new_asoc+0x2d8/0x6c0 [ 149.714620][ T7002] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 149.720471][ T7002] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 149.726311][ T7002] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 149.732243][ T7002] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 149.738108][ T7002] __sctp_connect+0x66d/0xe30 [ 149.742832][ T7002] ? __pfx___sctp_connect+0x10/0x10 [ 149.748058][ T7002] ? __might_fault+0xc6/0x120 [ 149.752768][ T7002] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 149.758350][ T7002] ? security_sctp_bind_connect+0x90/0xb0 [ 149.764100][ T7002] sctp_getsockopt_connectx3+0x46f/0x730 [ 149.769776][ T7002] ? __local_bh_enable_ip+0x168/0x200 [ 149.775184][ T7002] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 149.781366][ T7002] ? __local_bh_enable_ip+0x168/0x200 [ 149.786810][ T7002] ? sctp_getsockopt+0x13a/0xbb0 [ 149.791808][ T7002] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 149.797579][ T7002] sctp_getsockopt+0x8de/0xbb0 [ 149.802389][ T7002] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 149.808328][ T7002] do_sock_getsockopt+0x373/0x850 [ 149.813399][ T7002] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 149.818999][ T7002] ? __fget_files+0x3f6/0x470 [ 149.823717][ T7002] __sys_getsockopt+0x271/0x330 [ 149.828612][ T7002] ? __pfx___sys_getsockopt+0x10/0x10 [ 149.834035][ T7002] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 149.838600][ T76] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 149.840372][ T7002] ? do_syscall_64+0x100/0x230 [ 149.855671][ T7002] __x64_sys_getsockopt+0xb5/0xd0 [ 149.860741][ T7002] do_syscall_64+0xf3/0x230 [ 149.865272][ T7002] ? clear_bhb_loop+0x35/0x90 [ 149.870018][ T7002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.875953][ T7002] RIP: 0033:0x7f81cf375f19 [ 149.880409][ T7002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.900031][ T7002] RSP: 002b:00007f81d0168048 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 149.908484][ T7002] RAX: ffffffffffffffda RBX: 00007f81cf505f60 RCX: 00007f81cf375f19 [ 149.916501][ T7002] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000005 [ 149.924503][ T7002] RBP: 00007f81d01680a0 R08: 00000000200002c0 R09: 0000000000000000 [ 149.932501][ T7002] R10: 0000000020000280 R11: 0000000000000246 R12: 0000000000000001 [ 149.940500][ T7002] R13: 000000000000000b R14: 00007f81cf505f60 R15: 00007ffc35f94a38 [ 149.948520][ T7002] [ 149.972963][ T7007] FAULT_INJECTION: forcing a failure. [ 149.972963][ T7007] name failslab, interval 1, probability 0, space 0, times 0 [ 149.992925][ T7007] CPU: 1 PID: 7007 Comm: syz.1.558 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 150.002596][ T7007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 150.012686][ T7007] Call Trace: [ 150.015988][ T7007] [ 150.018956][ T7007] dump_stack_lvl+0x241/0x360 [ 150.023667][ T7007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.028916][ T7007] ? __pfx__printk+0x10/0x10 [ 150.033569][ T7007] should_fail_ex+0x3b0/0x4e0 [ 150.038283][ T7007] ? skb_clone+0x20c/0x390 [ 150.042743][ T7007] should_failslab+0x9/0x20 [ 150.047281][ T7007] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 150.052691][ T7007] ? __pfx_lock_release+0x10/0x10 [ 150.057756][ T7007] skb_clone+0x20c/0x390 [ 150.062038][ T7007] pfkey_broadcast_one+0x99/0x330 [ 150.067093][ T7007] ? pfkey_broadcast+0x45/0x400 [ 150.072048][ T7007] pfkey_broadcast+0x3ca/0x400 [ 150.076831][ T7007] ? pfkey_broadcast+0x45/0x400 [ 150.081695][ T7007] pfkey_sendmsg+0xe10/0x1050 [ 150.086385][ T7007] ? __pfx___might_resched+0x10/0x10 [ 150.091696][ T7007] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 150.096824][ T7007] ? __might_fault+0xaa/0x120 [ 150.101503][ T7007] ? __pfx_lock_release+0x10/0x10 [ 150.106570][ T7007] ? __import_iovec+0x536/0x820 [ 150.111424][ T7007] ? aa_sock_msg_perm+0x91/0x160 [ 150.116373][ T7007] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 150.121667][ T7007] ? security_socket_sendmsg+0x87/0xb0 [ 150.127134][ T7007] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 150.132248][ T7007] __sock_sendmsg+0x221/0x270 [ 150.136954][ T7007] ____sys_sendmsg+0x525/0x7d0 [ 150.141737][ T7007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.147035][ T7007] ? __might_fault+0xaa/0x120 [ 150.151719][ T7007] __sys_sendmmsg+0x3b2/0x740 [ 150.156404][ T7007] ? __pfx___sys_sendmmsg+0x10/0x10 [ 150.161631][ T7007] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 150.167527][ T7007] ? ksys_write+0x23e/0x2c0 [ 150.172035][ T7007] ? __pfx_lock_release+0x10/0x10 [ 150.177071][ T7007] ? vfs_write+0x7c4/0xc90 [ 150.181496][ T7007] ? __mutex_unlock_slowpath+0x21d/0x750 [ 150.187139][ T7007] ? __pfx_vfs_write+0x10/0x10 [ 150.191954][ T7007] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 150.197941][ T7007] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 150.204288][ T7007] ? do_syscall_64+0x100/0x230 [ 150.209066][ T7007] __x64_sys_sendmmsg+0xa0/0xb0 [ 150.213925][ T7007] do_syscall_64+0xf3/0x230 [ 150.218436][ T7007] ? clear_bhb_loop+0x35/0x90 [ 150.223128][ T7007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.229039][ T7007] RIP: 0033:0x7f0628b75f19 [ 150.233456][ T7007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.253069][ T7007] RSP: 002b:00007f06298cb048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 150.261492][ T7007] RAX: ffffffffffffffda RBX: 00007f0628d05f60 RCX: 00007f0628b75f19 [ 150.269469][ T7007] RDX: 000000000400008a RSI: 0000000020000180 RDI: 0000000000000003 [ 150.277443][ T7007] RBP: 00007f06298cb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 150.285430][ T7007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.293413][ T7007] R13: 000000000000000b R14: 00007f0628d05f60 R15: 00007ffca702ffa8 [ 150.301400][ T7007] [ 150.590831][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'. [ 150.603276][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'. [ 150.911079][ T7037] netlink: 'syz.3.570': attribute type 4 has an invalid length. [ 150.975641][ T7037] infiniband syz0: set down [ 151.006199][ T1151] lo speed is unknown, defaulting to 1000 [ 151.032195][ T1151] lo speed is unknown, defaulting to 1000 [ 151.040803][ T7037] netlink: 'syz.3.570': attribute type 4 has an invalid length. [ 151.098498][ T7039] siw: device registration error -23 [ 151.161911][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.572'. [ 151.200965][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.572'. [ 151.243010][ T7044] netlink: 68 bytes leftover after parsing attributes in process `syz.2.572'. [ 151.767881][ T7063] cannot load conntrack support for proto=3 [ 152.362033][ T7076] siw: device registration error -23 [ 152.440875][ T7085] FAULT_INJECTION: forcing a failure. [ 152.440875][ T7085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.471174][ T7085] CPU: 1 PID: 7085 Comm: syz.3.588 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 152.480882][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 152.490936][ T7085] Call Trace: [ 152.494222][ T7085] [ 152.497155][ T7085] dump_stack_lvl+0x241/0x360 [ 152.501867][ T7085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.507086][ T7085] ? __pfx__printk+0x10/0x10 [ 152.511681][ T7085] ? __pfx_lock_release+0x10/0x10 [ 152.516718][ T7085] should_fail_ex+0x3b0/0x4e0 [ 152.521409][ T7085] _copy_to_user+0x2f/0xb0 [ 152.525847][ T7085] bpf_test_finish+0x593/0x8b0 [ 152.530639][ T7085] ? __pfx_bpf_test_finish+0x10/0x10 [ 152.535946][ T7085] ? _copy_from_user+0xa6/0xe0 [ 152.540734][ T7085] ? bpf_test_init+0x15a/0x180 [ 152.545513][ T7085] bpf_prog_test_run_xdp+0x905/0x11b0 [ 152.550901][ T7085] ? __pfx_lock_release+0x10/0x10 [ 152.555960][ T7085] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 152.561786][ T7085] ? __fget_files+0x29/0x470 [ 152.566391][ T7085] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 152.572218][ T7085] bpf_prog_test_run+0x33a/0x3b0 [ 152.577169][ T7085] __sys_bpf+0x48d/0x810 [ 152.581421][ T7085] ? __pfx___sys_bpf+0x10/0x10 [ 152.586202][ T7085] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 152.592201][ T7085] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 152.598565][ T7085] __x64_sys_bpf+0x7c/0x90 [ 152.602983][ T7085] do_syscall_64+0xf3/0x230 [ 152.607528][ T7085] ? clear_bhb_loop+0x35/0x90 [ 152.612232][ T7085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.618138][ T7085] RIP: 0033:0x7fadef575f19 [ 152.622560][ T7085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.642177][ T7085] RSP: 002b:00007fadf02be048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 152.650602][ T7085] RAX: ffffffffffffffda RBX: 00007fadef705f60 RCX: 00007fadef575f19 [ 152.658570][ T7085] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 152.666535][ T7085] RBP: 00007fadf02be0a0 R08: 0000000000000000 R09: 0000000000000000 [ 152.674602][ T7085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.682570][ T7085] R13: 000000000000000b R14: 00007fadef705f60 R15: 00007ffd63f90db8 [ 152.690578][ T7085] [ 152.877312][ T7089] netlink: 60 bytes leftover after parsing attributes in process `syz.1.590'. [ 152.906545][ T7089] Êü: entered promiscuous mode [ 153.429371][ T7119] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.599'. [ 153.812908][ T7128] siw: device registration error -23 [ 154.129311][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.606'. [ 154.467208][ T7150] FAULT_INJECTION: forcing a failure. [ 154.467208][ T7150] name failslab, interval 1, probability 0, space 0, times 0 [ 154.498274][ T7150] CPU: 0 PID: 7150 Comm: syz.1.610 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 154.507972][ T7150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 154.518057][ T7150] Call Trace: [ 154.521360][ T7150] [ 154.524404][ T7150] dump_stack_lvl+0x241/0x360 [ 154.529215][ T7150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.534459][ T7150] ? __pfx__printk+0x10/0x10 [ 154.539096][ T7150] ? __pfx___might_resched+0x10/0x10 [ 154.544431][ T7150] should_fail_ex+0x3b0/0x4e0 [ 154.549148][ T7150] ? xfrm_policy_alloc+0x77/0x2b0 [ 154.554207][ T7150] should_failslab+0x9/0x20 [ 154.558747][ T7150] __kmalloc_cache_noprof+0x6c/0x2c0 [ 154.564090][ T7150] xfrm_policy_alloc+0x77/0x2b0 [ 154.568979][ T7150] xfrm_policy_construct+0x31/0x10c0 [ 154.574306][ T7150] ? aa_get_newest_label+0xff/0x6f0 [ 154.579548][ T7150] ? verify_newpolicy_info+0x340/0x4b0 [ 154.585047][ T7150] xfrm_add_policy+0x270/0x980 [ 154.589852][ T7150] ? __pfx_xfrm_add_policy+0x10/0x10 [ 154.595188][ T7150] ? __nla_parse+0x40/0x60 [ 154.599648][ T7150] xfrm_user_rcv_msg+0x75b/0xa80 [ 154.604631][ T7150] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 154.610169][ T7150] ? __mutex_trylock_common+0x183/0x2e0 [ 154.615764][ T7150] ? __pfx___might_resched+0x10/0x10 [ 154.621108][ T7150] netlink_rcv_skb+0x1e3/0x430 [ 154.625914][ T7150] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 154.631441][ T7150] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 154.636806][ T7150] xfrm_netlink_rcv+0x79/0x90 [ 154.641519][ T7150] netlink_unicast+0x7f0/0x990 [ 154.646329][ T7150] ? __pfx_netlink_unicast+0x10/0x10 [ 154.651648][ T7150] ? __virt_addr_valid+0x183/0x530 [ 154.656809][ T7150] ? __check_object_size+0x49c/0x900 [ 154.662124][ T7150] ? bpf_lsm_netlink_send+0x9/0x10 [ 154.667262][ T7150] netlink_sendmsg+0x8e4/0xcb0 [ 154.672069][ T7150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.677395][ T7150] ? __import_iovec+0x536/0x820 [ 154.682279][ T7150] ? aa_sock_msg_perm+0x91/0x160 [ 154.687246][ T7150] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 154.692564][ T7150] ? security_socket_sendmsg+0x87/0xb0 [ 154.698066][ T7150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.703386][ T7150] __sock_sendmsg+0x221/0x270 [ 154.708098][ T7150] ____sys_sendmsg+0x525/0x7d0 [ 154.712930][ T7150] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.718281][ T7150] __sys_sendmsg+0x2b0/0x3a0 [ 154.722896][ T7150] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.728043][ T7150] ? vfs_write+0x7c4/0xc90 [ 154.732542][ T7150] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 154.738909][ T7150] ? do_syscall_64+0x100/0x230 [ 154.743707][ T7150] ? do_syscall_64+0xb6/0x230 [ 154.748420][ T7150] do_syscall_64+0xf3/0x230 [ 154.752956][ T7150] ? clear_bhb_loop+0x35/0x90 [ 154.757710][ T7150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.763654][ T7150] RIP: 0033:0x7f0628b75f19 [ 154.768104][ T7150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.787736][ T7150] RSP: 002b:00007f06298cb048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.796195][ T7150] RAX: ffffffffffffffda RBX: 00007f0628d05f60 RCX: 00007f0628b75f19 [ 154.804200][ T7150] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 154.812195][ T7150] RBP: 00007f06298cb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 154.820204][ T7150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.828208][ T7150] R13: 000000000000000b R14: 00007f0628d05f60 R15: 00007ffca702ffa8 [ 154.836318][ T7150] [ 154.932259][ T7135] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 154.935547][ T7158] netlink: 'syz.3.613': attribute type 10 has an invalid length. [ 154.951291][ T76] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 155.018777][ T7158] team0: Port device netdevsim0 added [ 155.053084][ T7160] netlink: 'syz.3.613': attribute type 10 has an invalid length. [ 155.139656][ T7160] team0: Port device netdevsim0 removed [ 155.158919][ T7160] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 155.176933][ T7159] tipc: Enabling of bearer rejected, failed to enable media [ 155.243267][ T7164] netlink: 64 bytes leftover after parsing attributes in process `syz.1.614'. [ 155.262828][ C0] eth0: bad gso: type: 1, size: 1408 [ 155.437493][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.617'. [ 155.853658][ T7189] netlink: 40 bytes leftover after parsing attributes in process `syz.3.624'. [ 155.990763][ T55] Bluetooth: hci0: command 0x0c20 tx timeout [ 156.066647][ T7194] netlink: 48 bytes leftover after parsing attributes in process `syz.2.626'. [ 156.119906][ T7197] tipc: Enabling of bearer rejected, failed to enable media [ 156.440380][ T7205] netlink: 52 bytes leftover after parsing attributes in process `syz.3.630'. [ 156.890931][ T7198] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 156.923971][ T7221] netlink: 25 bytes leftover after parsing attributes in process `syz.4.636'. [ 156.993910][ T7221] gretap0: entered promiscuous mode [ 157.063759][ T7222] netlink: 25 bytes leftover after parsing attributes in process `syz.4.636'. [ 157.100995][ T7226] netlink: 5 bytes leftover after parsing attributes in process `syz.4.636'. [ 157.120240][ T7226] 0ªX¹¦Dö»: renamed from gretap0 [ 157.132107][ T7226] 0ªX¹¦Dö»: left promiscuous mode [ 157.137292][ T7226] 0ªX¹¦Dö»: entered allmulticast mode [ 157.164497][ T7224] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 157.400795][ T7239] netlink: 'syz.2.642': attribute type 10 has an invalid length. [ 158.150919][ T55] Bluetooth: hci0: command 0x0c20 tx timeout [ 158.158385][ T7257] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 158.244874][ T7263] FAULT_INJECTION: forcing a failure. [ 158.244874][ T7263] name failslab, interval 1, probability 0, space 0, times 0 [ 158.310946][ T7263] CPU: 1 PID: 7263 Comm: syz.1.649 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 158.320651][ T7263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 158.330796][ T7263] Call Trace: [ 158.334093][ T7263] [ 158.337032][ T7263] dump_stack_lvl+0x241/0x360 [ 158.341725][ T7263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.346943][ T7263] ? __pfx__printk+0x10/0x10 [ 158.351545][ T7263] ? __pfx___might_resched+0x10/0x10 [ 158.356847][ T7263] should_fail_ex+0x3b0/0x4e0 [ 158.361539][ T7263] ? skb_clone+0x20c/0x390 [ 158.365957][ T7263] should_failslab+0x9/0x20 [ 158.370470][ T7263] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 158.375951][ T7263] skb_clone+0x20c/0x390 [ 158.380207][ T7263] nfnetlink_rcv+0x575/0x2a90 [ 158.384901][ T7263] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 158.390766][ T7263] ? __dev_queue_xmit+0x1763/0x3e90 [ 158.396019][ T7263] ? kasan_save_track+0x51/0x80 [ 158.400898][ T7263] ? do_syscall_64+0xf3/0x230 [ 158.405594][ T7263] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 158.410745][ T7263] ? ref_tracker_free+0x643/0x7e0 [ 158.415802][ T7263] ? __asan_memcpy+0x40/0x70 [ 158.420472][ T7263] ? __pfx_ref_tracker_free+0x10/0x10 [ 158.425896][ T7263] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.431110][ T7263] ? skb_clone+0x240/0x390 [ 158.435605][ T7263] ? __pfx_lock_release+0x10/0x10 [ 158.440649][ T7263] ? __netlink_deliver_tap+0x77e/0x7c0 [ 158.446224][ T7263] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.451447][ T7263] netlink_unicast+0x7f0/0x990 [ 158.456258][ T7263] ? __pfx_netlink_unicast+0x10/0x10 [ 158.461553][ T7263] ? __virt_addr_valid+0x183/0x530 [ 158.466685][ T7263] ? __check_object_size+0x49c/0x900 [ 158.471983][ T7263] ? bpf_lsm_netlink_send+0x9/0x10 [ 158.477103][ T7263] netlink_sendmsg+0x8e4/0xcb0 [ 158.481884][ T7263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.487178][ T7263] ? __import_iovec+0x536/0x820 [ 158.492039][ T7263] ? aa_sock_msg_perm+0x91/0x160 [ 158.496988][ T7263] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 158.502276][ T7263] ? security_socket_sendmsg+0x87/0xb0 [ 158.507742][ T7263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.513029][ T7263] __sock_sendmsg+0x221/0x270 [ 158.517713][ T7263] ____sys_sendmsg+0x525/0x7d0 [ 158.522593][ T7263] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.527897][ T7263] __sys_sendmsg+0x2b0/0x3a0 [ 158.532579][ T7263] ? __pfx___sys_sendmsg+0x10/0x10 [ 158.537824][ T7263] ? vfs_write+0x7c4/0xc90 [ 158.542275][ T7263] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 158.548603][ T7263] ? do_syscall_64+0x100/0x230 [ 158.553390][ T7263] ? do_syscall_64+0xb6/0x230 [ 158.558090][ T7263] do_syscall_64+0xf3/0x230 [ 158.562599][ T7263] ? clear_bhb_loop+0x35/0x90 [ 158.567304][ T7263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.573212][ T7263] RIP: 0033:0x7f0628b75f19 [ 158.577645][ T7263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.597340][ T7263] RSP: 002b:00007f06298cb048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.605761][ T7263] RAX: ffffffffffffffda RBX: 00007f0628d05f60 RCX: 00007f0628b75f19 [ 158.613738][ T7263] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 158.621710][ T7263] RBP: 00007f06298cb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 158.629691][ T7263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.637682][ T7263] R13: 000000000000000b R14: 00007f0628d05f60 R15: 00007ffca702ffa8 [ 158.645677][ T7263] [ 158.680127][ T7267] tipc: Started in network mode [ 158.693262][ T7268] __nla_validate_parse: 4 callbacks suppressed [ 158.693281][ T7268] netlink: 516 bytes leftover after parsing attributes in process `syz.2.651'. [ 158.701329][ T7267] tipc: Node identity 2aca3ace0818, cluster identity 4711 [ 158.731107][ T7267] tipc: Enabled bearer , priority 0 [ 159.166082][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.655'. [ 159.360441][ T7285] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 159.408868][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'. [ 159.450622][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.660'. [ 159.532132][ T55] block nbd4: Receive control failed (result -107) [ 159.693915][ T7292] netlink: 72 bytes leftover after parsing attributes in process `syz.3.662'. [ 159.726888][ T7292] netlink: 16 bytes leftover after parsing attributes in process `syz.3.662'. [ 159.767658][ T7276] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 159.891956][ T5182] tipc: Node number set to 584202958 [ 159.950805][ T7303] netlink: 100 bytes leftover after parsing attributes in process `syz.1.665'. [ 160.091832][ T7307] netlink: 'syz.4.669': attribute type 10 has an invalid length. [ 160.230957][ T55] Bluetooth: hci0: command 0x0c20 tx timeout [ 160.409816][ C0] eth0: bad gso: type: 1, size: 1408 [ 160.534369][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.676'. [ 160.711091][ T76] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 161.077150][ T7320] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 161.093374][ T7346] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 161.192137][ T7356] netlink: 'syz.0.685': attribute type 10 has an invalid length. [ 161.287766][ T7356] team0: Port device netdevsim0 added [ 161.315981][ T7360] netlink: 'syz.0.685': attribute type 10 has an invalid length. [ 161.389502][ T7360] team0: Port device netdevsim0 removed [ 161.434628][ T7360] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 161.625091][ T7374] netlink: 'syz.1.692': attribute type 10 has an invalid length. [ 161.690814][ T7376] netlink: 172 bytes leftover after parsing attributes in process `syz.0.693'. [ 162.321200][ T55] Bluetooth: hci0: command 0x0c20 tx timeout [ 162.385383][ T4498] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 162.405924][ T7389] @ÿ: renamed from veth0_vlan (while UP) [ 162.407332][ T4498] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 162.423098][ T4498] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 162.433792][ T4498] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 162.442390][ T4498] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 162.449857][ T4498] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 162.606745][ T7400] FAULT_INJECTION: forcing a failure. [ 162.606745][ T7400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.634309][ T7400] CPU: 0 PID: 7400 Comm: syz.1.701 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 162.644005][ T7400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 162.654095][ T7400] Call Trace: [ 162.657407][ T7400] [ 162.660357][ T7400] dump_stack_lvl+0x241/0x360 [ 162.665081][ T7400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.670319][ T7400] ? __pfx__printk+0x10/0x10 [ 162.674945][ T7400] ? __pfx_lock_release+0x10/0x10 [ 162.680018][ T7400] should_fail_ex+0x3b0/0x4e0 [ 162.684734][ T7400] _copy_from_user+0x2f/0xe0 [ 162.689359][ T7400] copy_msghdr_from_user+0xae/0x680 [ 162.694593][ T7400] ? __pfx___might_resched+0x10/0x10 [ 162.699915][ T7400] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 162.705771][ T7400] ? __might_fault+0xaa/0x120 [ 162.710485][ T7400] __sys_sendmmsg+0x374/0x740 [ 162.715202][ T7400] ? __pfx___sys_sendmmsg+0x10/0x10 [ 162.720470][ T7400] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 162.726404][ T7400] ? ksys_write+0x23e/0x2c0 [ 162.730948][ T7400] ? __pfx_lock_release+0x10/0x10 [ 162.736031][ T7400] ? vfs_write+0x7c4/0xc90 [ 162.740479][ T7400] ? __mutex_unlock_slowpath+0x21d/0x750 [ 162.746144][ T7400] ? __pfx_vfs_write+0x10/0x10 [ 162.750972][ T7400] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 162.757013][ T7400] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 162.763371][ T7400] ? do_syscall_64+0x100/0x230 [ 162.768174][ T7400] __x64_sys_sendmmsg+0xa0/0xb0 [ 162.773062][ T7400] do_syscall_64+0xf3/0x230 [ 162.777600][ T7400] ? clear_bhb_loop+0x35/0x90 [ 162.782350][ T7400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.788277][ T7400] RIP: 0033:0x7f0628b75f19 [ 162.792719][ T7400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.794863][ T7392] lo speed is unknown, defaulting to 1000 [ 162.812326][ T7400] RSP: 002b:00007f06298cb048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 162.812356][ T7400] RAX: ffffffffffffffda RBX: 00007f0628d05f60 RCX: 00007f0628b75f19 [ 162.812375][ T7400] RDX: 000000000400008a RSI: 0000000020000180 RDI: 0000000000000003 [ 162.812390][ T7400] RBP: 00007f06298cb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 162.812406][ T7400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 162.858459][ T7400] R13: 000000000000000b R14: 00007f0628d05f60 R15: 00007ffca702ffa8 [ 162.866525][ T7400] [ 162.976842][ T7405] FAULT_INJECTION: forcing a failure. [ 162.976842][ T7405] name failslab, interval 1, probability 0, space 0, times 0 [ 163.003139][ T7405] CPU: 0 PID: 7405 Comm: syz.1.703 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 163.013183][ T7405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 163.023264][ T7405] Call Trace: [ 163.026570][ T7405] [ 163.029547][ T7405] dump_stack_lvl+0x241/0x360 [ 163.034261][ T7405] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.039493][ T7405] ? __pfx__printk+0x10/0x10 [ 163.044117][ T7405] ? __pfx___might_resched+0x10/0x10 [ 163.049541][ T7405] should_fail_ex+0x3b0/0x4e0 [ 163.054313][ T7405] ? sctp_copy_one_addr+0x328/0x680 [ 163.059555][ T7405] should_failslab+0x9/0x20 [ 163.064110][ T7405] __kmalloc_cache_noprof+0x6c/0x2c0 [ 163.069427][ T7405] ? __ipv6_addr_type+0x23c/0x2f0 [ 163.074491][ T7405] sctp_copy_one_addr+0x328/0x680 [ 163.079558][ T7405] sctp_bind_addr_copy+0xad/0x3b0 [ 163.084625][ T7405] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 163.091042][ T7405] sctp_connect_new_asoc+0x2f3/0x6c0 [ 163.096373][ T7405] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 163.102223][ T7405] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 163.108058][ T7405] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 163.113980][ T7405] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 163.119828][ T7405] __sctp_connect+0x66d/0xe30 [ 163.124561][ T7405] ? __pfx___sctp_connect+0x10/0x10 [ 163.129793][ T7405] ? __might_fault+0xc6/0x120 [ 163.134507][ T7405] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 163.140094][ T7405] ? security_sctp_bind_connect+0x90/0xb0 [ 163.145860][ T7405] sctp_getsockopt_connectx3+0x46f/0x730 [ 163.151542][ T7405] ? __local_bh_enable_ip+0x168/0x200 [ 163.156954][ T7405] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 163.163165][ T7405] ? __local_bh_enable_ip+0x168/0x200 [ 163.168577][ T7405] ? sctp_getsockopt+0x13a/0xbb0 [ 163.173642][ T7405] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 163.179422][ T7405] sctp_getsockopt+0x8de/0xbb0 [ 163.184220][ T7405] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 163.190156][ T7405] do_sock_getsockopt+0x373/0x850 [ 163.195242][ T7405] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 163.200839][ T7405] ? __fget_files+0x3f6/0x470 [ 163.205566][ T7405] __sys_getsockopt+0x271/0x330 [ 163.210470][ T7405] ? __pfx___sys_getsockopt+0x10/0x10 [ 163.215894][ T7405] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 163.222272][ T7405] ? do_syscall_64+0x100/0x230 [ 163.227081][ T7405] __x64_sys_getsockopt+0xb5/0xd0 [ 163.232157][ T7405] do_syscall_64+0xf3/0x230 [ 163.236706][ T7405] ? clear_bhb_loop+0x35/0x90 [ 163.241436][ T7405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.247375][ T7405] RIP: 0033:0x7f0628b75f19 [ 163.251821][ T7405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.271457][ T7405] RSP: 002b:00007f06298cb048 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 163.279884][ T7405] RAX: ffffffffffffffda RBX: 00007f0628d05f60 RCX: 00007f0628b75f19 [ 163.287876][ T7405] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000005 [ 163.295854][ T7405] RBP: 00007f06298cb0a0 R08: 00000000200002c0 R09: 0000000000000000 [ 163.303831][ T7405] R10: 0000000020000280 R11: 0000000000000246 R12: 0000000000000001 [ 163.311809][ T7405] R13: 000000000000000b R14: 00007f0628d05f60 R15: 00007ffca702ffa8 [ 163.319802][ T7405] [ 163.617067][ T7394] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 163.936889][ T7392] chnl_net:caif_netlink_parms(): no params data found [ 164.210060][ T7392] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.240449][ T7392] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.252059][ T7392] bridge_slave_0: entered allmulticast mode [ 164.259713][ T7392] bridge_slave_0: entered promiscuous mode [ 164.305784][ T7392] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.320756][ T7392] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.328978][ T7392] bridge_slave_1: entered allmulticast mode [ 164.352271][ T7392] bridge_slave_1: entered promiscuous mode [ 164.390720][ T4498] Bluetooth: hci0: command 0x0c20 tx timeout [ 164.446431][ T7392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.463372][ T7392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.551143][ T4498] Bluetooth: hci2: command tx timeout [ 164.574798][ T7392] team0: Port device team_slave_0 added [ 164.618960][ T7392] team0: Port device team_slave_1 added [ 164.748453][ T7392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.763629][ T7392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.819655][ T7392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.851945][ T7392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.866812][ T7392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.927609][ T7392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.944906][ T7438] netlink: 'syz.0.711': attribute type 4 has an invalid length. [ 165.018385][ T7439] netlink: 'syz.0.711': attribute type 4 has an invalid length. [ 165.131229][ T7431] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 165.206384][ T7392] hsr_slave_0: entered promiscuous mode [ 165.245803][ T7392] hsr_slave_1: entered promiscuous mode [ 165.258201][ T7392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.276236][ T7392] Cannot create hsr debugfs directory [ 165.293038][ T7445] cannot load conntrack support for proto=3 [ 165.440431][ T7434] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 165.929618][ T7392] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.112091][ T7392] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.276677][ T7392] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.392981][ T7392] bond0: (slave netdevsim0): Releasing backup interface [ 166.425184][ T7392] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.471232][ T4498] Bluetooth: hci0: command 0x0c20 tx timeout [ 166.477920][ T6149] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 166.631159][ T4498] Bluetooth: hci2: command tx timeout [ 166.785173][ T7392] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 166.896030][ T7481] ip6t_rpfilter: unknown options [ 166.911962][ T7392] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 167.016559][ T7392] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 167.050797][ T7392] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 167.307173][ T7488] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.724'. [ 167.380946][ T7392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.461886][ T7392] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.492287][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.499464][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.533975][ T7477] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 167.560159][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.567501][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.927321][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.729'. [ 167.951077][ T7505] netlink: 16 bytes leftover after parsing attributes in process `syz.0.729'. [ 168.134842][ T7510] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.729'. [ 168.550890][ T4498] Bluetooth: hci0: command 0x0c20 tx timeout [ 168.557225][ T7489] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 168.586716][ T7513] netlink: 16 bytes leftover after parsing attributes in process `syz.3.731'. [ 168.596882][ T7513] FAULT_INJECTION: forcing a failure. [ 168.596882][ T7513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.610900][ T7513] CPU: 0 PID: 7513 Comm: syz.3.731 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 168.620588][ T7513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 168.630684][ T7513] Call Trace: [ 168.633999][ T7513] [ 168.636962][ T7513] dump_stack_lvl+0x241/0x360 [ 168.641689][ T7513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.643644][ T7392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.646910][ T7513] ? __pfx__printk+0x10/0x10 [ 168.658306][ T7513] ? snprintf+0xda/0x120 [ 168.662600][ T7513] should_fail_ex+0x3b0/0x4e0 [ 168.667334][ T7513] _copy_to_user+0x2f/0xb0 [ 168.671812][ T7513] simple_read_from_buffer+0xca/0x150 [ 168.677248][ T7513] proc_fail_nth_read+0x1e9/0x250 [ 168.682346][ T7513] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.687948][ T7513] ? rw_verify_area+0x520/0x6b0 [ 168.692843][ T7513] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.698433][ T7513] vfs_read+0x204/0xbc0 [ 168.702640][ T7513] ? __pfx_lock_release+0x10/0x10 [ 168.707734][ T7513] ? __pfx_vfs_read+0x10/0x10 [ 168.712470][ T7513] ? __fget_files+0x29/0x470 [ 168.717113][ T7513] ? __fget_files+0x3f6/0x470 [ 168.721710][ T4498] Bluetooth: hci2: command tx timeout [ 168.721819][ T7513] ksys_read+0x1a0/0x2c0 [ 168.731456][ T7513] ? __pfx_ksys_read+0x10/0x10 [ 168.736270][ T7513] ? do_syscall_64+0x100/0x230 [ 168.741080][ T7513] ? do_syscall_64+0xb6/0x230 [ 168.745795][ T7513] do_syscall_64+0xf3/0x230 [ 168.750346][ T7513] ? clear_bhb_loop+0x35/0x90 [ 168.755074][ T7513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.761013][ T7513] RIP: 0033:0x7fadef5749fc [ 168.765558][ T7513] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 168.785209][ T7513] RSP: 002b:00007fadf02be040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 168.793675][ T7513] RAX: ffffffffffffffda RBX: 00007fadef705f60 RCX: 00007fadef5749fc [ 168.801693][ T7513] RDX: 000000000000000f RSI: 00007fadf02be0b0 RDI: 0000000000000004 [ 168.809767][ T7513] RBP: 00007fadf02be0a0 R08: 0000000000000000 R09: 0000000000000000 [ 168.817780][ T7513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 168.825874][ T7513] R13: 000000000000000b R14: 00007fadef705f60 R15: 00007ffd63f90db8 [ 168.833909][ T7513] [ 169.123444][ T7392] veth0_vlan: entered promiscuous mode [ 169.170181][ T7392] veth1_vlan: entered promiscuous mode [ 169.283471][ T7392] veth0_macvtap: entered promiscuous mode [ 169.320277][ T7392] veth1_macvtap: entered promiscuous mode [ 169.368162][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.405943][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.440984][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.466102][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.488658][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.519826][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.540110][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.570827][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.601189][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.633785][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.654046][ T7392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.771686][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.773254][ T7538] FAULT_INJECTION: forcing a failure. [ 169.773254][ T7538] name failslab, interval 1, probability 0, space 0, times 0 [ 169.791824][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.819847][ T7538] CPU: 1 PID: 7538 Comm: syz.2.736 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 169.820765][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.829606][ T7538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 169.829624][ T7538] Call Trace: [ 169.829635][ T7538] [ 169.829645][ T7538] dump_stack_lvl+0x241/0x360 [ 169.829684][ T7538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.829714][ T7538] ? __pfx__printk+0x10/0x10 [ 169.829739][ T7538] ? xfrm_netlink_rcv+0x79/0x90 [ 169.829766][ T7538] ? ____sys_sendmsg+0x525/0x7d0 [ 169.829801][ T7538] ? do_syscall_64+0xf3/0x230 [ 169.829827][ T7538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.829869][ T7538] should_fail_ex+0x3b0/0x4e0 [ 169.829898][ T7538] ? __alloc_skb+0x1c3/0x440 [ 169.829932][ T7538] should_failslab+0x9/0x20 [ 169.829960][ T7538] kmem_cache_alloc_node_noprof+0x71/0x320 [ 169.829998][ T7538] __alloc_skb+0x1c3/0x440 [ 169.830038][ T7538] ? __pfx___alloc_skb+0x10/0x10 [ 169.830084][ T7538] xfrm_send_policy_notify+0x291/0x2360 [ 169.830123][ T7538] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 169.830147][ T7538] ? xfrm_policy_insert+0x665/0x940 [ 169.830173][ T7538] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 169.830203][ T7538] ? xfrm_policy_kill+0xb8/0x2c0 [ 169.850757][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.853929][ T7538] ? xfrm_policy_destroy+0x184/0x210 [ 169.853966][ T7538] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 169.856946][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.861543][ T7538] km_policy_notify+0x126/0x210 [ 169.861571][ T7538] ? km_policy_notify+0x2e/0x210 [ 169.861601][ T7538] xfrm_add_policy+0x54c/0x980 [ 169.861634][ T7538] ? __pfx_xfrm_add_policy+0x10/0x10 [ 169.861672][ T7538] ? __nla_parse+0x40/0x60 [ 169.870580][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.871420][ T7538] xfrm_user_rcv_msg+0x75b/0xa80 [ 169.876254][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.881182][ T7538] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 169.881251][ T7538] ? __mutex_trylock_common+0x183/0x2e0 [ 169.881286][ T7538] ? __pfx___might_resched+0x10/0x10 [ 169.881325][ T7538] netlink_rcv_skb+0x1e3/0x430 [ 169.881354][ T7538] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 169.903054][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.905846][ T7538] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 169.923038][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.926603][ T7538] xfrm_netlink_rcv+0x79/0x90 [ 169.938045][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.943484][ T7538] netlink_unicast+0x7f0/0x990 [ 169.943529][ T7538] ? __pfx_netlink_unicast+0x10/0x10 [ 169.943554][ T7538] ? __virt_addr_valid+0x183/0x530 [ 169.943593][ T7538] ? __check_object_size+0x49c/0x900 [ 169.959063][ T7392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.963631][ T7538] ? bpf_lsm_netlink_send+0x9/0x10 [ 169.963669][ T7538] netlink_sendmsg+0x8e4/0xcb0 [ 169.963714][ T7538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.963746][ T7538] ? __import_iovec+0x536/0x820 [ 169.994052][ T7392] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.994634][ T7538] ? aa_sock_msg_perm+0x91/0x160 [ 169.994674][ T7538] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 170.000210][ T7392] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.004354][ T7538] ? security_socket_sendmsg+0x87/0xb0 [ 170.004400][ T7538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.004429][ T7538] __sock_sendmsg+0x221/0x270 [ 170.004461][ T7538] ____sys_sendmsg+0x525/0x7d0 [ 170.004504][ T7538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.004559][ T7538] __sys_sendmsg+0x2b0/0x3a0 [ 170.004585][ T7538] ? __pfx___sys_sendmsg+0x10/0x10 [ 170.004618][ T7538] ? vfs_write+0x7c4/0xc90 [ 170.004691][ T7538] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 170.029037][ T7392] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.029826][ T7538] ? do_syscall_64+0x100/0x230 [ 170.041937][ T7392] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.046095][ T7538] ? do_syscall_64+0xb6/0x230 [ 170.244160][ T7538] do_syscall_64+0xf3/0x230 [ 170.248676][ T7538] ? clear_bhb_loop+0x35/0x90 [ 170.253384][ T7538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.259295][ T7538] RIP: 0033:0x7fe4e2b75f19 [ 170.263725][ T7538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.283345][ T7538] RSP: 002b:00007fe4e38ed048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.291768][ T7538] RAX: ffffffffffffffda RBX: 00007fe4e2d05f60 RCX: 00007fe4e2b75f19 [ 170.299744][ T7538] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 170.307722][ T7538] RBP: 00007fe4e38ed0a0 R08: 0000000000000000 R09: 0000000000000000 [ 170.315700][ T7538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.323677][ T7538] R13: 000000000000000b R14: 00007fe4e2d05f60 R15: 00007ffe0dae4a78 [ 170.331671][ T7538] [ 170.533821][ T7532] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 170.629434][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.637785][ T4498] Bluetooth: hci0: command 0x0c20 tx timeout [ 170.650329][ T7544] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 170.668789][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.777163][ T6149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.790903][ T4498] Bluetooth: hci2: command tx timeout [ 170.802467][ T6149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.118171][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.695'. [ 171.200725][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.695'. [ 171.252357][ T4498] block nbd5: Receive control failed (result -107) [ 171.300942][ T7560] nbd5: detected capacity change from 0 to 256 [ 171.328519][ T6045] block nbd5: Dead connection, failed to find a fallback [ 172.231671][ T76] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 172.423491][ T7588] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 172.711874][ T4498] Bluetooth: hci0: command 0x0c20 tx timeout [ 172.723475][ T7595] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 172.868949][ T7614] netlink: 16 bytes leftover after parsing attributes in process `syz.0.759'. [ 173.069724][ T7618] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.760'. [ 173.362301][ T7630] team0: Device macvlan2 failed to change mtu [ 173.493024][ T7638] netlink: 20 bytes leftover after parsing attributes in process `syz.0.769'. [ 173.873420][ T7655] FAULT_INJECTION: forcing a failure. [ 173.873420][ T7655] name failslab, interval 1, probability 0, space 0, times 0 [ 173.929425][ T7655] CPU: 1 PID: 7655 Comm: syz.2.775 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 173.939132][ T7655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 173.949203][ T7655] Call Trace: [ 173.952495][ T7655] [ 173.955431][ T7655] dump_stack_lvl+0x241/0x360 [ 173.960300][ T7655] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.965525][ T7655] ? __pfx__printk+0x10/0x10 [ 173.970129][ T7655] ? mark_lock+0x9a/0x350 [ 173.974480][ T7655] should_fail_ex+0x3b0/0x4e0 [ 173.979166][ T7655] ? __alloc_skb+0x1c3/0x440 [ 173.983769][ T7655] should_failslab+0x9/0x20 [ 173.988292][ T7655] kmem_cache_alloc_node_noprof+0x71/0x320 [ 173.994119][ T7655] __alloc_skb+0x1c3/0x440 [ 173.998561][ T7655] ? __pfx___alloc_skb+0x10/0x10 [ 174.003527][ T7655] xfrm_send_policy_notify+0x291/0x2360 [ 174.009084][ T7655] ? __local_bh_enable_ip+0x168/0x200 [ 174.014464][ T7655] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 174.020446][ T7655] ? xfrm_policy_insert+0x665/0x940 [ 174.025820][ T7655] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 174.031554][ T7655] ? do_raw_spin_unlock+0x13c/0x8b0 [ 174.036773][ T7655] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 174.042764][ T7655] km_policy_notify+0x126/0x210 [ 174.047623][ T7655] ? km_policy_notify+0x2e/0x210 [ 174.052570][ T7655] xfrm_add_policy+0x54c/0x980 [ 174.057348][ T7655] ? __pfx_xfrm_add_policy+0x10/0x10 [ 174.062648][ T7655] ? __nla_parse+0x40/0x60 [ 174.067076][ T7655] xfrm_user_rcv_msg+0x75b/0xa80 [ 174.072031][ T7655] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 174.077532][ T7655] ? __mutex_trylock_common+0x183/0x2e0 [ 174.083108][ T7655] ? __pfx___might_resched+0x10/0x10 [ 174.088410][ T7655] netlink_rcv_skb+0x1e3/0x430 [ 174.093186][ T7655] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 174.098656][ T7655] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 174.103978][ T7655] xfrm_netlink_rcv+0x79/0x90 [ 174.108666][ T7655] netlink_unicast+0x7f0/0x990 [ 174.113440][ T7655] ? __pfx_netlink_unicast+0x10/0x10 [ 174.118726][ T7655] ? __virt_addr_valid+0x183/0x530 [ 174.123846][ T7655] ? __check_object_size+0x49c/0x900 [ 174.129136][ T7655] ? bpf_lsm_netlink_send+0x9/0x10 [ 174.134303][ T7655] netlink_sendmsg+0x8e4/0xcb0 [ 174.139095][ T7655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.144424][ T7655] ? __import_iovec+0x536/0x820 [ 174.149285][ T7655] ? aa_sock_msg_perm+0x91/0x160 [ 174.154249][ T7655] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 174.159550][ T7655] ? security_socket_sendmsg+0x87/0xb0 [ 174.165033][ T7655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.170331][ T7655] __sock_sendmsg+0x221/0x270 [ 174.175045][ T7655] ____sys_sendmsg+0x525/0x7d0 [ 174.179851][ T7655] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.185163][ T7655] __sys_sendmsg+0x2b0/0x3a0 [ 174.189759][ T7655] ? __pfx___sys_sendmsg+0x10/0x10 [ 174.194883][ T7655] ? vfs_write+0x7c4/0xc90 [ 174.199360][ T7655] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 174.205722][ T7655] ? do_syscall_64+0x100/0x230 [ 174.210516][ T7655] ? do_syscall_64+0xb6/0x230 [ 174.215220][ T7655] do_syscall_64+0xf3/0x230 [ 174.219740][ T7655] ? clear_bhb_loop+0x35/0x90 [ 174.224434][ T7655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.230359][ T7655] RIP: 0033:0x7fe4e2b75f19 [ 174.234797][ T7655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.254421][ T7655] RSP: 002b:00007fe4e38ed048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.262846][ T7655] RAX: ffffffffffffffda RBX: 00007fe4e2d05f60 RCX: 00007fe4e2b75f19 [ 174.270824][ T7655] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 174.278797][ T7655] RBP: 00007fe4e38ed0a0 R08: 0000000000000000 R09: 0000000000000000 [ 174.286776][ T7655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.294752][ T7655] R13: 000000000000000b R14: 00007fe4e2d05f60 R15: 00007ffe0dae4a78 [ 174.302745][ T7655] [ 174.629654][ T7649] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 174.753539][ T7667] netlink: 516 bytes leftover after parsing attributes in process `syz.2.780'. [ 174.795463][ T4498] Bluetooth: hci0: command 0x0c20 tx timeout [ 174.805036][ T7651] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 174.953691][ T7670] netlink: 168 bytes leftover after parsing attributes in process `syz.0.781'. [ 174.990955][ T7669] netlink: 168 bytes leftover after parsing attributes in process `syz.0.781'. [ 175.099904][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.781'. [ 175.879757][ T7699] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.921818][ T7703] FAULT_INJECTION: forcing a failure. [ 175.921818][ T7703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.942980][ T7699] IPVS: Error joining to the multicast group [ 175.965704][ T7703] CPU: 0 PID: 7703 Comm: syz.0.792 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 175.975407][ T7703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 175.985504][ T7703] Call Trace: [ 175.988811][ T7703] [ 175.991770][ T7703] dump_stack_lvl+0x241/0x360 [ 175.996494][ T7703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.001731][ T7703] ? __pfx__printk+0x10/0x10 [ 176.006358][ T7703] ? __pfx_lock_release+0x10/0x10 [ 176.011435][ T7703] should_fail_ex+0x3b0/0x4e0 [ 176.016165][ T7703] _copy_from_iter+0x1f6/0x1960 [ 176.021062][ T7703] ? __virt_addr_valid+0x183/0x530 [ 176.026212][ T7703] ? __pfx_lock_release+0x10/0x10 [ 176.031266][ T7703] ? __alloc_skb+0x28f/0x440 [ 176.035871][ T7703] ? __pfx__copy_from_iter+0x10/0x10 [ 176.041173][ T7703] ? __virt_addr_valid+0x183/0x530 [ 176.046296][ T7703] ? __virt_addr_valid+0x183/0x530 [ 176.051419][ T7703] ? __virt_addr_valid+0x45f/0x530 [ 176.056545][ T7703] ? __check_object_size+0x49c/0x900 [ 176.061858][ T7703] netlink_sendmsg+0x73d/0xcb0 [ 176.066652][ T7703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.071962][ T7703] ? __import_iovec+0x536/0x820 [ 176.076839][ T7703] ? aa_sock_msg_perm+0x91/0x160 [ 176.081818][ T7703] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 176.087129][ T7703] ? security_socket_sendmsg+0x87/0xb0 [ 176.092614][ T7703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.097926][ T7703] __sock_sendmsg+0x221/0x270 [ 176.102649][ T7703] ____sys_sendmsg+0x525/0x7d0 [ 176.107435][ T7703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.112748][ T7703] __sys_sendmsg+0x2b0/0x3a0 [ 176.117358][ T7703] ? __pfx___sys_sendmsg+0x10/0x10 [ 176.122485][ T7703] ? vfs_write+0x7c4/0xc90 [ 176.126954][ T7703] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 176.133292][ T7703] ? do_syscall_64+0x100/0x230 [ 176.138066][ T7703] ? do_syscall_64+0xb6/0x230 [ 176.142754][ T7703] do_syscall_64+0xf3/0x230 [ 176.147279][ T7703] ? clear_bhb_loop+0x35/0x90 [ 176.151970][ T7703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.157877][ T7703] RIP: 0033:0x7f81cf375f19 [ 176.162295][ T7703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.181992][ T7703] RSP: 002b:00007f81d0168048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.190444][ T7703] RAX: ffffffffffffffda RBX: 00007f81cf505f60 RCX: 00007f81cf375f19 [ 176.198441][ T7703] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000010 [ 176.206436][ T7703] RBP: 00007f81d01680a0 R08: 0000000000000000 R09: 0000000000000000 [ 176.214431][ T7703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.222430][ T7703] R13: 000000000000000b R14: 00007f81cf505f60 R15: 00007ffc35f94a38 [ 176.230433][ T7703] [ 176.680769][ T7718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.729591][ T7718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.850062][ T7707] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 176.882061][ T4498] Bluetooth: hci0: command 0x0c20 tx timeout [ 176.888284][ T7710] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 177.428203][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.804'. [ 177.463984][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.804'. [ 177.532269][ T4498] block nbd6: Receive control failed (result -107) [ 178.006144][ T76] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 178.041796][ T7753] netlink: 16 bytes leftover after parsing attributes in process `syz.4.809'. [ 178.105467][ T7757] netlink: 36 bytes leftover after parsing attributes in process `syz.3.811'. [ 178.146572][ T7757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.811'. [ 178.752614][ T7774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.800699][ T7774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.954584][ T7758] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 178.962149][ T4498] Bluetooth: hci0: command 0x0c20 tx timeout [ 179.029254][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.818'. [ 179.157042][ T7762] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 179.676010][ T7806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.826'. [ 179.762587][ T4498] Bluetooth: hci2: command tx timeout [ 179.882486][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.827'. [ 180.067032][ T7821] netlink: 'syz.3.830': attribute type 10 has an invalid length. [ 180.102926][ T7821] bond0: (slave netdevsim0): Releasing backup interface [ 180.160323][ T7821] team0: Port device netdevsim0 added [ 180.178675][ T7823] netlink: 'syz.3.830': attribute type 10 has an invalid length. [ 180.196392][ T7825] xt_HMARK: spi-set and port-set can't be combined [ 180.234079][ T7823] team0: Port device netdevsim0 removed [ 180.256939][ T7823] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 181.041548][ T4498] Bluetooth: hci0: command 0x0c20 tx timeout [ 181.047953][ T7854] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 181.442652][ T7866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.840'. [ 181.789763][ T7870] xt_HMARK: spi-set and port-set can't be combined [ 182.040355][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 182.053872][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 182.063021][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 182.074853][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 182.076114][ T7878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.109754][ T55] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 182.121290][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 182.208968][ T7872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.327213][ T7873] lo speed is unknown, defaulting to 1000 [ 182.343125][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.844'. [ 182.428322][ T7883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.845'. [ 183.331252][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.851'. [ 183.404737][ T7873] chnl_net:caif_netlink_parms(): no params data found [ 183.446090][ T7913] xt_HMARK: spi-set and port-set can't be combined [ 183.695068][ T7873] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.739763][ T7873] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.753193][ T76] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 183.771433][ T7873] bridge_slave_0: entered allmulticast mode [ 183.808064][ T7873] bridge_slave_0: entered promiscuous mode [ 183.825457][ T7873] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.844764][ T7873] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.881545][ T7873] bridge_slave_1: entered allmulticast mode [ 183.906402][ T7873] bridge_slave_1: entered promiscuous mode [ 184.086267][ T7873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.135954][ T7873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.151360][ T55] Bluetooth: hci5: command tx timeout [ 184.314722][ T7873] team0: Port device team_slave_0 added [ 184.354997][ T7873] team0: Port device team_slave_1 added [ 184.380143][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.856'. [ 184.536869][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.857'. [ 184.576483][ T7873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.607016][ T7873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.700745][ T7873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.740862][ T7943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.751229][ T7873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.758246][ T7873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.821961][ T7946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.826833][ T7873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.972478][ T7873] hsr_slave_0: entered promiscuous mode [ 184.996331][ T7873] hsr_slave_1: entered promiscuous mode [ 185.007229][ T7873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.017518][ T7873] Cannot create hsr debugfs directory [ 185.243387][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.862'. [ 185.436510][ T7956] xt_HMARK: spi-set and port-set can't be combined [ 185.628105][ T7873] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.834639][ T7873] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.021466][ T7873] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.169825][ T7873] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.231933][ T55] Bluetooth: hci5: command tx timeout [ 186.702166][ T7873] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 186.772314][ T7873] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 186.819920][ T7873] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 186.876265][ T7873] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 187.246522][ T7873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.356911][ T7873] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.404100][ T5191] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.411321][ T5191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.447302][ T7976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 187.483705][ T7978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.869'. [ 187.582374][ T5191] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.589561][ T5191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.772677][ T7873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.001865][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.872'. [ 188.051718][ T7991] xt_HMARK: spi-set and port-set can't be combined [ 188.077522][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 188.323300][ T55] Bluetooth: hci5: command tx timeout [ 188.326222][ T7873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.518798][ T7873] veth0_vlan: entered promiscuous mode [ 188.578272][ T7873] veth1_vlan: entered promiscuous mode [ 188.765976][ T7873] veth0_macvtap: entered promiscuous mode [ 188.824899][ T7873] veth1_macvtap: entered promiscuous mode [ 188.885326][ T7873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.933308][ T7873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.981821][ T7873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.016837][ T7873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.043037][ T7873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.066217][ T7873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.093295][ T7873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.117265][ T7873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.141203][ T7873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.164596][ T7873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.188387][ T7873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.218186][ T7873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.246473][ T7873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.271870][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.880'. [ 189.321127][ T7873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.370746][ T7873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.402643][ T7873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.424532][ T7873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.453241][ T7873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.481835][ T7873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.503026][ T7873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.519468][ T6149] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 189.530599][ T7873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.560616][ T7873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.591695][ T7873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.622159][ T7873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.651876][ T7873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.692486][ T7873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.724676][ T7873] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.751642][ T7873] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.790629][ T7873] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.813656][ T7873] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.937956][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.882'. [ 190.169995][ T6138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.193332][ T6138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.286176][ T6138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.350200][ T6138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.392677][ T55] Bluetooth: hci5: command tx timeout [ 190.841768][ T8033] xt_HMARK: spi-set and port-set can't be combined [ 190.869905][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.885'. [ 191.261183][ T8044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.889'. [ 192.067834][ T8063] xt_HMARK: spi-set and port-set can't be combined [ 192.208760][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.898'. [ 194.143808][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.914'. [ 194.302145][ T4498] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 194.331462][ T4498] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 194.339696][ T4498] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 194.348609][ T4498] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 194.361941][ T4498] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 194.369472][ T4498] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 194.439614][ T8113] lo speed is unknown, defaulting to 1000 [ 194.620844][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.915'. [ 194.642003][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.648545][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.649677][ T6146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 195.061826][ T8126] netlink: 76 bytes leftover after parsing attributes in process `syz.2.919'. [ 195.115837][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.919'. [ 195.375417][ T8135] netlink: 'syz.2.923': attribute type 10 has an invalid length. [ 195.627368][ T8113] chnl_net:caif_netlink_parms(): no params data found [ 196.075984][ T8113] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.094812][ T8113] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.105734][ T8113] bridge_slave_0: entered allmulticast mode [ 196.114846][ T8113] bridge_slave_0: entered promiscuous mode [ 196.125807][ T8113] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.164111][ T8113] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.190226][ T8113] bridge_slave_1: entered allmulticast mode [ 196.222166][ T8113] bridge_slave_1: entered promiscuous mode [ 196.376197][ T8113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.415651][ T8113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.471389][ T5111] Bluetooth: hci0: command tx timeout [ 196.698631][ T8113] team0: Port device team_slave_0 added [ 196.713425][ T5111] Bluetooth: hci4: command 0x0406 tx timeout [ 196.719857][ T5103] Bluetooth: hci1: command 0x0406 tx timeout [ 196.753255][ T8113] team0: Port device team_slave_1 added [ 196.857986][ T8113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.876398][ T8113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.915267][ T8113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.940444][ T8113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.957971][ T8113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.017435][ T8113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.195950][ T8161] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 197.221217][ T8113] hsr_slave_0: entered promiscuous mode [ 197.253174][ T8113] hsr_slave_1: entered promiscuous mode [ 197.293578][ T8113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.329940][ T8113] Cannot create hsr debugfs directory [ 197.837476][ T8168] netlink: 28 bytes leftover after parsing attributes in process `syz.1.931'. [ 198.014362][ T8172] FAULT_INJECTION: forcing a failure. [ 198.014362][ T8172] name failslab, interval 1, probability 0, space 0, times 0 [ 198.044701][ T8113] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.058140][ T8172] CPU: 0 PID: 8172 Comm: syz.1.933 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 198.068228][ T8172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 198.078310][ T8172] Call Trace: [ 198.081607][ T8172] [ 198.084556][ T8172] dump_stack_lvl+0x241/0x360 [ 198.089276][ T8172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.094513][ T8172] ? __pfx__printk+0x10/0x10 [ 198.099161][ T8172] should_fail_ex+0x3b0/0x4e0 [ 198.103880][ T8172] ? nf_tables_newtable+0x52e/0x1dc0 [ 198.109195][ T8172] should_failslab+0x9/0x20 [ 198.113729][ T8172] __kmalloc_cache_noprof+0x6c/0x2c0 [ 198.119064][ T8172] ? nft_pernet+0x23/0x240 [ 198.123516][ T8172] nf_tables_newtable+0x52e/0x1dc0 [ 198.128684][ T8172] ? nfnl_pernet+0x23/0x240 [ 198.133235][ T8172] ? __pfx_nf_tables_newtable+0x10/0x10 [ 198.138824][ T8172] ? __nla_parse+0x40/0x60 [ 198.143281][ T8172] nfnetlink_rcv+0x1427/0x2a90 [ 198.148124][ T8172] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 198.153340][ T8172] ? netlink_deliver_tap+0x2e/0x1b0 [ 198.158574][ T8172] ? skb_clone+0x240/0x390 [ 198.163020][ T8172] ? __pfx_lock_release+0x10/0x10 [ 198.168097][ T8172] ? netlink_deliver_tap+0x2e/0x1b0 [ 198.173333][ T8172] netlink_unicast+0x7f0/0x990 [ 198.178138][ T8172] ? __pfx_netlink_unicast+0x10/0x10 [ 198.183459][ T8172] ? __virt_addr_valid+0x183/0x530 [ 198.188620][ T8172] ? __check_object_size+0x49c/0x900 [ 198.193952][ T8172] ? bpf_lsm_netlink_send+0x9/0x10 [ 198.199111][ T8172] netlink_sendmsg+0x8e4/0xcb0 [ 198.203937][ T8172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.209382][ T8172] ? __import_iovec+0x536/0x820 [ 198.214281][ T8172] ? aa_sock_msg_perm+0x91/0x160 [ 198.219287][ T8172] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 198.224613][ T8172] ? security_socket_sendmsg+0x87/0xb0 [ 198.230127][ T8172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.235459][ T8172] __sock_sendmsg+0x221/0x270 [ 198.240183][ T8172] ____sys_sendmsg+0x525/0x7d0 [ 198.245008][ T8172] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.250352][ T8172] __sys_sendmsg+0x2b0/0x3a0 [ 198.254987][ T8172] ? __pfx___sys_sendmsg+0x10/0x10 [ 198.260160][ T8172] ? vfs_write+0x7c4/0xc90 [ 198.264666][ T8172] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 198.271036][ T8172] ? do_syscall_64+0x100/0x230 [ 198.275849][ T8172] ? do_syscall_64+0xb6/0x230 [ 198.280563][ T8172] do_syscall_64+0xf3/0x230 [ 198.285100][ T8172] ? clear_bhb_loop+0x35/0x90 [ 198.289825][ T8172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.295762][ T8172] RIP: 0033:0x7fb2af775f19 [ 198.300213][ T8172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.319856][ T8172] RSP: 002b:00007fb2b052f048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.328318][ T8172] RAX: ffffffffffffffda RBX: 00007fb2af905f60 RCX: 00007fb2af775f19 [ 198.336329][ T8172] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 198.344344][ T8172] RBP: 00007fb2b052f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 198.352349][ T8172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.360344][ T8172] R13: 000000000000000b R14: 00007fb2af905f60 R15: 00007ffe0973bdf8 [ 198.368366][ T8172] [ 198.533755][ T8113] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.551037][ T55] Bluetooth: hci0: command tx timeout [ 198.697013][ T8113] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.779443][ T8182] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 198.914385][ T8113] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.275035][ T8113] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 199.325503][ T8113] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 199.362520][ T8113] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 199.384878][ T8113] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 199.528171][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.939'. [ 199.759410][ T1151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 199.816474][ T8191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.941'. [ 199.857321][ T8113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.943447][ T8113] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.985802][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.993027][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.074967][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.082232][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.394834][ T6149] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 200.630886][ T55] Bluetooth: hci0: command 0x040f tx timeout [ 200.816966][ T8113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.595782][ T8113] veth0_vlan: entered promiscuous mode [ 201.639398][ T8113] veth1_vlan: entered promiscuous mode [ 201.754836][ T8113] veth0_macvtap: entered promiscuous mode [ 201.803968][ T8113] veth1_macvtap: entered promiscuous mode [ 201.894044][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.920689][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.959448][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.991917][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.030535][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.060374][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.081659][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.101180][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.122030][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.170592][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.199432][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.230339][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.260611][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.291083][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.332773][ T8113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.398156][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.441042][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.470646][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.498809][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.519020][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.540784][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.581973][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.610583][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.640615][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.673645][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.711185][ T55] Bluetooth: hci0: command 0x040f tx timeout [ 202.727716][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.762821][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.805275][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.853979][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.887374][ T8113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.938889][ T8113] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.991369][ T8113] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.000131][ T8113] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.055184][ T8113] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.282759][ T6138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.307389][ T6138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.388791][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.398163][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.579524][ T8227] xt_HMARK: spi-set and port-set can't be combined [ 204.065685][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.950'. [ 204.791355][ T55] Bluetooth: hci0: command 0x040f tx timeout [ 204.811358][ T8237] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 204.939082][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.952'. [ 206.152478][ T76] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 206.432284][ T4498] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 206.447956][ T4498] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 206.457341][ T4498] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 206.472070][ T4498] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 206.479835][ T4498] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 206.487479][ T4498] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 206.705937][ T8254] lo speed is unknown, defaulting to 1000 [ 206.870914][ T4498] Bluetooth: hci0: command 0x040f tx timeout [ 207.421636][ T8263] xt_HMARK: spi-set and port-set can't be combined [ 207.552877][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.564408][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.584722][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.600214][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.612148][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 207.621277][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.945410][ T8264] lo speed is unknown, defaulting to 1000 [ 208.225737][ T8254] chnl_net:caif_netlink_parms(): no params data found [ 208.256219][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'. [ 208.318266][ T8274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.963'. [ 208.492119][ T6149] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.551895][ T55] Bluetooth: hci2: command tx timeout [ 208.694583][ T6149] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.845863][ T6149] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.026539][ T6149] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.114876][ T8254] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.138000][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.156505][ T8254] bridge_slave_0: entered allmulticast mode [ 209.172820][ T8254] bridge_slave_0: entered promiscuous mode [ 209.209850][ T8254] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.237346][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.255707][ T8254] bridge_slave_1: entered allmulticast mode [ 209.287511][ T8254] bridge_slave_1: entered promiscuous mode [ 209.575225][ T8254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.631785][ T8254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.670853][ T55] Bluetooth: hci1: command tx timeout [ 209.944423][ T8254] team0: Port device team_slave_0 added [ 210.632005][ T55] Bluetooth: hci2: command tx timeout [ 211.068990][ T6149] bond0 (unregistering): Released all slaves [ 211.110431][ T8254] team0: Port device team_slave_1 added [ 211.191937][ T6146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 211.306587][ T8254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.336798][ T8254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.430546][ T8254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.454025][ T8254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.471100][ T8254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.542887][ T8254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.563736][ T8264] chnl_net:caif_netlink_parms(): no params data found [ 211.750747][ T55] Bluetooth: hci1: command tx timeout [ 211.833486][ T8254] hsr_slave_0: entered promiscuous mode [ 211.854420][ T8254] hsr_slave_1: entered promiscuous mode [ 211.872055][ T8254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.879650][ T8254] Cannot create hsr debugfs directory [ 212.671551][ T8264] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.678847][ T8264] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.710680][ T55] Bluetooth: hci2: command tx timeout [ 212.710808][ T8264] bridge_slave_0: entered allmulticast mode [ 212.772177][ T8264] bridge_slave_0: entered promiscuous mode [ 212.821123][ T6149] hsr_slave_0: left promiscuous mode [ 212.841136][ T6149] hsr_slave_1: left promiscuous mode [ 212.899573][ T6149] veth1_macvtap: left promiscuous mode [ 212.922268][ T6149] veth0_macvtap: left promiscuous mode [ 212.942604][ T6149] veth1_vlan: left promiscuous mode [ 212.948077][ T6149] veth0_vlan: left promiscuous mode [ 213.147846][ T8308] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 213.831546][ T55] Bluetooth: hci1: command tx timeout [ 214.630735][ T55] Bluetooth: hci0: command 0x040f tx timeout [ 214.790705][ T55] Bluetooth: hci2: command tx timeout [ 214.882855][ T8264] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.901262][ T8264] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.908602][ T8264] bridge_slave_1: entered allmulticast mode [ 214.929809][ T8264] bridge_slave_1: entered promiscuous mode [ 215.109916][ T8264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.141880][ T8315] xt_HMARK: spi-set and port-set can't be combined [ 215.214922][ T8264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.350965][ T8254] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.369189][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.972'. [ 215.453288][ T8264] team0: Port device team_slave_0 added [ 215.509733][ T8254] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.527218][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.973'. [ 215.541335][ T8264] team0: Port device team_slave_1 added [ 215.727337][ T8254] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.755722][ T8264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.767232][ T8264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.796317][ T8264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.907094][ T8254] bond0: (slave netdevsim0): Releasing backup interface [ 215.916181][ T55] Bluetooth: hci1: command tx timeout [ 215.933511][ T8254] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.992036][ T8264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.005787][ T8264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.042815][ T8264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.264435][ T8264] hsr_slave_0: entered promiscuous mode [ 216.284197][ T8264] hsr_slave_1: entered promiscuous mode [ 216.298993][ T8264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.313888][ T8264] Cannot create hsr debugfs directory [ 216.397286][ T1103] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 216.543431][ T8254] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 216.566584][ T8254] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 216.599059][ T8254] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 216.638695][ T8254] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 217.020890][ T8254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.156525][ T8254] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.244661][ T5182] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.251862][ T5182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.275843][ T5182] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.283060][ T5182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.575446][ T8264] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 217.604604][ T8264] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 217.635549][ T8264] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 217.668482][ T8264] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 217.928435][ T8254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.936284][ T8353] xt_HMARK: spi-set and port-set can't be combined [ 218.132011][ T8264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.242268][ T8254] veth0_vlan: entered promiscuous mode [ 218.254858][ T8264] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.293449][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.983'. [ 218.328145][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.335495][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.391497][ T5182] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.399758][ T5182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.466593][ T8254] veth1_vlan: entered promiscuous mode [ 218.683994][ T8254] veth0_macvtap: entered promiscuous mode [ 218.725607][ T8254] veth1_macvtap: entered promiscuous mode [ 218.823199][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.859002][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.880426][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.900621][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.925654][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.949754][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.980558][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.008932][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.023682][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.054401][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.065508][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.077510][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.090061][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.101822][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.113598][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.124972][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.138779][ T8254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.183369][ T8365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.985'. [ 219.218039][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.264871][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.301608][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.324361][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.340532][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.375756][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.391572][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.409622][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.420370][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.433267][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.452737][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.472325][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.500422][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.512768][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.553703][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.575694][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.611354][ T8254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.663673][ T8254] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.685212][ T8254] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.709040][ T8254] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.741292][ T8254] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.767622][ T8264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.060615][ T6149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.068491][ T6149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.202255][ T8264] veth0_vlan: entered promiscuous mode [ 220.333566][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.367934][ T8264] veth1_vlan: entered promiscuous mode [ 220.375575][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.553466][ T8264] veth0_macvtap: entered promiscuous mode [ 220.599327][ T8264] veth1_macvtap: entered promiscuous mode [ 220.636358][ T8371] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 220.674041][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.700952][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.722700][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.770568][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.780436][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.818827][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.853107][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.872470][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.900603][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.930595][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.965628][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.000651][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.022545][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.053296][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.094011][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.130538][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.150598][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.170534][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.202236][ T8264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.292630][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.320555][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.330436][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.382239][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.411525][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.451309][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.491694][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.532117][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.562094][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.591055][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.606499][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.629210][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.670648][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.690549][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.712510][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.740576][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.760633][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.790595][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.824216][ T8264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.872636][ T8264] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.911030][ T8264] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.919790][ T8264] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.960560][ T8264] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.991126][ T55] Bluetooth: hci0: command 0x040f tx timeout [ 222.157869][ T76] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 222.322003][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.362150][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.473178][ T6146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.531227][ T6146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.682558][ T8392] xt_HMARK: spi-set and port-set can't be combined [ 223.053334][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.992'. [ 223.321226][ T8401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.994'. [ 224.364400][ T8414] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 225.156422][ T8432] xt_HMARK: spi-set and port-set can't be combined [ 225.661451][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1006'. [ 225.672122][ T55] Bluetooth: hci0: command 0x040f tx timeout [ 225.852151][ T8439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1007'. [ 227.101301][ T8463] xt_HMARK: spi-set and port-set can't be combined [ 227.672222][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'. [ 227.768113][ T8461] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 227.915484][ T1103] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 227.954309][ T8481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1020'. [ 228.456162][ T8502] xt_HMARK: spi-set and port-set can't be combined [ 229.040568][ T55] Bluetooth: hci0: command 0x040f tx timeout [ 229.981344][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1033'. [ 230.666833][ T8527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1038'. [ 231.268698][ T8539] xt_HMARK: spi-set and port-set can't be combined [ 231.592028][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1044'. [ 232.300045][ T8558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1048'. [ 233.684127][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 233.697277][ T30] INFO: task udevd:5115 blocked for more than 143 seconds. [ 233.710508][ T30] Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 233.718007][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 233.772501][ T30] task:udevd state:D stack:21400 pid:5115 tgid:5115 ppid:1 flags:0x00004002 [ 233.811181][ T30] Call Trace: [ 233.814684][ T30] [ 233.823674][ T30] __schedule+0x1800/0x4a60 [ 233.843515][ T30] ? __pfx___schedule+0x10/0x10 [ 233.854797][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1050'. [ 233.858771][ T30] ? __blk_flush_plug+0x449/0x500 [ 233.891859][ T30] ? __pfx_lock_release+0x10/0x10 [ 233.909152][ T30] ? __asan_memset+0x23/0x50 [ 233.924724][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 233.946864][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 233.970607][ T30] ? schedule+0x90/0x320 [ 233.975019][ T30] schedule+0x14b/0x320 [ 233.979242][ T30] schedule_timeout+0x1be/0x310 [ 234.010577][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 234.031698][ T30] ? __pfx_process_timeout+0x10/0x10 [ 234.050540][ T30] ? prepare_to_wait_event+0x3ba/0x400 [ 234.060604][ T30] nbd_queue_rq+0x7cd/0x2f70 [ 234.065295][ T30] ? validate_chain+0x11e/0x5900 [ 234.082238][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 234.087352][ T30] ? __lock_acquire+0x137a/0x2040 [ 234.102819][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 234.109063][ T30] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 234.130548][ T30] ? sbitmap_get+0x289/0x3f0 [ 234.150693][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 234.170581][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 234.176506][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 234.193259][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 234.200111][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 234.220596][ T30] ? __pfx___might_resched+0x10/0x10 [ 234.230857][ T30] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 234.243906][ T30] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 234.256145][ T30] blk_mq_run_hw_queue+0x576/0xae0 [ 234.270608][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 234.277284][ T30] blk_mq_flush_plug_list+0x1115/0x1880 [ 234.289774][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 234.303960][ T30] ? blk_mq_submit_bio+0x127e/0x22d0 [ 234.316845][ T30] __blk_flush_plug+0x420/0x500 [ 234.335609][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 234.355540][ T30] ? timekeeping_get_ns+0x5c/0x420 [ 234.381272][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 234.386580][ T30] __submit_bio+0x422/0x560 [ 234.414331][ T30] ? __pfx___submit_bio+0x10/0x10 [ 234.419444][ T30] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 234.440648][ T30] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 234.462982][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 234.489180][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 234.499288][ T30] ? __pfx___might_resched+0x10/0x10 [ 234.529722][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 234.539879][ T30] block_read_full_folio+0x93b/0xcd0 [ 234.560123][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 234.580368][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 234.600750][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 234.605702][ T30] ? folio_add_lru+0x357/0xd70 [ 234.620592][ T30] ? folio_add_lru+0x58f/0xd70 [ 234.625570][ T30] filemap_read_folio+0x1a0/0x790 [ 234.635715][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 234.645855][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 234.660628][ T30] ? __filemap_get_folio+0x984/0xc10 [ 234.665996][ T30] do_read_cache_folio+0x134/0x820 [ 234.691593][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 234.710581][ T30] read_part_sector+0xb3/0x330 [ 234.715446][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 234.730587][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 234.741628][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 234.751229][ T30] ? snprintf+0xda/0x120 [ 234.755535][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 234.771605][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 234.776272][ T30] ? vsnprintf+0x184/0x1da0 [ 234.790547][ T30] ? __pfx_snprintf+0x10/0x10 [ 234.801624][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 234.816777][ T30] bdev_disk_changed+0x72c/0x13d0 [ 234.822225][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 234.838002][ T30] blkdev_get_whole+0x2d2/0x450 [ 234.848105][ T30] bdev_open+0x2d4/0xc60 [ 234.854452][ T30] blkdev_open+0x3e8/0x570 [ 234.869131][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 234.874834][ T30] do_dentry_open+0x970/0x1440 [ 234.889868][ T30] vfs_open+0x3e/0x330 [ 234.894107][ T30] path_openat+0x2b3e/0x3470 [ 234.898769][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 234.914529][ T30] ? __lock_acquire+0x137a/0x2040 [ 234.919651][ T30] ? __pfx_path_openat+0x10/0x10 [ 234.935025][ T30] do_filp_open+0x235/0x490 [ 234.939694][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 234.958282][ T30] ? _raw_spin_unlock+0x28/0x50 [ 234.970554][ T30] ? alloc_fd+0x5a1/0x640 [ 234.980608][ T30] do_sys_openat2+0x13e/0x1d0 [ 234.990547][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 235.000634][ T30] __x64_sys_openat+0x247/0x2a0 [ 235.005547][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 235.021779][ T30] ? do_syscall_64+0x100/0x230 [ 235.026610][ T30] ? do_syscall_64+0xb6/0x230 [ 235.040636][ T30] do_syscall_64+0xf3/0x230 [ 235.045203][ T30] ? clear_bhb_loop+0x35/0x90 [ 235.049938][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.071503][ T30] RIP: 0033:0x7fdde8b169a4 [ 235.075982][ T30] RSP: 002b:00007ffc50eaaad0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 235.103031][ T30] RAX: ffffffffffffffda RBX: 0000557023686e10 RCX: 00007fdde8b169a4 [ 235.120632][ T30] RDX: 00000000000a0800 RSI: 0000557023688b00 RDI: 00000000ffffff9c [ 235.138929][ T30] RBP: 0000557023688b00 R08: 0000000000000001 R09: 0000000000000000 [ 235.159164][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 235.179413][ T30] R13: 000055702367a540 R14: 0000000000000001 R15: 0000557023665910 [ 235.210624][ T30] [ 235.213979][ T30] [ 235.213979][ T30] Showing all locks held in the system: [ 235.259168][ T30] 1 lock held by khungtaskd/30: [ 235.270681][ T30] #0: ffffffff8e336e20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 235.291631][ T30] 5 locks held by kworker/u8:8/1103: [ 235.296993][ T30] 2 locks held by getty/4857: [ 235.320614][ T30] #0: ffff88802aa3b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 235.340585][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 235.360625][ T30] 3 locks held by udevd/5115: [ 235.366270][ T30] #0: ffff88802017a4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 235.390554][ T30] #1: ffff88801fce1890 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 235.400148][ T30] #2: ffff8880201e0180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 235.430755][ T30] 3 locks held by udevd/6045: [ 235.435593][ T30] #0: ffff8880202764c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 235.461539][ T30] #1: ffff88801b3b7a10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 235.480588][ T30] #2: ffff888020358180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 235.489654][ T30] 2 locks held by kworker/u8:16/6149: [ 235.511830][ T30] 1 lock held by syz.2.1023/8486: [ 235.516906][ T30] 1 lock held by syz.1.1032/8511: [ 235.530532][ T30] [ 235.532908][ T30] ============================================= [ 235.532908][ T30] [ 235.550629][ T30] NMI backtrace for cpu 0 [ 235.555165][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 235.564737][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 235.574825][ T30] Call Trace: [ 235.578126][ T30] [ 235.581080][ T30] dump_stack_lvl+0x241/0x360 [ 235.585893][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.591129][ T30] ? __pfx__printk+0x10/0x10 [ 235.595749][ T30] ? vprintk_emit+0x631/0x770 [ 235.600473][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 235.605551][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 235.610517][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 235.615990][ T30] ? _printk+0xd5/0x120 [ 235.620154][ T30] ? __pfx__printk+0x10/0x10 [ 235.624752][ T30] ? __wake_up_klogd+0xcc/0x110 [ 235.629613][ T30] ? __pfx__printk+0x10/0x10 [ 235.634220][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 235.639266][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 235.645346][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 235.651438][ T30] watchdog+0xfde/0x1020 [ 235.655699][ T30] ? watchdog+0x1ea/0x1020 [ 235.660129][ T30] ? __pfx_watchdog+0x10/0x10 [ 235.664816][ T30] kthread+0x2f0/0x390 [ 235.668900][ T30] ? __pfx_watchdog+0x10/0x10 [ 235.673604][ T30] ? __pfx_kthread+0x10/0x10 [ 235.678208][ T30] ret_from_fork+0x4b/0x80 [ 235.682635][ T30] ? __pfx_kthread+0x10/0x10 [ 235.687238][ T30] ret_from_fork_asm+0x1a/0x30 [ 235.692022][ T30] [ 235.706040][ T30] Sending NMI from CPU 0 to CPUs 1: [ 235.712426][ C1] NMI backtrace for cpu 1 [ 235.712439][ C1] CPU: 1 PID: 8486 Comm: syz.2.1023 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 235.712456][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 235.712466][ C1] RIP: 0010:lock_release+0x5/0xa30 [ 235.712492][ C1] Code: 8f e8 af e3 89 00 e9 f1 f5 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 00 01 00 [ 235.712506][ C1] RSP: 0018:ffffc90002f3f678 EFLAGS: 00000286 [ 235.712520][ C1] RAX: ffffffff8952a7ac RBX: ffff88801e8721c0 RCX: 0000000000040000 [ 235.712532][ C1] RDX: ffffc90016601000 RSI: ffffffff8a7c5905 RDI: ffff88801e8721d8 [ 235.712544][ C1] RBP: ffffc90002f3f850 R08: ffffffff92ff0747 R09: 1ffffffff25fe0e8 [ 235.712557][ C1] R10: dffffc0000000000 R11: fffffbfff25fe0e9 R12: 0000000000000000 [ 235.712568][ C1] R13: dffffc0000000000 R14: ffffffff8a7c5905 R15: ffff88801e872000 [ 235.712580][ C1] FS: 00007fcd51cc26c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 235.712594][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.712605][ C1] CR2: 0000000020ca3030 CR3: 000000001f5a2000 CR4: 00000000003506f0 [ 235.712618][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 235.712633][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 235.712643][ C1] Call Trace: [ 235.712649][ C1] [ 235.712656][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 235.712680][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 235.712702][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 235.712725][ C1] ? nmi_handle+0x2a/0x5a0 [ 235.712752][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 235.712772][ C1] ? nmi_handle+0x14f/0x5a0 [ 235.712786][ C1] ? nmi_handle+0x2a/0x5a0 [ 235.712802][ C1] ? lock_release+0x5/0xa30 [ 235.712821][ C1] ? default_do_nmi+0x63/0x160 [ 235.712844][ C1] ? exc_nmi+0x123/0x1f0 [ 235.712867][ C1] ? end_repeat_nmi+0xf/0x53 [ 235.712890][ C1] ? bt_sock_stream_recvmsg+0x1415/0x1670 [ 235.712911][ C1] ? release_sock+0x17c/0x1f0 [ 235.712932][ C1] ? bt_sock_stream_recvmsg+0x1415/0x1670 [ 235.712949][ C1] ? lock_release+0x5/0xa30 [ 235.712969][ C1] ? lock_release+0x5/0xa30 [ 235.712989][ C1] ? lock_release+0x5/0xa30 [ 235.713009][ C1] [ 235.713014][ C1] [ 235.713019][ C1] _raw_spin_unlock_bh+0x1b/0x40 [ 235.713043][ C1] bt_sock_stream_recvmsg+0x1415/0x1670 [ 235.713061][ C1] ? __lock_acquire+0x137a/0x2040 [ 235.713103][ C1] ? __pfx_bt_sock_stream_recvmsg+0x10/0x10 [ 235.713128][ C1] rfcomm_sock_recvmsg+0xea/0x280 [ 235.713153][ C1] ? __pfx_rfcomm_sock_recvmsg+0x10/0x10 [ 235.713177][ C1] sock_recvmsg_nosec+0x18e/0x1d0 [ 235.713198][ C1] ____sys_recvmsg+0x3c0/0x470 [ 235.713217][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 235.713239][ C1] ? __might_fault+0xaa/0x120 [ 235.713261][ C1] do_recvmmsg+0x474/0xae0 [ 235.713278][ C1] ? __pfx_try_to_wake_up+0x10/0x10 [ 235.713301][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 235.713324][ C1] ? futex_wake+0x523/0x5c0 [ 235.713349][ C1] ? __pfx_futex_wake+0x10/0x10 [ 235.713370][ C1] ? __pfx_reacquire_held_locks+0x10/0x10 [ 235.713403][ C1] ? __pfx_do_futex+0x10/0x10 [ 235.713429][ C1] __x64_sys_recvmmsg+0x199/0x250 [ 235.713463][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 235.713480][ C1] ? do_syscall_64+0x100/0x230 [ 235.713501][ C1] ? do_syscall_64+0xb6/0x230 [ 235.713522][ C1] do_syscall_64+0xf3/0x230 [ 235.713541][ C1] ? clear_bhb_loop+0x35/0x90 [ 235.713565][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.713587][ C1] RIP: 0033:0x7fcd50f75f19 [ 235.713600][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.713613][ C1] RSP: 002b:00007fcd51cc2048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 235.713633][ C1] RAX: ffffffffffffffda RBX: 00007fcd51105f60 RCX: 00007fcd50f75f19 [ 235.713645][ C1] RDX: 000000000400023c RSI: 00000000200055c0 RDI: 0000000000000007 [ 235.713656][ C1] RBP: 00007fcd50fe4e68 R08: 0000000000000000 R09: 0000000000000000 [ 235.713666][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.713675][ C1] R13: 000000000000000b R14: 00007fcd51105f60 R15: 00007ffdb3bc0838 [ 235.713695][ C1] [ 236.492195][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 236.499202][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 236.508771][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 236.518847][ T30] Call Trace: [ 236.522142][ T30] [ 236.525179][ T30] dump_stack_lvl+0x241/0x360 [ 236.529903][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.535146][ T30] ? __pfx__printk+0x10/0x10 [ 236.539756][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 236.545871][ T30] ? vscnprintf+0x5d/0x90 [ 236.550242][ T30] panic+0x349/0x860 [ 236.554160][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 236.560354][ T30] ? __pfx_panic+0x10/0x10 [ 236.564791][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 236.570190][ T30] ? __irq_work_queue_local+0x137/0x410 [ 236.575771][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 236.581170][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 236.587389][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 236.593579][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 236.599793][ T30] watchdog+0x101d/0x1020 [ 236.604172][ T30] ? watchdog+0x1ea/0x1020 [ 236.608638][ T30] ? __pfx_watchdog+0x10/0x10 [ 236.613345][ T30] kthread+0x2f0/0x390 [ 236.617447][ T30] ? __pfx_watchdog+0x10/0x10 [ 236.622151][ T30] ? __pfx_kthread+0x10/0x10 [ 236.626944][ T30] ret_from_fork+0x4b/0x80 [ 236.631396][ T30] ? __pfx_kthread+0x10/0x10 [ 236.636036][ T30] ret_from_fork_asm+0x1a/0x30 [ 236.640866][ T30] [ 236.644395][ T30] Kernel Offset: disabled [ 236.648729][ T30] Rebooting in 86400 seconds..