last executing test programs: 42.015728666s ago: executing program 3 (id=945): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r2, 0x2, 0x70bd2b, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008100}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004010}, 0x40840) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'xfrm0\x00', 0x4000}) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0xfef3, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) syz_emit_ethernet(0x3e, &(0x7f0000019340)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x81, @remote, @local, {[], {0x4e20, 0xe22, 0x8}}}}}}, 0x0) 41.553268239s ago: executing program 3 (id=950): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="012000000000000000006610000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b7001e"], 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x30, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@dev}]}, 0x30}}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x44, r7, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7}, @broadcast, @device_a, @from_mac=@device_b, {0x9}}, 0x1c, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x40094) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0xa499}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000240)={r9, 0x0, 0xfffffffffffffffc}, &(0x7f00000002c0)=0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETSNDBUF(r10, 0x400454d4, &(0x7f00000001c0)) socket$kcm(0x10, 0x2, 0x10) r11 = socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x130, 0xffffff80, 0x178, 0x0, 0x178, 0x2b0, 0x258, 0x230, 0x2b0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0xf8, 0x130, 0x340, {0x1e0002a8, 0x7203000000000000}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@pkttype={{0x28}, {0x7, 0x2}}]}, @common=@inet=@SET3={0x38}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'nr0\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [], 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x1, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) syz_emit_ethernet(0x3a, &(0x7f0000000800)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3e, 0x2c, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x4, 0x2, 0x0, 0x0, {[@mss={0x2, 0x4, 0x4}]}}}}}}}, 0x0) 41.074501609s ago: executing program 3 (id=954): r0 = socket$xdp(0x2c, 0x3, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000040)=0x3, 0x4) (async) sendto$inet(r3, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0200"], 0x10) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x12}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) socket$inet6(0xa, 0x1, 0x100) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x13, r0, 0x180000000) 40.786869289s ago: executing program 3 (id=958): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="700200", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800c00058008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341"], 0x270}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r3, 0x0, 0x380}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) (fail_nth: 4) 40.155090653s ago: executing program 3 (id=965): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081780000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103b00000000001d"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="dc2000003d0007010000000000000000017c0000040000000c00018006000600800a0000b8200280b4201580ad2001"], 0x20dc}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x9, 0x6, 0xa00, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8fb}]}, 0x1c}}, 0x404c084) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x5}]}}}]}, 0x3c}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) recvfrom$inet(r5, 0x0, 0x0, 0x2100, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0x5}]}}]}, 0x40}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 29.44766897s ago: executing program 2 (id=1046): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000000)="40f0538ef047b2", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010000104"], 0x44}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b70500000000002b56286003c1a25a1b6a90d327300079105d000000000005000000000000009500000000000000f2b5afea52ed915766faecaab8ab45ed37b6611fb2ebb76a0d53691d67665beaefd37b97d4ce4b8898b4c2ceb2b61baf93d3ce4784eccf74f083c3e273ccf3eaae5319a6ec1407940d36bc133eccd952fa033d0f5184bb2e456b4af3a47c9b455bc20241bb"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) 28.987645865s ago: executing program 2 (id=1050): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r5) close(r3) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r6, 0x10d, 0x90, &(0x7f0000000080), &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r3, 0x0, 0x1100000000f336, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 27.842918215s ago: executing program 2 (id=1056): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8000000000000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080000}, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d3, &(0x7f0000000100)) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010f9ff0c2bbd7000000000007a47ecd7", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e0000140002800500160000000000080007007f000001"], 0x44}}, 0x0) 27.255153857s ago: executing program 2 (id=1061): socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8b1c}]}, 0x44}}, 0x0) close(0x3) 26.981192069s ago: executing program 2 (id=1064): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x4008090}, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], &(0x7f00000002c0)=0x30) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000000)=0x9, 0x4) setsockopt$inet6_buf(r6, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r6, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) recvfrom$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) getsockopt$bt_hci(r6, 0x0, 0x3, &(0x7f0000000f40)=""/217, &(0x7f0000000300)=0xd9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r4}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x50, 0x140c, 0x400, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8011}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f00000000c0)={'erspan0\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000680)='wg1\x00', 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback={0xe0}}, 0x1c) 25.993518663s ago: executing program 2 (id=1069): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd26}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r6, @void, @void, @value}, 0x50) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x2a, 0x0, 0x190) r8 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r8, 0x1, 0x29, 0x0, &(0x7f0000000080)) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xdd1ff000) socket(0xa, 0x40000000002, 0x0) r9 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$ARPT_SO_GET_INFO(r9, 0x0, 0x60, &(0x7f0000001a00)={'filter\x00', 0x0, [0x6, 0x200, 0x2]}, &(0x7f0000000840)=0x44) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000000001008011390000000045827360553900851000000200000085000000340000009500deffffffffff9400a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r10 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r10, 0x29, 0xcf, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={0xfffffffffffffffc, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x30}, 0x1, 0x0, 0x0, 0x20048001}, 0x804) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="700200", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800c00058008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341"], 0x270}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=r11, @ANYBLOB="00000000800300001c0012800b00010062726964676500000c00aa5002800500070007000000"], 0x3c}}, 0x0) 24.596712005s ago: executing program 1 (id=1075): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000a0002002ee308099cc800ea050005"], 0x30}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 24.313428788s ago: executing program 4 (id=1077): r0 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x23, 0x0, 0x2}, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000e80000000000000a50000000120a09050000000000000000020000000900020073797a3100000000080004400000000f0900010073797a30000000000800034000000001"], 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) 24.109013165s ago: executing program 1 (id=1078): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000000000791090000000000063000000000000009500000000000000b8a164aed91d3d5b664c4ca806f01293f84f25209077b1bb4ab4cf447b29fad55603aa97715b6f60e53760e0565b07dd0f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRESOCT=r4, @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000040)="00000097c3199945e3eadae14708c82ec713c200000700000000000100020000", 0x20) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000140)={0x20, r8, 0x405, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r11 = socket(0x2, 0x3, 0xff) getsockopt$IPT_SO_GET_REVISION_TARGET(r11, 0x0, 0x43, 0x0, &(0x7f00000002c0)=0x1e) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0700000000000000df2503000000060001004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xc010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5c38b46af21a0", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="fd", 0x0}, 0x50) 23.77398011s ago: executing program 4 (id=1080): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f0000000140)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newroute={0x5c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x1c, 0x1, {0x3, 0x18, 0x1, 0x9, 0x5, [@dev={0xfe, 0x80, '\x00', 0x31}]}}}]}, 0x5c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x480, 0x2e8, 0x5002004a, 0x6, 0x2e8, 0x3, 0x3e8, 0x3c8, 0x3c8, 0x3e8, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x0, 0x3fa}, [@common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e0) syz_emit_ethernet(0x5b, &(0x7f0000000680)={@link_local, @broadcast, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x10, 0x11, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0xcc}}}}}}}}, 0x0) 23.730882466s ago: executing program 0 (id=1081): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000091108c000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x5]}]}}]}]}]}}]}, 0x74}}, 0x0) (rerun: 32) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x44, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xf0}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x8}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfffffff4}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000040)="674c774c0372b96725cd82", 0xb}], 0x1}}], 0x1, 0x2000c000) (async) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xc, &(0x7f00000000c0)=@gcm_256={{0x304}, "c5982890f314c3dd", "2ab9d66d69b452063edd7b4ee1ae1e51d938fd30c7135eecd0b9b4c986fb2d10", "0800e406", "588ce5c75867132e"}, 0x38) (async, rerun: 64) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "8aa640082d6de541", "85ef1366d269d1f0744b896027230295", "5813761e", "fb7fb9c570c9e5af"}, 0x28) (async, rerun: 64) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0xf8, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0xa4, 0x6, "f3f0b5a5032870717b9fba9f008955f46f31bd25b930557cea3288e7ef0f262a8cf6d5699ac57d913d6edc2b00410b3a84519b1aefb5e3bd2e86aa9a3bbb69a4bb3486b9be850594df0450a7fb82fbffbbc84eed2883090dc4ec54d19db553d10318dcacca9bd0fad203e73eb848c1d80daf32d7f171aabad0590a094b2a3f5933777abd5ff1136934bd0430fe85c5be6ac7ee4432c91c5398d808d189595d68"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x120}, 0x1, 0x0, 0x0, 0x20040040}, 0x40) r6 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xe373b684d2526e78, 0x1000}, 0x20) r8 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r8, 0x107, 0x7, 0x0, &(0x7f0000000500)) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r10, 0x431, 0x0, 0x40, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x14}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async) getsockopt$inet_tcp_int(r6, 0x6, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) 23.411654094s ago: executing program 4 (id=1082): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r2], 0x78}}, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x4, 0x100, @void}}}}}}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x53, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x14) 23.410077745s ago: executing program 1 (id=1083): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x24, r0, 0x121, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}}, 0x4000040) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1400"/12, @ANYRES32, @ANYBLOB="67b1f099db04d3b951fa52b59b035dce44d37d68a820777ab5ed4ac417bad6c1e5a93c5d6107a82067c59e2b99777ff46dda23d3ff8c1d30db4ff819420295e6720052", @ANYRES64=0x0], 0x20) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x12, &(0x7f0000000080)=0xffffffff, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x7, 0x4, 0x4, 0x12, 0x8d6, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000180)={'veth0\x00', @random="e5cdd8ec7a07"}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000001c0)=0x2804, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbb9bff73cce926ff86"], 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_user\x00', 0x275a, 0x0) pwrite64(r5, &(0x7f0000000000)="e7030014000816112ee73cfe11f0102b510b2e73fce8a190dd2958d5", 0xfffffffffffffe34, 0x8001) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x100, 0x70bd28, 0x25dfdbff, {0x1, 0x1, 0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 23.247857042s ago: executing program 0 (id=1084): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) socket$kcm(0x29, 0x2, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xfffffffffffffee3, 0x2, 0xf1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='net_prio.prioidx\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x1, 0x8, 0x2002, 0x20040, r5, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03f6ffe0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r7}, 0x14) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="14010000220001002100000000000000020100800c0000000000000000000000140002"], 0x114}], 0x1}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r8, &(0x7f00000006c0)={&(0x7f0000000200)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000240)="1a63ecc7", 0x4}], 0x1, &(0x7f0000000680)=[@init={0x18, 0x84, 0x0, {0x0, 0x6, 0x60f3, 0x32d}}], 0x18, 0x40}, 0x20000050) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 22.209865051s ago: executing program 3 (id=965): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081780000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103b00000000001d"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="dc2000003d0007010000000000000000017c0000040000000c00018006000600800a0000b8200280b4201580ad2001"], 0x20dc}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x9, 0x6, 0xa00, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8fb}]}, 0x1c}}, 0x404c084) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x5}]}}}]}, 0x3c}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) recvfrom$inet(r5, 0x0, 0x0, 0x2100, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0x5}]}}]}, 0x40}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 21.651868335s ago: executing program 0 (id=1085): r0 = socket$nl_audit(0x10, 0x3, 0x9) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3fb, 0x2, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x34}, 0x4000000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$AUDIT_GET(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3e8, 0x2, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4c880}, 0xc000) connect$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg$inet(r3, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c001) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x718}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}], [{}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004080}, 0x80c1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) sendmmsg$inet(r5, &(0x7f0000000e40)=[{{&(0x7f0000000ac0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000b00)="4ae316d07de8ececf07111bb567e28e979ef04d69b2ea7c6ac4102a4f76c8f33202b5fd92b57f33978606b8a0b11b91a2bce977c59", 0x35}, {&(0x7f0000000b40)="6eb5392595c4563a3a090e4ea1018fcea97465682faf4675fb43015eb6688410ead2a9edfe4e4c4c449b5d40343ea266e6def2029207ff6db6675ac79a97f71075735e21db126c38d84eb00da0ad1c77215014f29b1dbcce7790f28ebe7f7a747865b72d5036f4046a2984be9b3828cd974151007816b440a47852ed4682ffafa3", 0x81}, {&(0x7f0000000c00)="329d714e4d8e762c717088df88abdb1879a0071a95671207d3cc8681e7d814fedb4e3740f9f068ee318c9412050bca54ea5721249347dc1eebf809353fbeecb1e8fe706a262af12a5b4eaffa9a834cfa833992b00dbc8c731a336010faedc2c532790abb2df86a1211fe8061e5530cd8f919c345ba1ac87528b4af86720bff2862fbb6bccadb57d7df3a69d3a1d53207ffc39c1ed7c776709710356a2037ec0d0a61ddb9b065ea46cbe7ffb1aba1bf54a17c64d9f6251d48f3a259d7e98d1c997fe9879adf7d5f84c9df5d28293a012b6bf9d58c8a308f9450f624416aff1df9044b0a0151cedcb9b0d0239839879de5d3d29c1161167f4c", 0xf8}], 0x3, &(0x7f0000000d80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x35}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @remote, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x78}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x98}}], 0x1, 0x4004) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r8, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x41, 0x5f}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r5) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000a80)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000600)={0x43c, r9, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x15}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x401, 0x33, @mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_b, @device_b, @random="482625a2feda", {0x7, 0x8}, @value=@ver_80211n={0x0, 0x7f, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x48, @val={0x10, 0x1, 0x1b}, [{0xdd, 0xce, "923a4020cd771d718dfe71b428c3b710f14df40fb6db9edb90056a138b599217fe40f3772472f39a7de9c80599370e8f6640c0bd911c1141cd17597584139377793abdcf4e2c3edb762e054081ebe48fee61093fc86259be0245365eee7b23c06933b7a563d64c8a1cde8677c45f7b032e4e2f30c40526bdd0482ef429ede3ee072b855458047fbd42c2f490d0f54c94439438bffc2530b808d0ff8ee406a4f2828f3ebbf54944b40b8b32ff44cf6e67808991b56e671795d8d2eefd6055ddeb536d3472d4f42339c6ed04541bad"}, {0xdd, 0xb0, "e3bdf7ad7926e0bb811683a4530e158fd95b283416ce623e755ca7c665c6f5c99b7136c6d5b8f5e5e00102ea208fa3063215049b540faeb8571b1d725bf56fe5d9cf595b81df7166c8ad39f8aa7a58ba068ce7729580da87238905832dfe3b1b4385453f55e735298915a03c352745a591d2ebae900146d1eeafe30520acbbf450fac73348faab95386f176759fb04f163c55374e2cfc7dc3068bad5ea834afe772a293c5756aeed85a5b70170eec89e"}, {0xdd, 0xaf, "b27be6590dc6051230d3222418be1c8743d615d7a8e5d7a4e6e9504f0f57543c88ae7becb9e2a0f280b3e77ed4244604d8fc56fc6faff3294a41d42ac56fb89fb3467f14e199b6013c82ef45708290a8f07b2839482e545b3dedaa126576effb4605e607721a78431086a27dbd95bf2dded786b84c7cc96bf4ea3a95151567ed0bc1dcb40b9fb5f9aa6c3fcb5e2ce8e3cd6b3dc2ab3324b562bf323ca884206007f70c1c77e9bdf5601d4c78324f72"}, {0xdd, 0x56, "34c50eff7e0769a163ff46b5e4dec61fa6c9df7f0093de762e5091390b2748d1e21babdab7a650564b3ff53471c73e51b988aa07ec98db1f6aec51e6727c2e12bd5fcd4743f4136801818af2ef4f9b2ff2d397b58b3e"}, {0xdd, 0x5b, "55095e868c4fc4bcb471663c8a25c44b9c5fd58d6bb482b28b05ad26588fcb793eb019971d9fe16d7e32ef408e6ea37450b28bcaaada248673daf526b889c6450278f49f7ca4d904505c0f8de0ef1f71f771f5d6e8ad6f386afc3d"}, {0xdd, 0xee, "8982eda79e36eb2076beefd871a95d49b578240dfc51b476228b92437e7b0d3b6351ba1fa6cad6542256b587f99c154e88579239929ebdd7f0a403b0af884062e07f9f1f667cced92dd8c89d8d6c61496f33db528d78a7a1312d733b6aa6446d30972c9ab7ecabb37e158caae081eab36e1a3483a63da67c57809b72c6f72a0145c63018c58ecc491dc21f515841e442557724f2decde512afec4483564cc72111a41dc50f372ea582651c5dac55c7741555a5e7db49351d510b8da2204941abd17f3fed599dc1b3af2e47c475c58eb28bcf6aa1766c0bff6ea949ae9aaa1679f2ed73c7ddb4060130d373f97fad"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x2}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x19}]}, 0x43c}}, 0x10) 21.591621276s ago: executing program 4 (id=1086): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x189e, 0x4) socketpair(0x1d, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x1e, &(0x7f0000000440)={0xfffffffa, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="120000000800000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00e1ffffffffffffffe151812b847763002200000000"], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r2, @ANYRES16=r5, @ANYRES16=r4], 0x50}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000200000000000000000000104c87c9e25b3a36eadc0fa91119b069b28653f5dfa6a8d2b0d9212f487196ddb22c364bdac1a3f256aebc16cef9002a6d0511108a4a07000000ba4e6ac60e5174bdc15464367ef7eef82e5af56803be0747202ce29fb5b9d1664ece853624b76af2bedab484900b90736fd3930c702ac907d043ebbd9a2a6c457485258fd8a8b048551520c6359d9b1047e50be0022efd06975083b10fa37976fd8cd0adca3609e75b17242447d66c2476f3d2964c", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000007a000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f8b", 0x2}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r6, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) socket$netlink(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000100aaaaaaaaaa43bbbbbbbbbbbb08004519001400e4000001119078ac141415ac14143b"], 0x26) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000280), 0x10) 21.365810072s ago: executing program 1 (id=1087): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/3112], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x7, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b076859268cb89e14f088a847", 0x0, 0xf00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f00000004c0)={0x2, 0x6, @status={[0x5, 0x7fffffffffffffff, 0x2, 0x2, 0xb2d, 0x1]}, [0x3, 0x8001, 0x6, 0x9, 0x7, 0x8000, 0x8, 0x5, 0x6, 0x5, 0x0, 0xc7b7, 0x1, 0x4, 0x6, 0x7fffffff, 0x3ff, 0x9, 0x40, 0xd47, 0x3599, 0x10001, 0x8, 0x8, 0x7, 0x0, 0xdb3, 0xff, 0x5, 0x9, 0x3, 0x900000000000000, 0x40, 0xf, 0x57, 0x2, 0x3, 0xf, 0x100, 0x1, 0x3e2, 0x502, 0x3, 0x3, 0x1, 0xffffffffffffffff, 0x8, 0x3ff, 0x3, 0x9, 0x7, 0x7, 0x9, 0x8, 0x7, 0x5, 0x6, 0x7fffffffffffffff, 0x100, 0xca, 0x5, 0x2, 0x2, 0x8]}) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0xfffe, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 20.672178427s ago: executing program 4 (id=1088): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)={0x148, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfe000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe343}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x65}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}]}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6e2d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xef3}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x81}, 0x40804) syz_genetlink_get_family_id$nl802154(0x0, r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000800)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000500)={0x30, r2, 0x1, 0x3, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x30}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0xc8, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x9c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x4}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xe}]}}}, {0x40, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_RESULT={0x8}]}}}, {0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x51000}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xf0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x110, 0x3d, 0x9, 0x0, 0x800, {0x1}, [@typed={0x4}, @nested={0xf0, 0x1, 0x0, 0x1, [@nested={0xea, 0x10, 0x0, 0x1, [@generic="b382aada254446b52b9507c8b6aead5babb220fb7c9b1f8c6cb933f0696dd5be07ddca97c80db8510bbdca95b949b0e1bb831de99504bd05b9341760f655515baf36964f1f3e71962df8481f61d85e14a1726539cee887afc8c768fdf73c20af5df89e5d4052e89f8d3217b1c6a5a77f39da72b18a20d629b82e6b939d116a0b2fe822dd2c950c0064d3df3a065b89f4ab87ba83156855ce1b18f680e133c6e2198b28e55b15948b3a87e21ea38094e73cd5f923c1f9f050cd1967191561d0341a8f3ef87e0684744ddf797440437c2772f4", @typed={0x14, 0xd, 0x0, 0x0, @str='veth1_virt_wifi\x00'}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x110}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname$packet(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b040000000000000000020000001c00048018000180080001006c6f67000c00028008000640000000210900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x70}}, 0x20000080) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x7048, 0x77219}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x10c, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0xf8, 0x1, [@m_csum={0xf4, 0x1, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x6}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x10c}}, 0x0) 20.277827566s ago: executing program 1 (id=1089): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000340)='illinois\x00', 0x9) shutdown(r2, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r3, 0x400448e6, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='veth1_to_batadv\x00', 0x10) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7102a2a000000000000ffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x50}}, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8) socket$packet(0x11, 0x2, 0x300) sendmsg$NL80211_CMD_JOIN_IBSS(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000f80)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r9, @ANYBLOB="0400460005003400c4000000080026006c090000300051802c0000800500090002000000040006000500020001000000110005"], 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$AUDIT_ADD_RULE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x420, 0x3f4, 0x4, 0x70bd25, 0x25dfdbfd, {0x3, 0x0, 0x0, [0xa, 0x7ff, 0xd, 0xffffffff, 0x3ff, 0x2, 0x8, 0x0, 0x7, 0xcf04, 0xfffffffd, 0x5, 0x18000, 0xfffffffe, 0x1dab5af3, 0x1c5c, 0x28, 0x4, 0xcc1, 0x1, 0x0, 0x9, 0x8, 0x7, 0x34, 0x10000, 0x9, 0xd, 0x7, 0x8, 0xf598, 0x3, 0x3, 0x7ff, 0x6, 0x800, 0x8, 0x1, 0x3, 0x6, 0x10000, 0x9, 0xf, 0x4ec7, 0x1, 0x40, 0x675, 0xff, 0x1000, 0x4, 0x800, 0x9, 0x9b5, 0xa, 0xffff9fc0, 0x3, 0x0, 0x9, 0x3ff, 0x8, 0x10000, 0x3ff, 0x2, 0xffffffff], [0xb7, 0x4, 0x4, 0x4, 0x8001, 0x40, 0x7, 0x3, 0x200, 0x8535, 0x10, 0x8, 0x1b5e, 0xffffffff, 0x334d6605, 0x4, 0x200, 0xfffffffa, 0x1, 0x7, 0xef, 0x4d0, 0x4, 0x10, 0x3, 0x1, 0xffff7fff, 0x1, 0xc09b, 0x4, 0x8, 0x9, 0x0, 0x7fff, 0x5, 0x8, 0x0, 0x19, 0x3, 0x6, 0x401, 0xdb2, 0x9, 0x3, 0x1, 0x7f, 0x9, 0x800, 0x7fff, 0x200, 0xfffffff6, 0xe637, 0x8d2, 0x7, 0x5, 0x41, 0xf, 0x800, 0xbbc3, 0x4, 0x6d, 0x6, 0x100, 0x8000], [0x8001, 0x1, 0x10d, 0x0, 0xa4b, 0xec, 0x3, 0x7fffffff, 0x800, 0x31, 0x9, 0x26, 0x9, 0x1, 0xfffffffe, 0x2, 0x328d, 0xff, 0x7, 0x8, 0x0, 0x8, 0xc0, 0x9, 0x8, 0xa963, 0x8, 0x1, 0x77, 0x5, 0x3ff, 0x8, 0xfffffffc, 0xffff38e6, 0xc, 0x7, 0x75a, 0x1, 0x6, 0x3, 0xe53e, 0x7f800000, 0x10000, 0x3, 0x3, 0x79274e0c, 0x8, 0xe62f, 0x4, 0x1000, 0x0, 0x3, 0xfff, 0x80000000, 0x4, 0x2, 0x7f, 0xa, 0xfffffff8, 0x2, 0x80, 0x9, 0xbd02, 0x7f28], [0x280b, 0x6, 0xe057, 0x1000, 0xb, 0x7, 0x8, 0x1, 0x1, 0x81, 0x726, 0x5, 0x7, 0x6, 0x8, 0x100, 0xfffffff2, 0x4, 0x800, 0x7, 0x8000008, 0x3, 0x0, 0x9, 0xe, 0x0, 0x4, 0x1, 0x8, 0x6, 0x2000, 0x6, 0x4, 0x3, 0x5, 0x5, 0x8, 0x10000, 0x10000, 0x200, 0x1000, 0x1, 0x7, 0x0, 0xc21, 0x1000, 0x2, 0x6, 0x5, 0x8, 0x80, 0x3, 0x10000, 0x9, 0x4, 0x800, 0x80, 0x7, 0xb, 0x17ce28af, 0xfff, 0x1000, 0x101, 0x3]}}, 0x420}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000006fe882ebb8c467d82e709693c5342049a269d78c3cf23a392a", @ANYRES16=r5, @ANYBLOB="0008feffffff000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800120004090000"], 0x3c}}, 0x44000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000030000000000000000000009030000000100000000000012000000000000000000000035080202000000005f00"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRESHEX], 0x178}, 0x1, 0x0, 0x0, 0x48840}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 20.125458473s ago: executing program 0 (id=1090): r0 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="01040000", @ANYRES16=r0, @ANYBLOB="010000000000000000000100000006000a004e200000050002000a0000001400090000000000000000000000000000000001"], 0x38}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000200000002"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 19.936048155s ago: executing program 0 (id=1091): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x3e8, 0x30, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{0x3d4, 0x1, [@m_skbedit={0x1e0, 0x19, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0xfff3}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xd}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x1, 0xffffffffeffffffb, 0x46, 0x1}}]}, {0x182, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_xt={0x1b0, 0x11, 0x0, 0x0, {{0x7}, {0x180, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x81bc}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TARG={0x111, 0x6, {0x60, 'mangle\x00', 0xe, 0x4, "6fa02a4171fe1fb4e6d8fa9d2da221bee50c648b9f1b1e06fecd662fcaa0c472647d6a8db2406a64ce7a55722d9ef354a5b637f379efaf5b5fb80414eb51c4276be311fe350c8097cd99a2a3bd3bae87dba6e36f51d3bb1b367ae5d054e9225c68edfa98dd8809176eaea9164ba5533001e089b972fdc8d04c820ba424956f459c295f1ac0146cff801c44a4d4ca7437d3e6c755bd4ce3945639d2bfa1b17bf7078949ee2a0bde830b61b0d698d6dbf2b257635650884308ba209d8499935bf4bfbc5064e76ea896dc16e5b806e9ffac7d276191606165efb7cdbc6c230ee008c5f86cf62f58b6"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xa82}, @TCA_IPT_TARG={0x2a, 0x6, {0xde5, 'security\x00', 0xfd, 0x6}}]}, {0x9, 0x6, "51eb4b8bb0"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_sample={0x40, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x11, 0x6, "5c284c3a3976241974df53e1d3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x3e8}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 19.601935664s ago: executing program 0 (id=1092): r0 = socket$unix(0x1, 0x2, 0x0) listen(r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="2d663178b5af0000fddbdf252100000005ffff00102f4be6127f43b459213fbd00e60c0cae01000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="5786a809ee2c6bfa28f3772611d91f3d5910626e3a920d97b66c946ea0a378db923155fe7592a18290f2713b90319e6b87dd01b42d3202077b4197e1a0899c677dac122a137a8988f58a8ed1ff4e2301f125ff9435743dabf2a0c62c9ef6f29988d2c25eae03de582c3a295e3eb35a503ae1a34b1c10d7c79d34aee8fe01a54c0c362bb3672330d39a0dd82b9cb087f3a30e1a6817a0c8956fc27c6c5e20e360276aa9e5a6df80c90a8af2562063bf6850", @ANYRES32=r1, @ANYRESOCT=r1, @ANYRES8=r1], 0x180}, 0x1, 0x0, 0x0, 0x10}, 0x4008085) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x28}}, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r4, 0x0, 0x4000000) r5 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x31, &(0x7f0000000640), 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x24, 0x2a, 0xb, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x24}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x5452, 0x0) sendmsg$kcm(r4, 0x0, 0x200000c1) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 19.601164807s ago: executing program 1 (id=1093): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r3, 0x0) recvmsg$unix(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r4, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb4, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x90}, 0x400c841) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_delrule={0x64, 0x21, 0x2, 0x70bd2c, 0x25dfdbff, {0x2, 0x10, 0x80, 0x0, 0xa, 0x0, 0x0, 0x6, 0x10}, [@FRA_DST={0x8, 0x1, @multicast2}, @FRA_FLOW={0x8, 0xb, 0x7}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0xff, 0x4e20}}, @FRA_FLOW={0x8, 0xb, 0xa13e}, @FRA_FLOW={0x8, 0xb, 0x7fff}, @FRA_FLOW={0x8, 0xb, 0x8}, @FRA_FLOW={0x8, 0xb, 0x80}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x40c0}, 0x84) 19.517867985s ago: executing program 4 (id=1094): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x1a4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf}]}]}]}}, @TCA_STAB={0x100, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x0, 0xb04, 0x1, 0x0, 0x8, 0x9, 0x2}}, {0x8, 0x2, [0x2, 0xff94]}}, {{0x1c, 0x1, {0x60, 0x10, 0x1ff, 0x2, 0x2, 0x2, 0x8, 0x4}}, {0xc, 0x2, [0xfbff, 0x67ed, 0xffff, 0x2]}}, {{0x1c, 0x1, {0x5a, 0x3, 0xfff7, 0x2, 0x2, 0x7, 0xb01c, 0xa}}, {0x18, 0x2, [0x9, 0x8, 0x3f9, 0x6, 0x9, 0x2, 0x7, 0x3, 0x3, 0x0]}}, {{0x1c, 0x1, {0x0, 0x6, 0x800, 0x2, 0x1, 0xe, 0xcf, 0x4}}, {0xc, 0x2, [0x1ff, 0xc, 0x3, 0x5]}}, {{0x1c, 0x1, {0x2, 0x2, 0x8, 0x6, 0x0, 0x101, 0x80, 0x7}}, {0x12, 0x2, [0x6, 0x4, 0x620e, 0x783, 0xf, 0x3, 0x5]}}, {{0x1c, 0x1, {0x3, 0x17, 0x7ff, 0x2, 0x0, 0x5, 0x3, 0x1}}, {0x6, 0x2, [0x2]}}]}]}, 0x1a4}}, 0x0) 0s ago: executing program 32 (id=1092): r0 = socket$unix(0x1, 0x2, 0x0) listen(r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="2d663178b5af0000fddbdf252100000005ffff00102f4be6127f43b459213fbd00e60c0cae01000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="5786a809ee2c6bfa28f3772611d91f3d5910626e3a920d97b66c946ea0a378db923155fe7592a18290f2713b90319e6b87dd01b42d3202077b4197e1a0899c677dac122a137a8988f58a8ed1ff4e2301f125ff9435743dabf2a0c62c9ef6f29988d2c25eae03de582c3a295e3eb35a503ae1a34b1c10d7c79d34aee8fe01a54c0c362bb3672330d39a0dd82b9cb087f3a30e1a6817a0c8956fc27c6c5e20e360276aa9e5a6df80c90a8af2562063bf6850", @ANYRES32=r1, @ANYRESOCT=r1, @ANYRES8=r1], 0x180}, 0x1, 0x0, 0x0, 0x10}, 0x4008085) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x28}}, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r4, 0x0, 0x4000000) r5 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x31, &(0x7f0000000640), 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x24, 0x2a, 0xb, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x24}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x5452, 0x0) sendmsg$kcm(r4, 0x0, 0x200000c1) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.133' (ED25519) to the list of known hosts. [ 66.559579][ T5821] cgroup: Unknown subsys name 'net' [ 66.699012][ T5821] cgroup: Unknown subsys name 'cpuset' [ 66.706861][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.121544][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.310449][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.326307][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.334132][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.342196][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.362987][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.384429][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.393502][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.405913][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.413837][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.422308][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.432043][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.439778][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.447535][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.456288][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.460087][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.463682][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.476667][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.480100][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.486559][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.492359][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.500498][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.508654][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.521575][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.529230][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.536918][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.968800][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 70.984452][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 71.010592][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 71.043133][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 71.094844][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 71.188540][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.196559][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.203971][ T5839] bridge_slave_0: entered allmulticast mode [ 71.211405][ T5839] bridge_slave_0: entered promiscuous mode [ 71.239992][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.247832][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.255072][ T5839] bridge_slave_1: entered allmulticast mode [ 71.263212][ T5839] bridge_slave_1: entered promiscuous mode [ 71.275710][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.282842][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.290488][ T5844] bridge_slave_0: entered allmulticast mode [ 71.297377][ T5844] bridge_slave_0: entered promiscuous mode [ 71.310534][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.317997][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.326032][ T5831] bridge_slave_0: entered allmulticast mode [ 71.332639][ T5831] bridge_slave_0: entered promiscuous mode [ 71.355955][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.366005][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.373924][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.381883][ T5844] bridge_slave_1: entered allmulticast mode [ 71.388970][ T5844] bridge_slave_1: entered promiscuous mode [ 71.418940][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.426324][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.433494][ T5831] bridge_slave_1: entered allmulticast mode [ 71.442462][ T5831] bridge_slave_1: entered promiscuous mode [ 71.457440][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.493254][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.500706][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.508197][ T5832] bridge_slave_0: entered allmulticast mode [ 71.514767][ T5832] bridge_slave_0: entered promiscuous mode [ 71.522871][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.530595][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.537854][ T5832] bridge_slave_1: entered allmulticast mode [ 71.544717][ T5832] bridge_slave_1: entered promiscuous mode [ 71.560847][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.580967][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.592404][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.606218][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.613367][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.639442][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.655223][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.662886][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.671190][ T5836] bridge_slave_0: entered allmulticast mode [ 71.679028][ T5836] bridge_slave_0: entered promiscuous mode [ 71.687977][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.695928][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.703109][ T5836] bridge_slave_1: entered allmulticast mode [ 71.710592][ T5836] bridge_slave_1: entered promiscuous mode [ 71.731696][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.744945][ T5839] team0: Port device team_slave_0 added [ 71.773955][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.787232][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.798111][ T5839] team0: Port device team_slave_1 added [ 71.806968][ T5844] team0: Port device team_slave_0 added [ 71.816154][ T5831] team0: Port device team_slave_0 added [ 71.823872][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.856754][ T5844] team0: Port device team_slave_1 added [ 71.863688][ T5831] team0: Port device team_slave_1 added [ 71.893439][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.902755][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.929263][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.962812][ T5832] team0: Port device team_slave_0 added [ 71.969645][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.977288][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.004089][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.036248][ T5836] team0: Port device team_slave_0 added [ 72.043974][ T5832] team0: Port device team_slave_1 added [ 72.061975][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.069146][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.097031][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.108526][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.115509][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.144483][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.156905][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.164355][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.190732][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.204337][ T5836] team0: Port device team_slave_1 added [ 72.224374][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.234137][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.263245][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.287313][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.295311][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.322460][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.345265][ T5839] hsr_slave_0: entered promiscuous mode [ 72.351995][ T5839] hsr_slave_1: entered promiscuous mode [ 72.372812][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.380166][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.406466][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.438737][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.446459][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.473019][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.507510][ T5844] hsr_slave_0: entered promiscuous mode [ 72.513878][ T5844] hsr_slave_1: entered promiscuous mode [ 72.520174][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.528223][ T5844] Cannot create hsr debugfs directory [ 72.534272][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.542515][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.556994][ T5838] Bluetooth: hci0: command tx timeout [ 72.574804][ T5848] Bluetooth: hci4: command tx timeout [ 72.580474][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.621778][ T5831] hsr_slave_0: entered promiscuous mode [ 72.628278][ T5831] hsr_slave_1: entered promiscuous mode [ 72.634369][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.642579][ T5848] Bluetooth: hci3: command tx timeout [ 72.642643][ T5838] Bluetooth: hci2: command tx timeout [ 72.648214][ T54] Bluetooth: hci1: command tx timeout [ 72.659866][ T5831] Cannot create hsr debugfs directory [ 72.690512][ T5836] hsr_slave_0: entered promiscuous mode [ 72.696901][ T5836] hsr_slave_1: entered promiscuous mode [ 72.702830][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.710918][ T5836] Cannot create hsr debugfs directory [ 72.739182][ T5832] hsr_slave_0: entered promiscuous mode [ 72.745262][ T5832] hsr_slave_1: entered promiscuous mode [ 72.751993][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.760110][ T5832] Cannot create hsr debugfs directory [ 73.062960][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.076790][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.097782][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.116280][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.148643][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.167423][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.178441][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.201345][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.247400][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.264680][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.289970][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.300070][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.350599][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.362877][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.392948][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.414851][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.442089][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.453639][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.462897][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.484004][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.498884][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.553682][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.591903][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.603983][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.611323][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.634698][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.642057][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.703121][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.743442][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.757036][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.764156][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.775817][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.783124][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.807010][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.834058][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.841506][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.855179][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.862858][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.881949][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.967562][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.981094][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.011060][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.018460][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.056046][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.063291][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.079110][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.131962][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.139410][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.164110][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.171532][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.209218][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.369268][ T5839] veth0_vlan: entered promiscuous mode [ 74.409104][ T5839] veth1_vlan: entered promiscuous mode [ 74.450093][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.524889][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.538630][ T5839] veth0_macvtap: entered promiscuous mode [ 74.570527][ T5839] veth1_macvtap: entered promiscuous mode [ 74.599234][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.638107][ T54] Bluetooth: hci4: command tx timeout [ 74.643558][ T54] Bluetooth: hci0: command tx timeout [ 74.646972][ T5832] veth0_vlan: entered promiscuous mode [ 74.670273][ T5832] veth1_vlan: entered promiscuous mode [ 74.702041][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.717985][ T54] Bluetooth: hci2: command tx timeout [ 74.718064][ T5838] Bluetooth: hci3: command tx timeout [ 74.732473][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.738786][ T5848] Bluetooth: hci1: command tx timeout [ 74.742096][ T5831] veth0_vlan: entered promiscuous mode [ 74.780379][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.802932][ T5832] veth0_macvtap: entered promiscuous mode [ 74.823639][ T5831] veth1_vlan: entered promiscuous mode [ 74.831242][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.841845][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.851362][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.860452][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.893025][ T5832] veth1_macvtap: entered promiscuous mode [ 74.904745][ T5844] veth0_vlan: entered promiscuous mode [ 74.951775][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.964371][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.977010][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.988299][ T5844] veth1_vlan: entered promiscuous mode [ 75.011109][ T5831] veth0_macvtap: entered promiscuous mode [ 75.044753][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.059382][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.071475][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.083759][ T5831] veth1_macvtap: entered promiscuous mode [ 75.129418][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.139635][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.148652][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.158127][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.176964][ T5844] veth0_macvtap: entered promiscuous mode [ 75.188854][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.200915][ T5836] veth0_vlan: entered promiscuous mode [ 75.204819][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.207152][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.226432][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.237199][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.248673][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.259909][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.283447][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.296791][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.307315][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.317869][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.329163][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.351496][ T5844] veth1_macvtap: entered promiscuous mode [ 75.362951][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.372381][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.381186][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.390021][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.403100][ T5836] veth1_vlan: entered promiscuous mode [ 75.460732][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.474837][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.487977][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.501396][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.511783][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.523285][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.533280][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.543886][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.555250][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.567012][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.577806][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.587734][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.599530][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.609685][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.620569][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.632117][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.641627][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.665895][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.709547][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.724693][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.726295][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.734814][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.759091][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.786261][ T5836] veth0_macvtap: entered promiscuous mode [ 75.801399][ T5836] veth1_macvtap: entered promiscuous mode [ 75.857702][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.872207][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.900936][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.904434][ T5918] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 75.915349][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.931284][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.943981][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.954154][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.965115][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.975171][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.985906][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.998993][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.018068][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.029073][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.033364][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.045678][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.053419][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.070024][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.083170][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.094107][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.104234][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.116215][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.137275][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.151904][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.161079][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.176401][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.185229][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.272727][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.301085][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.328582][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.351484][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.440782][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.452524][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.493407][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.514918][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.592276][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.627300][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.694085][ T5930] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.718235][ T5848] Bluetooth: hci0: command tx timeout [ 76.720068][ T5838] Bluetooth: hci4: command tx timeout [ 76.795884][ T5838] Bluetooth: hci3: command tx timeout [ 76.796804][ T5848] Bluetooth: hci1: command tx timeout [ 76.801409][ T5838] Bluetooth: hci2: command tx timeout [ 77.032839][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 77.065898][ T5930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.120218][ T5930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.170010][ T5934] netlink: 'syz.2.6': attribute type 29 has an invalid length. [ 77.185722][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 77.226163][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 77.233976][ T5939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.261608][ T5942] bridge_slave_1: left allmulticast mode [ 77.286587][ T5942] bridge_slave_1: left promiscuous mode [ 77.312015][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.324409][ T5942] bridge_slave_0: left allmulticast mode [ 77.332465][ T5942] bridge_slave_0: left promiscuous mode [ 77.369401][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.508733][ T5949] vlan2: entered promiscuous mode [ 77.514002][ T5949] vlan2: entered allmulticast mode [ 77.527284][ T5949] hsr_slave_1: entered allmulticast mode [ 77.800452][ T5960] Bluetooth: MGMT ver 1.23 [ 78.050341][ T5979] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 78.279748][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19'. [ 78.305502][ T5994] 8021q: VLANs not supported on ip_vti0 [ 78.453997][ T6001] 8021q: VLANs not supported on lo [ 78.542170][ T6009] netlink: 24 bytes leftover after parsing attributes in process `syz.4.23'. [ 78.571638][ T6009] netlink: 10 bytes leftover after parsing attributes in process `syz.4.23'. [ 78.796018][ T5838] Bluetooth: hci0: command tx timeout [ 78.797544][ T5848] Bluetooth: hci4: command tx timeout [ 78.844574][ T6022] netlink: 'syz.4.26': attribute type 10 has an invalid length. [ 78.876263][ T5848] Bluetooth: hci1: command tx timeout [ 78.878353][ T5838] Bluetooth: hci3: command tx timeout [ 78.882299][ T54] Bluetooth: hci2: command tx timeout [ 78.903403][ T6023] netlink: 'syz.4.26': attribute type 10 has an invalid length. [ 78.912741][ T6023] netlink: 40 bytes leftover after parsing attributes in process `syz.4.26'. [ 78.935662][ T6022] netlink: 40 bytes leftover after parsing attributes in process `syz.4.26'. [ 79.014164][ T6034] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.374399][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 79.547328][ T6068] netlink: 32 bytes leftover after parsing attributes in process `syz.3.37'. [ 80.041812][ T6089] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 80.048992][ T6089] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 80.213327][ T6104] Zero length message leads to an empty skb [ 80.225084][ T6093] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.234277][ T6093] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.244341][ T6093] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.253809][ T6093] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.303658][ T6115] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.399903][ T6115] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.439162][ T6119] netlink: 'syz.3.44': attribute type 13 has an invalid length. [ 80.559602][ T6123] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 80.599486][ T6123] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 80.641692][ T6123] netlink: 'syz.1.51': attribute type 3 has an invalid length. [ 81.245832][ T6158] team_slave_1: mtu less than device minimum [ 81.643933][ T6181] netlink: 'syz.3.66': attribute type 1 has an invalid length. [ 82.187848][ T6207] __nla_validate_parse: 3 callbacks suppressed [ 82.187871][ T6207] netlink: 20 bytes leftover after parsing attributes in process `syz.4.72'. [ 82.820062][ T6237] xt_hashlimit: max too large, truncated to 1048576 [ 83.012533][ T6247] netlink: 'syz.2.81': attribute type 2 has an invalid length. [ 83.044801][ T6246] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.052210][ T6250] netlink: 'syz.1.83': attribute type 10 has an invalid length. [ 83.053560][ T6246] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.106221][ T6250] hsr0: entered promiscuous mode [ 83.160428][ T6260] netlink: 13 bytes leftover after parsing attributes in process `syz.1.83'. [ 83.218676][ T6250] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 83.327833][ T6250] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 83.345717][ T6250] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 83.417555][ T6269] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.446729][ T6269] bond0: (slave bond1): Enslaving as an active interface with an up link [ 83.638022][ T6282] warning: `syz.3.91' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.799847][ T6291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.903418][ T6300] FAULT_INJECTION: forcing a failure. [ 83.903418][ T6300] name failslab, interval 1, probability 0, space 0, times 1 [ 83.929024][ T6300] CPU: 1 UID: 0 PID: 6300 Comm: syz.2.99 Not tainted 6.14.0-syzkaller-05884-g2ea396448f26 #0 PREEMPT(full) [ 83.929052][ T6300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 83.929063][ T6300] Call Trace: [ 83.929070][ T6300] [ 83.929078][ T6300] dump_stack_lvl+0x241/0x360 [ 83.929109][ T6300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.929133][ T6300] ? __pfx__printk+0x10/0x10 [ 83.929234][ T6300] ? __lock_acquire+0xad5/0xd80 [ 83.929267][ T6300] should_fail_ex+0x424/0x570 [ 83.929293][ T6300] should_failslab+0xac/0x100 [ 83.929317][ T6300] kmem_cache_alloc_noprof+0x78/0x390 [ 83.929338][ T6300] ? skb_clone+0x20c/0x390 [ 83.929365][ T6300] skb_clone+0x20c/0x390 [ 83.929390][ T6300] __netlink_deliver_tap+0x3c4/0x7f0 [ 83.929416][ T6300] ? netlink_deliver_tap+0x2e/0x1b0 [ 83.929432][ T6300] netlink_deliver_tap+0x19d/0x1b0 [ 83.929452][ T6300] netlink_unicast+0x7c6/0x9a0 [ 83.929484][ T6300] ? __pfx_netlink_unicast+0x10/0x10 [ 83.929512][ T6300] ? skb_put+0x114/0x1f0 [ 83.929537][ T6300] netlink_sendmsg+0x8c3/0xcd0 [ 83.929565][ T6300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.929588][ T6300] ? aa_sock_msg_perm+0x91/0x160 [ 83.929616][ T6300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.929633][ T6300] __sock_sendmsg+0x221/0x270 [ 83.929653][ T6300] ____sys_sendmsg+0x523/0x860 [ 83.929683][ T6300] ? __pfx_____sys_sendmsg+0x10/0x10 [ 83.929704][ T6300] ? __fget_files+0x2a/0x420 [ 83.929731][ T6300] ? __fget_files+0x2a/0x420 [ 83.929759][ T6300] __sys_sendmsg+0x271/0x360 [ 83.929784][ T6300] ? __pfx___sys_sendmsg+0x10/0x10 [ 83.929845][ T6300] ? do_syscall_64+0xb6/0x230 [ 83.929872][ T6300] do_syscall_64+0xf3/0x230 [ 83.929894][ T6300] ? clear_bhb_loop+0x45/0xa0 [ 83.929914][ T6300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.929931][ T6300] RIP: 0033:0x7f981878d169 [ 83.929949][ T6300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.929963][ T6300] RSP: 002b:00007f9819670038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.929992][ T6300] RAX: ffffffffffffffda RBX: 00007f98189a5fa0 RCX: 00007f981878d169 [ 83.930005][ T6300] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 83.930015][ T6300] RBP: 00007f9819670090 R08: 0000000000000000 R09: 0000000000000000 [ 83.930025][ T6300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.930036][ T6300] R13: 0000000000000000 R14: 00007f98189a5fa0 R15: 00007fff866b40a8 [ 83.930060][ T6300] [ 83.935186][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.200568][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.333732][ T6315] netlink: 28 bytes leftover after parsing attributes in process `syz.2.102'. [ 84.714797][ T6338] netlink: 16 bytes leftover after parsing attributes in process `syz.4.111'. [ 84.756131][ T6340] netlink: 60 bytes leftover after parsing attributes in process `syz.1.110'. [ 84.925879][ T6346] netlink: 36 bytes leftover after parsing attributes in process `syz.4.112'. [ 85.609694][ T6381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.124'. [ 85.671700][ T6381] vlan2: entered promiscuous mode [ 85.717813][ T6381] macvtap0: entered promiscuous mode [ 85.725994][ T6381] vlan2: entered allmulticast mode [ 85.740505][ T6381] macvtap0: entered allmulticast mode [ 85.769949][ T6381] veth0_macvtap: entered allmulticast mode [ 86.104084][ T6408] FAULT_INJECTION: forcing a failure. [ 86.104084][ T6408] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 86.106758][ T6407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.144377][ T6408] CPU: 1 UID: 0 PID: 6408 Comm: syz.1.131 Not tainted 6.14.0-syzkaller-05884-g2ea396448f26 #0 PREEMPT(full) [ 86.144407][ T6408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 86.144417][ T6408] Call Trace: [ 86.144424][ T6408] [ 86.144432][ T6408] dump_stack_lvl+0x241/0x360 [ 86.144472][ T6408] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.144495][ T6408] ? __pfx__printk+0x10/0x10 [ 86.144527][ T6408] should_fail_ex+0x424/0x570 [ 86.144556][ T6408] _copy_from_user+0x2d/0xb0 [ 86.144577][ T6408] copy_msghdr_from_user+0xb3/0x580 [ 86.144599][ T6408] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 86.144614][ T6408] ? __fget_files+0x2a/0x420 [ 86.144642][ T6408] ? __fget_files+0x2a/0x420 [ 86.144672][ T6408] do_recvmmsg+0x3bf/0xab0 [ 86.144705][ T6408] ? __pfx_do_recvmmsg+0x10/0x10 [ 86.144741][ T6408] ? __lock_acquire+0xad5/0xd80 [ 86.144789][ T6408] ? get_timespec64+0x1a8/0x290 [ 86.144826][ T6408] __x64_sys_recvmmsg+0x1ca/0x260 [ 86.144852][ T6408] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 86.144882][ T6408] ? do_syscall_64+0xb6/0x230 [ 86.144907][ T6408] do_syscall_64+0xf3/0x230 [ 86.144929][ T6408] ? clear_bhb_loop+0x45/0xa0 [ 86.144949][ T6408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.144966][ T6408] RIP: 0033:0x7fd162b8d169 [ 86.144983][ T6408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.144997][ T6408] RSP: 002b:00007fd16399b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 86.145018][ T6408] RAX: ffffffffffffffda RBX: 00007fd162da5fa0 RCX: 00007fd162b8d169 [ 86.145030][ T6408] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 86.145042][ T6408] RBP: 00007fd16399b090 R08: 0000200000003700 R09: 0000000000000000 [ 86.145053][ T6408] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 86.145063][ T6408] R13: 0000000000000000 R14: 00007fd162da5fa0 R15: 00007ffd914afe68 [ 86.145086][ T6408] [ 86.372043][ T6412] netlink: 'syz.4.133': attribute type 1 has an invalid length. [ 86.380277][ T6412] netlink: 244 bytes leftover after parsing attributes in process `syz.4.133'. [ 86.438393][ T6417] netlink: 'syz.4.134': attribute type 1 has an invalid length. [ 86.440108][ T6419] FAULT_INJECTION: forcing a failure. [ 86.440108][ T6419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.474657][ T6417] ip6erspan0: entered promiscuous mode [ 86.517023][ T6401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.527024][ T6419] CPU: 0 UID: 0 PID: 6419 Comm: syz.3.132 Not tainted 6.14.0-syzkaller-05884-g2ea396448f26 #0 PREEMPT(full) [ 86.527053][ T6419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 86.527064][ T6419] Call Trace: [ 86.527071][ T6419] [ 86.527079][ T6419] dump_stack_lvl+0x241/0x360 [ 86.527121][ T6419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.527145][ T6419] ? __pfx__printk+0x10/0x10 [ 86.527176][ T6419] should_fail_ex+0x424/0x570 [ 86.527208][ T6419] _copy_to_user+0x31/0xb0 [ 86.527232][ T6419] simple_read_from_buffer+0xc4/0x170 [ 86.527261][ T6419] proc_fail_nth_read+0x1ef/0x260 [ 86.527290][ T6419] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.527320][ T6419] ? rw_verify_area+0x246/0x630 [ 86.527338][ T6419] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.527365][ T6419] vfs_read+0x21f/0xb90 [ 86.527388][ T6419] ? __pfx___mutex_lock+0x10/0x10 [ 86.527416][ T6419] ? __pfx_vfs_read+0x10/0x10 [ 86.527437][ T6419] ? __fget_files+0x2a/0x420 [ 86.527464][ T6419] ? __fget_files+0x39d/0x420 [ 86.527488][ T6419] ? __fget_files+0x2a/0x420 [ 86.527519][ T6419] ksys_read+0x19d/0x2d0 [ 86.527549][ T6419] ? __pfx_ksys_read+0x10/0x10 [ 86.527572][ T6419] ? do_syscall_64+0xb6/0x230 [ 86.527600][ T6419] do_syscall_64+0xf3/0x230 [ 86.527625][ T6419] ? clear_bhb_loop+0x45/0xa0 [ 86.527646][ T6419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.527664][ T6419] RIP: 0033:0x7eff0378bb7c [ 86.527681][ T6419] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 86.527696][ T6419] RSP: 002b:00007eff0457f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 86.527718][ T6419] RAX: ffffffffffffffda RBX: 00007eff039a5fa0 RCX: 00007eff0378bb7c [ 86.527732][ T6419] RDX: 000000000000000f RSI: 00007eff0457f0a0 RDI: 0000000000000005 [ 86.527743][ T6419] RBP: 00007eff0457f090 R08: 0000000000000000 R09: 0000000000000000 [ 86.527755][ T6419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.527766][ T6419] R13: 0000000000000000 R14: 00007eff039a5fa0 R15: 00007ffe67c87138 [ 86.527791][ T6419] [ 86.834688][ T6416] ip6erspan0: entered promiscuous mode [ 86.862258][ T6426] netlink: 'syz.1.135': attribute type 1 has an invalid length. [ 86.880794][ T6423] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 86.881965][ T6425] netlink: 'syz.1.135': attribute type 1 has an invalid length. [ 86.898075][ T6423] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 86.961519][ T1209] cfg80211: failed to load regulatory.db [ 87.104421][ T6430] netlink: 76 bytes leftover after parsing attributes in process `syz.3.138'. [ 87.121013][ T6430] blkio.reset_stats is deprecated [ 87.512546][ T6458] FAULT_INJECTION: forcing a failure. [ 87.512546][ T6458] name failslab, interval 1, probability 0, space 0, times 0 [ 87.546624][ T6458] CPU: 1 UID: 0 PID: 6458 Comm: syz.2.145 Not tainted 6.14.0-syzkaller-05884-g2ea396448f26 #0 PREEMPT(full) [ 87.546654][ T6458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 87.546665][ T6458] Call Trace: [ 87.546672][ T6458] [ 87.546680][ T6458] dump_stack_lvl+0x241/0x360 [ 87.546712][ T6458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.546737][ T6458] ? __pfx__printk+0x10/0x10 [ 87.546763][ T6458] ? __pfx___might_resched+0x10/0x10 [ 87.546786][ T6458] should_fail_ex+0x424/0x570 [ 87.546816][ T6458] should_failslab+0xac/0x100 [ 87.546842][ T6458] __kmalloc_noprof+0xdf/0x4d0 [ 87.546866][ T6458] ? iovec_from_user+0x87/0x240 [ 87.546886][ T6458] ? __lock_acquire+0xad5/0xd80 [ 87.546914][ T6458] iovec_from_user+0x87/0x240 [ 87.546939][ T6458] __import_iovec+0x175/0x830 [ 87.546970][ T6458] import_iovec+0xeb/0x120 [ 87.546996][ T6458] copy_msghdr_from_user+0x3ee/0x580 [ 87.547019][ T6458] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 87.547036][ T6458] ? __fget_files+0x2a/0x420 [ 87.547063][ T6458] ? __fget_files+0x2a/0x420 [ 87.547093][ T6458] do_recvmmsg+0x3bf/0xab0 [ 87.547136][ T6458] ? __pfx_do_recvmmsg+0x10/0x10 [ 87.547175][ T6458] ? __lock_acquire+0xad5/0xd80 [ 87.547225][ T6458] ? get_timespec64+0x1a8/0x290 [ 87.547263][ T6458] __x64_sys_recvmmsg+0x1ca/0x260 [ 87.547289][ T6458] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 87.547319][ T6458] ? do_syscall_64+0xb6/0x230 [ 87.547346][ T6458] do_syscall_64+0xf3/0x230 [ 87.547369][ T6458] ? clear_bhb_loop+0x45/0xa0 [ 87.547390][ T6458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.547407][ T6458] RIP: 0033:0x7f981878d169 [ 87.547424][ T6458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.547440][ T6458] RSP: 002b:00007f9819670038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 87.547461][ T6458] RAX: ffffffffffffffda RBX: 00007f98189a5fa0 RCX: 00007f981878d169 [ 87.547475][ T6458] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 87.547488][ T6458] RBP: 00007f9819670090 R08: 0000200000003700 R09: 0000000000000000 [ 87.547500][ T6458] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 87.547512][ T6458] R13: 0000000000000000 R14: 00007f98189a5fa0 R15: 00007fff866b40a8 [ 87.547537][ T6458] [ 87.804085][ T6466] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.811734][ T6466] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.830208][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.147'. [ 87.885655][ T6468] netlink: 'syz.0.151': attribute type 3 has an invalid length. [ 88.017555][ T6474] netlink: 'syz.3.153': attribute type 7 has an invalid length. [ 88.025639][ T6474] netlink: 140 bytes leftover after parsing attributes in process `syz.3.153'. [ 88.190228][ T6478] trusted_key: syz.2.155 sent an empty control message without MSG_MORE. [ 88.896550][ T6507] team0 (unregistering): Port device team_slave_0 removed [ 88.926367][ T6507] team0 (unregistering): Port device team_slave_1 removed [ 89.274300][ T6537] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.373593][ T6516] netlink: 'syz.4.164': attribute type 4 has an invalid length. [ 89.397435][ T6544] netlink: 'syz.0.172': attribute type 10 has an invalid length. [ 89.444117][ T6544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.526949][ T6544] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 89.538484][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'. [ 89.571689][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.173'. [ 89.612621][ T6553] netlink: 'syz.2.173': attribute type 1 has an invalid length. [ 89.620729][ T6553] netlink: 10 bytes leftover after parsing attributes in process `syz.2.173'. [ 89.631077][ T6556] netlink: 20 bytes leftover after parsing attributes in process `syz.2.173'. [ 89.664079][ T6562] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 89.837455][ T6565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.177'. [ 89.969558][ T6565] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.018902][ T6571] vlan3: entered promiscuous mode [ 90.024107][ T6571] bond2: entered promiscuous mode [ 90.030207][ T6571] vlan3: entered allmulticast mode [ 90.036591][ T6571] bond2: entered allmulticast mode [ 90.037094][ T6575] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 90.075311][ T6577] tipc: Started in network mode [ 90.084101][ T6577] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 90.092418][ T6575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.104230][ T6577] tipc: Enabled bearer , priority 0 [ 90.191324][ T6581] netlink: 24 bytes leftover after parsing attributes in process `syz.3.181'. [ 90.296663][ T6586] netlink: 28 bytes leftover after parsing attributes in process `syz.1.184'. [ 90.416298][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.186'. [ 90.507842][ T6601] tipc: Enabled bearer , priority 10 [ 90.689223][ T6619] netlink: 'syz.4.192': attribute type 29 has an invalid length. [ 90.709066][ T6619] netlink: 'syz.4.192': attribute type 29 has an invalid length. [ 90.793082][ T6625] netlink: 'syz.3.195': attribute type 10 has an invalid length. [ 90.854221][ T6625] team0: Device hsr_slave_0 failed to register rx_handler [ 90.917257][ T6625] syz.3.195 (6625) used greatest stack depth: 19872 bytes left [ 91.303667][ T6658] No such timeout policy "syz0" [ 91.355444][ T6656] vlan2: entered allmulticast mode [ 91.362072][ T6656] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 91.626711][ T1209] tipc: Node number set to 11578026 [ 91.843400][ T6687] tipc: Started in network mode [ 91.862799][ T6687] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 91.881793][ T6687] tipc: Enabled bearer , priority 0 [ 92.018403][ T6691] lo speed is unknown, defaulting to 1000 [ 92.071516][ T6691] lo speed is unknown, defaulting to 1000 [ 92.102416][ T6694] rdma_rxe: rxe_newlink: failed to add lo [ 92.111859][ T6691] lo speed is unknown, defaulting to 1000 [ 92.175074][ T6703] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048) [ 92.369455][ T24] lo speed is unknown, defaulting to 1000 [ 92.378299][ T6691] infiniband sz1: set active [ 92.401276][ T6691] infiniband sz1: added lo [ 92.418123][ T6691] sz1: rxe_create_cq: returned err = -12 [ 92.433270][ T6691] infiniband sz1: Couldn't create ib_mad CQ [ 92.449219][ T6691] infiniband sz1: Couldn't open port 1 [ 92.487310][ T6691] RDS/IB: sz1: added [ 92.495239][ T6691] smc: adding ib device sz1 with port count 1 [ 92.503541][ T6691] smc: ib device sz1 port 1 has pnetid [ 92.511271][ T6730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.513948][ T24] lo speed is unknown, defaulting to 1000 [ 92.540861][ T6691] lo speed is unknown, defaulting to 1000 [ 92.769436][ T6743] netlink: 'syz.2.231': attribute type 1 has an invalid length. [ 92.838237][ T6747] vxcan1: tx address claim with different name [ 92.851067][ T6691] lo speed is unknown, defaulting to 1000 [ 92.884501][ T6743] xt_CT: No such helper "pptp" [ 92.961711][ T6743] netlink: 'syz.2.231': attribute type 1 has an invalid length. [ 92.990264][ T6752] netlink: 'syz.0.235': attribute type 1 has an invalid length. [ 93.005992][ T5924] tipc: Node number set to 11578026 [ 93.115815][ T6756] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 93.218860][ T6755] __nla_validate_parse: 13 callbacks suppressed [ 93.218878][ T6755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.234'. [ 93.234467][ T6755] tc_dump_action: action bad kind [ 93.243344][ T6691] lo speed is unknown, defaulting to 1000 [ 93.335436][ T6766] nftables ruleset with unbound chain [ 93.345481][ T6766] tipc: Started in network mode [ 93.355158][ T6766] tipc: Node identity ffffff9f, cluster identity 4711 [ 93.365366][ T6766] tipc: Node number set to 4294967199 [ 93.387051][ T6766] netlink: 'syz.3.239': attribute type 1 has an invalid length. [ 93.421338][ T6691] lo speed is unknown, defaulting to 1000 [ 93.530374][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'. [ 93.612327][ T6691] lo speed is unknown, defaulting to 1000 [ 93.652325][ T6778] netlink: 6 bytes leftover after parsing attributes in process `syz.3.243'. [ 93.960402][ T6788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.246'. [ 94.347226][ T6810] bond1: entered promiscuous mode [ 94.381253][ T6810] bond1: entered allmulticast mode [ 94.423897][ T6810] bond1 (unregistering): Released all slaves [ 94.452127][ T6821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.254'. [ 94.468386][ T6821] netlink: 'syz.2.254': attribute type 12 has an invalid length. [ 94.477912][ T6821] netlink: 'syz.2.254': attribute type 29 has an invalid length. [ 94.531874][ T6821] netlink: 148 bytes leftover after parsing attributes in process `syz.2.254'. [ 94.542031][ T6821] netlink: 'syz.2.254': attribute type 2 has an invalid length. [ 94.550068][ T6821] netlink: 43 bytes leftover after parsing attributes in process `syz.2.254'. [ 94.594526][ T6827] netlink: 'syz.1.256': attribute type 10 has an invalid length. [ 94.624403][ T6827] team0: Device veth0_macvtap failed to register rx_handler [ 94.664623][ T6829] netlink: 26 bytes leftover after parsing attributes in process `syz.1.256'. [ 94.975908][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'. [ 94.997699][ T6857] FAULT_INJECTION: forcing a failure. [ 94.997699][ T6857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.059277][ T6857] CPU: 1 UID: 0 PID: 6857 Comm: syz.3.263 Not tainted 6.14.0-syzkaller-05884-g2ea396448f26 #0 PREEMPT(full) [ 95.059306][ T6857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 95.059316][ T6857] Call Trace: [ 95.059322][ T6857] [ 95.059328][ T6857] dump_stack_lvl+0x241/0x360 [ 95.059361][ T6857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.059385][ T6857] ? __pfx__printk+0x10/0x10 [ 95.059416][ T6857] should_fail_ex+0x424/0x570 [ 95.059446][ T6857] _copy_to_iter+0x43f/0x1c90 [ 95.059476][ T6857] ? __pfx__copy_to_iter+0x10/0x10 [ 95.059497][ T6857] ? __x64_sys_recvmmsg+0x1ca/0x260 [ 95.059521][ T6857] ? do_syscall_64+0xf3/0x230 [ 95.059547][ T6857] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 95.059573][ T6857] ? skb_recv_datagram+0x26e/0x310 [ 95.059601][ T6857] __skb_datagram_iter+0x101/0x940 [ 95.059630][ T6857] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 95.059662][ T6857] skb_copy_datagram_iter+0xd1/0x250 [ 95.059689][ T6857] netlink_recvmsg+0x2d4/0x1180 [ 95.059715][ T6857] ? __pfx_netlink_recvmsg+0x10/0x10 [ 95.059733][ T6857] ? __kmalloc_noprof+0x2ae/0x4d0 [ 95.059758][ T6857] ? __pfx_aa_sk_perm+0x10/0x10 [ 95.059781][ T6857] ? aa_sock_msg_perm+0x91/0x160 [ 95.059805][ T6857] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 95.059825][ T6857] ? __pfx_netlink_recvmsg+0x10/0x10 [ 95.059846][ T6857] sock_recvmsg+0x22f/0x280 [ 95.059867][ T6857] ____sys_recvmsg+0x1c8/0x480 [ 95.059898][ T6857] ? __pfx_____sys_recvmsg+0x10/0x10 [ 95.059939][ T6857] do_recvmmsg+0x428/0xab0 [ 95.059971][ T6857] ? __pfx_do_recvmmsg+0x10/0x10 [ 95.060009][ T6857] ? __lock_acquire+0xad5/0xd80 [ 95.060059][ T6857] ? get_timespec64+0x1a8/0x290 [ 95.060096][ T6857] __x64_sys_recvmmsg+0x1ca/0x260 [ 95.060123][ T6857] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 95.060153][ T6857] ? do_syscall_64+0xb6/0x230 [ 95.060179][ T6857] do_syscall_64+0xf3/0x230 [ 95.060204][ T6857] ? clear_bhb_loop+0x45/0xa0 [ 95.060225][ T6857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.060242][ T6857] RIP: 0033:0x7eff0378d169 [ 95.060267][ T6857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.060282][ T6857] RSP: 002b:00007eff0457f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 95.060305][ T6857] RAX: ffffffffffffffda RBX: 00007eff039a5fa0 RCX: 00007eff0378d169 [ 95.060318][ T6857] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 95.060331][ T6857] RBP: 00007eff0457f090 R08: 0000200000003700 R09: 0000000000000000 [ 95.060343][ T6857] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002 [ 95.060355][ T6857] R13: 0000000000000000 R14: 00007eff039a5fa0 R15: 00007ffe67c87138 [ 95.060379][ T6857] [ 95.810204][ T6883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.270'. [ 95.841597][ T6883] FAULT_INJECTION: forcing a failure. [ 95.841597][ T6883] name failslab, interval 1, probability 0, space 0, times 0 [ 95.873393][ T6883] CPU: 0 UID: 0 PID: 6883 Comm: syz.1.270 Not tainted 6.14.0-syzkaller-05884-g2ea396448f26 #0 PREEMPT(full) [ 95.873422][ T6883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 95.873432][ T6883] Call Trace: [ 95.873438][ T6883] [ 95.873446][ T6883] dump_stack_lvl+0x241/0x360 [ 95.873477][ T6883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.873499][ T6883] ? __pfx__printk+0x10/0x10 [ 95.873523][ T6883] ? __pfx___might_resched+0x10/0x10 [ 95.873544][ T6883] should_fail_ex+0x424/0x570 [ 95.873570][ T6883] should_failslab+0xac/0x100 [ 95.873595][ T6883] __kvmalloc_node_noprof+0x170/0x5a0 [ 95.873620][ T6883] ? cgroup_pidlist_start+0x409/0x1040 [ 95.873639][ T6883] ? _raw_spin_unlock_irq+0x2e/0x50 [ 95.873663][ T6883] cgroup_pidlist_start+0x409/0x1040 [ 95.873693][ T6883] ? __pfx_cgroup_pidlist_start+0x10/0x10 [ 95.873748][ T6883] ? cgroup_seqfile_start+0x23/0xb0 [ 95.873774][ T6883] kernfs_seq_start+0x179/0x3b0 [ 95.873800][ T6883] seq_read_iter+0x3f1/0xda0 [ 95.873820][ T6883] ? __pfx_aa_file_perm+0x10/0x10 [ 95.873852][ T6883] ? kernfs_fop_read_iter+0x142/0x650 [ 95.873878][ T6883] do_iter_readv_writev+0x71f/0x9d0 [ 95.873903][ T6883] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 95.873931][ T6883] ? rw_verify_area+0x246/0x630 [ 95.873952][ T6883] vfs_readv+0x2b5/0xa80 [ 95.873978][ T6883] ? __mutex_lock+0x39b/0x1000 [ 95.874006][ T6883] ? __pfx_vfs_readv+0x10/0x10 [ 95.874043][ T6883] ? __fget_files+0x2a/0x420 [ 95.874068][ T6883] ? __fget_files+0x39d/0x420 [ 95.874090][ T6883] ? __fget_files+0x2a/0x420 [ 95.874122][ T6883] do_readv+0x1b8/0x360 [ 95.874150][ T6883] ? __pfx_do_readv+0x10/0x10 [ 95.874179][ T6883] ? do_syscall_64+0xb6/0x230 [ 95.874215][ T6883] do_syscall_64+0xf3/0x230 [ 95.874239][ T6883] ? clear_bhb_loop+0x45/0xa0 [ 95.874260][ T6883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.874286][ T6883] RIP: 0033:0x7fd162b8d169 [ 95.874304][ T6883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.874319][ T6883] RSP: 002b:00007fd16399b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 95.874340][ T6883] RAX: ffffffffffffffda RBX: 00007fd162da5fa0 RCX: 00007fd162b8d169 [ 95.874353][ T6883] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000007 [ 95.874365][ T6883] RBP: 00007fd16399b090 R08: 0000000000000000 R09: 0000000000000000 [ 95.874376][ T6883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.874387][ T6883] R13: 0000000000000000 R14: 00007fd162da5fa0 R15: 00007ffd914afe68 [ 95.874413][ T6883] [ 96.442610][ T6903] IPVS: length: 24 != 6840 [ 96.548896][ T6910] IPVS: set_ctl: invalid protocol: 98 172.30.0.3:20003 [ 97.084438][ T6939] netlink: 'syz.0.282': attribute type 58 has an invalid length. [ 97.116859][ T6943] FAULT_INJECTION: forcing a failure. [ 97.116859][ T6943] name failslab, interval 1, probability 0, space 0, times 0 [ 97.175839][ T6943] CPU: 0 UID: 0 PID: 6943 Comm: syz.2.284 Not tainted 6.14.0-syzkaller-05884-g2ea396448f26 #0 PREEMPT(full) [ 97.175868][ T6943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 97.175879][ T6943] Call Trace: [ 97.175885][ T6943] [ 97.175893][ T6943] dump_stack_lvl+0x241/0x360 [ 97.175925][ T6943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.175947][ T6943] ? __pfx__printk+0x10/0x10 [ 97.175973][ T6943] ? __pfx___might_resched+0x10/0x10 [ 97.176006][ T6943] should_fail_ex+0x424/0x570 [ 97.176036][ T6943] should_failslab+0xac/0x100 [ 97.176062][ T6943] __kmalloc_cache_noprof+0x73/0x370 [ 97.176086][ T6943] ? cgroup_pidlist_start+0x894/0x1040 [ 97.176112][ T6943] cgroup_pidlist_start+0x894/0x1040 [ 97.176144][ T6943] ? __pfx_cgroup_pidlist_start+0x10/0x10 [ 97.176181][ T6943] ? cgroup_seqfile_start+0x23/0xb0 [ 97.176208][ T6943] kernfs_seq_start+0x179/0x3b0 [ 97.176234][ T6943] seq_read_iter+0x3f1/0xda0 [ 97.176253][ T6943] ? __pfx_aa_file_perm+0x10/0x10 [ 97.176284][ T6943] ? kernfs_fop_read_iter+0x142/0x650 [ 97.176312][ T6943] do_iter_readv_writev+0x71f/0x9d0 [ 97.176338][ T6943] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 97.176367][ T6943] ? rw_verify_area+0x246/0x630 [ 97.176388][ T6943] vfs_readv+0x2b5/0xa80 [ 97.176412][ T6943] ? __mutex_lock+0x39b/0x1000 [ 97.176442][ T6943] ? __pfx_vfs_readv+0x10/0x10 [ 97.176485][ T6943] ? __fget_files+0x2a/0x420 [ 97.176512][ T6943] ? __fget_files+0x39d/0x420 [ 97.176535][ T6943] ? __fget_files+0x2a/0x420 [ 97.176567][ T6943] do_readv+0x1b8/0x360 [ 97.176596][ T6943] ? __pfx_do_readv+0x10/0x10 [ 97.176625][ T6943] ? do_syscall_64+0xb6/0x230 [ 97.176652][ T6943] do_syscall_64+0xf3/0x230 [ 97.176677][ T6943] ? clear_bhb_loop+0x45/0xa0 [ 97.176698][ T6943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.176716][ T6943] RIP: 0033:0x7f981878d169 [ 97.176733][ T6943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.176748][ T6943] RSP: 002b:00007f9819670038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 97.176770][ T6943] RAX: ffffffffffffffda RBX: 00007f98189a5fa0 RCX: 00007f981878d169 [ 97.176783][ T6943] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000007 [ 97.176795][ T6943] RBP: 00007f9819670090 R08: 0000000000000000 R09: 0000000000000000 [ 97.176805][ T6943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.176816][ T6943] R13: 0000000000000000 R14: 00007f98189a5fa0 R15: 00007fff866b40a8 [ 97.176842][ T6943] [ 98.042045][ T6978] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.094098][ T6986] vlan2: entered promiscuous mode [ 98.105268][ T6986] bond2: entered promiscuous mode [ 98.111634][ T6986] vlan2: entered allmulticast mode [ 98.130747][ T6986] bond2: entered allmulticast mode [ 98.315883][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 98.553114][ T7016] __nla_validate_parse: 9 callbacks suppressed [ 98.553134][ T7016] netlink: 28 bytes leftover after parsing attributes in process `syz.0.301'. [ 98.621934][ T7016] FAULT_INJECTION: forcing a failure. [ 98.621934][ T7016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.646696][ T7016] CPU: 1 UID: 0 PID: 7016 Comm: syz.0.301 Not tainted 6.14.0-syzkaller-05884-g2ea396448f26 #0 PREEMPT(full) [ 98.646726][ T7016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 98.646737][ T7016] Call Trace: [ 98.646744][ T7016] [ 98.646752][ T7016] dump_stack_lvl+0x241/0x360 [ 98.646785][ T7016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.646810][ T7016] ? __pfx__printk+0x10/0x10 [ 98.646843][ T7016] should_fail_ex+0x424/0x570 [ 98.646873][ T7016] _copy_to_iter+0x1f6/0x1c90 [ 98.646905][ T7016] ? __pfx__copy_to_iter+0x10/0x10 [ 98.646923][ T7016] ? kernfs_seq_stop+0x17b/0x200 [ 98.646948][ T7016] ? kernfs_put_active+0xa2/0x130 [ 98.646963][ T7016] ? __pfx_cgroup_seqfile_stop+0x10/0x10 [ 98.646988][ T7016] ? kernfs_seq_stop+0x17b/0x200 [ 98.647013][ T7016] seq_read_iter+0xb7b/0xda0 [ 98.647057][ T7016] do_iter_readv_writev+0x71f/0x9d0 [ 98.647084][ T7016] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 98.647112][ T7016] ? rw_verify_area+0x246/0x630 [ 98.647133][ T7016] vfs_readv+0x2b5/0xa80 [ 98.647160][ T7016] ? __mutex_lock+0x39b/0x1000 [ 98.647190][ T7016] ? __pfx_vfs_readv+0x10/0x10 [ 98.647232][ T7016] ? __fget_files+0x2a/0x420 [ 98.647258][ T7016] ? __fget_files+0x39d/0x420 [ 98.647281][ T7016] ? __fget_files+0x2a/0x420 [ 98.647310][ T7016] do_readv+0x1b8/0x360 [ 98.647337][ T7016] ? __pfx_do_readv+0x10/0x10 [ 98.647366][ T7016] ? do_syscall_64+0xb6/0x230 [ 98.647393][ T7016] do_syscall_64+0xf3/0x230 [ 98.647418][ T7016] ? clear_bhb_loop+0x45/0xa0 [ 98.647439][ T7016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.647456][ T7016] RIP: 0033:0x7f8fb558d169 [ 98.647472][ T7016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.647487][ T7016] RSP: 002b:00007f8fb6340038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 98.647508][ T7016] RAX: ffffffffffffffda RBX: 00007f8fb57a5fa0 RCX: 00007f8fb558d169 [ 98.647521][ T7016] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000007 [ 98.647533][ T7016] RBP: 00007f8fb6340090 R08: 0000000000000000 R09: 0000000000000000 [ 98.647545][ T7016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.647556][ T7016] R13: 0000000000000000 R14: 00007f8fb57a5fa0 R15: 00007ffdab7d4568 [ 98.647581][ T7016] [ 99.075076][ T7029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.304'. [ 99.253586][ T7047] netlink: 64 bytes leftover after parsing attributes in process `syz.1.307'. [ 99.297296][ T7049] netlink: 100 bytes leftover after parsing attributes in process `syz.2.308'. [ 99.353841][ T7053] netlink: 16 bytes leftover after parsing attributes in process `syz.0.309'. [ 99.515178][ T7053] netlink: 372 bytes leftover after parsing attributes in process `syz.0.309'. [ 99.538233][ T7061] netlink: 16 bytes leftover after parsing attributes in process `syz.2.311'. [ 99.549552][ T7060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.312'. [ 99.574348][ T7053] openvswitch: netlink: Flow actions attr not present in new flow. [ 99.764237][ T7077] netlink: 28 bytes leftover after parsing attributes in process `syz.2.314'. [ 99.880451][ T7081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.315'. [ 99.944122][ T7081] FAULT_INJECTION: forcing a failure. [ 99.944122][ T7081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.020286][ T7081] CPU: 0 UID: 0 PID: 7081 Comm: syz.0.315 Not tainted 6.14.0-syzkaller-05884-g2ea396448f26 #0 PREEMPT(full) [ 100.020317][ T7081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 100.020327][ T7081] Call Trace: [ 100.020333][ T7081] [ 100.020341][ T7081] dump_stack_lvl+0x241/0x360 [ 100.020372][ T7081] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.020395][ T7081] ? __pfx__printk+0x10/0x10 [ 100.020425][ T7081] should_fail_ex+0x424/0x570 [ 100.020452][ T7081] _copy_to_user+0x31/0xb0 [ 100.020476][ T7081] simple_read_from_buffer+0xc4/0x170 [ 100.020502][ T7081] proc_fail_nth_read+0x1ef/0x260 [ 100.020530][ T7081] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.020558][ T7081] ? rw_verify_area+0x246/0x630 [ 100.020575][ T7081] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.020601][ T7081] vfs_read+0x21f/0xb90 [ 100.020623][ T7081] ? __pfx___mutex_lock+0x10/0x10 [ 100.020649][ T7081] ? __pfx_vfs_read+0x10/0x10 [ 100.020669][ T7081] ? __fget_files+0x2a/0x420 [ 100.020694][ T7081] ? __fget_files+0x39d/0x420 [ 100.020717][ T7081] ? __fget_files+0x2a/0x420 [ 100.020747][ T7081] ksys_read+0x19d/0x2d0 [ 100.020767][ T7081] ? __pfx_ksys_read+0x10/0x10 [ 100.020789][ T7081] ? do_syscall_64+0xb6/0x230 [ 100.020815][ T7081] do_syscall_64+0xf3/0x230 [ 100.020840][ T7081] ? clear_bhb_loop+0x45/0xa0 [ 100.020860][ T7081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.020878][ T7081] RIP: 0033:0x7f8fb558bb7c [ 100.020894][ T7081] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 100.020908][ T7081] RSP: 002b:00007f8fb6340030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 100.020929][ T7081] RAX: ffffffffffffffda RBX: 00007f8fb57a5fa0 RCX: 00007f8fb558bb7c [ 100.020943][ T7081] RDX: 000000000000000f RSI: 00007f8fb63400a0 RDI: 0000000000000008 [ 100.020954][ T7081] RBP: 00007f8fb6340090 R08: 0000000000000000 R09: 0000000000000000 [ 100.020965][ T7081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.020976][ T7081] R13: 0000000000000000 R14: 00007f8fb57a5fa0 R15: 00007ffdab7d4568 [ 100.021000][ T7081] [ 100.766811][ T7115] bridge_slave_0: entered allmulticast mode [ 100.900922][ T7115] vlan2: entered allmulticast mode [ 100.906519][ T7115] ip6gretap0: entered allmulticast mode [ 100.946907][ T7125] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.964684][ T7129] vlan1: entered promiscuous mode [ 100.970170][ T7129] bond1: entered promiscuous mode [ 100.975485][ T7129] vlan1: entered allmulticast mode [ 100.981240][ T7129] bond1: entered allmulticast mode [ 101.103029][ T7133] netlink: 'syz.2.332': attribute type 1 has an invalid length. [ 101.111137][ T7133] netlink: 'syz.2.332': attribute type 1 has an invalid length. [ 102.531985][ T7149] vlan4: entered allmulticast mode [ 102.560493][ T7149] gretap0: entered allmulticast mode [ 102.871718][ T7166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.891924][ T7180] vlan2: entered promiscuous mode [ 102.959228][ T7180] bond1: entered promiscuous mode [ 102.985392][ T7180] vlan2: entered allmulticast mode [ 103.005707][ T7180] bond1: entered allmulticast mode [ 103.290831][ T7206] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 103.362820][ T7203] Bluetooth: MGMT ver 1.23 [ 103.634930][ T7177] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 103.749786][ T7224] __nla_validate_parse: 6 callbacks suppressed [ 103.749808][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.348'. [ 103.783278][ T7226] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 103.802733][ T7226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.842985][ T7224] bridge_slave_1: left allmulticast mode [ 103.876193][ T7224] bridge_slave_1: left promiscuous mode [ 103.886839][ T7224] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.972330][ T7224] bridge_slave_0: left allmulticast mode [ 103.980947][ T7224] bridge_slave_0: left promiscuous mode [ 103.986970][ T7224] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.050601][ T7236] netlink: 'syz.2.352': attribute type 10 has an invalid length. [ 104.115742][ T7236] netlink: 40 bytes leftover after parsing attributes in process `syz.2.352'. [ 104.165797][ T7236] dummy0: entered promiscuous mode [ 104.196628][ T7236] bridge0: port 3(dummy0) entered blocking state [ 104.236793][ T7236] bridge0: port 3(dummy0) entered disabled state [ 104.243376][ T7236] dummy0: entered allmulticast mode [ 104.581971][ T7275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.362'. [ 104.598279][ T7277] netlink: zone id is out of range [ 104.603586][ T7277] netlink: zone id is out of range [ 104.652577][ T7277] netlink: zone id is out of range [ 104.684536][ T7277] netlink: zone id is out of range [ 104.717751][ T7277] netlink: zone id is out of range [ 104.723683][ T7277] netlink: del zone limit has 8 unknown bytes [ 104.776616][ T7285] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 104.790784][ T7285] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 104.879554][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 105.007990][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.367'. [ 105.924613][ T7337] netlink: 28 bytes leftover after parsing attributes in process `syz.0.376'. [ 106.312065][ T7362] tipc: Enabling of bearer rejected, already enabled [ 106.598021][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'. [ 106.654530][ T7387] netlink: 40 bytes leftover after parsing attributes in process `syz.0.390'. [ 106.712449][ T7386] netlink: 'syz.1.389': attribute type 1 has an invalid length. [ 106.771349][ T7391] delete_channel: no stack [ 106.775734][ T7386] netlink: 228 bytes leftover after parsing attributes in process `syz.1.389'. [ 106.797910][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.389'. [ 106.894162][ T7386] netlink: 292 bytes leftover after parsing attributes in process `syz.1.389'. [ 106.980656][ T7404] netlink: 'syz.4.393': attribute type 29 has an invalid length. [ 106.999973][ T7404] netlink: 'syz.4.393': attribute type 29 has an invalid length. [ 107.224213][ T7423] ÿ: renamed from bridge_slave_1 (while UP) [ 107.370034][ T7430] tipc: Enabling of bearer rejected, already enabled [ 107.623790][ T7445] netlink: 'syz.1.403': attribute type 1 has an invalid length. [ 107.938018][ T7466] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.945264][ T7466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.952823][ T7466] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.960021][ T7466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.477504][ T7497] __nla_validate_parse: 5 callbacks suppressed [ 109.477528][ T7497] netlink: 16 bytes leftover after parsing attributes in process `syz.2.412'. [ 109.561837][ T7497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.412'. [ 109.739000][ T7510] netlink: 830 bytes leftover after parsing attributes in process `syz.1.417'. [ 110.096057][ T7525] tipc: Enabling of bearer rejected, already enabled [ 110.228598][ T7531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.422'. [ 110.937071][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.430'. [ 111.114390][ T7564] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.225870][ T58] lo speed is unknown, defaulting to 1000 [ 111.498689][ T7575] tipc: Enabling of bearer rejected, failed to enable media [ 111.544304][ T7577] IPVS: Unknown mcast interface: veth1_to_batadv [ 111.578000][ T7579] IPVS: set_ctl: invalid protocol: 46 100.1.1.0:20000 [ 112.061860][ T7589] xt_l2tp: missing protocol rule (udp|l2tpip) [ 112.301404][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.441'. [ 112.620995][ T7604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.980444][ T7613] netlink: 28 bytes leftover after parsing attributes in process `syz.3.445'. [ 113.947889][ T7618] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 114.286944][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.455'. [ 114.332041][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.455'. [ 114.356211][ T7639] xt_ecn: cannot match TCP bits for non-tcp packets [ 114.382364][ T7646] netlink: 'syz.4.455': attribute type 14 has an invalid length. [ 114.431350][ T7646] netlink: 'syz.4.455': attribute type 13 has an invalid length. [ 114.587903][ T7649] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20002 [ 114.989067][ T7658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.459'. [ 115.206079][ T7658] 8021q: adding VLAN 0 to HW filter on device bond4 [ 115.285539][ C1] sched: DL replenish lagged too much [ 115.453966][ T7672] netlink: 32 bytes leftover after parsing attributes in process `syz.1.463'. [ 115.497246][ T7674] netlink: 'syz.3.464': attribute type 2 has an invalid length. [ 115.545740][ T7674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.464'. [ 115.925400][ T7687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.468'. [ 116.096372][ T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 116.340530][ T7699] Driver unsupported XDP return value 0 on prog (id 79) dev N/A, expect packet loss! [ 116.935258][ T7714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.476'. [ 117.115843][ T7714] 8021q: adding VLAN 0 to HW filter on device bond5 [ 117.133815][ T7718] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 117.494239][ T7735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.481'. [ 117.603866][ T7735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.481'. [ 117.731839][ T7737] lo speed is unknown, defaulting to 1000 [ 120.177807][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.499'. [ 120.269207][ T7810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.499'. [ 120.393597][ T7810] netlink: 'syz.4.499': attribute type 5 has an invalid length. [ 121.116029][ T7833] netlink: 'syz.0.505': attribute type 8 has an invalid length. [ 121.447697][ T7844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.508'. [ 121.707818][ T7844] 8021q: adding VLAN 0 to HW filter on device bond3 [ 123.740338][ T7897] tipc: Failed to remove unknown binding: 66,1,1/0:510256075/510256077 [ 123.813994][ T7898] tipc: Failed to remove unknown binding: 66,1,1/0:510256075/510256077 [ 123.830648][ T7898] tipc: Failed to remove unknown binding: 66,1,1/0:510256075/510256077 [ 130.765678][ T7903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.525'. [ 130.785256][ T7904] netlink: 72 bytes leftover after parsing attributes in process `syz.0.524'. [ 130.843311][ T7897] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 131.071197][ T7903] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.646634][ T7927] netlink: 48 bytes leftover after parsing attributes in process `syz.4.528'. [ 132.492982][ T7944] syz_tun: entered promiscuous mode [ 132.543053][ T7944] syz_tun: left promiscuous mode [ 132.736833][ T7966] xt_bpf: check failed: parse error [ 132.889825][ T7946] dvmrp0: entered allmulticast mode [ 132.916239][ T7967] netlink: 17 bytes leftover after parsing attributes in process `syz.0.537'. [ 132.976903][ T7967] netlink: zone id is out of range [ 133.054566][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.065386][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.084610][ T7967] netlink: zone id is out of range [ 133.125257][ T7967] netlink: zone id is out of range [ 133.184989][ T7967] netlink: zone id is out of range [ 133.281490][ T7967] netlink: zone id is out of range [ 133.354424][ T7967] netlink: zone id is out of range [ 133.399727][ T7967] netlink: zone id is out of range [ 133.404932][ T7967] netlink: zone id is out of range [ 133.486301][ T7967] netlink: zone id is out of range [ 133.527102][ T7967] netlink: zone id is out of range [ 134.869617][ T8012] netlink: 'syz.3.549': attribute type 1 has an invalid length. [ 134.909423][ T8014] netlink: 44 bytes leftover after parsing attributes in process `syz.1.550'. [ 134.982427][ T8012] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.998406][ T8020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.551'. [ 135.060994][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.551'. [ 135.647100][ T8032] netlink: 312 bytes leftover after parsing attributes in process `syz.0.554'. [ 135.702519][ T8023] lo speed is unknown, defaulting to 1000 [ 136.013432][ T8042] FAULT_INJECTION: forcing a failure. [ 136.013432][ T8042] name failslab, interval 1, probability 0, space 0, times 0 [ 136.072744][ T8042] CPU: 0 UID: 0 PID: 8042 Comm: syz.4.558 Not tainted 6.14.0-syzkaller-05884-g2ea396448f26 #0 PREEMPT(full) [ 136.072776][ T8042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 136.072788][ T8042] Call Trace: [ 136.072795][ T8042] [ 136.072803][ T8042] dump_stack_lvl+0x241/0x360 [ 136.072836][ T8042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.072860][ T8042] ? __pfx__printk+0x10/0x10 [ 136.072892][ T8042] should_fail_ex+0x424/0x570 [ 136.072931][ T8042] should_failslab+0xac/0x100 [ 136.072957][ T8042] kmem_cache_alloc_noprof+0x78/0x390 [ 136.072981][ T8042] ? skb_clone+0x20c/0x390 [ 136.073009][ T8042] skb_clone+0x20c/0x390 [ 136.073036][ T8042] __netlink_deliver_tap+0x3c4/0x7f0 [ 136.073064][ T8042] ? netlink_deliver_tap+0x2e/0x1b0 [ 136.073082][ T8042] netlink_deliver_tap+0x19d/0x1b0 [ 136.073102][ T8042] netlink_dump+0x8e6/0xeb0 [ 136.073126][ T8042] ? __pfx_netlink_dump+0x10/0x10 [ 136.073157][ T8042] ? netlink_recvmsg+0x620/0x1180 [ 136.073178][ T8042] ? netlink_recvmsg+0x620/0x1180 [ 136.073200][ T8042] netlink_recvmsg+0x6c7/0x1180 [ 136.073218][ T8042] ? stack_depot_save_flags+0x3a/0x970 [ 136.073250][ T8042] ? __pfx_netlink_recvmsg+0x10/0x10 [ 136.073271][ T8042] ? __lock_acquire+0xad5/0xd80 [ 136.073305][ T8042] ? __import_iovec+0x3c2/0x830 [ 136.073327][ T8042] ? __pfx_netlink_recvmsg+0x10/0x10 [ 136.073348][ T8042] sock_recvmsg_nosec+0x18e/0x1d0 [ 136.073369][ T8042] ____sys_recvmsg+0x3d4/0x480 [ 136.073400][ T8042] ? __pfx_____sys_recvmsg+0x10/0x10 [ 136.073441][ T8042] do_recvmmsg+0x428/0xab0 [ 136.073473][ T8042] ? __pfx_do_recvmmsg+0x10/0x10 [ 136.073513][ T8042] ? __lock_acquire+0xad5/0xd80 [ 136.073563][ T8042] ? get_timespec64+0x1a8/0x290 [ 136.073602][ T8042] __x64_sys_recvmmsg+0x1ca/0x260 [ 136.073635][ T8042] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 136.073741][ T8042] ? do_syscall_64+0xb6/0x230 [ 136.073779][ T8042] do_syscall_64+0xf3/0x230 [ 136.073802][ T8042] ? clear_bhb_loop+0x45/0xa0 [ 136.073823][ T8042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.073841][ T8042] RIP: 0033:0x7f07d278d169 [ 136.073858][ T8042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.073872][ T8042] RSP: 002b:00007f07d3644038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 136.073894][ T8042] RAX: ffffffffffffffda RBX: 00007f07d29a5fa0 RCX: 00007f07d278d169 [ 136.073908][ T8042] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 136.073920][ T8042] RBP: 00007f07d3644090 R08: 0000200000003700 R09: 0000000000000000 [ 136.073931][ T8042] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002 [ 136.073942][ T8042] R13: 0000000000000000 R14: 00007f07d29a5fa0 R15: 00007ffe26276408 [ 136.073964][ T8042] [ 137.081063][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.561'. [ 137.202177][ T8055] lo speed is unknown, defaulting to 1000 [ 137.239675][ T8056] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 137.550818][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.563'. [ 137.771503][ T8071] ipvlan2: entered promiscuous mode [ 137.825492][ T8071] ipvlan2: entered allmulticast mode [ 137.851727][ T8071] team0: entered allmulticast mode [ 137.875450][ T8071] team_slave_0: entered allmulticast mode [ 137.945748][ T8071] team_slave_1: entered allmulticast mode [ 137.972450][ T8071] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 138.007773][ T8071] team0: Device ipvlan2 is already an upper device of the team interface [ 138.164941][ T8076] tc_dump_action: action bad kind [ 138.695264][ T8085] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 138.873532][ T8091] netlink: 16 bytes leftover after parsing attributes in process `syz.2.572'. [ 139.507756][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.537471][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.565665][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.599310][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.624417][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.650232][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.675112][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.709720][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.737654][ T8085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.761197][ T8085] batadv_slave_0: entered promiscuous mode [ 139.772383][ T8085] batadv_slave_0: entered allmulticast mode [ 140.154546][ T8096] netlink: 20 bytes leftover after parsing attributes in process `syz.1.573'. [ 140.573607][ T8102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.575'. [ 140.661384][ T8105] netlink: 9 bytes leftover after parsing attributes in process `syz.1.578'. [ 140.729282][ T8102] 8021q: adding VLAN 0 to HW filter on device bond4 [ 140.763529][ T8105] 0·: renamed from hsr_slave_1 (while UP) [ 140.801971][ T8105] 0·: entered allmulticast mode [ 140.827720][ T8105] net_ratelimit: 74 callbacks suppressed [ 140.827745][ T8105] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 140.929021][ T8108] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.578'. [ 141.156134][ T8113] netlink: 256 bytes leftover after parsing attributes in process `syz.2.579'. [ 141.474892][ T8122] netlink: 32 bytes leftover after parsing attributes in process `syz.3.583'. [ 142.198948][ T8139] netlink: 32 bytes leftover after parsing attributes in process `syz.1.587'. [ 142.759451][ T8148] delete_channel: no stack [ 147.514901][ T8142] tipc: Enabling of bearer rejected, already enabled [ 147.645918][ T5915] IPVS: starting estimator thread 0... [ 147.756413][ T8160] IPVS: using max 25 ests per chain, 60000 per kthread [ 148.299798][ T8178] set match dimension is over the limit! [ 148.624611][ T8187] netlink: 32 bytes leftover after parsing attributes in process `syz.4.598'. [ 148.701498][ T8189] netlink: 48 bytes leftover after parsing attributes in process `syz.0.600'. [ 148.724960][ T8189] netlink: 48 bytes leftover after parsing attributes in process `syz.0.600'. [ 148.747677][ T8192] netlink: 'syz.3.599': attribute type 1 has an invalid length. [ 149.499620][ T8209] IPVS: length: 157 != 24 [ 149.528766][ T8207] IPVS: length: 157 != 24 [ 149.551436][ T8213] x_tables: unsorted underflow at hook 2 [ 149.569903][ T8209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.606'. [ 149.608592][ T8213] netlink: 'syz.0.608': attribute type 1 has an invalid length. [ 149.650086][ T8207] netlink: 20 bytes leftover after parsing attributes in process `syz.1.606'. [ 149.957753][ T8225] netlink: 64 bytes leftover after parsing attributes in process `syz.2.609'. [ 150.288895][ T8232] sctp: [Deprecated]: syz.0.612 (pid 8232) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.288895][ T8232] Use struct sctp_sack_info instead [ 150.420990][ T8242] team0: entered allmulticast mode [ 150.426940][ T8244] sctp: [Deprecated]: syz.0.612 (pid 8244) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.426940][ T8244] Use struct sctp_sack_info instead [ 150.475262][ T8242] team_slave_0: entered allmulticast mode [ 150.515915][ T8242] team_slave_1: entered allmulticast mode [ 150.610120][ T8235] team0: left allmulticast mode [ 150.680878][ T8235] team_slave_0: left allmulticast mode [ 150.715273][ T8235] team_slave_1: left allmulticast mode [ 150.804216][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.617'. [ 150.988260][ T8255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.026453][ T8255] batadv_slave_0: entered promiscuous mode [ 151.247572][ T8265] tipc: Enabled bearer , priority 0 [ 151.548553][ T8266] syzkaller0: entered promiscuous mode [ 151.554101][ T8266] syzkaller0: entered allmulticast mode [ 151.560551][ T8278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.622'. [ 151.606534][ T8278] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 151.617245][ T8266] tipc: Resetting bearer [ 151.847187][ T8266] tipc: Resetting bearer [ 155.893576][ T8266] tipc: Disabling bearer [ 155.942322][ T8294] netlink: 132 bytes leftover after parsing attributes in process `syz.2.627'. [ 156.039678][ T8302] pimreg: entered allmulticast mode [ 156.158079][ T8310] netlink: 132 bytes leftover after parsing attributes in process `syz.1.632'. [ 156.250041][ T8314] netlink: 28 bytes leftover after parsing attributes in process `syz.4.635'. [ 156.270302][ T8320] netlink: 28 bytes leftover after parsing attributes in process `syz.2.637'. [ 156.373750][ T8325] bond0: (slave bond_slave_0): Releasing backup interface [ 156.394133][ T8325] bond0: (slave bond_slave_1): Releasing backup interface [ 156.448306][ T8325] team0: Port device team_slave_0 removed [ 156.476488][ T8325] team0: Port device team_slave_1 removed [ 156.483146][ T8325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.495989][ T8325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.505338][ T8325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.536085][ T12] tipc: Resetting bearer [ 156.565141][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 156.630074][ T8338] vlan3: entered allmulticast mode [ 156.654580][ T8338] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 156.665145][ T8344] netlink: 68 bytes leftover after parsing attributes in process `syz.1.643'. [ 156.709527][ T8345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.645'. [ 156.860065][ T8350] netlink: 'syz.3.647': attribute type 1 has an invalid length. [ 156.919684][ T8355] netlink: 108 bytes leftover after parsing attributes in process `syz.4.648'. [ 157.301817][ T8372] lo speed is unknown, defaulting to 1000 [ 157.524523][ T8379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.656'. [ 157.606993][ T8379] 8021q: adding VLAN 0 to HW filter on device bond4 [ 157.683703][ T8387] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.691448][ T8387] IPv6: NLM_F_CREATE should be set when creating new route [ 157.949951][ T8406] bridge0: port 4(batadv1) entered blocking state [ 157.962608][ T8406] bridge0: port 4(batadv1) entered disabled state [ 157.970425][ T8406] batadv1: entered allmulticast mode [ 157.978789][ T8406] batadv1: entered promiscuous mode [ 158.006009][ T8406] netlink: 24 bytes leftover after parsing attributes in process `syz.2.665'. [ 158.175889][ T8411] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 158.455849][ T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 158.465692][ T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 159.025357][ T8454] netlink: 'syz.0.682': attribute type 21 has an invalid length. [ 159.354651][ T8487] tipc: Enabling of bearer rejected, failed to enable media [ 159.397813][ T8490] IPVS: stopping master sync thread 8491 ... [ 159.408937][ T8490] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (14483457) [ 159.419346][ T8490] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 159.580263][ T8497] 8021q: adding VLAN 0 to HW filter on device bond5 [ 159.595741][ T8497] vlan4: entered promiscuous mode [ 159.600972][ T8497] bond5: entered promiscuous mode [ 159.606249][ T8497] vlan4: entered allmulticast mode [ 159.611866][ T8497] bond5: entered allmulticast mode [ 159.883121][ T8520] tipc: Enabling of bearer rejected, failed to enable media [ 160.106456][ T8540] netlink: 'syz.0.712': attribute type 25 has an invalid length. [ 160.364856][ T8554] tipc: Enabled bearer , priority 0 [ 160.701190][ T8579] x_tables: duplicate underflow at hook 1 [ 160.741298][ T8580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.758428][ T8580] batadv_slave_1: entered promiscuous mode [ 160.879640][ T8579] can: request_module (can-proto-0) failed. [ 160.988595][ T8603] __nla_validate_parse: 10 callbacks suppressed [ 160.988618][ T8603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'. [ 160.988681][ T8598] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.013351][ T8603] batadv1: left allmulticast mode [ 161.018711][ T8603] batadv1: left promiscuous mode [ 161.023955][ T8603] bridge0: port 4(batadv1) entered disabled state [ 161.044781][ T8603] dummy0: left allmulticast mode [ 161.055845][ T8603] bridge0: port 3(dummy0) entered disabled state [ 161.066890][ T8603] ÿ: left allmulticast mode [ 161.071561][ T8603] ÿ: left promiscuous mode [ 161.086355][ T8603] bridge0: port 2(ÿ) entered disabled state [ 161.104196][ T8603] bridge_slave_0: left allmulticast mode [ 161.111704][ T8603] bridge_slave_0: left promiscuous mode [ 161.119453][ T8603] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.309710][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.738'. [ 161.320054][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 161.331104][ T8616] netlink: 244 bytes leftover after parsing attributes in process `syz.0.738'. [ 161.343155][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 161.343696][ T8616] netlink: 104 bytes leftover after parsing attributes in process `syz.0.738'. [ 161.424263][ T8619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.739'. [ 161.523810][ T8626] netlink: 84 bytes leftover after parsing attributes in process `syz.0.742'. [ 161.581423][ T8629] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.588776][ T8629] IPv6: NLM_F_CREATE should be set when creating new route [ 161.667459][ T8633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.744'. [ 161.783457][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.746'. [ 161.838652][ T8645] netlink: 'syz.2.747': attribute type 1 has an invalid length. [ 162.143754][ T8668] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.151348][ T8668] IPv6: NLM_F_CREATE should be set when creating new route [ 162.362134][ T8685] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 162.584864][ T8703] netlink: 'syz.4.765': attribute type 1 has an invalid length. [ 162.618252][ T8703] 8021q: adding VLAN 0 to HW filter on device bond4 [ 162.821599][ T8722] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 163.521186][ T8765] sctp: [Deprecated]: syz.4.786 (pid 8765) Use of int in max_burst socket option deprecated. [ 163.521186][ T8765] Use struct sctp_assoc_value instead [ 163.543330][ T8772] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 164.251941][ T8816] netlink: 'syz.4.806': attribute type 13 has an invalid length. [ 164.641792][ T8846] netem: change failed [ 164.792009][ T8857] netlink: 'syz.2.814': attribute type 4 has an invalid length. [ 164.923276][ T8866] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 164.967247][ T8866] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 165.298721][ T8897] hsr_slave_0: left promiscuous mode [ 165.309164][ T8897] hsr_slave_1: left promiscuous mode [ 165.468472][ T8906] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 166.124326][ T8939] tipc: Enabling of bearer rejected, failed to enable media [ 166.515285][ T8950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.995320][ T8959] "syz.4.851" (8959) uses obsolete ecb(arc4) skcipher [ 167.036312][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 167.312185][ T8972] netlink: 'syz.0.853': attribute type 4 has an invalid length. [ 167.758194][ T8986] __nla_validate_parse: 22 callbacks suppressed [ 167.758216][ T8986] netlink: 24 bytes leftover after parsing attributes in process `syz.4.855'. [ 167.872143][ T8988] netlink: 'syz.2.860': attribute type 10 has an invalid length. [ 167.887178][ T8989] netlink: 'syz.2.860': attribute type 10 has an invalid length. [ 168.821412][ T9015] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.828766][ T9015] IPv6: NLM_F_CREATE should be set when creating new route [ 168.902888][ T9017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.150914][ T9030] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 169.278068][ T9025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.871'. [ 169.310565][ T9030] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 169.390610][ T9030] gretap1: entered promiscuous mode [ 169.436216][ T9030] gretap1: entered allmulticast mode [ 169.847957][ T9052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.877'. [ 170.191011][ T9056] netlink: 'syz.4.879': attribute type 10 has an invalid length. [ 170.214125][ T9056] vlan0: entered allmulticast mode [ 170.239393][ T9056] veth0_vlan: entered allmulticast mode [ 170.349656][ T9056] team0: Port device vlan0 added [ 170.383043][ T9061] netlink: 'syz.2.881': attribute type 1 has an invalid length. [ 170.552014][ T9061] 8021q: adding VLAN 0 to HW filter on device bond5 [ 170.638799][ T9068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.883'. [ 170.676258][ T9064] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.683957][ T9064] IPv6: NLM_F_CREATE should be set when creating new route [ 170.776144][ T9065] bond5: (slave veth7): Enslaving as an active interface with a down link [ 170.802152][ T9074] xt_bpf: check failed: parse error [ 170.858918][ T9066] ip6erspan0: entered promiscuous mode [ 170.866320][ T9068] x_tables: duplicate underflow at hook 1 [ 170.918510][ T9066] bond5: (slave ip6erspan0): making interface the new active one [ 170.972859][ T9066] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 171.389113][ T5924] IPVS: starting estimator thread 0... [ 171.405289][ T9091] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 171.495665][ T9095] IPVS: using max 26 ests per chain, 62400 per kthread [ 171.734170][ T9110] netlink: 84 bytes leftover after parsing attributes in process `syz.0.893'. [ 172.144613][ T9123] netlink: 260 bytes leftover after parsing attributes in process `syz.0.897'. [ 172.156922][ T9128] netlink: 596 bytes leftover after parsing attributes in process `syz.4.898'. [ 172.186582][ T9129] netlink: 28 bytes leftover after parsing attributes in process `syz.3.899'. [ 172.596737][ T9139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.902'. [ 172.617616][ T9137] ip6t_REJECT: ECHOREPLY is not supported [ 179.964155][ T9174] tipc: Enabled bearer , priority 0 [ 180.026066][ T9178] tipc: Enabling of bearer rejected, already enabled [ 180.085478][ T9181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.915'. [ 180.107835][ T9174] xt_addrtype: ipv6 does not support BROADCAST matching [ 180.125354][ T9182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.914'. [ 180.250468][ T9181] 8021q: adding VLAN 0 to HW filter on device bond8 [ 180.542023][ T5885] IPVS: starting estimator thread 0... [ 180.555981][ T9189] netlink: 64 bytes leftover after parsing attributes in process `syz.2.917'. [ 180.655843][ T9193] IPVS: using max 24 ests per chain, 57600 per kthread [ 180.664330][ T9196] tipc: Failed to remove unknown binding: 66,1,1/11578026:3823680498/3823680500 [ 180.705453][ T9196] tipc: Failed to remove unknown binding: 66,1,1/11578026:3823680498/3823680500 [ 180.804892][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.921'. [ 180.918201][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.923'. [ 180.953567][ T9206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.923'. [ 181.037229][ T9210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.923'. [ 181.351314][ T9222] FAULT_INJECTION: forcing a failure. [ 181.351314][ T9222] name failslab, interval 1, probability 0, space 0, times 0 [ 181.412306][ T9223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.928'. [ 181.434616][ T9222] CPU: 1 UID: 0 PID: 9222 Comm: syz.2.926 Not tainted 6.14.0-syzkaller-05884-g2ea396448f26 #0 PREEMPT(full) [ 181.434646][ T9222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 181.434656][ T9222] Call Trace: [ 181.434663][ T9222] [ 181.434671][ T9222] dump_stack_lvl+0x241/0x360 [ 181.434705][ T9222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.434730][ T9222] ? __pfx__printk+0x10/0x10 [ 181.434757][ T9222] ? __pfx___might_resched+0x10/0x10 [ 181.434781][ T9222] should_fail_ex+0x424/0x570 [ 181.434812][ T9222] should_failslab+0xac/0x100 [ 181.434839][ T9222] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 181.434866][ T9222] ? __alloc_skb+0x1c2/0x480 [ 181.434892][ T9222] __alloc_skb+0x1c2/0x480 [ 181.434918][ T9222] ? __pfx___alloc_skb+0x10/0x10 [ 181.434942][ T9222] ? netlink_autobind+0xd6/0x2f0 [ 181.434962][ T9222] ? netlink_autobind+0x2b0/0x2f0 [ 181.434994][ T9222] netlink_sendmsg+0x638/0xcd0 [ 181.435023][ T9222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.435045][ T9222] ? aa_sock_msg_perm+0x91/0x160 [ 181.435074][ T9222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.435093][ T9222] __sock_sendmsg+0x221/0x270 [ 181.435113][ T9222] ____sys_sendmsg+0x523/0x860 [ 181.435143][ T9222] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.435165][ T9222] ? __fget_files+0x2a/0x420 [ 181.435193][ T9222] ? __fget_files+0x2a/0x420 [ 181.435225][ T9222] __sys_sendmsg+0x271/0x360 [ 181.435252][ T9222] ? __pfx___sys_sendmsg+0x10/0x10 [ 181.435315][ T9222] ? do_syscall_64+0xb6/0x230 [ 181.435343][ T9222] do_syscall_64+0xf3/0x230 [ 181.435367][ T9222] ? clear_bhb_loop+0x45/0xa0 [ 181.435396][ T9222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.435414][ T9222] RIP: 0033:0x7f981878d169 [ 181.435431][ T9222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.435446][ T9222] RSP: 002b:00007f981964f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.435468][ T9222] RAX: ffffffffffffffda RBX: 00007f98189a6080 RCX: 00007f981878d169 [ 181.435487][ T9222] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 181.435498][ T9222] RBP: 00007f981964f090 R08: 0000000000000000 R09: 0000000000000000 [ 181.435508][ T9222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.435518][ T9222] R13: 0000000000000001 R14: 00007f98189a6080 R15: 00007fff866b40a8 [ 181.435542][ T9222] [ 181.706132][ T9226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.929'. [ 181.771174][ T9226] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.939965][ T9237] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 182.181697][ T9245] netlink: 'syz.0.933': attribute type 49 has an invalid length. [ 182.299747][ T9245] netlink: 'syz.0.933': attribute type 1 has an invalid length. [ 182.334625][ T9247] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 182.376041][ T9245] netlink: 224 bytes leftover after parsing attributes in process `syz.0.933'. [ 182.650008][ T9265] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x2 [ 183.373230][ T9269] 8021q: adding VLAN 0 to HW filter on device bond5 [ 183.742335][ T9281] Bluetooth: MGMT ver 1.23 [ 184.099948][ T9295] veth0_to_hsr: invalid flags given to default FDB implementation [ 184.293010][ T9301] --map-set only usable from mangle table [ 184.451651][ T9308] netlink: 'syz.0.952': attribute type 1 has an invalid length. [ 184.551145][ T9310] 8021q: adding VLAN 0 to HW filter on device bond6 [ 185.171966][ T9329] __nla_validate_parse: 5 callbacks suppressed [ 185.171988][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.961'. [ 185.689239][ T9340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.967'. [ 185.722559][ T9340] 8021q: adding VLAN 0 to HW filter on device bond9 [ 185.996894][ T9350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.969'. [ 186.869702][ T9378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.979'. [ 187.051315][ T9378] 8021q: adding VLAN 0 to HW filter on device bond10 [ 187.126643][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 187.173914][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 187.183353][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 187.192296][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 187.202547][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 187.559849][ T9383] lo speed is unknown, defaulting to 1000 [ 187.597650][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.984'. [ 187.665812][ T9397] hsr_slave_0: left promiscuous mode [ 187.693053][ T9397] 0·: left promiscuous mode [ 188.616833][ T9415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.989'. [ 188.693329][ T9415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.989'. [ 188.790541][ T9422] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 188.889332][ T9415] gretap0: entered promiscuous mode [ 188.910451][ T9415] macvlan2: entered promiscuous mode [ 188.956711][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.992'. [ 188.965794][ T9415] macvlan2: entered allmulticast mode [ 188.990563][ T9415] gretap0: entered allmulticast mode [ 189.109091][ T9426] 8021q: adding VLAN 0 to HW filter on device bond7 [ 189.296821][ T54] Bluetooth: hci4: command tx timeout [ 189.846411][ T9447] 8021q: adding VLAN 0 to HW filter on device bond11 [ 189.895415][ T9447] bond0: (slave bond11): Enslaving as an active interface with an up link [ 189.923699][ T9383] chnl_net:caif_netlink_parms(): no params data found [ 189.972191][ T9460] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 190.007343][ T9461] netlink: 'syz.4.1000': attribute type 21 has an invalid length. [ 190.049642][ T9460] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 190.061669][ T9461] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1000'. [ 190.119327][ T9455] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1002'. [ 190.203089][ T9461] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1000'. [ 190.430330][ T9457] syzkaller1: entered promiscuous mode [ 190.447938][ T9457] syzkaller1: entered allmulticast mode [ 190.910626][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1008'. [ 190.923828][ T9486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1007'. [ 190.948677][ T9383] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.987061][ T9383] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.034374][ T9383] bridge_slave_0: entered allmulticast mode [ 191.064369][ T9383] bridge_slave_0: entered promiscuous mode [ 191.132123][ T9486] 8021q: adding VLAN 0 to HW filter on device bond8 [ 191.151037][ T9383] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.158541][ T9383] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.166274][ T9383] bridge_slave_1: entered allmulticast mode [ 191.174367][ T9383] bridge_slave_1: entered promiscuous mode [ 191.292760][ T9383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.360659][ T54] Bluetooth: hci4: command tx timeout [ 191.373327][ T9383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.575136][ T9383] team0: Port device team_slave_0 added [ 191.694071][ T9383] team0: Port device team_slave_1 added [ 191.850840][ T9383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.891521][ T9383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.030830][ T9383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.064205][ T9517] SET target dimension over the limit! [ 192.086633][ T9383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.121849][ T9383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.191576][ T9383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.244482][ T9525] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1017'. [ 192.318773][ T9525] netlink: del zone limit has 4 unknown bytes [ 192.546867][ T9532] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 192.562429][ T9383] hsr_slave_0: entered promiscuous mode [ 192.586618][ T9383] hsr_slave_1: entered promiscuous mode [ 192.592791][ T9383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.676798][ T9383] Cannot create hsr debugfs directory [ 192.710763][ T9534] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.719913][ T9534] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.729162][ T9534] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.737968][ T9534] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.219394][ T9547] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 193.446216][ T54] Bluetooth: hci4: command tx timeout [ 193.619818][ T5885] hid-generic 0005:0458:0009.0001: unknown main item tag 0x0 [ 193.690780][ T5885] hid-generic 0005:0458:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 193.978970][ T9383] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.055652][ T9383] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.082022][ T9567] xt_CT: No such helper "pptp" [ 194.273734][ T9570] ip6gre1: entered allmulticast mode [ 194.443087][ T9383] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.482919][ T9383] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.502441][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.353959][ T9383] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.405104][ T9383] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.516289][ T5851] Bluetooth: hci4: command tx timeout [ 195.733757][ T9607] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1042'. [ 196.284799][ T9383] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 196.372053][ T9383] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 196.425347][ T9383] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 196.563465][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 196.571769][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 196.578117][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 196.921562][ T9632] tipc: Enabled bearer , priority 10 [ 196.964593][ T9383] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 197.419448][ T9383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.526142][ T9383] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.572739][ T9653] xt_hashlimit: max too large, truncated to 1048576 [ 197.602041][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.609319][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.649715][ T9653] netlink: 'syz.1.1055': attribute type 2 has an invalid length. [ 197.661742][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.669157][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.693508][ T9653] netlink: 'syz.1.1055': attribute type 8 has an invalid length. [ 197.702796][ T9653] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1055'. [ 197.902284][ T9383] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.529285][ T9383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.766049][ T9383] veth0_vlan: entered promiscuous mode [ 198.857146][ T9383] veth1_vlan: entered promiscuous mode [ 198.978378][ T9383] veth0_macvtap: entered promiscuous mode [ 199.053862][ T9383] veth1_macvtap: entered promiscuous mode [ 199.290865][ T9696] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1066'. [ 199.356073][ T9696] netlink: 'syz.1.1066': attribute type 7 has an invalid length. [ 199.396462][ T9696] netlink: 'syz.1.1066': attribute type 8 has an invalid length. [ 199.404270][ T9696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1066'. [ 199.454742][ T9698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1067'. [ 199.489755][ T9700] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 199.501741][ T9383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.536103][ T9383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.586447][ T9383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.634776][ T9383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.662861][ T9383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.691374][ T9702] netlink: 'syz.2.1069': attribute type 4 has an invalid length. [ 199.705704][ T9383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.749018][ T9383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.857598][ T9383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.948994][ T9383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.021141][ T9383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.086202][ T9383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.156797][ T9383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.319415][ T9709] bond3: entered promiscuous mode [ 200.354124][ T9709] bond3: entered allmulticast mode [ 200.393946][ T9709] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.572729][ T9383] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.620038][ T9383] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.683967][ T9383] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.723127][ T9383] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.787981][ T9702] lo speed is unknown, defaulting to 1000 [ 200.973455][ T9720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1074'. [ 201.183112][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.209721][ T9723] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.1076'. [ 201.254785][ T9723] openvswitch: netlink: Unknown key attributes 20 [ 201.264854][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.370244][ T9730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1077'. [ 201.433278][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.476487][ T9731] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1077'. [ 201.486432][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.653772][ T9733] tipc: Resetting bearer [ 201.978797][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1081'. [ 202.059509][ T9744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1081'. [ 202.278919][ T9749] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1082'. [ 203.439202][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1084'. [ 203.847376][ T3532] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.205798][ T3532] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.305860][ T9761] can: request_module (can-proto-0) failed. [ 204.662181][ T3532] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.197689][ T9781] openvswitch: netlink: IP tunnel attribute has 230 unknown bytes. [ 205.449780][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 205.460837][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 205.470259][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 205.480485][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 205.488704][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 205.720351][ T3532] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.894828][ T9784] lo speed is unknown, defaulting to 1000 [ 206.118733][ T9793] netlink: 'syz.0.1092': attribute type 1 has an invalid length. [ 314.885451][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 314.892573][ C1] rcu: 0-...!: (1 GPs behind) idle=94ac/1/0x4000000000000000 softirq=28524/28525 fqs=40 [ 314.903261][ C1] rcu: (detected by 1, t=10504 jiffies, g=23349, q=419 ncpus=2) [ 314.911003][ C1] Sending NMI from CPU 1 to CPUs 0: [ 314.911037][ C0] NMI backtrace for cpu 0 [ 314.911051][ C0] CPU: 0 UID: 0 PID: 9797 Comm: syz.4.1094 Not tainted 6.14.0-syzkaller-05884-g2ea396448f26 #0 PREEMPT(full) [ 314.911069][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 314.911077][ C0] RIP: 0010:validate_chain+0x11/0x24e0 [ 314.911100][ C0] Code: 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 53 48 81 ec f8 00 00 00 <48> 89 cb 49 c7 c5 20 60 63 93 65 49 8b 45 00 48 89 84 24 f0 00 00 [ 314.911112][ C0] RSP: 0018:ffffc90000007a20 EFLAGS: 00000082 [ 314.911126][ C0] RAX: ffffffff940c3848 RBX: ffff88805f9d0b40 RCX: 58cce5e7c8d5ebdc [ 314.911137][ C0] RDX: 0000000000000001 RSI: ffff88805f9d0b40 RDI: ffff88805f9d0000 [ 314.911147][ C0] RBP: 58cce5e7c8d5ebdc R08: 0000000000000000 R09: 0000000000000001 [ 314.911156][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000004022 [ 314.911165][ C0] R13: ffff88805f9d0000 R14: ffff88805f9d0b60 R15: 0000000000004022 [ 314.911176][ C0] FS: 00007f07d36446c0(0000) GS:ffff888124fea000(0000) knlGS:0000000000000000 [ 314.911188][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 314.911198][ C0] CR2: 000000110c2d3ea7 CR3: 000000007a992000 CR4: 00000000003526f0 [ 314.911213][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 314.911222][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 314.911231][ C0] Call Trace: [ 314.911238][ C0] [ 314.911245][ C0] ? nmi_cpu_backtrace+0x3d1/0x4e0 [ 314.911265][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 314.911282][ C0] ? __kasan_check_byte+0x14/0x40 [ 314.911299][ C0] ? lock_acquire+0x89/0x2f0 [ 314.911321][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 314.911334][ C0] ? nmi_handle+0x196/0x5e0 [ 314.911350][ C0] ? nmi_handle+0x7e/0x5e0 [ 314.911366][ C0] ? validate_chain+0x11/0x24e0 [ 314.911380][ C0] ? default_do_nmi+0x63/0x160 [ 314.911394][ C0] ? exc_nmi+0x123/0x1f0 [ 314.911408][ C0] ? end_repeat_nmi+0xf/0x53 [ 314.911426][ C0] ? validate_chain+0x11/0x24e0 [ 314.911440][ C0] ? validate_chain+0x11/0x24e0 [ 314.911455][ C0] ? validate_chain+0x11/0x24e0 [ 314.911469][ C0] [ 314.911473][ C0] [ 314.911480][ C0] ? __lock_acquire+0xad5/0xd80 [ 314.911500][ C0] ? do_raw_spin_lock+0x151/0x370 [ 314.911521][ C0] __lock_acquire+0xad5/0xd80 [ 314.911542][ C0] lock_acquire+0x116/0x2f0 [ 314.911560][ C0] ? advance_sched+0xa02/0xca0 [ 314.911578][ C0] ? advance_sched+0xa02/0xca0 [ 314.911593][ C0] advance_sched+0xa1e/0xca0 [ 314.911608][ C0] ? advance_sched+0xa02/0xca0 [ 314.911626][ C0] ? __pfx_advance_sched+0x10/0x10 [ 314.911641][ C0] __hrtimer_run_queues+0x5a6/0xd40 [ 314.911657][ C0] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 314.911680][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 314.911695][ C0] ? read_tsc+0x9/0x20 [ 314.911714][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 314.911734][ C0] hrtimer_interrupt+0x403/0xa40 [ 314.911756][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 314.911775][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 314.911793][ C0] [ 314.911798][ C0] [ 314.911803][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 314.911818][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd9/0x140 [ 314.911836][ C0] Code: 9c 8f 44 24 20 42 80 3c 2b 00 74 08 4c 89 f7 e8 cd cb 04 f6 f6 44 24 21 02 75 55 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 a2 ba 69 f5 65 8b 05 cb 7e 3c 07 85 c0 74 46 48 c7 04 24 0e 36 [ 314.911847][ C0] RSP: 0018:ffffc90003ec6de0 EFLAGS: 00000206 [ 314.911859][ C0] RAX: 4638e6bdec43d500 RBX: 1ffff920007d8dc0 RCX: 0000000000000002 [ 314.911869][ C0] RDX: 0000000000000002 RSI: ffffffff8e67a23d RDI: 0000000000000001 [ 314.911878][ C0] RBP: ffffc90003ec6e70 R08: ffffffff905e4477 R09: 1ffffffff20bc88e [ 314.911888][ C0] R10: dffffc0000000000 R11: fffffbfff20bc88f R12: 1ffff920007d8dbc [ 314.911898][ C0] R13: dffffc0000000000 R14: ffffc90003ec6e00 R15: 0000000000000246 [ 314.911915][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 314.911935][ C0] taprio_change+0x350d/0x44f0 [ 314.911955][ C0] ? __pfx_taprio_change+0x10/0x10 [ 314.911980][ C0] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 314.912005][ C0] ? static_key_slow_inc+0x21/0x30 [ 314.912026][ C0] taprio_init+0xa0f/0xcc0 [ 314.912044][ C0] ? __pfx_taprio_init+0x10/0x10 [ 314.912058][ C0] ? qdisc_alloc+0x730/0xa80 [ 314.912075][ C0] ? __pfx_taprio_init+0x10/0x10 [ 314.912088][ C0] qdisc_create+0x70b/0xdf0 [ 314.912111][ C0] tc_modify_qdisc+0x156d/0x2610 [ 314.912129][ C0] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 314.912150][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 314.912169][ C0] ? __mutex_lock+0xb8b/0x1000 [ 314.912188][ C0] ? __mutex_lock+0x5ed/0x1000 [ 314.912215][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 314.912234][ C0] rtnetlink_rcv_msg+0x7c2/0xd70 [ 314.912250][ C0] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 314.912265][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 314.912282][ C0] ? ref_tracker_free+0x63e/0x7e0 [ 314.912305][ C0] netlink_rcv_skb+0x208/0x480 [ 314.912320][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 314.912335][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 314.912354][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 314.912369][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 314.912384][ C0] netlink_unicast+0x7f8/0x9a0 [ 314.912408][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 314.912428][ C0] ? skb_put+0x114/0x1f0 [ 314.912447][ C0] netlink_sendmsg+0x8c3/0xcd0 [ 314.912465][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.912482][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 314.912502][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.912516][ C0] __sock_sendmsg+0x221/0x270 [ 314.912531][ C0] ____sys_sendmsg+0x523/0x860 [ 314.912553][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 314.912570][ C0] ? __fget_files+0x2a/0x420 [ 314.912590][ C0] ? __fget_files+0x2a/0x420 [ 314.912612][ C0] __sys_sendmsg+0x271/0x360 [ 314.912631][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 314.912664][ C0] ? do_syscall_64+0xb6/0x230 [ 314.912684][ C0] do_syscall_64+0xf3/0x230 [ 314.912703][ C0] ? clear_bhb_loop+0x45/0xa0 [ 314.912718][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.912732][ C0] RIP: 0033:0x7f07d278d169 [ 314.912746][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.912758][ C0] RSP: 002b:00007f07d3644038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.912773][ C0] RAX: ffffffffffffffda RBX: 00007f07d29a5fa0 RCX: 00007f07d278d169 [ 314.912783][ C0] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 314.912793][ C0] RBP: 00007f07d280e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 314.912802][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.912811][ C0] R13: 0000000000000000 R14: 00007f07d29a5fa0 R15: 00007ffe26276408 [ 314.912826][ C0] [ 314.913032][ C1] rcu: rcu_preempt kthread starved for 8479 jiffies! g23349 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 315.615376][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 315.625369][ C1] rcu: RCU grace-period kthread stack dump: [ 315.631464][ C1] task:rcu_preempt state:R running task stack:26864 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 315.645009][ C1] Call Trace: [ 315.648310][ C1] [ 315.651351][ C1] __schedule+0x1b18/0x50e0 [ 315.655915][ C1] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 315.662117][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 315.667445][ C1] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 315.673452][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 315.679838][ C1] ? __pfx___schedule+0x10/0x10 [ 315.684822][ C1] ? schedule+0x90/0x360 [ 315.689152][ C1] ? schedule+0x90/0x360 [ 315.693455][ C1] schedule+0x163/0x360 [ 315.697655][ C1] schedule_timeout+0x15b/0x290 [ 315.702830][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 315.708229][ C1] ? __pfx_process_timeout+0x10/0x10 [ 315.713545][ C1] ? prepare_to_swait_event+0x330/0x350 [ 315.719298][ C1] rcu_gp_fqs_loop+0x2e1/0x1340 [ 315.724176][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 315.730371][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 315.735784][ C1] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 315.741719][ C1] ? finish_swait+0xd4/0x1e0 [ 315.746341][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 315.751560][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 315.756211][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 315.761431][ C1] ? __kthread_parkme+0x169/0x1d0 [ 315.766756][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 315.772059][ C1] kthread+0x7a9/0x920 [ 315.776240][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 315.781484][ C1] ? __pfx_kthread+0x10/0x10 [ 315.786213][ C1] ? __pfx_kthread+0x10/0x10 [ 315.790930][ C1] ? __pfx_kthread+0x10/0x10 [ 315.795546][ C1] ? __pfx_kthread+0x10/0x10 [ 315.800162][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 315.805479][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 315.810870][ C1] ? __pfx_kthread+0x10/0x10 [ 315.815509][ C1] ret_from_fork+0x4b/0x80 [ 315.819962][ C1] ? __pfx_kthread+0x10/0x10 [ 315.824582][ C1] ret_from_fork_asm+0x1a/0x30 [ 315.829377][ C1] [ 315.832502][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 315.839019][ C1] CPU: 1 UID: 0 PID: 9792 Comm: syz.0.1092 Not tainted 6.14.0-syzkaller-05884-g2ea396448f26 #0 PREEMPT(full) [ 315.851845][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 315.861912][ C1] RIP: 0010:smp_call_function_many_cond+0x1bba/0x2d40 [ 315.868697][ C1] Code: 01 31 ff e8 b8 02 0c 00 41 83 e4 01 4c 8b 64 24 68 75 07 e8 68 fe 0b 00 eb 41 f3 90 48 b8 00 00 00 00 00 fc ff df 0f b6 04 03 <84> c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 43 fe 0b 00 eb db 44 [ 315.888786][ C1] RSP: 0018:ffffc9001b787160 EFLAGS: 00000293 [ 315.894991][ C1] RAX: 0000000000000000 RBX: 1ffff110170c820d RCX: ffff888027fa3c00 [ 315.902985][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 315.911221][ C1] RBP: ffffc9001b787360 R08: ffffffff81b778e8 R09: 1ffff920036f0e1c [ 315.919223][ C1] R10: dffffc0000000000 R11: fffff520036f0e1d R12: ffff8880b873ad08 [ 315.927233][ C1] R13: ffff8880b8641068 R14: ffff8880b873ad00 R15: 0000000000000000 [ 315.935224][ C1] FS: 0000000000000000(0000) GS:ffff8881250ea000(0000) knlGS:0000000000000000 [ 315.944261][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 315.950865][ C1] CR2: 00007f6c9aa1d4bf CR3: 0000000061fcc000 CR4: 00000000003526f0 [ 315.958885][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 315.966877][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 315.974895][ C1] Call Trace: [ 315.978332][ C1] [ 315.981283][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 315.987819][ C1] ? print_other_cpu_stall+0x14ab/0x15e0 [ 315.993671][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 315.999681][ C1] ? cgroup_rstat_updated+0x144/0xc40 [ 316.005085][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 316.011379][ C1] ? rcu_sched_clock_irq+0xa2a/0x10f0 [ 316.016831][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 316.022688][ C1] ? update_process_times+0x242/0x2f0 [ 316.028098][ C1] ? tick_nohz_handler+0x37c/0x500 [ 316.033411][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 316.038892][ C1] ? __hrtimer_run_queues+0x55c/0xd40 [ 316.044367][ C1] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 316.050474][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 316.056827][ C1] ? read_tsc+0x9/0x20 [ 316.060949][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 316.067526][ C1] ? hrtimer_interrupt+0x403/0xa40 [ 316.072780][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 316.078963][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 316.084837][ C1] [ 316.087785][ C1] [ 316.090735][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 316.096925][ C1] ? smp_call_function_many_cond+0x1b98/0x2d40 [ 316.103108][ C1] ? smp_call_function_many_cond+0x1bba/0x2d40 [ 316.109560][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 316.114956][ C1] ? __lock_acquire+0xad5/0xd80 [ 316.119938][ C1] ? __lock_acquire+0xad5/0xd80 [ 316.124812][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 316.131344][ C1] ? do_raw_spin_lock+0x151/0x370 [ 316.136395][ C1] ? rcu_is_watching+0x15/0xb0 [ 316.141310][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 316.146539][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 316.152022][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 316.157156][ C1] flush_tlb_mm_range+0xb8d/0x13f0 [ 316.162324][ C1] ? folio_mark_accessed+0x5ae/0xaa0 [ 316.167684][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 316.173320][ C1] ? rcu_is_watching+0x15/0xb0 [ 316.178116][ C1] unmap_page_range+0x386f/0x4520 [ 316.183209][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 316.188602][ C1] ? mas_next_node+0xb9f/0xe00 [ 316.193527][ C1] ? mas_next_slot+0xdc6/0xea0 [ 316.198404][ C1] ? uprobe_munmap+0x183/0x460 [ 316.203205][ C1] ? unmap_single_vma+0x1bd/0x2b0 [ 316.208259][ C1] unmap_vmas+0x3ce/0x5f0 [ 316.212619][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 316.217508][ C1] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 316.223346][ C1] exit_mmap+0x2bc/0xdd0 [ 316.227617][ C1] ? uprobe_clear_state+0x20e/0x290 [ 316.232859][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 316.237684][ C1] ? __pfx_exit_aio+0x10/0x10 [ 316.242479][ C1] ? uprobe_clear_state+0x271/0x290 [ 316.247695][ C1] ? mm_update_next_owner+0xa4/0x810 [ 316.253180][ C1] __mmput+0x115/0x420 [ 316.257302][ C1] exit_mm+0x221/0x310 [ 316.261517][ C1] ? __pfx_exit_mm+0x10/0x10 [ 316.266465][ C1] ? taskstats_exit+0x326/0xa60 [ 316.271617][ C1] do_exit+0x9ad/0x2940 [ 316.275897][ C1] ? preempt_schedule_common+0x84/0xd0 [ 316.281379][ C1] ? __pfx_do_exit+0x10/0x10 [ 316.285998][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 316.291401][ C1] do_group_exit+0x207/0x2c0 [ 316.296037][ C1] __x64_sys_exit_group+0x3f/0x40 [ 316.301117][ C1] x64_sys_call+0x26c3/0x26d0 [ 316.305906][ C1] do_syscall_64+0xf3/0x230 [ 316.310496][ C1] ? clear_bhb_loop+0x45/0xa0 [ 316.315246][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.321276][ C1] RIP: 0033:0x7f8fb558d169 [ 316.325725][ C1] Code: Unable to access opcode bytes at 0x7f8fb558d13f. [ 316.332788][ C1] RSP: 002b:00007ffdab7d48c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 316.341427][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fb558d169 [ 316.349514][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 316.357938][ C1] RBP: 00007ffdab7d492c R08: 00000015ab7d49bf R09: 00000000000927c0 [ 316.365929][ C1] R10: 000000000000017c R11: 0000000000000246 R12: 00000000000000eb [ 316.374004][ C1] R13: 00000000000927c0 R14: 00000000000323ff R15: 00007ffdab7d4980 [ 316.382029][ C1]