last executing test programs: 2.987994832s ago: executing program 2 (id=1259): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, r0, 0x1, 0x0, 0x0, {0x3}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x300000000000000) 2.827645442s ago: executing program 2 (id=1261): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = epoll_create(0x689) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000018}) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)) ppoll(&(0x7f00000004c0)=[{r5}], 0x1, 0x0, 0x0, 0x0) recvmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) epoll_wait(r2, &(0x7f00000002c0)=[{}], 0x1, 0x9450) epoll_wait(r2, &(0x7f0000000300)=[{}], 0x1, 0x7ffffffd) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000380)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000000000000290000003e0000000000000000000000180000000000ca002900001e390000000000000000000000270dd24e31670306e02733a73ed20f5121fb9e7e040e5f1aa2eaa42c4a8e5243e05612dd86862e7cf0a03dd4bec41c3139522fc0de5138c9d105472c4c082eb0a03e21198b949bfef1412a760000000000000000000000000000f62d15595d6f005eef43ec27fbc175f8faee009fa82e52dc4dd56340bc935654a5bd649a1295567ebc369435b973343c4193580ebc639508348a1b174d07f0dce935813d4f3f39736a40f5528b9e56195904dcb8a3b4bb2f5e4a0b"], 0x28}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001480)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2000000}, 0x10}, 0x90) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r6, 0x0, 0xf3a, 0x0) sendfile(r7, r8, &(0x7f0000000180)=0x7, 0xffff) write$binfmt_misc(r6, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r9, 0x10f, 0x83, &(0x7f00000014c0), &(0x7f0000001500)=0x4) r10 = socket$igmp(0x2, 0x3, 0x2) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f00000001c0)={0x3, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=r12, @rand_addr=0x64010100}, 0x10) 2.383801893s ago: executing program 3 (id=1267): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='objagg_create\x00'}, 0xffffffffffffff26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='qi_submit\x00', r5}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90ff}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x15, 0x10, 0x2}, 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000002a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r9, @ANYBLOB="000000000000000095000000000000006d306b3124fc16446f6bf80d8c539001bb6df975cd763be58da71277a988f38ed023442d3eaab18d2f09e52bfe2d51c6f33a59de57b48d2ec5f81f54ad6516a29b5a0da8d40c2b316ff0c4bf7af4fe26092e1087c72c5dc4643067cd98fc966326a31fa6dd88849776dfe9a619a8a88bf83cc201779303c98593d08df741155056a7f33c6d2091cc05db5fe2ef2f45c6f5af31ba224d90ff726a19cf0a36863b3a9f43771fbe35ae11345307b21c534b5cd3f8"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x100b, &(0x7f0000001680)=""/4107}, 0x80) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f040000000000000000008500000005000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r11}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r10, 0x0, 0xe, 0x96, &(0x7f0000001580)="7bff3d3123384c5e301d61177732b6b7f4da65440eb316591fc72da6ee754701abed46fca8cdbbbbd2bbcefcce31a2dab5be6f0117fa8de646ead59773d0717f599ba017b6f19f483161bce4b283cedb85fcd15a914bc740c5134a1651d6c5850a9afcd1b07b31f10eeea611b60be2d8506811c95e2b2d125900e839578248f635da1eb931dfacf78ace469fdba5f757c27ebf7cc1d063e5cc8a3a85783ef06e0c0004c6e90faa8e215bfec5d8e5f928966106e5e5995deac7f87e05e7d344ce428354a2034e443d6ef2ab961343623e614d4bf9df", &(0x7f0000001440)=""/150, 0x0, 0x0, 0x79, 0x3, &(0x7f0000000180)="edc731f46e2fade7b621e460c7575533ca75f3940e7d2f0e8048b9bec2db1e5aec2ea44ad0f15d22991608bbfe092e1cebb77130ddb70b0acbed37c71830599fe344e591abd5f72778eb42d0f6ea69240f4cd429d2fa74797092b12742a1a003527b90181a0dd4ea34b9cd80b1ed26afad4d51a98f2d5904a1", &(0x7f0000001240)="0da951", 0x0, 0x9}, 0x28) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x20}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.920232481s ago: executing program 3 (id=1272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x40, r1, 0xc4fc9e906872359b, 0x0, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x3ff0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x9, 0x2, [{}, {}, {}, {}, {}]}]}]}]}]}]}, 0x40}}, 0x0) 1.805708602s ago: executing program 2 (id=1273): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0xe}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={r2, @in={{0x2, 0x4e23, @multicast2}}, 0xfbf3, 0x4}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000001780)={0x14}, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0xfef4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x30000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}, @IFLA_MTU={0x8}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) unshare(0x22020600) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@bloom_filter={0x1e, 0xfff, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x10000, '\x00', r6, 0xffffffffffffffff, 0x1, 0x3, 0x5, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x2, 0x0, r7}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0xb, &(0x7f0000000340)=""/222}, 0x90) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_cmd={0x5}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f0000000000), 0x10) clock_gettime(0x0, &(0x7f0000000400)) sendmsg$can_bcm(r11, &(0x7f0000000480)={&(0x7f0000000080)={0x1d, r10}, 0x10, &(0x7f00000001c0)={&(0x7f0000000700)={0x7, 0x801, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "9b7f7f3115483295"}}, 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r14 = socket(0x10, 0x3, 0x0) write(r14, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) r15 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r15, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x650, 0x0, 0xa, 0x148, 0x368, 0x10, 0x5b8, 0x2a8, 0x2a8, 0x5b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2=0xe000000b, @multicast2, 0x3f, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x7a, 0x8000000, 0x0, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x64, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_bond\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x6b0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKMODE={0x5}, @IFLA_VFINFO_LIST={0x4}]}, 0x2c}}, 0x0) 1.727987495s ago: executing program 3 (id=1274): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb011118000000000004007d14c96038dbfd76030c0000000c000000020000000055d0a1dbdf9f7a"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) 1.609745681s ago: executing program 1 (id=1275): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0x10, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/424]}, 0x220) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x89}}]}, 0x78}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r8, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000140)={0x77359400}, 0x10) connect$unix(r7, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r8, 0x800) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x80, r10, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x1e02, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x10}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x80}, 0x1, 0x600}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000001300)={0xd94, r10, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xd18, 0x8, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e"}]}, {0x318, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ALLOWEDIPS={0x2e8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549"}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x814, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2dc, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, @WGPEER_A_ALLOWEDIPS={0x47c, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5, 0x3, 0x10}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x6}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x14}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "55fbc2635cc801d67c589cc98f3cf65074dffe0886750dec83be49fbf628e1dc"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r11}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8001}]}, 0xd94}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 1.531992361s ago: executing program 3 (id=1277): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x0, 0x0, 0x0, 0x200, 0x3fff8}}}}]}, 0x78}}, 0x0) 1.521620135s ago: executing program 2 (id=1278): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xda, &(0x7f0000000000), &(0x7f0000000240)=0x4) 1.40038212s ago: executing program 0 (id=1279): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4) write$binfmt_script(r0, &(0x7f0000000300), 0xfe7f) recvmmsg(r0, &(0x7f0000010bc0)=[{{0x0, 0x0, &(0x7f00000003c0)}}], 0x1, 0x2, 0x0) 1.319944256s ago: executing program 3 (id=1280): r0 = socket$inet(0x2, 0x3, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000340)="15", 0x1}, {&(0x7f0000000040)="1f", 0x1}, {&(0x7f0000000640)="53876165c1d64b3887ff159308d6febc9954f948cc8fa7840b77e7307713bb79421767160fcfea47a86385f1c41de6af43519550f3a01fd3989d2bbd77da22aec98ee3e289f8d652f918326ee6300083b5ba0e4646e9b90bea606137246fa9a6f1aad3a3cbe84020ff6aa2f2ebcb33c25c772e40699aaa0dd14d1ad7fe4e058e747ad0bd87692ae9754a4490027c6b2d20452fc6ab4e977006acf799e3cd06b986e472b6354f8033bb98f696ecb7754df4c584f9dbde5c4ce082592638", 0xbd}, {&(0x7f0000000080)="457768820ad6eed5dbf4339e040afe", 0xf}, {&(0x7f0000001900)="d3", 0x1}], 0x5) write$binfmt_script(r1, &(0x7f0000000040), 0x18a3c85) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r3 = accept$alg(r2, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x0, 0x0) sendfile(r3, r1, 0x0, 0x3) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) recvmsg(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="8907040000", 0x5) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x8, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2713, &(0x7f0000019580)=""/102393, &(0x7f0000000040)=0x18ff9) epoll_create(0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000180)={0x6, @local, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblc\x00'}, 0x2c) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r1, r5}, 0xc) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 1.319814584s ago: executing program 4 (id=1281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00fff00002010400000000000000000200000024000280140001800800010000000000080002cdac1414000c000280050001000000000004000180300003"], 0x6c}}, 0x0) 1.224204285s ago: executing program 1 (id=1282): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000040000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf0fb04e500b0c0502df9de9ca3c00cb9a323d9b401bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9226e3550ee5520211d9370175fba303f003073afd1ec9f7c6133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80eff7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc0584b8e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cd43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a2288ff000000000000002bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0160516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c2e88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497613174f76a656ba5bacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b000000000002ef507ec6fc7f5dc431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead88d7acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61a73a758543651b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3c99e3f1310d41ab328c1f351b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000fd267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a845e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980dc58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7000000000000000000d43d07d546acb7009c0c4f6e57b8577d2113bfca1939b9bf757265e175c1863a7c8d7640675830dc11d5d59546daf2385a7074f770c8333b21e2fb660141bc4f1ed45f703da6ac2557ab6952fd0c300000000000000000005b44bff4e3966fdfc9b720412bec09936b08e440c774e2224f2d338fab2acc5014f74e420988486de2ace27ce59379378ca34eeedbd9a323a889f295e5d3bae64fc48ba194fc70973b39525123668e6a0be1e732aa5e2a0d4373a0b76d84f018d45bdf6f12d6d5d23a0331c3ae5e99a2bcdb52386135ea15890007e1cba5e52a04971139272012ae5542ba109a9d2f49963a195e2fdffe6bdce6fa78ab2ded1ff74f9e54f1b82da2d444f9727be708710b90a872282f4dce55468a681e"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='objagg_create\x00'}, 0xffffffffffffff26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='qi_submit\x00', r5}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90ff}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x15, 0x10, 0x2}, 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000002a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r9, @ANYBLOB="000000000000000095000000000000006d306b3124fc16446f6bf80d8c539001bb6df975cd763be58da71277a988f38ed023442d3eaab18d2f09e52bfe2d51c6f33a59de57b48d2ec5f81f54ad6516a29b5a0da8d40c2b316ff0c4bf7af4fe26092e1087c72c5dc4643067cd98fc966326a31fa6dd88849776dfe9a619a8a88bf83cc201779303c98593d08df741155056a7f33c6d2091cc05db5fe2ef2f45c6f5af31ba224d90ff726a19cf0a36863b3a9f43771fbe35ae11345307b21c534b5cd3f8"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x100b, &(0x7f0000001680)=""/4107}, 0x80) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f040000000000000000008500000005000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r11}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r10, 0x0, 0xe, 0x96, &(0x7f0000001580)="7bff3d3123384c5e301d61177732b6b7f4da65440eb316591fc72da6ee754701abed46fca8cdbbbbd2bbcefcce31a2dab5be6f0117fa8de646ead59773d0717f599ba017b6f19f483161bce4b283cedb85fcd15a914bc740c5134a1651d6c5850a9afcd1b07b31f10eeea611b60be2d8506811c95e2b2d125900e839578248f635da1eb931dfacf78ace469fdba5f757c27ebf7cc1d063e5cc8a3a85783ef06e0c0004c6e90faa8e215bfec5d8e5f928966106e5e5995deac7f87e05e7d344ce428354a2034e443d6ef2ab961343623e614d4bf9df", &(0x7f0000001440)=""/150, 0x0, 0x0, 0x79, 0x3, &(0x7f0000000180)="edc731f46e2fade7b621e460c7575533ca75f3940e7d2f0e8048b9bec2db1e5aec2ea44ad0f15d22991608bbfe092e1cebb77130ddb70b0acbed37c71830599fe344e591abd5f72778eb42d0f6ea69240f4cd429d2fa74797092b12742a1a003527b90181a0dd4ea34b9cd80b1ed26afad4d51a98f2d5904a1", &(0x7f0000001240)="0da951", 0x0, 0x9}, 0x28) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x20}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.221333641s ago: executing program 4 (id=1283): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x60, 0xa, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}}}]}]}, 0x60}, 0x1, 0x0, 0x7400}, 0x8004) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1.043898608s ago: executing program 0 (id=1284): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000480), &(0x7f00000004c0)=0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080303000000e8fe03a1180015000600142603600e1208000f0000810401a80016040400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 903.996991ms ago: executing program 4 (id=1285): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2, 0x400000000000003, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x1100}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_sa2={0x2}]}, 0xd8}}, 0x0) 867.739171ms ago: executing program 0 (id=1286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x1800, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x300, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 767.647384ms ago: executing program 1 (id=1287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000000700010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000078000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000008000540000000000c00014000000002"], 0xc0}}, 0x0) 715.946677ms ago: executing program 4 (id=1288): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000140)=0x100, 0x4) sendto$inet6(r2, 0x0, 0x0, 0xffffff8d, &(0x7f0000002800)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000080)=0x2, 0x4) sendmmsg$inet6(r2, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000100017040000000000002d1200000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010065727370616e00001000028004001200050016000000000008000400a7"], 0x48}}, 0x0) 618.381395ms ago: executing program 1 (id=1289): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, @sadb_x_sa2={0x2, 0x13, 0x2}]}, 0x70}, 0x1, 0x7}, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) (async) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) (async) recvmmsg(r2, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4161, 0x0) (async) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) (async) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000540)={0x8000, 0x8, 0x2}) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000040), &(0x7f0000000080)=0x8) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000140)={0x40000001}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r7, 0x4}, 0x10) (async) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r0) (async) ioctl$PPPIOCGMRU(r5, 0x80047453, &(0x7f0000000580)) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r8, r7, 0x4}, 0x10) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x9, 0x100, 0xe, 0x1000, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000380)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x23, &(0x7f0000000400)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @map_val={0x18, 0x7, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x3}, @ldst={0x0, 0x3, 0x3, 0x3, 0x7, 0x4, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x90) 516.918257ms ago: executing program 0 (id=1290): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210b000000000000000011"], 0x28}}, 0x0) 516.401999ms ago: executing program 2 (id=1291): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000001140)=ANY=[@ANYRES32]) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0x178, 0xc, 0x0, 0x178, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'team_slave_0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x30}}, 0x0) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0xfffe, @remote}, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) (async, rerun: 32) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000a40)='bic\x00', 0x4) (async, rerun: 32) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) (async) sendto$inet(r6, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) (async) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600), 0x4) (async, rerun: 64) sendto$inet(r6, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) (async, rerun: 64) recvmsg(r6, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000035c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0, 0x407006}, 0x104) (async, rerun: 64) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (rerun: 64) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async, rerun: 32) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000000)=0xffffffff, 0x4) (rerun: 32) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}]}, 0x4c}}, 0x0) (async) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getsockopt$nfc_llcp(r8, 0x118, 0x0, &(0x7f0000001400)=""/4096, 0x1000) (async, rerun: 64) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'}) 515.704426ms ago: executing program 4 (id=1292): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0x10, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000001b000012000000004b28c962170b7020000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000086dd6361696630000000000000000000000076657468315f746f5f7465616d00000073797a6b616c6c65723100000000000076657468315f746f5f7465616d000000aaaaaaaaaabb0000000000000180c20000000000000000000000e8000000e80000001801000069703600000100000000000009000000000000000000000000000000000000005000000000000000fe80000000000000000000000000000000000000000000000000ffffac1e0000000000000000000000004000000000000000000080000000000000010000000000063e004904004a194dc2f70d04a500000000000000000000000800000000000400"/424]}, 0x220) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x89}}]}, 0x78}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r8, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000140)={0x77359400}, 0x10) connect$unix(r7, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r8, 0x800) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x80, r10, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x1e02, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x10}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x80}, 0x1, 0x600}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000001300)={0xd94, r10, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xd18, 0x8, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e"}]}, {0x318, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ALLOWEDIPS={0x2e8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549"}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x814, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2dc, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, @WGPEER_A_ALLOWEDIPS={0x47c, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5, 0x3, 0x10}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x6}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x14}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "55fbc2635cc801d67c589cc98f3cf65074dffe0886750dec83be49fbf628e1dc"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r11}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8001}]}, 0xd94}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 332.57609ms ago: executing program 1 (id=1293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="de", 0x1}], 0x1}, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x100}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7}]}, 0x34}}, 0x24008880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r5], 0x40}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)="3ba3", 0x2}], 0x1}, 0x20000001) recvmsg(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2083) 332.274241ms ago: executing program 3 (id=1294): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4) write$binfmt_script(r0, &(0x7f0000000300), 0xfe7f) recvmmsg(r0, &(0x7f0000010bc0)=[{{0x0, 0x0, &(0x7f00000003c0)}}], 0x1, 0x2, 0x0) 259.829826ms ago: executing program 2 (id=1295): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x3, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) read$alg(r2, &(0x7f0000000400)=""/8, 0x8) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1d}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r6, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000100001040000eb040100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r8], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x305, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000130400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468315f746f5f626f6e64000f0008000a00", @ANYRES32=r11], 0x3c}}, 0x0) accept4(r3, 0x0, 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) sendmmsg$inet(r1, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback}, {@in=@remote, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7}}]}, 0x154}}, 0x0) 251.697232ms ago: executing program 0 (id=1296): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c020000", @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf2518000000b00001800d0001007564703a73797a31000000000d0001007564703a73797a310000000008000300090000000d0001007564703a73797a32000000000d0001007564703a73797a300000000024000280080007000400000008000300feffffff080003000500000008000400020000000800030000800000380004001400010002004e230a0101010000000000000000200002000a004e210000000dff020000000000"], 0x20c}}, 0x0) 249.703949ms ago: executing program 4 (id=1297): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='objagg_create\x00'}, 0xffffffffffffff26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='qi_submit\x00', r3}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90ff}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x15, 0x10, 0x2}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000002a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r7, @ANYBLOB="000000000000000095000000000000006d306b3124fc16446f6bf80d8c539001bb6df975cd763be58da71277a988f38ed023442d3eaab18d2f09e52bfe2d51c6f33a59de57b48d2ec5f81f54ad6516a29b5a0da8d40c2b316ff0c4bf7af4fe26092e1087c72c5dc4643067cd98fc966326a31fa6dd88849776dfe9a619a8a88bf83cc201779303c98593d08df741155056a7f33c6d2091cc05db5fe2ef2f45c6f5af31ba224d90ff726a19cf0a36863b3a9f43771fbe35ae11345307b21c534b5cd3f8"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x100b, &(0x7f0000001680)=""/4107}, 0x80) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f040000000000000000008500000005000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r9}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r8, 0x0, 0xe, 0x96, &(0x7f0000001580)="7bff3d3123384c5e301d61177732b6b7f4da65440eb316591fc72da6ee754701abed46fca8cdbbbbd2bbcefcce31a2dab5be6f0117fa8de646ead59773d0717f599ba017b6f19f483161bce4b283cedb85fcd15a914bc740c5134a1651d6c5850a9afcd1b07b31f10eeea611b60be2d8506811c95e2b2d125900e839578248f635da1eb931dfacf78ace469fdba5f757c27ebf7cc1d063e5cc8a3a85783ef06e0c0004c6e90faa8e215bfec5d8e5f928966106e5e5995deac7f87e05e7d344ce428354a2034e443d6ef2ab961343623e614d4bf9df", &(0x7f0000001440)=""/150, 0x0, 0x0, 0x79, 0x3, &(0x7f0000000180)="edc731f46e2fade7b621e460c7575533ca75f3940e7d2f0e8048b9bec2db1e5aec2ea44ad0f15d22991608bbfe092e1cebb77130ddb70b0acbed37c71830599fe344e591abd5f72778eb42d0f6ea69240f4cd429d2fa74797092b12742a1a003527b90181a0dd4ea34b9cd80b1ed26afad4d51a98f2d5904a1", &(0x7f0000001240)="0da951", 0x0, 0x9}, 0x28) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 131.161389ms ago: executing program 1 (id=1298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='objagg_create\x00'}, 0xffffffffffffff26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='qi_submit\x00', r5}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90ff}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x15, 0x10, 0x2}, 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000002a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r9, @ANYBLOB="000000000000000095000000000000006d306b3124fc16446f6bf80d8c539001bb6df975cd763be58da71277a988f38ed023442d3eaab18d2f09e52bfe2d51c6f33a59de57b48d2ec5f81f54ad6516a29b5a0da8d40c2b316ff0c4bf7af4fe26092e1087c72c5dc4643067cd98fc966326a31fa6dd88849776dfe9a619a8a88bf83cc201779303c98593d08df741155056a7f33c6d2091cc05db5fe2ef2f45c6f5af31ba224d90ff726a19cf0a36863b3a9f43771fbe35ae11345307b21c534b5cd3f8"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x100b, &(0x7f0000001680)=""/4107}, 0x80) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f040000000000000000008500000005000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r11}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r10, 0x0, 0xe, 0x96, &(0x7f0000001580)="7bff3d3123384c5e301d61177732b6b7f4da65440eb316591fc72da6ee754701abed46fca8cdbbbbd2bbcefcce31a2dab5be6f0117fa8de646ead59773d0717f599ba017b6f19f483161bce4b283cedb85fcd15a914bc740c5134a1651d6c5850a9afcd1b07b31f10eeea611b60be2d8506811c95e2b2d125900e839578248f635da1eb931dfacf78ace469fdba5f757c27ebf7cc1d063e5cc8a3a85783ef06e0c0004c6e90faa8e215bfec5d8e5f928966106e5e5995deac7f87e05e7d344ce428354a2034e443d6ef2ab961343623e614d4bf9df", &(0x7f0000001440)=""/150, 0x0, 0x0, 0x79, 0x3, &(0x7f0000000180)="edc731f46e2fade7b621e460c7575533ca75f3940e7d2f0e8048b9bec2db1e5aec2ea44ad0f15d22991608bbfe092e1cebb77130ddb70b0acbed37c71830599fe344e591abd5f72778eb42d0f6ea69240f4cd429d2fa74797092b12742a1a003527b90181a0dd4ea34b9cd80b1ed26afad4d51a98f2d5904a1", &(0x7f0000001240)="0da951", 0x0, 0x9}, 0x28) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x20}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=1299): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0xb, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r0}, 0x38) (fail_nth: 9) kernel console output (not intermixed with test programs): 2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.483741][ T5101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.497892][ T5101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.505051][ T5101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.531677][ T5101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.548476][ T5096] hsr_slave_0: entered promiscuous mode [ 76.555553][ T5096] hsr_slave_1: entered promiscuous mode [ 76.583645][ T5104] Bluetooth: hci0: command tx timeout [ 76.593849][ T5102] team0: Port device team_slave_1 added [ 76.645802][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.653254][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.661069][ T5108] bridge_slave_0: entered allmulticast mode [ 76.669072][ T5108] bridge_slave_0: entered promiscuous mode [ 76.677118][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.684587][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.691816][ T5108] bridge_slave_1: entered allmulticast mode [ 76.699188][ T5108] bridge_slave_1: entered promiscuous mode [ 76.730502][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.737966][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.745332][ T5110] bridge_slave_0: entered allmulticast mode [ 76.752912][ T5104] Bluetooth: hci2: command tx timeout [ 76.758712][ T5104] Bluetooth: hci1: command tx timeout [ 76.759698][ T5110] bridge_slave_0: entered promiscuous mode [ 76.775526][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.782838][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.790059][ T5110] bridge_slave_1: entered allmulticast mode [ 76.798048][ T5110] bridge_slave_1: entered promiscuous mode [ 76.850702][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.858037][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.885030][ T5102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.911356][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.912713][ T5100] Bluetooth: hci3: command tx timeout [ 76.951704][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.958952][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.985177][ T5100] Bluetooth: hci4: command tx timeout [ 76.989451][ T5102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.012254][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.039547][ T5101] hsr_slave_0: entered promiscuous mode [ 77.046025][ T5101] hsr_slave_1: entered promiscuous mode [ 77.052822][ T5101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.060731][ T5101] Cannot create hsr debugfs directory [ 77.082938][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.097670][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.141875][ T5110] team0: Port device team_slave_0 added [ 77.196035][ T5108] team0: Port device team_slave_0 added [ 77.206114][ T5110] team0: Port device team_slave_1 added [ 77.215071][ T5108] team0: Port device team_slave_1 added [ 77.327023][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.334241][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.360636][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.389056][ T5102] hsr_slave_0: entered promiscuous mode [ 77.396680][ T5102] hsr_slave_1: entered promiscuous mode [ 77.404080][ T5102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.411751][ T5102] Cannot create hsr debugfs directory [ 77.431920][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.439301][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.465734][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.479518][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.487174][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.513724][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.525691][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.532935][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.559186][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.776196][ T5108] hsr_slave_0: entered promiscuous mode [ 77.784186][ T5108] hsr_slave_1: entered promiscuous mode [ 77.791375][ T5108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.799822][ T5108] Cannot create hsr debugfs directory [ 77.837167][ T5110] hsr_slave_0: entered promiscuous mode [ 77.844109][ T5110] hsr_slave_1: entered promiscuous mode [ 77.850543][ T5110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.858296][ T5110] Cannot create hsr debugfs directory [ 78.157869][ T5096] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.188584][ T5096] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.201757][ T5096] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.229779][ T5096] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.306005][ T5101] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.325228][ T5101] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.339258][ T5101] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.350984][ T5101] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.469900][ T5102] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.486650][ T5102] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.500113][ T5102] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.527261][ T5102] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.644031][ T5110] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.657581][ T5110] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.664951][ T5100] Bluetooth: hci0: command tx timeout [ 78.675919][ T5110] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.688043][ T5110] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.715216][ T5096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.809764][ T5108] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.822723][ T5100] Bluetooth: hci1: command tx timeout [ 78.822759][ T5104] Bluetooth: hci2: command tx timeout [ 78.832214][ T5108] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.860621][ T5108] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.890365][ T5096] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.898544][ T5108] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.946986][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.954537][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.986035][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.993852][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.998752][ T5104] Bluetooth: hci3: command tx timeout [ 79.010174][ T5101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.063272][ T5104] Bluetooth: hci4: command tx timeout [ 79.156104][ T5102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.170275][ T5101] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.196179][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.203795][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.214041][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.221314][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.300578][ T5102] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.399957][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.407193][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.464853][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.472074][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.568237][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.645395][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.701536][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.720605][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.740786][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.748040][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.776744][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.783934][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.805015][ T5101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.841408][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.848756][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.864681][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.871901][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.902313][ T5096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.101086][ T5108] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.270834][ T5096] veth0_vlan: entered promiscuous mode [ 80.312091][ T5096] veth1_vlan: entered promiscuous mode [ 80.467200][ T5102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.555001][ T5096] veth0_macvtap: entered promiscuous mode [ 80.597734][ T5096] veth1_macvtap: entered promiscuous mode [ 80.646237][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.668897][ T5101] veth0_vlan: entered promiscuous mode [ 80.701534][ T5101] veth1_vlan: entered promiscuous mode [ 80.725586][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.744482][ T5104] Bluetooth: hci0: command tx timeout [ 80.750562][ T5102] veth0_vlan: entered promiscuous mode [ 80.763285][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.783140][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.820950][ T5102] veth1_vlan: entered promiscuous mode [ 80.840784][ T5096] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.850726][ T5096] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.860761][ T5096] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.870396][ T5096] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.903821][ T5104] Bluetooth: hci1: command tx timeout [ 80.909220][ T5100] Bluetooth: hci2: command tx timeout [ 80.972137][ T5101] veth0_macvtap: entered promiscuous mode [ 80.990195][ T5110] veth0_vlan: entered promiscuous mode [ 81.014751][ T5101] veth1_macvtap: entered promiscuous mode [ 81.030493][ T5108] veth0_vlan: entered promiscuous mode [ 81.063364][ T5100] Bluetooth: hci3: command tx timeout [ 81.079918][ T5110] veth1_vlan: entered promiscuous mode [ 81.089289][ T5102] veth0_macvtap: entered promiscuous mode [ 81.113816][ T5108] veth1_vlan: entered promiscuous mode [ 81.138861][ T5102] veth1_macvtap: entered promiscuous mode [ 81.145488][ T5100] Bluetooth: hci4: command tx timeout [ 81.157882][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.169115][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.180628][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.255863][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.271313][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.285765][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.335405][ T5101] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.349650][ T5101] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.358689][ T5101] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.367585][ T5101] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.380651][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.392186][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.402738][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.415004][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.426986][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.446935][ T2453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.455781][ T2453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.477478][ T5108] veth0_macvtap: entered promiscuous mode [ 81.515207][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.527105][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.537840][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.549317][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.563133][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.578859][ T5102] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.588140][ T5102] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.597820][ T5102] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.606768][ T5102] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.638827][ T5108] veth1_macvtap: entered promiscuous mode [ 81.652225][ T2453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.664166][ T2453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.692035][ T5110] veth0_macvtap: entered promiscuous mode [ 81.729030][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.740525][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.751884][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.763033][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.774013][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.785445][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.798521][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.828642][ T5110] veth1_macvtap: entered promiscuous mode [ 81.871404][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.885889][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.896488][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.907049][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.919008][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.929564][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.941303][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.985040][ T2453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.993057][ T2453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.020142][ T5108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.035080][ T5108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.047732][ T5108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.062149][ T5108] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.139659][ T5178] netlink: 209316 bytes leftover after parsing attributes in process `syz.3.4'. [ 82.198109][ T5178] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 82.203138][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.228322][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.238599][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.250046][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.260343][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.274768][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.286582][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.297558][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.311700][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.348614][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.364963][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.379967][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.390939][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.401300][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.424717][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.444981][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.456446][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.473748][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.484595][ T2453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.494877][ T2453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.531326][ T5110] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.550040][ T5110] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.561091][ T5110] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.570409][ T5110] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.588527][ T2870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.614145][ T2870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.753095][ T5181] bond0: (slave bond_slave_1): Releasing backup interface [ 82.822929][ T5100] Bluetooth: hci0: command tx timeout [ 82.915022][ T2453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.948752][ T2453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.991316][ T5100] Bluetooth: hci2: command tx timeout [ 82.995427][ T5104] Bluetooth: hci1: command tx timeout [ 83.055210][ T2486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.081939][ T2486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.147295][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.150831][ T5104] Bluetooth: hci3: command tx timeout [ 83.191131][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.224056][ T5104] Bluetooth: hci4: command tx timeout [ 83.377741][ T2453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.391941][ T2453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.528626][ T2870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.589626][ T2870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.863463][ T5211] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2'. [ 83.997714][ T5211] Êü: entered promiscuous mode [ 84.053076][ T5220] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.130569][ T5222] hsr0: entered promiscuous mode [ 84.170829][ T5222] hsr_slave_0: left promiscuous mode [ 84.209831][ T5222] hsr_slave_1: left promiscuous mode [ 84.309801][ T5222] hsr0 (unregistering): left promiscuous mode [ 84.328871][ T5231] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 84.351015][ T5224] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1'. [ 84.709830][ T5242] netlink: 'syz.4.24': attribute type 6 has an invalid length. [ 84.804440][ T5250] syz.4.24 uses obsolete (PF_INET,SOCK_PACKET) [ 85.706747][ T5276] hsr0: entered promiscuous mode [ 85.743844][ T5278] hsr_slave_0: left promiscuous mode [ 85.751798][ T5278] hsr_slave_1: left promiscuous mode [ 85.873034][ T5278] hsr0 (unregistering): left promiscuous mode [ 86.093348][ T5100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.103086][ T5100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.112221][ T5100] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.117147][ T5289] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.142673][ T5100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.160338][ T5100] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.168011][ T5100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.379788][ T5299] netlink: 20 bytes leftover after parsing attributes in process `syz.3.38'. [ 86.479920][ T2486] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.578171][ T5303] netlink: 40 bytes leftover after parsing attributes in process `syz.2.39'. [ 86.656703][ T2486] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.757361][ T5311] netlink: 'syz.1.42': attribute type 6 has an invalid length. [ 86.800218][ T2486] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.961277][ T5317] tipc: Enabling of bearer rejected, failed to enable media [ 87.225995][ T2486] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.243493][ T57] cfg80211: failed to load regulatory.db [ 87.818124][ T5345] bridge0: entered promiscuous mode [ 87.850035][ T5345] bridge0: entered allmulticast mode [ 87.883576][ T5353] netlink: 40 bytes leftover after parsing attributes in process `syz.2.52'. [ 87.965382][ T5355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.54'. [ 88.265467][ T5104] Bluetooth: hci3: command tx timeout [ 88.275610][ T2486] bridge_slave_1: left allmulticast mode [ 88.302643][ T2486] bridge_slave_1: left promiscuous mode [ 88.309743][ T2486] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.325578][ T2486] bridge_slave_0: left allmulticast mode [ 88.336045][ T2486] bridge_slave_0: left promiscuous mode [ 88.342073][ T2486] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.738114][ T2486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.757716][ T2486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.769441][ T2486] bond0 (unregistering): Released all slaves [ 88.811986][ T5372] hsr0: entered promiscuous mode [ 88.843700][ T5375] hsr_slave_0: left promiscuous mode [ 88.851473][ T5375] hsr_slave_1: left promiscuous mode [ 89.008024][ T5375] hsr0 (unregistering): left promiscuous mode [ 89.051159][ T5284] chnl_net:caif_netlink_parms(): no params data found [ 89.071819][ T5381] syz.1.62 (5381) used greatest stack depth: 18128 bytes left [ 89.082858][ T5384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'. [ 89.128992][ T5377] Zero length message leads to an empty skb [ 89.371982][ T5387] bridge0: entered promiscuous mode [ 89.389991][ T5393] netlink: 40 bytes leftover after parsing attributes in process `syz.4.65'. [ 89.423519][ T5387] bridge0: left promiscuous mode [ 89.728004][ T5411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.69'. [ 90.033593][ T5284] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.035191][ T5423] netlink: 28 bytes leftover after parsing attributes in process `syz.4.73'. [ 90.068974][ T5284] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.087072][ T5284] bridge_slave_0: entered allmulticast mode [ 90.103232][ T5425] netlink: 28 bytes leftover after parsing attributes in process `syz.4.73'. [ 90.116423][ T5284] bridge_slave_0: entered promiscuous mode [ 90.145873][ T5284] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.182641][ T5284] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.189977][ T5284] bridge_slave_1: entered allmulticast mode [ 90.234093][ T5284] bridge_slave_1: entered promiscuous mode [ 90.314495][ T2486] hsr_slave_0: left promiscuous mode [ 90.343536][ T5104] Bluetooth: hci3: command tx timeout [ 90.366044][ T2486] hsr_slave_1: left promiscuous mode [ 90.417999][ T2486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.445919][ T2486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.486590][ T2486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.494742][ T2486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.569103][ T2486] veth1_macvtap: left promiscuous mode [ 90.594613][ T2486] veth0_macvtap: left promiscuous mode [ 90.613148][ T2486] veth1_vlan: left promiscuous mode [ 90.625703][ T2486] veth0_vlan: left promiscuous mode [ 90.781152][ T5451] netlink: 40 bytes leftover after parsing attributes in process `syz.3.79'. [ 91.447864][ T2486] team0 (unregistering): Port device team_slave_1 removed [ 91.488446][ T2486] team0 (unregistering): Port device team_slave_0 removed [ 91.887648][ T5284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.008546][ T5284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.034878][ T5467] netlink: 'syz.4.83': attribute type 2 has an invalid length. [ 92.275022][ T5284] team0: Port device team_slave_0 added [ 92.422704][ T5104] Bluetooth: hci3: command tx timeout [ 92.458430][ T5284] team0: Port device team_slave_1 added [ 92.615261][ T5484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.89'. [ 92.666792][ T5284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.692588][ T5284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.802994][ T5284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.854134][ T5495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.908039][ T5284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.926505][ T5284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.992298][ T5284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.276095][ T30] audit: type=1107 audit(1720083035.626:2): pid=5504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 93.276095][ T30] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 93.394645][ T5284] hsr_slave_0: entered promiscuous mode [ 93.471898][ T5284] hsr_slave_1: entered promiscuous mode [ 93.708994][ T5526] bridge1: entered promiscuous mode [ 93.743165][ T5526] bridge1: entered allmulticast mode [ 93.778710][ T5527] bridge_slave_1: left allmulticast mode [ 93.796082][ T5527] bridge_slave_1: left promiscuous mode [ 93.803613][ T5527] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.825424][ T5526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'. [ 94.093763][ T5531] netlink: 40 bytes leftover after parsing attributes in process `syz.1.102'. [ 94.502645][ T5104] Bluetooth: hci3: command tx timeout [ 94.856714][ T5560] netlink: 'syz.4.110': attribute type 10 has an invalid length. [ 94.928875][ T5560] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 95.114546][ T5569] netlink: 'syz.4.112': attribute type 2 has an invalid length. [ 95.311283][ T5578] FAULT_INJECTION: forcing a failure. [ 95.311283][ T5578] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 95.389581][ T5578] CPU: 1 PID: 5578 Comm: syz.2.113 Not tainted 6.10.0-rc5-syzkaller-01202-g0b8774586be5 #0 [ 95.399643][ T5578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 95.409778][ T5578] Call Trace: [ 95.413152][ T5578] [ 95.416122][ T5578] dump_stack_lvl+0x241/0x360 [ 95.420903][ T5578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.426152][ T5578] ? __pfx__printk+0x10/0x10 [ 95.430792][ T5578] ? __pfx_lock_release+0x10/0x10 [ 95.435883][ T5578] should_fail_ex+0x3b0/0x4e0 [ 95.440623][ T5578] _copy_from_user+0x2f/0xe0 [ 95.445264][ T5578] copy_msghdr_from_user+0xae/0x680 [ 95.450517][ T5578] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 95.456390][ T5578] do_recvmmsg+0x40f/0xae0 [ 95.460865][ T5578] ? __pfx_lock_release+0x10/0x10 [ 95.465938][ T5578] ? __pfx_do_recvmmsg+0x10/0x10 [ 95.470950][ T5578] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 95.476899][ T5578] ? ksys_write+0x23e/0x2c0 [ 95.481452][ T5578] ? __pfx_lock_release+0x10/0x10 [ 95.486628][ T5578] ? vfs_write+0x7c4/0xc90 [ 95.491109][ T5578] ? __mutex_unlock_slowpath+0x21d/0x750 [ 95.496830][ T5578] ? __fget_files+0x3f6/0x470 [ 95.501685][ T5578] __x64_sys_recvmmsg+0x199/0x250 [ 95.506788][ T5578] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 95.512406][ T5578] ? do_syscall_64+0x100/0x230 [ 95.517231][ T5578] ? do_syscall_64+0xb6/0x230 [ 95.521971][ T5578] do_syscall_64+0xf3/0x230 [ 95.526530][ T5578] ? clear_bhb_loop+0x35/0x90 [ 95.531267][ T5578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.537224][ T5578] RIP: 0033:0x7f3626775bd9 [ 95.541698][ T5578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.561530][ T5578] RSP: 002b:00007f362760b048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 95.570000][ T5578] RAX: ffffffffffffffda RBX: 00007f3626904038 RCX: 00007f3626775bd9 [ 95.578017][ T5578] RDX: 0000000000000001 RSI: 0000000020001080 RDI: 0000000000000003 [ 95.586032][ T5578] RBP: 00007f362760b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 95.594052][ T5578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.602067][ T5578] R13: 000000000000006e R14: 00007f3626904038 R15: 00007ffc87b9dd88 [ 95.610101][ T5578] [ 95.977338][ T5284] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.016869][ T5284] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.091584][ T5284] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.137603][ T5591] pim6reg1: entered promiscuous mode [ 96.164815][ T5591] pim6reg1: entered allmulticast mode [ 96.191416][ T5600] netlink: 40 bytes leftover after parsing attributes in process `syz.2.118'. [ 96.220447][ T5284] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.350058][ T5600] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 96.484851][ T5600] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 97.000786][ T5284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.111604][ T5284] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.152296][ T5636] FAULT_INJECTION: forcing a failure. [ 97.152296][ T5636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.154210][ T5635] netlink: 'syz.1.129': attribute type 5 has an invalid length. [ 97.201440][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.208769][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.227418][ T5636] CPU: 0 PID: 5636 Comm: syz.4.130 Not tainted 6.10.0-rc5-syzkaller-01202-g0b8774586be5 #0 [ 97.237569][ T5636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 97.247698][ T5636] Call Trace: [ 97.251014][ T5636] [ 97.254176][ T5636] dump_stack_lvl+0x241/0x360 [ 97.258901][ T5636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.264149][ T5636] ? __pfx__printk+0x10/0x10 [ 97.268793][ T5636] ? __pfx_lock_release+0x10/0x10 [ 97.273876][ T5636] should_fail_ex+0x3b0/0x4e0 [ 97.278624][ T5636] _copy_from_user+0x2f/0xe0 [ 97.283272][ T5636] copy_msghdr_from_user+0xae/0x680 [ 97.288531][ T5636] ? timespec64_add_safe+0x1be/0x220 [ 97.293873][ T5636] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 97.294242][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.299718][ T5636] do_recvmmsg+0x40f/0xae0 [ 97.299755][ T5636] ? mark_lock+0x9a/0x350 [ 97.307430][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.311185][ T5636] ? __pfx_do_recvmmsg+0x10/0x10 [ 97.327725][ T5636] ? __pfx___might_resched+0x10/0x10 [ 97.333064][ T5636] ? __might_fault+0xaa/0x120 [ 97.337782][ T5636] ? __pfx_lock_release+0x10/0x10 [ 97.342931][ T5636] ? vfs_write+0x7c4/0xc90 [ 97.347405][ T5636] ? get_timespec64+0x19c/0x280 [ 97.352320][ T5636] __x64_sys_recvmmsg+0x1b8/0x250 [ 97.357403][ T5636] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 97.363027][ T5636] ? do_syscall_64+0x100/0x230 [ 97.367837][ T5636] ? do_syscall_64+0xb6/0x230 [ 97.372621][ T5636] do_syscall_64+0xf3/0x230 [ 97.377192][ T5636] ? clear_bhb_loop+0x35/0x90 [ 97.381907][ T5636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.388009][ T5636] RIP: 0033:0x7fcd43575bd9 [ 97.393141][ T5636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.413058][ T5636] RSP: 002b:00007fcd42fff048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 97.421517][ T5636] RAX: ffffffffffffffda RBX: 00007fcd43703f60 RCX: 00007fcd43575bd9 [ 97.429504][ T5636] RDX: 0000000000000002 RSI: 00000000200008c0 RDI: 0000000000000005 [ 97.437513][ T5636] RBP: 00007fcd42fff0a0 R08: 0000000020008000 R09: 0000000000000000 [ 97.445496][ T5636] R10: 00000000000000cb R11: 0000000000000246 R12: 0000000000000001 [ 97.453653][ T5636] R13: 000000000000000b R14: 00007fcd43703f60 R15: 00007ffee6ef3e68 [ 97.461647][ T5636] [ 97.524694][ T5642] dummy0: entered promiscuous mode [ 97.588309][ T5642] batadv0: entered promiscuous mode [ 97.602046][ T5642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.631861][ T5642] Cannot create hsr debugfs directory [ 97.914022][ T5656] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 98.145188][ T5667] netlink: 40 bytes leftover after parsing attributes in process `syz.4.137'. [ 98.184801][ T5667] siw: device registration error -23 [ 98.634413][ T5692] netlink: 76 bytes leftover after parsing attributes in process `syz.2.144'. [ 98.691973][ T5284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.763203][ T5692] ÊügáG: entered promiscuous mode [ 98.995928][ T5705] netlink: 'syz.1.148': attribute type 2 has an invalid length. [ 99.013587][ T5284] veth0_vlan: entered promiscuous mode [ 99.242005][ T5284] veth1_vlan: entered promiscuous mode [ 99.325447][ T5719] netlink: 40 bytes leftover after parsing attributes in process `syz.4.151'. [ 99.355529][ T5719] siw: device registration error -23 [ 99.636136][ T5284] veth0_macvtap: entered promiscuous mode [ 99.671888][ T5284] veth1_macvtap: entered promiscuous mode [ 99.743363][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.798099][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.827286][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.849673][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.869949][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.897692][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.915943][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.936867][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.971323][ T5284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.036743][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.083833][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.097149][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.114484][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.132920][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.146056][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.156986][ T5284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.188873][ T5284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.201959][ T5284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.327980][ T5284] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.361871][ T5284] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.400235][ T5284] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.436804][ T5284] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.476582][ T5754] warning: `syz.3.160' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.531593][ T5756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.162'. [ 100.604376][ T5756] netlink: 24 bytes leftover after parsing attributes in process `syz.1.162'. [ 100.872925][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.885723][ T5767] netlink: 40 bytes leftover after parsing attributes in process `syz.2.163'. [ 100.911077][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.010017][ T2453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.032730][ T2453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.182908][ T5780] netlink: 36 bytes leftover after parsing attributes in process `syz.1.168'. [ 101.214322][ T5783] netlink: 'syz.4.167': attribute type 2 has an invalid length. [ 101.375308][ T5786] netlink: 24 bytes leftover after parsing attributes in process `syz.0.28'. [ 101.586170][ T5799] netlink: 'syz.1.170': attribute type 3 has an invalid length. [ 101.615958][ T5799] netlink: 'syz.1.170': attribute type 3 has an invalid length. [ 101.797315][ T5807] netlink: 198556 bytes leftover after parsing attributes in process `syz.0.172'. [ 102.252463][ T5823] xt_connbytes: Forcing CT accounting to be enabled [ 102.259403][ T5823] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.408438][ T5827] sit1: entered promiscuous mode [ 102.419119][ T5827] sit1: entered allmulticast mode [ 102.570395][ T5838] netlink: 'syz.2.183': attribute type 1 has an invalid length. [ 102.608033][ T5838] netlink: 'syz.2.183': attribute type 3 has an invalid length. [ 102.627780][ T5838] netlink: 224 bytes leftover after parsing attributes in process `syz.2.183'. [ 102.766706][ T5843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.186'. [ 102.828098][ T5847] netlink: 24 bytes leftover after parsing attributes in process `syz.2.188'. [ 103.013523][ T5847] netlink: 'syz.2.188': attribute type 25 has an invalid length. [ 103.105885][ T5847] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.116446][ T5847] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.126097][ T5847] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.134911][ T5847] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.492570][ T5916] netlink: 'syz.4.209': attribute type 2 has an invalid length. [ 104.669047][ T5100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.679309][ T5100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.688332][ T5100] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.696935][ T5100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.705731][ T5100] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 104.716977][ T5100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.802258][ T5925] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 104.822240][ T5929] __nla_validate_parse: 5 callbacks suppressed [ 104.822263][ T5929] netlink: 72 bytes leftover after parsing attributes in process `syz.2.212'. [ 104.885449][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'. [ 104.943875][ T5934] batman_adv: batadv1: Adding interface: netdevsim0 [ 104.964092][ T5934] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.024923][ T5934] batman_adv: batadv1: Interface activated: netdevsim0 [ 105.182315][ T142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.364330][ T5945] netlink: 40 bytes leftover after parsing attributes in process `syz.1.218'. [ 105.417566][ T142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.548633][ T142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.689921][ T5964] Bluetooth: MGMT ver 1.22 [ 105.704582][ T5964] FAULT_INJECTION: forcing a failure. [ 105.704582][ T5964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.741884][ T5964] CPU: 1 PID: 5964 Comm: syz.3.223 Not tainted 6.10.0-rc5-syzkaller-01202-g0b8774586be5 #0 [ 105.752294][ T5964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 105.762469][ T5964] Call Trace: [ 105.765777][ T5964] [ 105.768732][ T5964] dump_stack_lvl+0x241/0x360 [ 105.773441][ T5964] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.778684][ T5964] ? __pfx__printk+0x10/0x10 [ 105.783431][ T5964] ? snprintf+0xda/0x120 [ 105.787734][ T5964] should_fail_ex+0x3b0/0x4e0 [ 105.792560][ T5964] _copy_to_user+0x2f/0xb0 [ 105.797577][ T5964] simple_read_from_buffer+0xca/0x150 [ 105.803018][ T5964] proc_fail_nth_read+0x1e9/0x250 [ 105.808187][ T5964] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.813756][ T5964] ? rw_verify_area+0x514/0x6b0 [ 105.818676][ T5964] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.824252][ T5964] vfs_read+0x204/0xbd0 [ 105.828415][ T5964] ? __pfx_lock_release+0x10/0x10 [ 105.833461][ T5964] ? __pfx_sock_write_iter+0x10/0x10 [ 105.838775][ T5964] ? __pfx_vfs_read+0x10/0x10 [ 105.843473][ T5964] ? __fget_files+0x29/0x470 [ 105.848125][ T5964] ? __fget_files+0x3f6/0x470 [ 105.852831][ T5964] ksys_read+0x1a0/0x2c0 [ 105.857088][ T5964] ? __pfx_ksys_read+0x10/0x10 [ 105.861865][ T5964] ? do_syscall_64+0x100/0x230 [ 105.866643][ T5964] ? do_syscall_64+0xb6/0x230 [ 105.871329][ T5964] do_syscall_64+0xf3/0x230 [ 105.875843][ T5964] ? clear_bhb_loop+0x35/0x90 [ 105.880544][ T5964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.886460][ T5964] RIP: 0033:0x7f309e5746bc [ 105.890890][ T5964] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 105.910861][ T5964] RSP: 002b:00007f309f33e040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.919290][ T5964] RAX: ffffffffffffffda RBX: 00007f309e703f60 RCX: 00007f309e5746bc [ 105.927282][ T5964] RDX: 000000000000000f RSI: 00007f309f33e0b0 RDI: 0000000000000005 [ 105.935288][ T5964] RBP: 00007f309f33e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 105.943313][ T5964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 105.951413][ T5964] R13: 000000000000000b R14: 00007f309e703f60 R15: 00007ffe99f64648 [ 105.959520][ T5964] [ 106.009337][ T142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.315991][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.226'. [ 106.777825][ T142] bridge_slave_1: left allmulticast mode [ 106.795658][ T142] bridge_slave_1: left promiscuous mode [ 106.823960][ T5100] Bluetooth: hci3: command tx timeout [ 106.840464][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.884041][ T142] bridge_slave_0: left allmulticast mode [ 106.899196][ T142] bridge_slave_0: left promiscuous mode [ 106.907469][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.570964][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.592112][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.605422][ T142] bond0 (unregistering): Released all slaves [ 107.620496][ T5926] chnl_net:caif_netlink_parms(): no params data found [ 108.146042][ T6043] netlink: 40 bytes leftover after parsing attributes in process `syz.2.244'. [ 108.302300][ T6049] Illegal XDP return value 4294967274 on prog (id 58) dev N/A, expect packet loss! [ 108.609115][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.629596][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.657268][ T5926] bridge_slave_0: entered allmulticast mode [ 108.679828][ T5926] bridge_slave_0: entered promiscuous mode [ 108.738923][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.773732][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.805046][ T5926] bridge_slave_1: entered allmulticast mode [ 108.848048][ T5926] bridge_slave_1: entered promiscuous mode [ 108.902538][ T5100] Bluetooth: hci3: command tx timeout [ 109.001856][ T6076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.253'. [ 109.047323][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.084304][ T6080] netlink: 40 bytes leftover after parsing attributes in process `syz.2.254'. [ 109.122744][ T142] hsr_slave_0: left promiscuous mode [ 109.159233][ T142] hsr_slave_1: left promiscuous mode [ 109.189449][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.221585][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.241588][ T6088] netlink: 'syz.3.256': attribute type 2 has an invalid length. [ 109.268143][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.286507][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.401793][ T142] veth1_macvtap: left promiscuous mode [ 109.419832][ T142] veth0_macvtap: left promiscuous mode [ 109.429113][ T142] veth1_vlan: left promiscuous mode [ 109.442017][ T142] veth0_vlan: left promiscuous mode [ 109.632855][ T6104] SET target dimension over the limit! [ 110.147132][ T142] team0 (unregistering): Port device team_slave_1 removed [ 110.199481][ T142] team0 (unregistering): Port device team_slave_0 removed [ 110.606008][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.661661][ T6091] netlink: 20 bytes leftover after parsing attributes in process `syz.2.257'. [ 110.680568][ T6098] bridge_slave_1: left allmulticast mode [ 110.687009][ T6098] bridge_slave_1: left promiscuous mode [ 110.695404][ T6098] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.716908][ T6098] bridge1: port 1(bridge_slave_1) entered blocking state [ 110.730552][ T6098] bridge1: port 1(bridge_slave_1) entered disabled state [ 110.741595][ T6098] bridge_slave_1: entered allmulticast mode [ 110.769425][ T6098] bridge_slave_1: entered promiscuous mode [ 110.781794][ T6098] bridge1: port 1(bridge_slave_1) entered blocking state [ 110.790156][ T6098] bridge1: port 1(bridge_slave_1) entered forwarding state [ 110.849165][ T6106] tipc: Started in network mode [ 110.863784][ T6106] tipc: Node identity ac1414aa, cluster identity 4711 [ 110.898216][ T6106] tipc: Enabled bearer , priority 10 [ 110.934000][ T6113] netlink: 68 bytes leftover after parsing attributes in process `syz.1.260'. [ 110.983023][ T5100] Bluetooth: hci3: command tx timeout [ 111.072073][ T5926] team0: Port device team_slave_0 added [ 111.086142][ T5926] team0: Port device team_slave_1 added [ 111.215862][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.234853][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.318449][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.331130][ T6124] netlink: 'syz.4.263': attribute type 5 has an invalid length. [ 111.344410][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.368747][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.413891][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.518619][ T6135] netlink: 40 bytes leftover after parsing attributes in process `syz.3.266'. [ 111.632697][ T5926] hsr_slave_0: entered promiscuous mode [ 111.659665][ T5926] hsr_slave_1: entered promiscuous mode [ 111.824399][ T6149] IPVS: set_ctl: invalid protocol: 33 100.1.1.2:20004 [ 111.894690][ T5098] tipc: Node number set to 2886997162 [ 112.337992][ T6169] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 112.448913][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 112.648954][ T6182] netlink: 40 bytes leftover after parsing attributes in process `syz.2.278'. [ 113.012649][ T6192] netlink: 'syz.3.282': attribute type 5 has an invalid length. [ 113.062552][ T5100] Bluetooth: hci3: command tx timeout [ 113.247001][ T5926] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.291693][ T5926] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.325164][ T5926] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.380296][ T5926] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.413084][ T6206] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 113.726793][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.812203][ T5926] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.852250][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.859539][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.897469][ T786] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.904719][ T786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.005837][ T6223] netlink: 40 bytes leftover after parsing attributes in process `syz.3.290'. [ 114.323227][ T6247] netlink: 'syz.3.293': attribute type 2 has an invalid length. [ 114.351007][ T6246] netlink: 'syz.3.293': attribute type 2 has an invalid length. [ 114.650695][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.844013][ T5926] veth0_vlan: entered promiscuous mode [ 114.870651][ T5926] veth1_vlan: entered promiscuous mode [ 114.932607][ T6265] netlink: 40 bytes leftover after parsing attributes in process `syz.3.298'. [ 114.978897][ T5926] veth0_macvtap: entered promiscuous mode [ 115.029202][ T5926] veth1_macvtap: entered promiscuous mode [ 115.142902][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.150242][ T6281] netlink: 40 bytes leftover after parsing attributes in process `syz.2.301'. [ 115.200720][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.232440][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.247683][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.285466][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.331839][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.365792][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.390276][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.414112][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.464110][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.532462][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.584728][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.621508][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.653578][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.669041][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.681690][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.702987][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.729462][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.765197][ T5926] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.802659][ T5926] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.822525][ T5926] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.857921][ T5926] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.239434][ T2486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.279503][ T2486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.347130][ T2486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.356012][ T2486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.378864][ T6318] netlink: 40 bytes leftover after parsing attributes in process `syz.3.312'. [ 117.527354][ T6365] netlink: 40 bytes leftover after parsing attributes in process `syz.0.323'. [ 118.077453][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.330'. [ 118.183034][ T6391] netlink: 'syz.2.332': attribute type 1 has an invalid length. [ 118.190766][ T6391] netlink: 244 bytes leftover after parsing attributes in process `syz.2.332'. [ 118.639348][ T6417] tap0: tun_chr_ioctl cmd 1074025677 [ 118.649639][ T6417] tap0: linktype set to 768 [ 118.668822][ T6409] team0: No ports can be present during mode change [ 118.684242][ T6413] netlink: 40 bytes leftover after parsing attributes in process `syz.1.338'. [ 118.687742][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.337'. [ 119.069486][ T6430] pim6reg: entered allmulticast mode [ 119.153872][ T6430] pim6reg: left allmulticast mode [ 119.486231][ T6447] Bluetooth: MGMT ver 1.22 [ 119.492861][ T6447] Bluetooth: hci3: unsupported parameter 28 [ 119.502514][ T6447] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 119.735583][ T6467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.350'. [ 119.779996][ T6477] netlink: 36 bytes leftover after parsing attributes in process `syz.4.353'. [ 120.044532][ T6493] netlink: 'syz.4.358': attribute type 3 has an invalid length. [ 120.274685][ T6503] netlink: 'syz.3.360': attribute type 21 has an invalid length. [ 120.329339][ T6503] netlink: 132 bytes leftover after parsing attributes in process `syz.3.360'. [ 120.782111][ T6520] team0: entered promiscuous mode [ 120.787775][ T6529] FAULT_INJECTION: forcing a failure. [ 120.787775][ T6529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.787911][ T6529] CPU: 0 PID: 6529 Comm: syz.3.370 Not tainted 6.10.0-rc5-syzkaller-01202-g0b8774586be5 #0 [ 120.787937][ T6529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 120.821069][ T6529] Call Trace: [ 120.822534][ T6520] team_slave_0: entered promiscuous mode [ 120.824538][ T6529] [ 120.824552][ T6529] dump_stack_lvl+0x241/0x360 [ 120.824586][ T6529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.843140][ T6529] ? __pfx__printk+0x10/0x10 [ 120.847787][ T6529] ? __pfx_lock_release+0x10/0x10 [ 120.852867][ T6529] should_fail_ex+0x3b0/0x4e0 [ 120.857659][ T6529] _copy_from_iter+0x1f6/0x1960 [ 120.862633][ T6529] ? __virt_addr_valid+0x183/0x520 [ 120.867768][ T6529] ? __pfx_lock_release+0x10/0x10 [ 120.872911][ T6529] ? __alloc_skb+0x28f/0x440 [ 120.877522][ T6529] ? __pfx__copy_from_iter+0x10/0x10 [ 120.882836][ T6529] ? __virt_addr_valid+0x183/0x520 [ 120.887989][ T6529] ? __virt_addr_valid+0x183/0x520 [ 120.893137][ T6529] ? __virt_addr_valid+0x44e/0x520 [ 120.898278][ T6529] ? __check_object_size+0x49c/0x900 [ 120.903625][ T6529] netlink_sendmsg+0x73d/0xcb0 [ 120.908509][ T6529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.913824][ T6529] ? __import_iovec+0x536/0x820 [ 120.918689][ T6529] ? aa_sock_msg_perm+0x91/0x160 [ 120.923649][ T6529] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 120.929032][ T6529] ? security_socket_sendmsg+0x87/0xb0 [ 120.934514][ T6529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.939818][ T6529] __sock_sendmsg+0x221/0x270 [ 120.944517][ T6529] ____sys_sendmsg+0x525/0x7d0 [ 120.949311][ T6529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.954630][ T6529] __sys_sendmsg+0x2b0/0x3a0 [ 120.959245][ T6529] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.964549][ T6529] ? vfs_write+0x7c4/0xc90 [ 120.969016][ T6529] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 120.975356][ T6529] ? do_syscall_64+0x100/0x230 [ 120.980149][ T6529] ? do_syscall_64+0xb6/0x230 [ 120.984843][ T6529] do_syscall_64+0xf3/0x230 [ 120.989370][ T6529] ? clear_bhb_loop+0x35/0x90 [ 120.994153][ T6529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.000061][ T6529] RIP: 0033:0x7f309e575bd9 [ 121.004500][ T6529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.024233][ T6529] RSP: 002b:00007f309f33e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.032871][ T6529] RAX: ffffffffffffffda RBX: 00007f309e703f60 RCX: 00007f309e575bd9 [ 121.040879][ T6529] RDX: 0000000000000000 RSI: 0000000020001200 RDI: 0000000000000003 [ 121.048876][ T6529] RBP: 00007f309f33e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 121.056872][ T6529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.064947][ T6529] R13: 000000000000000b R14: 00007f309e703f60 R15: 00007ffe99f64648 [ 121.072974][ T6529] [ 121.093038][ T6520] team_slave_1: entered promiscuous mode [ 121.114244][ T6520] batadv0: entered promiscuous mode [ 122.006852][ T6564] netlink: 24 bytes leftover after parsing attributes in process `syz.2.380'. [ 122.338888][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.388'. [ 122.492323][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'. [ 122.508677][ T6585] openvswitch: netlink: Flow actions attr not present in new flow. [ 123.444771][ T6611] tipc: Enabled bearer , priority 0 [ 123.466891][ T6610] tipc: Disabling bearer [ 123.552315][ T6614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.401'. [ 123.659652][ T6615] vlan2: entered promiscuous mode [ 123.678749][ T6615] ip6gretap0: entered promiscuous mode [ 123.732967][ T6615] ip6gretap0: left promiscuous mode [ 123.762738][ T6617] netlink: 16 bytes leftover after parsing attributes in process `syz.4.405'. [ 123.945726][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.404'. [ 123.965939][ T6625] netlink: 'syz.0.404': attribute type 11 has an invalid length. [ 123.982279][ T6625] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.985636][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.407'. [ 123.991223][ T6625] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.009391][ T6630] netlink: 6204 bytes leftover after parsing attributes in process `syz.0.404'. [ 124.009471][ T6630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.404'. [ 124.009498][ T6630] netlink: 6204 bytes leftover after parsing attributes in process `syz.0.404'. [ 124.038642][ T6625] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.047447][ T6625] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.056643][ T6625] vxlan0: entered promiscuous mode [ 124.067346][ T6626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.209141][ T6634] netlink: 'syz.4.409': attribute type 10 has an invalid length. [ 124.288615][ T6634] batman_adv: batadv0: Adding interface: team0 [ 124.298457][ T6634] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.327320][ T6634] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 124.362548][ T6638] netlink: 'syz.4.409': attribute type 10 has an invalid length. [ 124.382693][ T6638] team0: entered promiscuous mode [ 124.387836][ T6638] team_slave_0: entered promiscuous mode [ 124.456484][ T6638] team_slave_1: entered promiscuous mode [ 124.503034][ T6638] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.534124][ T6638] batman_adv: batadv0: Interface activated: team0 [ 124.581865][ T6638] batman_adv: batadv0: Interface deactivated: team0 [ 124.608584][ T6638] batman_adv: batadv0: Removing interface: team0 [ 124.637718][ T6638] bridge0: port 3(team0) entered blocking state [ 124.648763][ T6638] bridge0: port 3(team0) entered disabled state [ 124.663184][ T6638] team0: entered allmulticast mode [ 124.677062][ T6638] team_slave_0: entered allmulticast mode [ 124.690029][ T6638] team_slave_1: entered allmulticast mode [ 124.733645][ T6638] bridge0: port 3(team0) entered blocking state [ 124.740127][ T6638] bridge0: port 3(team0) entered forwarding state [ 124.853367][ T786] IPVS: starting estimator thread 0... [ 124.865899][ T6664] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 124.963172][ T6665] IPVS: using max 16 ests per chain, 38400 per kthread [ 125.704400][ T6678] netlink: 'syz.0.420': attribute type 37 has an invalid length. [ 125.773483][ T6678] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 126.252027][ T6691] syz.2.425 (6691) used greatest stack depth: 17200 bytes left [ 126.284346][ T6704] dccp_v4_rcv: dropped packet with invalid checksum [ 126.308447][ T6706] dccp_invalid_packet: P.Data Offset(0) too small [ 126.511300][ T6711] block nbd1: not configured, cannot reconfigure [ 126.647318][ T5148] IPVS: starting estimator thread 0... [ 126.753139][ T6722] IPVS: using max 16 ests per chain, 38400 per kthread [ 127.603065][ T6760] __nla_validate_parse: 10 callbacks suppressed [ 127.603087][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.450'. [ 127.695724][ T6760] dummy0: entered promiscuous mode [ 127.833563][ T6770] netlink: 40 bytes leftover after parsing attributes in process `syz.1.453'. [ 127.980892][ T6777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.455'. [ 128.063269][ T6777] batman_adv: batadv1: Adding interface: netdevsim0 [ 128.069993][ T6777] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.119497][ T6777] batman_adv: batadv1: Interface activated: netdevsim0 [ 128.273496][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'. [ 128.766606][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'. [ 128.890142][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.471'. [ 129.551858][ T5145] IPVS: starting estimator thread 0... [ 129.662563][ T6845] IPVS: using max 15 ests per chain, 36000 per kthread [ 129.920197][ T6861] Bluetooth: MGMT ver 1.22 [ 129.937058][ T6855] netlink: 'syz.0.484': attribute type 5 has an invalid length. [ 130.236074][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.492'. [ 130.515898][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'. [ 130.632606][ T6884] hsr0: entered promiscuous mode [ 130.677614][ T6884] hsr_slave_0: left promiscuous mode [ 130.716995][ T6884] hsr_slave_1: left promiscuous mode [ 130.780085][ T6884] hsr0 (unregistering): left promiscuous mode [ 131.027811][ T6912] netlink: 72 bytes leftover after parsing attributes in process `syz.2.507'. [ 131.867238][ T6938] xt_bpf: check failed: parse error [ 132.044097][ T6952] netlink: 72 bytes leftover after parsing attributes in process `syz.2.522'. [ 132.304041][ T6964] netlink: 'syz.0.525': attribute type 29 has an invalid length. [ 132.337002][ T6964] netlink: 'syz.0.525': attribute type 29 has an invalid length. [ 132.389810][ T6958] netlink: 'syz.0.525': attribute type 29 has an invalid length. [ 132.472910][ T6958] netlink: 'syz.0.525': attribute type 29 has an invalid length. [ 132.508596][ T6968] bridge_slave_1: left allmulticast mode [ 132.536802][ T6968] bridge_slave_1: left promiscuous mode [ 132.578699][ T6968] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.633349][ T6968] bridge3: port 1(bridge_slave_1) entered blocking state [ 132.656941][ T6968] bridge3: port 1(bridge_slave_1) entered disabled state [ 132.678641][ T6968] bridge_slave_1: entered allmulticast mode [ 132.703363][ T6968] bridge_slave_1: entered promiscuous mode [ 132.717769][ T6968] bridge3: port 1(bridge_slave_1) entered blocking state [ 132.725053][ T6968] bridge3: port 1(bridge_slave_1) entered forwarding state [ 132.740504][ T6975] __nla_validate_parse: 2 callbacks suppressed [ 132.740526][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.527'. [ 132.923847][ T6988] netlink: 20 bytes leftover after parsing attributes in process `syz.3.531'. [ 132.958009][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'. [ 132.973274][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'. [ 133.037604][ T6995] netlink: 'syz.0.536': attribute type 32 has an invalid length. [ 133.077445][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.536'. [ 133.107647][ T6995] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 133.316571][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.325270][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.426052][ T7018] netlink: 72 bytes leftover after parsing attributes in process `syz.0.539'. [ 133.703003][ T7026] netlink: 7 bytes leftover after parsing attributes in process `syz.3.544'. [ 133.749378][ T7026] bond0: option arp_interval: invalid value (18446744072926568490) [ 133.794308][ T7026] bond0: option arp_interval: allowed values 0 - 2147483647 [ 133.842649][ T7028] netlink: 20 bytes leftover after parsing attributes in process `syz.0.545'. [ 133.889333][ T7033] bridge_slave_1: left allmulticast mode [ 133.916713][ T7033] bridge_slave_1: left promiscuous mode [ 133.924443][ T7033] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.956236][ T7035] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.549'. [ 133.972237][ T7033] bridge2: port 1(bridge_slave_1) entered blocking state [ 133.990610][ T7033] bridge2: port 1(bridge_slave_1) entered disabled state [ 134.003953][ T7035] netlink: zone id is out of range [ 134.016981][ T7033] bridge_slave_1: entered allmulticast mode [ 134.030166][ T7035] netlink: zone id is out of range [ 134.050781][ T7035] netlink: zone id is out of range [ 134.059526][ T7033] bridge_slave_1: entered promiscuous mode [ 134.071249][ T7035] netlink: zone id is out of range [ 134.079363][ T7033] bridge2: port 1(bridge_slave_1) entered blocking state [ 134.087180][ T7033] bridge2: port 1(bridge_slave_1) entered forwarding state [ 134.088135][ T7035] netlink: zone id is out of range [ 134.111047][ T7035] netlink: zone id is out of range [ 134.128404][ T7035] netlink: zone id is out of range [ 134.136907][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 134.150023][ T7035] netlink: zone id is out of range [ 134.166719][ T7035] netlink: zone id is out of range [ 134.180518][ T7035] netlink: zone id is out of range [ 136.679614][ T7136] trusted_key: syz.2.580 sent an empty control message without MSG_MORE. [ 137.094598][ T7150] bridge_slave_1: left allmulticast mode [ 137.100334][ T7150] bridge_slave_1: left promiscuous mode [ 137.132779][ T7150] bridge1: port 1(bridge_slave_1) entered disabled state [ 137.150388][ T7150] bridge4: port 1(bridge_slave_1) entered blocking state [ 137.183270][ T7150] bridge4: port 1(bridge_slave_1) entered disabled state [ 137.193761][ T7150] bridge_slave_1: entered allmulticast mode [ 137.201424][ T7150] bridge_slave_1: entered promiscuous mode [ 137.235512][ T7150] bridge4: port 1(bridge_slave_1) entered blocking state [ 137.242793][ T7150] bridge4: port 1(bridge_slave_1) entered forwarding state [ 137.813538][ T7170] siw: device registration error -23 [ 137.865978][ T7169] netlink: 'syz.1.591': attribute type 1 has an invalid length. [ 137.892683][ T7169] __nla_validate_parse: 9 callbacks suppressed [ 137.892704][ T7169] netlink: 224 bytes leftover after parsing attributes in process `syz.1.591'. [ 138.113806][ T7182] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.121087][ T7182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.286488][ T7189] netlink: 20 bytes leftover after parsing attributes in process `syz.2.600'. [ 138.442286][ T7189] bridge_slave_1: left allmulticast mode [ 138.450566][ T7197] netlink: 40 bytes leftover after parsing attributes in process `syz.0.603'. [ 138.469385][ T7189] bridge_slave_1: left promiscuous mode [ 138.487218][ T7189] bridge4: port 1(bridge_slave_1) entered disabled state [ 138.554350][ T7189] bridge5: port 1(bridge_slave_1) entered blocking state [ 138.583211][ T7189] bridge5: port 1(bridge_slave_1) entered disabled state [ 138.590867][ T7189] bridge_slave_1: entered allmulticast mode [ 138.635374][ T7189] bridge_slave_1: entered promiscuous mode [ 138.697666][ T7189] bridge5: port 1(bridge_slave_1) entered blocking state [ 138.704905][ T7189] bridge5: port 1(bridge_slave_1) entered forwarding state [ 138.734969][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'. [ 138.975578][ T30] audit: type=1107 audit(1720083081.326:3): pid=7216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 138.975578][ T30] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 139.267055][ T7231] netlink: 32 bytes leftover after parsing attributes in process `syz.2.615'. [ 139.351876][ T7230] netlink: 40 bytes leftover after parsing attributes in process `syz.4.616'. [ 139.734100][ T7255] netlink: 28 bytes leftover after parsing attributes in process `syz.1.624'. [ 139.744998][ T7251] netlink: 'syz.4.623': attribute type 6 has an invalid length. [ 139.765428][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.623'. [ 140.279949][ T7274] netlink: 40 bytes leftover after parsing attributes in process `syz.3.630'. [ 140.411782][ T7286] netlink: 3 bytes leftover after parsing attributes in process `syz.2.634'. [ 140.555741][ T7301] x_tables: duplicate entry at hook 3 [ 140.624791][ T7286] netlink: 'syz.2.634': attribute type 1 has an invalid length. [ 140.708166][ T7303] netlink: 'syz.0.637': attribute type 11 has an invalid length. [ 140.981857][ T7314] x_tables: duplicate underflow at hook 4 [ 141.525947][ T7330] netlink: 'syz.2.646': attribute type 63 has an invalid length. [ 141.606381][ T7333] netlink: 'syz.2.646': attribute type 1 has an invalid length. [ 141.734356][ T7341] xt_CONNSECMARK: invalid mode: 0 [ 141.742304][ T7341] netlink: 'syz.1.651': attribute type 4 has an invalid length. [ 142.119699][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802a66ac00: rx timeout, send abort [ 142.130399][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802a66a800: rx timeout, send abort [ 142.139179][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802a66ac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 142.155263][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802a66a800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 142.488563][ T5855] IPVS: starting estimator thread 0... [ 142.592590][ T7365] IPVS: using max 18 ests per chain, 43200 per kthread [ 143.447044][ T7397] __nla_validate_parse: 14 callbacks suppressed [ 143.447067][ T7397] netlink: 72 bytes leftover after parsing attributes in process `syz.2.668'. [ 143.884090][ T7412] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 143.958379][ T7410] netlink: 40 bytes leftover after parsing attributes in process `syz.3.673'. [ 145.208746][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.683'. [ 145.231029][ T7445] netlink: 40 bytes leftover after parsing attributes in process `syz.1.686'. [ 145.484977][ T7470] x_tables: duplicate underflow at hook 4 [ 146.054926][ T7487] netlink: 'syz.0.697': attribute type 2 has an invalid length. [ 146.354820][ T7493] netlink: 40 bytes leftover after parsing attributes in process `syz.0.700'. [ 146.379385][ T7491] netlink: 28 bytes leftover after parsing attributes in process `syz.3.699'. [ 146.601025][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801f76d400: rx timeout, send abort [ 146.610503][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801ead6c00: rx timeout, send abort [ 146.620189][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88801f76d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 146.634749][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88801ead6c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 147.224686][ T7516] netlink: 72 bytes leftover after parsing attributes in process `syz.1.707'. [ 147.397954][ T5104] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.408692][ T5104] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.433844][ T5104] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.460727][ T5104] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.472092][ T5104] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 147.480775][ T5104] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.584045][ T7525] netlink: 40 bytes leftover after parsing attributes in process `syz.3.711'. [ 147.819129][ T7540] netlink: 'syz.2.716': attribute type 2 has an invalid length. [ 148.154905][ T2453] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.313898][ T7558] FAULT_INJECTION: forcing a failure. [ 148.313898][ T7558] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 148.316595][ T2453] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.339787][ T7558] CPU: 0 PID: 7558 Comm: syz.0.723 Not tainted 6.10.0-rc5-syzkaller-01202-g0b8774586be5 #0 [ 148.349913][ T7558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 148.360012][ T7558] Call Trace: [ 148.363419][ T7558] [ 148.366389][ T7558] dump_stack_lvl+0x241/0x360 [ 148.371437][ T7558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.374699][ T7560] netlink: 40 bytes leftover after parsing attributes in process `syz.2.724'. [ 148.377052][ T7558] ? __pfx__printk+0x10/0x10 [ 148.390843][ T7558] should_fail_ex+0x3b0/0x4e0 [ 148.396054][ T7558] prepare_alloc_pages+0x1da/0x5d0 [ 148.401333][ T7558] __alloc_pages_noprof+0x166/0x6c0 [ 148.406695][ T7558] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 148.412507][ T7558] alloc_pages_mpol_noprof+0x3e8/0x680 [ 148.418028][ T7558] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 148.424099][ T7558] vma_alloc_folio_noprof+0xf3/0x1f0 [ 148.429541][ T7558] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 148.435603][ T7558] ? do_raw_spin_unlock+0x13c/0x8b0 [ 148.440858][ T7558] folio_prealloc+0x31/0x170 [ 148.445585][ T7558] do_wp_page+0x11cc/0x52f0 [ 148.450158][ T7558] ? __pfx_do_wp_page+0x10/0x10 [ 148.455077][ T7558] ? __pfx_lock_acquire+0x10/0x10 [ 148.460165][ T7558] ? do_raw_spin_lock+0x14f/0x370 [ 148.465306][ T7558] ? __lock_acquire+0x1346/0x1fd0 [ 148.470385][ T7558] handle_pte_fault+0x117e/0x7090 [ 148.475559][ T7558] ? __pfx_lock_acquire+0x10/0x10 [ 148.480728][ T7558] ? __pfx_handle_pte_fault+0x10/0x10 [ 148.486231][ T7558] ? do_raw_spin_lock+0x14f/0x370 [ 148.491430][ T7558] ? follow_page_pte+0xe96/0x1d90 [ 148.496480][ T7558] ? follow_page_pte+0xf17/0x1d90 [ 148.501524][ T7558] ? __pfx_lock_release+0x10/0x10 [ 148.506573][ T7558] ? do_raw_spin_unlock+0x13c/0x8b0 [ 148.511830][ T7558] handle_mm_fault+0x10df/0x1ba0 [ 148.516839][ T7558] ? __pfx_handle_mm_fault+0x10/0x10 [ 148.522247][ T7558] ? __pfx_find_vma+0x10/0x10 [ 148.526940][ T7558] ? vma_is_secretmem+0xd/0x50 [ 148.531715][ T7558] ? check_vma_flags+0x531/0x5a0 [ 148.536854][ T7558] __get_user_pages+0x6ef/0x1590 [ 148.541915][ T7558] ? __gup_longterm_locked+0x1ec9/0x2a80 [ 148.547576][ T7558] ? __pfx___get_user_pages+0x10/0x10 [ 148.552986][ T7558] ? __lock_acquire+0x1346/0x1fd0 [ 148.558201][ T7558] __gup_longterm_locked+0x1ff6/0x2a80 [ 148.563814][ T7558] ? __pfx___gup_longterm_locked+0x10/0x10 [ 148.569652][ T7558] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 148.575669][ T7558] ? sanity_check_pinned_pages+0x12bb/0x13c0 [ 148.581752][ T7558] gup_fast_fallback+0x2732/0x2b40 [ 148.587303][ T7558] ? __pfx_gup_fast_fallback+0x10/0x10 [ 148.592984][ T7558] ? 0xffffffffa0000958 [ 148.597232][ T7558] ? is_bpf_text_address+0x285/0x2a0 [ 148.602563][ T7558] ? unwind_get_return_address+0x91/0xc0 [ 148.608229][ T7558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.614409][ T7558] ? arch_stack_walk+0x16d/0x1b0 [ 148.619385][ T7558] ? is_valid_gup_args+0x124/0x200 [ 148.624514][ T7558] pin_user_pages_fast+0xcc/0x160 [ 148.629555][ T7558] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 148.635250][ T7558] ? iov_iter_iovec_advance+0x1fc/0x2c0 [ 148.640903][ T7558] iov_iter_extract_pages+0x3db/0x720 [ 148.647092][ T7558] extract_iter_to_sg+0x890/0x22b0 [ 148.652240][ T7558] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 148.657906][ T7558] ? __asan_memset+0x23/0x50 [ 148.662509][ T7558] af_alg_get_rsgl+0x41e/0x850 [ 148.667305][ T7558] aead_recvmsg+0x65a/0x19f0 [ 148.671918][ T7558] ? validate_chain+0x11e/0x5900 [ 148.676877][ T7558] ? validate_chain+0x11e/0x5900 [ 148.681845][ T7558] ? __pfx_aead_recvmsg+0x10/0x10 [ 148.686915][ T7558] ? ima_get_action+0x75/0xb0 [ 148.691703][ T7558] ? __pfx_validate_chain+0x10/0x10 [ 148.696927][ T7558] ? validate_chain+0x11e/0x5900 [ 148.701892][ T7558] ? aa_label_sk_perm+0x4f0/0x6d0 [ 148.706955][ T7558] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 148.712361][ T7558] ? mark_lock+0x9a/0x350 [ 148.716709][ T7558] ? __pfx___might_resched+0x10/0x10 [ 148.722023][ T7558] ? aa_sk_perm+0x967/0xab0 [ 148.726563][ T7558] ? __pfx_aa_sk_perm+0x10/0x10 [ 148.731436][ T7558] ? __pfx___might_resched+0x10/0x10 [ 148.736740][ T7558] ? aa_sock_msg_perm+0x91/0x160 [ 148.741704][ T7558] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 148.747269][ T7558] ? security_socket_recvmsg+0x90/0xb0 [ 148.752762][ T7558] ? __pfx_aead_recvmsg+0x10/0x10 [ 148.757814][ T7558] sock_recvmsg+0x22f/0x280 [ 148.762334][ T7558] ____sys_recvmsg+0x1db/0x470 [ 148.767138][ T7558] ? __pfx_____sys_recvmsg+0x10/0x10 [ 148.772468][ T7558] do_recvmmsg+0x474/0xae0 [ 148.776988][ T7558] ? mark_lock+0x9a/0x350 [ 148.783181][ T7558] ? __pfx_do_recvmmsg+0x10/0x10 [ 148.788170][ T7558] ? __pfx___might_resched+0x10/0x10 [ 148.793566][ T7558] ? __might_fault+0xaa/0x120 [ 148.798344][ T7558] ? __pfx_lock_release+0x10/0x10 [ 148.803382][ T7558] ? vfs_write+0x7c4/0xc90 [ 148.807832][ T7558] ? get_timespec64+0x19c/0x280 [ 148.812715][ T7558] __x64_sys_recvmmsg+0x1b8/0x250 [ 148.817763][ T7558] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 148.823332][ T7558] ? do_syscall_64+0x100/0x230 [ 148.828110][ T7558] ? do_syscall_64+0xb6/0x230 [ 148.832802][ T7558] do_syscall_64+0xf3/0x230 [ 148.837315][ T7558] ? clear_bhb_loop+0x35/0x90 [ 148.842010][ T7558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.847920][ T7558] RIP: 0033:0x7f3bfdb75bd9 [ 148.852348][ T7558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.871968][ T7558] RSP: 002b:00007f3bfe9d4048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 148.880414][ T7558] RAX: ffffffffffffffda RBX: 00007f3bfdd03f60 RCX: 00007f3bfdb75bd9 [ 148.888619][ T7558] RDX: 0000000000000002 RSI: 00000000200008c0 RDI: 0000000000000005 [ 148.896735][ T7558] RBP: 00007f3bfe9d40a0 R08: 0000000020008000 R09: 0000000000000000 [ 148.904720][ T7558] R10: 00000000000000cb R11: 0000000000000246 R12: 0000000000000001 [ 148.912804][ T7558] R13: 000000000000000b R14: 00007f3bfdd03f60 R15: 00007ffe6989a938 [ 148.920801][ T7558] [ 149.066230][ T7565] netlink: 16 bytes leftover after parsing attributes in process `syz.1.726'. [ 149.108254][ T2453] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.323987][ T2453] bond0: (slave netdevsim0): Releasing backup interface [ 149.401524][ T2453] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.495213][ T5855] IPVS: starting estimator thread 0... [ 149.543223][ T5104] Bluetooth: hci5: command tx timeout [ 149.672492][ T7585] IPVS: using max 15 ests per chain, 36000 per kthread [ 149.879170][ T7521] chnl_net:caif_netlink_parms(): no params data found [ 149.891049][ T7590] netlink: 40 bytes leftover after parsing attributes in process `syz.1.734'. [ 149.986703][ T7599] netlink: 36 bytes leftover after parsing attributes in process `syz.3.736'. [ 150.164001][ T7604] netlink: 40 bytes leftover after parsing attributes in process `syz.1.737'. [ 150.183115][ T5100] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 150.183650][ T5104] Bluetooth: hci3: command 0x1407 tx timeout [ 150.254282][ T7607] netlink: 20 bytes leftover after parsing attributes in process `syz.1.737'. [ 150.387055][ T7614] xt_CT: No such helper "snmp" [ 150.690898][ T7521] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.708434][ T7521] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.717185][ T7521] bridge_slave_0: entered allmulticast mode [ 150.725453][ T7521] bridge_slave_0: entered promiscuous mode [ 150.736079][ T2453] team0: left allmulticast mode [ 150.741069][ T2453] team_slave_0: left allmulticast mode [ 150.748921][ T2453] team_slave_1: left allmulticast mode [ 150.757220][ T2453] bridge0: port 3(team0) entered disabled state [ 150.780196][ T2453] bridge_slave_0: left allmulticast mode [ 150.793403][ T2453] bridge_slave_0: left promiscuous mode [ 150.803042][ T2453] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.839699][ T2453] bridge_slave_1: left allmulticast mode [ 150.854247][ T2453] bridge_slave_1: left promiscuous mode [ 150.860179][ T2453] bridge3: port 1(bridge_slave_1) entered disabled state [ 150.895233][ T7639] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 150.964592][ T7636] netlink: 40 bytes leftover after parsing attributes in process `syz.1.746'. [ 151.284755][ T7650] netlink: 36 bytes leftover after parsing attributes in process `syz.1.749'. [ 151.622952][ T5104] Bluetooth: hci5: command tx timeout [ 151.893076][ T2453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.921859][ T2453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.936482][ T2453] bond0 (unregistering): Released all slaves [ 151.949698][ T7521] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.960924][ T7521] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.970027][ T7521] bridge_slave_1: entered allmulticast mode [ 151.980051][ T7521] bridge_slave_1: entered promiscuous mode [ 152.040164][ T7653] netlink: 1180 bytes leftover after parsing attributes in process `syz.2.750'. [ 152.167313][ T2453] tipc: Disabling bearer [ 152.196264][ T2453] tipc: Left network mode [ 152.337269][ T7521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.409150][ T7521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.545028][ T7668] netlink: 40 bytes leftover after parsing attributes in process `syz.2.757'. [ 152.700742][ T7676] netlink: 'syz.0.759': attribute type 6 has an invalid length. [ 152.955113][ T7681] netlink: 24 bytes leftover after parsing attributes in process `syz.1.761'. [ 153.040518][ T7521] team0: Port device team_slave_0 added [ 153.082284][ T7686] bond0: entered promiscuous mode [ 153.112926][ T7686] bond_slave_0: entered promiscuous mode [ 153.179019][ T7686] bond0: left promiscuous mode [ 153.196566][ T7686] bond_slave_0: left promiscuous mode [ 153.517601][ T7521] team0: Port device team_slave_1 added [ 153.600102][ T7713] bridge_slave_1: left allmulticast mode [ 153.613439][ T7713] bridge_slave_1: left promiscuous mode [ 153.619516][ T7713] bridge2: port 1(bridge_slave_1) entered disabled state [ 153.654296][ T7713] bridge3: port 1(bridge_slave_1) entered blocking state [ 153.661496][ T7713] bridge3: port 1(bridge_slave_1) entered disabled state [ 153.673440][ T7713] bridge_slave_1: entered allmulticast mode [ 153.680692][ T7713] bridge_slave_1: entered promiscuous mode [ 153.699570][ T7713] bridge3: port 1(bridge_slave_1) entered blocking state [ 153.706957][ T7713] bridge3: port 1(bridge_slave_1) entered forwarding state [ 153.716381][ T5104] Bluetooth: hci5: command tx timeout [ 153.801517][ T7521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.841798][ T7521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.939626][ T7521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.965110][ T7521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.972216][ T7521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.003388][ T7521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.048068][ T2453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.058106][ T2453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.084574][ T2453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.096903][ T2453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.157623][ T2453] veth1_macvtap: left promiscuous mode [ 154.174747][ T2453] veth0_macvtap: left promiscuous mode [ 154.188331][ T2453] veth1_vlan: left promiscuous mode [ 154.208621][ T2453] veth0_vlan: left promiscuous mode [ 155.061202][ T2453] team_slave_1 (unregistering): left promiscuous mode [ 155.077432][ T2453] team0 (unregistering): Port device team_slave_1 removed [ 155.119677][ T2453] team_slave_0 (unregistering): left promiscuous mode [ 155.130207][ T2453] team0 (unregistering): Port device team_slave_0 removed [ 155.782629][ T5104] Bluetooth: hci5: command tx timeout [ 155.874921][ T7521] hsr_slave_0: entered promiscuous mode [ 155.900700][ T7521] hsr_slave_1: entered promiscuous mode [ 156.133700][ T7745] __nla_validate_parse: 2 callbacks suppressed [ 156.133723][ T7745] netlink: 40 bytes leftover after parsing attributes in process `syz.2.778'. [ 156.275488][ T7745] netlink: 116 bytes leftover after parsing attributes in process `syz.2.778'. [ 156.312680][ T7745] bridge_slave_0: left allmulticast mode [ 156.340114][ T7745] bridge_slave_0: left promiscuous mode [ 156.352818][ T7745] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.403818][ T7759] netlink: 40 bytes leftover after parsing attributes in process `syz.0.782'. [ 156.724993][ T7775] rdma_rxe: rxe_newlink: failed to add lo [ 156.773356][ T7774] lo speed is unknown, defaulting to 1000 [ 156.781574][ T7774] lo speed is unknown, defaulting to 1000 [ 156.812830][ T2453] IPVS: stop unused estimator thread 0... [ 156.985682][ T7773] net_ratelimit: 346 callbacks suppressed [ 156.985705][ T7773] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 157.072059][ T7775] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 157.135924][ T7774] lo speed is unknown, defaulting to 1000 [ 157.555321][ T7800] netlink: 40 bytes leftover after parsing attributes in process `syz.3.793'. [ 157.576193][ T7806] sctp: [Deprecated]: syz.2.794 (pid 7806) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.576193][ T7806] Use struct sctp_sack_info instead [ 157.831449][ T7815] netlink: 108 bytes leftover after parsing attributes in process `syz.0.796'. [ 157.841420][ T7774] infiniband syz0: set down [ 157.855151][ T7774] infiniband syz0: added lo [ 157.866400][ T7774] syz0: rxe_create_cq: returned err = -12 [ 157.876227][ T5104] Bluetooth: hci5: command tx timeout [ 157.892119][ T7774] infiniband syz0: Couldn't create ib_mad CQ [ 157.904822][ T7774] infiniband syz0: Couldn't open port 1 [ 157.913059][ T5855] lo speed is unknown, defaulting to 1000 [ 158.057500][ T7774] RDS/IB: syz0: added [ 158.078939][ T7774] smc: adding ib device syz0 with port count 1 [ 158.101980][ T7774] smc: ib device syz0 port 1 has pnetid [ 158.167694][ T7823] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 158.180716][ T5148] lo speed is unknown, defaulting to 1000 [ 158.204588][ T7774] lo speed is unknown, defaulting to 1000 [ 158.470461][ T7521] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 158.513434][ T7521] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 158.563687][ T7521] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 158.588002][ T7521] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 158.873859][ T7774] lo speed is unknown, defaulting to 1000 [ 159.164571][ T7521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.260472][ T7846] netlink: 40 bytes leftover after parsing attributes in process `syz.3.806'. [ 159.267130][ T7521] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.322183][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.329451][ T5855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.386245][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.393526][ T5852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.508609][ T7774] lo speed is unknown, defaulting to 1000 [ 159.551652][ T7521] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 159.593732][ T7521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.923521][ T7870] netlink: 'syz.3.812': attribute type 1 has an invalid length. [ 160.129059][ T7874] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 160.172498][ T7874] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 160.226530][ T7874] bond1: (slave vcan1): making interface the new active one [ 160.268904][ T7874] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 160.299025][ T7774] lo speed is unknown, defaulting to 1000 [ 160.368936][ T7885] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 160.599456][ T7895] netlink: 40 bytes leftover after parsing attributes in process `syz.2.818'. [ 160.628282][ T7521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.764609][ T7901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.819'. [ 160.955751][ T7774] lo speed is unknown, defaulting to 1000 [ 161.568303][ T7521] veth0_vlan: entered promiscuous mode [ 161.651853][ T7929] tap0: tun_chr_ioctl cmd 1074025678 [ 161.668685][ T7929] tap0: group set to 0 [ 161.682821][ T7521] veth1_vlan: entered promiscuous mode [ 161.720639][ T7929] tap0: tun_chr_ioctl cmd 1074025673 [ 161.741300][ T7934] tap0: tun_chr_ioctl cmd 1074025678 [ 161.762150][ T7934] tap0: group set to 0 [ 161.871860][ T7939] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.828'. [ 161.885258][ T7941] netlink: 40 bytes leftover after parsing attributes in process `syz.2.829'. [ 162.000749][ T7521] veth0_macvtap: entered promiscuous mode [ 162.068981][ T7521] veth1_macvtap: entered promiscuous mode [ 162.090561][ T7949] netlink: 'syz.0.831': attribute type 2 has an invalid length. [ 162.121040][ T7949] netlink: 244 bytes leftover after parsing attributes in process `syz.0.831'. [ 162.143259][ T7953] netlink: 72 bytes leftover after parsing attributes in process `syz.2.830'. [ 162.155826][ T7952] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 162.359458][ T7521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.410680][ T7521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.427933][ T7521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.449718][ T7521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.479732][ T7521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.508028][ T7521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.529732][ T7521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.556402][ T7521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.582013][ T7521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.654006][ T7521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.711495][ T7521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.751357][ T7521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.778387][ T7521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.801961][ T7521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.825004][ T7521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.838777][ T7521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.849891][ T7521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.892067][ T7521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.929788][ T7521] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.979333][ T7521] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.002136][ T7521] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.031419][ T7521] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.081889][ T7985] netlink: 40 bytes leftover after parsing attributes in process `syz.2.839'. [ 163.087148][ T7982] netlink: 20 bytes leftover after parsing attributes in process `syz.1.840'. [ 163.205618][ T7982] bridge4: port 1(bridge_slave_1) entered blocking state [ 163.233810][ T7982] bridge4: port 1(bridge_slave_1) entered disabled state [ 163.289422][ T7982] bridge_slave_1: entered allmulticast mode [ 163.307827][ T7982] bridge_slave_1: entered promiscuous mode [ 163.338763][ T7982] bridge4: port 1(bridge_slave_1) entered blocking state [ 163.346070][ T7982] bridge4: port 1(bridge_slave_1) entered forwarding state [ 163.417457][ T7988] netlink: 28 bytes leftover after parsing attributes in process `syz.1.840'. [ 163.626086][ T8005] sctp: [Deprecated]: syz.3.846 (pid 8005) Use of int in maxseg socket option. [ 163.626086][ T8005] Use struct sctp_assoc_value instead [ 163.726672][ T2911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.763771][ T2911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.894389][ T6455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.922152][ T6455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.107152][ T8024] netlink: 20 bytes leftover after parsing attributes in process `syz.1.852'. [ 164.113861][ T8026] netlink: 40 bytes leftover after parsing attributes in process `syz.0.853'. [ 164.178786][ T8029] bridge_slave_1: left allmulticast mode [ 164.214870][ T8029] bridge_slave_1: left promiscuous mode [ 164.251631][ T8029] bridge4: port 1(bridge_slave_1) entered disabled state [ 164.301512][ T8029] bridge5: port 1(bridge_slave_1) entered blocking state [ 164.321590][ T8029] bridge5: port 1(bridge_slave_1) entered disabled state [ 164.349512][ T8029] bridge_slave_1: entered allmulticast mode [ 164.365855][ T8029] bridge_slave_1: entered promiscuous mode [ 164.376441][ T8029] bridge5: port 1(bridge_slave_1) entered blocking state [ 164.383735][ T8029] bridge5: port 1(bridge_slave_1) entered forwarding state [ 164.399488][ T8024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.852'. [ 164.451736][ T8041] bridge_slave_1: left allmulticast mode [ 164.473840][ T8041] bridge_slave_1: left promiscuous mode [ 164.479889][ T8041] bridge3: port 1(bridge_slave_1) entered disabled state [ 164.517424][ T8041] bridge4: port 1(bridge_slave_1) entered blocking state [ 164.544556][ T8041] bridge4: port 1(bridge_slave_1) entered disabled state [ 164.554441][ T8041] bridge_slave_1: entered allmulticast mode [ 164.568978][ T8041] bridge_slave_1: entered promiscuous mode [ 164.598912][ T8041] bridge4: port 1(bridge_slave_1) entered blocking state [ 164.606202][ T8041] bridge4: port 1(bridge_slave_1) entered forwarding state [ 166.158169][ T8124] bridge0: entered promiscuous mode [ 166.228743][ T8124] bridge0: left promiscuous mode [ 166.281705][ T8130] can: request_module (can-proto-0) failed. [ 166.309479][ T8128] vlan2: entered promiscuous mode [ 167.249768][ T8179] __nla_validate_parse: 10 callbacks suppressed [ 167.249791][ T8179] netlink: 40 bytes leftover after parsing attributes in process `syz.3.906'. [ 167.611728][ T8197] netlink: 'syz.2.913': attribute type 72 has an invalid length. [ 167.651989][ T8197] netlink: 36 bytes leftover after parsing attributes in process `syz.2.913'. [ 167.995310][ T8213] netlink: 40 bytes leftover after parsing attributes in process `syz.3.921'. [ 168.377489][ T8242] netlink: 'syz.3.930': attribute type 72 has an invalid length. [ 168.385976][ T8242] netlink: 36 bytes leftover after parsing attributes in process `syz.3.930'. [ 168.706704][ T8254] netlink: 40 bytes leftover after parsing attributes in process `syz.0.936'. [ 168.715338][ T8262] netlink: 72 bytes leftover after parsing attributes in process `syz.1.935'. [ 168.904146][ T5104] Bluetooth: hci0: command tx timeout [ 168.930275][ T8268] netlink: 40 bytes leftover after parsing attributes in process `syz.2.939'. [ 169.035172][ T8272] netlink: 'syz.2.941': attribute type 10 has an invalid length. [ 169.131554][ T8272] team0: Port device netdevsim0 added [ 169.156410][ T8277] netlink: 36 bytes leftover after parsing attributes in process `syz.3.943'. [ 169.326872][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.947'. [ 169.498426][ T8291] netlink: 16 bytes leftover after parsing attributes in process `syz.3.949'. [ 169.571667][ T8287] netlink: 'syz.3.949': attribute type 10 has an invalid length. [ 169.636953][ T8287] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.644523][ T8287] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.721241][ T8287] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.728600][ T8287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.736236][ T8287] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.743604][ T8287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.818585][ T8287] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 170.385212][ T8332] netlink: 'syz.3.967': attribute type 11 has an invalid length. [ 170.685415][ T8345] netlink: 'syz.1.971': attribute type 2 has an invalid length. [ 171.130103][ T8369] netlink: zone id is out of range [ 171.146052][ T8369] netlink: zone id is out of range [ 171.156931][ T8369] netlink: zone id is out of range [ 171.169745][ T8369] netlink: zone id is out of range [ 171.206034][ T8369] netlink: zone id is out of range [ 171.268996][ T8369] netlink: set zone limit has 4 unknown bytes [ 171.444219][ T8375] netlink: 'syz.0.985': attribute type 10 has an invalid length. [ 171.449003][ T8379] ip6t_REJECT: ECHOREPLY is not supported [ 171.476578][ T8375] team0: Device netdevsim0 is up. Set it down before adding it as a team port [ 172.247252][ T8398] netlink: 'syz.3.998': attribute type 10 has an invalid length. [ 172.274329][ T8398] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.281895][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.355022][ T8409] __nla_validate_parse: 11 callbacks suppressed [ 172.355046][ T8409] netlink: 20 bytes leftover after parsing attributes in process `syz.1.999'. [ 172.407951][ T8409] bridge_slave_1: left allmulticast mode [ 172.428294][ T8409] bridge_slave_1: left promiscuous mode [ 172.438876][ T8409] bridge5: port 1(bridge_slave_1) entered disabled state [ 172.450413][ T8412] sctp: [Deprecated]: syz.0.1000 (pid 8412) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.450413][ T8412] Use struct sctp_sack_info instead [ 172.481867][ T8409] bridge7: port 1(bridge_slave_1) entered blocking state [ 172.498158][ T8409] bridge7: port 1(bridge_slave_1) entered disabled state [ 172.507523][ T8409] bridge_slave_1: entered allmulticast mode [ 172.517064][ T8409] bridge_slave_1: entered promiscuous mode [ 172.526906][ T8409] bridge7: port 1(bridge_slave_1) entered blocking state [ 172.534372][ T8409] bridge7: port 1(bridge_slave_1) entered forwarding state [ 172.553840][ T8414] bridge7: port 2(veth1_to_bond) entered blocking state [ 172.567292][ T8414] bridge7: port 2(veth1_to_bond) entered disabled state [ 172.579627][ T8414] veth1_to_bond: entered allmulticast mode [ 172.590478][ T8414] veth1_to_bond: entered promiscuous mode [ 172.601388][ T8414] bridge7: port 2(veth1_to_bond) entered blocking state [ 172.608642][ T8414] bridge7: port 2(veth1_to_bond) entered forwarding state [ 172.644313][ T8417] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1000'. [ 173.320199][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1011'. [ 173.619911][ T8455] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1015'. [ 173.707279][ T8462] bridge_slave_1: left allmulticast mode [ 173.748183][ T8462] bridge_slave_1: left promiscuous mode [ 173.786907][ T8462] bridge7: port 1(bridge_slave_1) entered disabled state [ 173.834922][ T8462] bridge8: port 1(bridge_slave_1) entered blocking state [ 173.875754][ T8462] bridge8: port 1(bridge_slave_1) entered disabled state [ 173.898243][ T8462] bridge_slave_1: entered allmulticast mode [ 173.910460][ T8462] bridge_slave_1: entered promiscuous mode [ 173.918925][ T8462] bridge8: port 1(bridge_slave_1) entered blocking state [ 173.926251][ T8462] bridge8: port 1(bridge_slave_1) entered forwarding state [ 173.938176][ T8455] veth1_to_bond: left allmulticast mode [ 173.944348][ T8455] veth1_to_bond: left promiscuous mode [ 173.954404][ T8455] bridge7: port 2(veth1_to_bond) entered disabled state [ 173.966414][ T8474] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1021'. [ 174.007964][ T8455] bridge8: port 2(veth1_to_bond) entered blocking state [ 174.018587][ T8455] bridge8: port 2(veth1_to_bond) entered disabled state [ 174.028713][ T8455] veth1_to_bond: entered allmulticast mode [ 174.037403][ T8455] veth1_to_bond: entered promiscuous mode [ 174.045288][ T8455] bridge8: port 2(veth1_to_bond) entered blocking state [ 174.052515][ T8455] bridge8: port 2(veth1_to_bond) entered forwarding state [ 174.593156][ T8] IPVS: starting estimator thread 0... [ 174.712584][ T8496] IPVS: using max 17 ests per chain, 40800 per kthread [ 174.897460][ T8508] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1036'. [ 174.933232][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'. [ 174.979745][ T8512] bridge_slave_1: left allmulticast mode [ 174.989527][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'. [ 175.019674][ T8512] bridge_slave_1: left promiscuous mode [ 175.038967][ T8512] bridge5: port 1(bridge_slave_1) entered disabled state [ 175.046666][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'. [ 175.094564][ T8512] bridge0: port 1(bridge_slave_1) entered blocking state [ 175.125879][ T8512] bridge0: port 1(bridge_slave_1) entered disabled state [ 175.140919][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'. [ 175.144114][ T8512] bridge_slave_1: entered allmulticast mode [ 175.196445][ T8512] bridge_slave_1: entered promiscuous mode [ 175.246893][ T8512] bridge0: port 1(bridge_slave_1) entered blocking state [ 175.254543][ T8512] bridge0: port 1(bridge_slave_1) entered forwarding state [ 175.291157][ T8508] bridge0: port 2(veth1_to_bond) entered blocking state [ 175.303222][ T8508] bridge0: port 2(veth1_to_bond) entered disabled state [ 175.341172][ T8508] veth1_to_bond: entered allmulticast mode [ 175.371410][ T8527] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 175.385657][ T8508] veth1_to_bond: entered promiscuous mode [ 175.403803][ T8508] bridge0: port 2(veth1_to_bond) entered blocking state [ 175.410999][ T8508] bridge0: port 2(veth1_to_bond) entered forwarding state [ 175.474743][ T8527] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 175.488009][ T8527] batman_adv: batadv1: Interface deactivated:  [ 175.721366][ T8539] netlink: 'syz.0.1046': attribute type 8 has an invalid length. [ 175.885064][ T8546] netlink: 'syz.1.1045': attribute type 10 has an invalid length. [ 175.941950][ T8546] geneve0: entered promiscuous mode [ 176.097432][ T8551] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 176.475376][ T8565] bridge_slave_1: left allmulticast mode [ 176.481197][ T8565] bridge_slave_1: left promiscuous mode [ 176.517926][ T8565] bridge8: port 1(bridge_slave_1) entered disabled state [ 176.592262][ T8565] bridge9: port 1(bridge_slave_1) entered blocking state [ 176.608199][ T8565] bridge9: port 1(bridge_slave_1) entered disabled state [ 176.629112][ T8565] bridge_slave_1: entered allmulticast mode [ 176.650403][ T8565] bridge_slave_1: entered promiscuous mode [ 176.665257][ T8565] bridge9: port 1(bridge_slave_1) entered blocking state [ 176.672681][ T8565] bridge9: port 1(bridge_slave_1) entered forwarding state [ 176.689917][ T8569] veth1_to_bond: left allmulticast mode [ 176.718071][ T8569] veth1_to_bond: left promiscuous mode [ 176.750896][ T8569] bridge8: port 2(veth1_to_bond) entered disabled state [ 176.778254][ T8569] bridge9: port 2(veth1_to_bond) entered blocking state [ 176.794670][ T8569] bridge9: port 2(veth1_to_bond) entered disabled state [ 176.802089][ T8569] veth1_to_bond: entered allmulticast mode [ 176.819479][ T8569] veth1_to_bond: entered promiscuous mode [ 176.847229][ T8569] bridge9: port 2(veth1_to_bond) entered blocking state [ 176.854480][ T8569] bridge9: port 2(veth1_to_bond) entered forwarding state [ 177.687953][ T8606] __nla_validate_parse: 66 callbacks suppressed [ 177.687977][ T8606] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1065'. [ 177.921242][ T8617] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1070'. [ 177.950739][ T8617] bridge_slave_1: left allmulticast mode [ 177.957840][ T8617] bridge_slave_1: left promiscuous mode [ 177.972203][ T8617] bridge9: port 1(bridge_slave_1) entered disabled state [ 177.999505][ T8617] bridge10: port 1(bridge_slave_1) entered blocking state [ 178.020857][ T8617] bridge10: port 1(bridge_slave_1) entered disabled state [ 178.048869][ T8617] bridge_slave_1: entered allmulticast mode [ 178.073847][ T8617] bridge_slave_1: entered promiscuous mode [ 178.100836][ T8617] bridge10: port 1(bridge_slave_1) entered blocking state [ 178.108330][ T8617] bridge10: port 1(bridge_slave_1) entered forwarding state [ 178.136830][ T8621] veth1_to_bond: left allmulticast mode [ 178.153937][ T8621] veth1_to_bond: left promiscuous mode [ 178.199889][ T8621] bridge9: port 2(veth1_to_bond) entered disabled state [ 178.247627][ T8621] bridge10: port 2(veth1_to_bond) entered blocking state [ 178.259255][ T8621] bridge10: port 2(veth1_to_bond) entered disabled state [ 178.268040][ T8621] veth1_to_bond: entered allmulticast mode [ 178.280050][ T8621] veth1_to_bond: entered promiscuous mode [ 178.291442][ T8621] bridge10: port 2(veth1_to_bond) entered blocking state [ 178.298757][ T8621] bridge10: port 2(veth1_to_bond) entered forwarding state [ 178.320464][ T8626] netlink: 'syz.2.1073': attribute type 3 has an invalid length. [ 179.004571][ T8651] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1080'. [ 179.089933][ T8654] workqueue: name exceeds WQ_NAME_LEN. Truncating to: à»R{²49Þ.0ðS&–àpØÐÌȼ%•‹Ë(o [ 179.242804][ T8657] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 179.546465][ T8670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1091'. [ 180.081663][ T8692] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1098'. [ 180.110188][ T8692] netlink: 'syz.1.1098': attribute type 10 has an invalid length. [ 180.132523][ T8692] macvlan0: entered promiscuous mode [ 180.144107][ T8692] macvlan0: entered allmulticast mode [ 180.171580][ T8692] veth1_vlan: entered allmulticast mode [ 180.199775][ T8692] veth1_vlan: left allmulticast mode [ 180.248675][ T8694] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1097'. [ 180.519221][ T8704] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1100'. [ 180.572659][ T8704] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1100'. [ 180.599034][ T8704] veth1_to_bond: left allmulticast mode [ 180.611577][ T8704] veth1_to_bond: left promiscuous mode [ 180.624515][ T8704] bridge0: port 2(veth1_to_bond) entered disabled state [ 180.809860][ T8704] bridge_slave_1: left allmulticast mode [ 180.821826][ T8704] bridge_slave_1: left promiscuous mode [ 180.852722][ T8704] bridge0: port 1(bridge_slave_1) entered disabled state [ 181.776424][ T8748] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1111'. [ 182.038257][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1115'. [ 182.264066][ T8773] bridge0: port 3(bond0) entered blocking state [ 182.281441][ T8773] bridge0: port 3(bond0) entered disabled state [ 182.299643][ T8773] bond0: entered allmulticast mode [ 182.309320][ T8773] bond_slave_0: entered allmulticast mode [ 182.364562][ T8773] bond_slave_1: entered allmulticast mode [ 182.404345][ T8773] bond0: entered promiscuous mode [ 182.413744][ T8773] bond_slave_0: entered promiscuous mode [ 182.436908][ T8773] bond_slave_1: entered promiscuous mode [ 182.465000][ T8773] bridge0: port 3(bond0) entered blocking state [ 182.471834][ T8773] bridge0: port 3(bond0) entered forwarding state [ 182.517072][ T8769] bridge_slave_1: left allmulticast mode [ 182.530114][ T8769] bridge_slave_1: left promiscuous mode [ 182.553173][ T8769] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.614839][ T8769] bridge_slave_0: left allmulticast mode [ 182.620649][ T8769] bridge_slave_0: left promiscuous mode [ 182.670326][ T8769] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.729621][ T8769] bond0: (slave bridge0): Releasing backup interface [ 182.745578][ T8787] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 183.319911][ T8805] __nla_validate_parse: 2 callbacks suppressed [ 183.319935][ T8805] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1126'. [ 183.684773][ T8818] netlink: 'syz.2.1135': attribute type 3 has an invalid length. [ 183.702103][ T8818] netlink: 'syz.2.1135': attribute type 3 has an invalid length. [ 183.705357][ T8822] bridge0: port 2(bond0) entered blocking state [ 183.736025][ T8822] bridge0: port 2(bond0) entered disabled state [ 183.760726][ T8822] bond0: entered allmulticast mode [ 183.774062][ T8822] bond_slave_0: entered allmulticast mode [ 183.796472][ T8822] bond_slave_1: entered allmulticast mode [ 183.821156][ T8822] bond0: entered promiscuous mode [ 183.832163][ T8822] bond_slave_0: entered promiscuous mode [ 183.845679][ T8822] bond_slave_1: entered promiscuous mode [ 183.870498][ T8822] bridge0: port 2(bond0) entered blocking state [ 183.877330][ T8822] bridge0: port 2(bond0) entered forwarding state [ 184.331067][ T8843] netlink: 'syz.2.1141': attribute type 1 has an invalid length. [ 184.897451][ T8860] FAULT_INJECTION: forcing a failure. [ 184.897451][ T8860] name failslab, interval 1, probability 0, space 0, times 1 [ 184.951486][ T8860] CPU: 1 PID: 8860 Comm: syz.1.1149 Not tainted 6.10.0-rc5-syzkaller-01202-g0b8774586be5 #0 [ 184.961714][ T8860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 184.971898][ T8860] Call Trace: [ 184.975313][ T8860] [ 184.978360][ T8860] dump_stack_lvl+0x241/0x360 [ 184.983355][ T8860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.988607][ T8860] ? __pfx__printk+0x10/0x10 [ 184.993259][ T8860] ? __pfx___might_resched+0x10/0x10 [ 184.998614][ T8860] should_fail_ex+0x3b0/0x4e0 [ 185.003423][ T8860] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 185.009717][ T8860] should_failslab+0x9/0x20 [ 185.014265][ T8860] __kmalloc_noprof+0xd8/0x400 [ 185.019056][ T8860] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 185.025162][ T8860] genl_rcv_msg+0x802/0xec0 [ 185.029784][ T8860] ? mark_lock+0x9a/0x350 [ 185.034141][ T8860] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.039209][ T8860] ? __pfx_lock_acquire+0x10/0x10 [ 185.044339][ T8860] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 185.049764][ T8860] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 185.055687][ T8860] ? __pfx_nl80211_post_doit+0x10/0x10 [ 185.061173][ T8860] ? __pfx___might_resched+0x10/0x10 [ 185.066487][ T8860] netlink_rcv_skb+0x1e3/0x430 [ 185.071375][ T8860] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.076424][ T8860] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.081796][ T8860] ? __netlink_deliver_tap+0x77e/0x7c0 [ 185.087664][ T8860] genl_rcv+0x28/0x40 [ 185.091701][ T8860] netlink_unicast+0x7f0/0x990 [ 185.096551][ T8860] ? __pfx_netlink_unicast+0x10/0x10 [ 185.102049][ T8860] ? __virt_addr_valid+0x183/0x520 [ 185.107287][ T8860] ? __check_object_size+0x49c/0x900 [ 185.112599][ T8860] ? bpf_lsm_netlink_send+0x9/0x10 [ 185.117746][ T8860] netlink_sendmsg+0x8e4/0xcb0 [ 185.122550][ T8860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.127860][ T8860] ? __import_iovec+0x536/0x820 [ 185.132731][ T8860] ? aa_sock_msg_perm+0x91/0x160 [ 185.137882][ T8860] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 185.143192][ T8860] ? security_socket_sendmsg+0x87/0xb0 [ 185.148696][ T8860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.154118][ T8860] __sock_sendmsg+0x221/0x270 [ 185.158957][ T8860] ____sys_sendmsg+0x525/0x7d0 [ 185.163761][ T8860] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.169111][ T8860] __sys_sendmsg+0x2b0/0x3a0 [ 185.173739][ T8860] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.178891][ T8860] ? vfs_write+0x7c4/0xc90 [ 185.183557][ T8860] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 185.189932][ T8860] ? do_syscall_64+0x100/0x230 [ 185.194755][ T8860] ? do_syscall_64+0xb6/0x230 [ 185.199553][ T8860] do_syscall_64+0xf3/0x230 [ 185.204097][ T8860] ? clear_bhb_loop+0x35/0x90 [ 185.208803][ T8860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.214723][ T8860] RIP: 0033:0x7f7e8bf75bd9 [ 185.219177][ T8860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.239008][ T8860] RSP: 002b:00007f7e8ce33048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.247816][ T8860] RAX: ffffffffffffffda RBX: 00007f7e8c103f60 RCX: 00007f7e8bf75bd9 [ 185.255817][ T8860] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 185.264375][ T8860] RBP: 00007f7e8ce330a0 R08: 0000000000000000 R09: 0000000000000000 [ 185.272477][ T8860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.280573][ T8860] R13: 000000000000000b R14: 00007f7e8c103f60 R15: 00007fff5f879aa8 [ 185.288585][ T8860] [ 185.367153][ T8862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1151'. [ 185.445706][ T8868] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1147'. [ 185.502987][ T8868] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1147'. [ 185.525003][ T8868] bond0: left allmulticast mode [ 185.530132][ T8868] bond_slave_0: left allmulticast mode [ 185.561972][ T8868] bond_slave_1: left allmulticast mode [ 185.583164][ T8868] bond0: left promiscuous mode [ 185.592894][ T8868] bond_slave_0: left promiscuous mode [ 185.613279][ T8868] bond_slave_1: left promiscuous mode [ 185.626394][ T8868] bridge0: port 3(bond0) entered disabled state [ 185.649295][ T8868] bridge_slave_1: left allmulticast mode [ 185.658320][ T8868] bridge_slave_1: left promiscuous mode [ 185.671174][ T8868] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.691972][ T8868] bridge_slave_0: left allmulticast mode [ 185.713567][ T8868] bridge_slave_0: left promiscuous mode [ 185.721945][ T8868] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.824374][ T8884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1155'. [ 185.844518][ T8885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1155'. [ 186.010346][ T8879] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1153'. [ 186.848812][ T8914] block nbd1: not configured, cannot reconfigure [ 187.223697][ T8937] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1174'. [ 187.335291][ T8942] openvswitch: netlink: Missing key (keys=40, expected=100) [ 187.371831][ T8942] netlink: 'syz.2.1176': attribute type 4 has an invalid length. [ 187.401239][ T8942] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1176'. [ 188.311153][ T8982] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1188'. [ 189.147057][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1196'. [ 189.202120][ T9020] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 189.223694][ T9020] batman_adv: batadv1: Removing interface: netdevsim0 [ 189.263824][ T9020] batman_adv: batadv2: Adding interface: netdevsim0 [ 189.286374][ T9020] batman_adv: batadv2: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.396058][ T9020] batman_adv: batadv2: Interface activated: netdevsim0 [ 189.706947][ T9038] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1205'. [ 190.426470][ T9073] openvswitch: netlink: Unknown nsh attribute 0 [ 190.843466][ T9093] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1223'. [ 190.957834][ T9096] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1228'. [ 191.010230][ T9096] macvlan2: entered allmulticast mode [ 191.031198][ T9096] veth0_to_batadv: entered promiscuous mode [ 191.063905][ T9096] veth0_to_batadv: entered allmulticast mode [ 191.106531][ T9096] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 191.896105][ T9135] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1240'. [ 192.100649][ T9144] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1243'. [ 192.524124][ T9160] netlink: 'syz.2.1250': attribute type 2 has an invalid length. [ 192.706266][ T9170] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.937253][ T9178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 193.193957][ T9191] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1257'. [ 193.759092][ T9219] netlink: 'syz.4.1268': attribute type 2 has an invalid length. [ 194.193689][ T9233] netlink: 'syz.3.1272': attribute type 11 has an invalid length. [ 194.367277][ T9237] xt_bpf: check failed: parse error [ 194.585543][ T9250] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1275'. [ 194.748887][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.089147][ T9272] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1284'. [ 195.284919][ T9276] syzkaller1: entered promiscuous mode [ 195.302227][ T9276] syzkaller1: entered allmulticast mode [ 195.617558][ T9293] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1292'. [ 195.657544][ T9291] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1290'. [ 195.841310][ T9301] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1295'. [ 195.865367][ T9303] netlink: 328 bytes leftover after parsing attributes in process `syz.0.1296'. [ 195.909268][ T9306] bridge0: port 1(bridge_slave_1) entered blocking state [ 195.954160][ T9306] bridge0: port 1(bridge_slave_1) entered disabled state [ 195.996569][ T9306] bridge_slave_1: entered allmulticast mode [ 196.053590][ T9306] bridge_slave_1: entered promiscuous mode [ 196.085176][ T9306] bridge0: port 1(bridge_slave_1) entered blocking state [ 196.092480][ T9306] bridge0: port 1(bridge_slave_1) entered forwarding state [ 196.139356][ T9312] FAULT_INJECTION: forcing a failure. [ 196.139356][ T9312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.140517][ T9312] [ 196.140526][ T9312] ====================================================== [ 196.140534][ T9312] WARNING: possible circular locking dependency detected [ 196.140542][ T9312] 6.10.0-rc5-syzkaller-01202-g0b8774586be5 #0 Not tainted [ 196.140554][ T9312] ------------------------------------------------------ [ 196.140561][ T9312] syz.0.1299/9312 is trying to acquire lock: [ 196.140572][ T9312] ffffffff8e328100 (console_owner){..-.}-{0:0}, at: console_flush_all+0x152/0xfd0 [ 196.140633][ T9312] [ 196.140633][ T9312] but task is already holding lock: [ 196.140640][ T9312] ffff8880b953e858 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 196.140696][ T9312] [ 196.140696][ T9312] which lock already depends on the new lock. [ 196.140696][ T9312] [ 196.140703][ T9312] [ 196.140703][ T9312] the existing dependency chain (in reverse order) is: [ 196.140710][ T9312] [ 196.140710][ T9312] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 196.140736][ T9312] lock_acquire+0x1ed/0x550 [ 196.140758][ T9312] _raw_spin_lock_nested+0x31/0x40 [ 196.140784][ T9312] raw_spin_rq_lock_nested+0x2a/0x140 [ 196.140815][ T9312] task_fork_fair+0x61/0x1e0 [ 196.140843][ T9312] sched_cgroup_fork+0x37c/0x410 [ 196.140868][ T9312] copy_process+0x2217/0x3dc0 [ 196.140898][ T9312] kernel_clone+0x226/0x8f0 [ 196.140920][ T9312] user_mode_thread+0x132/0x1a0 [ 196.140942][ T9312] rest_init+0x23/0x300 [ 196.140965][ T9312] start_kernel+0x47a/0x500 [ 196.140992][ T9312] x86_64_start_reservations+0x2a/0x30 [ 196.141012][ T9312] x86_64_start_kernel+0x99/0xa0 [ 196.141031][ T9312] common_startup_64+0x13e/0x147 [ 196.141051][ T9312] [ 196.141051][ T9312] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 196.141082][ T9312] lock_acquire+0x1ed/0x550 [ 196.141102][ T9312] _raw_spin_lock_irqsave+0xd5/0x120 [ 196.141125][ T9312] try_to_wake_up+0xb0/0x1470 [ 196.141148][ T9312] __wake_up_common_lock+0x130/0x1e0 [ 196.141169][ T9312] tty_port_default_wakeup+0xa6/0xf0 [ 196.141199][ T9312] serial8250_tx_chars+0x6e2/0x930 [ 196.141225][ T9312] serial8250_handle_irq+0x558/0x710 [ 196.141251][ T9312] serial8250_default_handle_irq+0xd1/0x1f0 [ 196.141282][ T9312] serial8250_interrupt+0xa9/0x1f0 [ 196.141305][ T9312] __handle_irq_event_percpu+0x29a/0xa80 [ 196.141332][ T9312] handle_irq_event+0x89/0x1f0 [ 196.141357][ T9312] handle_edge_irq+0x25f/0xc20 [ 196.141381][ T9312] __common_interrupt+0x136/0x230 [ 196.141405][ T9312] common_interrupt+0xa5/0xd0 [ 196.141428][ T9312] asm_common_interrupt+0x26/0x40 [ 196.141451][ T9312] acpi_safe_halt+0x21/0x30 [ 196.141473][ T9312] acpi_idle_enter+0xe4/0x140 [ 196.141496][ T9312] cpuidle_enter_state+0x112/0x480 [ 196.141517][ T9312] cpuidle_enter+0x5d/0xa0 [ 196.141538][ T9312] do_idle+0x375/0x5d0 [ 196.141558][ T9312] cpu_startup_entry+0x42/0x60 [ 196.141580][ T9312] __pfx_ap_starting+0x0/0x10 [ 196.141602][ T9312] common_startup_64+0x13e/0x147 [ 196.141622][ T9312] [ 196.141622][ T9312] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 196.141649][ T9312] lock_acquire+0x1ed/0x550 [ 196.141669][ T9312] _raw_spin_lock_irqsave+0xd5/0x120 [ 196.141693][ T9312] __wake_up_common_lock+0x25/0x1e0 [ 196.141713][ T9312] tty_port_default_wakeup+0xa6/0xf0 [ 196.141742][ T9312] serial8250_tx_chars+0x6e2/0x930 [ 196.141767][ T9312] serial8250_handle_irq+0x558/0x710 [ 196.141792][ T9312] serial8250_default_handle_irq+0xd1/0x1f0 [ 196.141823][ T9312] serial8250_interrupt+0xa9/0x1f0 [ 196.141845][ T9312] __handle_irq_event_percpu+0x29a/0xa80 [ 196.141870][ T9312] handle_irq_event+0x89/0x1f0 [ 196.141899][ T9312] handle_edge_irq+0x25f/0xc20 [ 196.141921][ T9312] __common_interrupt+0x136/0x230 [ 196.141942][ T9312] common_interrupt+0xa5/0xd0 [ 196.141965][ T9312] asm_common_interrupt+0x26/0x40 [ 196.141985][ T9312] acpi_safe_halt+0x21/0x30 [ 196.142005][ T9312] acpi_idle_enter+0xe4/0x140 [ 196.142025][ T9312] cpuidle_enter_state+0x112/0x480 [ 196.142045][ T9312] cpuidle_enter+0x5d/0xa0 [ 196.142065][ T9312] do_idle+0x375/0x5d0 [ 196.142084][ T9312] cpu_startup_entry+0x42/0x60 [ 196.142105][ T9312] __pfx_ap_starting+0x0/0x10 [ 196.142127][ T9312] common_startup_64+0x13e/0x147 [ 196.142146][ T9312] [ 196.142146][ T9312] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 196.142175][ T9312] lock_acquire+0x1ed/0x550 [ 196.142195][ T9312] _raw_spin_lock_irqsave+0xd5/0x120 [ 196.142218][ T9312] serial8250_console_write+0x1a8/0x1770 [ 196.142246][ T9312] console_flush_all+0x867/0xfd0 [ 196.142274][ T9312] console_unlock+0x13b/0x4d0 [ 196.142298][ T9312] vprintk_emit+0x5a6/0x770 [ 196.142322][ T9312] _printk+0xd5/0x120 [ 196.142337][ T9312] register_console+0x722/0xce0 [ 196.142364][ T9312] univ8250_console_init+0x49/0x50 [ 196.142390][ T9312] console_init+0x1b8/0x6f0 [ 196.142417][ T9312] start_kernel+0x2d3/0x500 [ 196.142443][ T9312] x86_64_start_reservations+0x2a/0x30 [ 196.142463][ T9312] x86_64_start_kernel+0x99/0xa0 [ 196.142482][ T9312] common_startup_64+0x13e/0x147 [ 196.142501][ T9312] [ 196.142501][ T9312] -> #0 (console_owner){..-.}-{0:0}: [ 196.142529][ T9312] validate_chain+0x18e0/0x5900 [ 196.142553][ T9312] __lock_acquire+0x1346/0x1fd0 [ 196.142573][ T9312] lock_acquire+0x1ed/0x550 [ 196.142592][ T9312] console_flush_all+0x810/0xfd0 [ 196.142619][ T9312] console_unlock+0x13b/0x4d0 [ 196.142644][ T9312] vprintk_emit+0x5a6/0x770 [ 196.142669][ T9312] _printk+0xd5/0x120 [ 196.142685][ T9312] should_fail_ex+0x391/0x4e0 [ 196.142712][ T9312] strncpy_from_user+0x36/0x2f0 [ 196.142738][ T9312] strncpy_from_user_nofault+0x71/0x140 [ 196.142761][ T9312] bpf_probe_read_compat_str+0xe9/0x180 [ 196.142785][ T9312] bpf_prog_c1796171ffc7efef+0x3d/0x3f [ 196.142801][ T9312] bpf_trace_run4+0x334/0x590 [ 196.142829][ T9312] __traceiter_sched_switch+0x98/0xd0 [ 196.142856][ T9312] __schedule+0x2587/0x4a20 [ 196.142880][ T9312] preempt_schedule_common+0x84/0xd0 [ 196.142912][ T9312] preempt_schedule+0xe1/0xf0 [ 196.142936][ T9312] preempt_schedule_thunk+0x1a/0x30 [ 196.142955][ T9312] htab_map_update_elem+0xc1d/0xe00 [ 196.142975][ T9312] bpf_map_update_value+0x4d3/0x540 [ 196.143000][ T9312] generic_map_update_batch+0x60d/0x900 [ 196.143024][ T9312] bpf_map_do_batch+0x3e0/0x690 [ 196.143044][ T9312] __sys_bpf+0x377/0x810 [ 196.143073][ T9312] __x64_sys_bpf+0x7c/0x90 [ 196.143099][ T9312] do_syscall_64+0xf3/0x230 [ 196.143119][ T9312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.143140][ T9312] [ 196.143140][ T9312] other info that might help us debug this: [ 196.143140][ T9312] [ 196.143147][ T9312] Chain exists of: [ 196.143147][ T9312] console_owner --> &p->pi_lock --> &rq->__lock [ 196.143147][ T9312] [ 196.143176][ T9312] Possible unsafe locking scenario: [ 196.143176][ T9312] [ 196.143182][ T9312] CPU0 CPU1 [ 196.143188][ T9312] ---- ---- [ 196.143193][ T9312] lock(&rq->__lock); [ 196.143206][ T9312] lock(&p->pi_lock); [ 196.143220][ T9312] lock(&rq->__lock); [ 196.143233][ T9312] lock(console_owner); [ 196.143245][ T9312] [ 196.143245][ T9312] *** DEADLOCK *** [ 196.143245][ T9312] [ 196.143251][ T9312] 5 locks held by syz.0.1299/9312: [ 196.143263][ T9312] #0: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x3c4/0x540 [ 196.143318][ T9312] #1: ffff8880b953e858 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 196.143375][ T9312] #2: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x244/0x590 [ 196.143432][ T9312] #3: ffffffff8e20fa20 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 196.143477][ T9312] #4: ffffffff8e20f650 (console_srcu){....}-{0:0}, at: console_flush_all+0x152/0xfd0 [ 196.143534][ T9312] [ 196.143534][ T9312] stack backtrace: [ 196.143541][ T9312] CPU: 1 PID: 9312 Comm: syz.0.1299 Not tainted 6.10.0-rc5-syzkaller-01202-g0b8774586be5 #0 [ 196.143561][ T9312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 196.143573][ T9312] Call Trace: [ 196.143582][ T9312] [ 196.143590][ T9312] dump_stack_lvl+0x241/0x360 [ 196.143615][ T9312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.143645][ T9312] ? print_circular_bug+0x130/0x1a0 [ 196.143675][ T9312] check_noncircular+0x36a/0x4a0 [ 196.143707][ T9312] ? __pfx_check_noncircular+0x10/0x10 [ 196.143737][ T9312] ? lockdep_lock+0x123/0x2b0 [ 196.143759][ T9312] ? add_lock_to_list+0x1de/0x2e0 [ 196.143791][ T9312] validate_chain+0x18e0/0x5900 [ 196.143834][ T9312] ? __pfx_validate_chain+0x10/0x10 [ 196.143864][ T9312] ? sprintf+0xda/0x120 [ 196.143898][ T9312] ? vsnprintf+0x1cc3/0x1da0 [ 196.143933][ T9312] ? info_print_prefix+0x204/0x310 [ 196.143958][ T9312] ? mark_lock+0x9a/0x350 [ 196.143985][ T9312] __lock_acquire+0x1346/0x1fd0 [ 196.144018][ T9312] lock_acquire+0x1ed/0x550 [ 196.144039][ T9312] ? console_flush_all+0x152/0xfd0 [ 196.144074][ T9312] ? __pfx_lock_acquire+0x10/0x10 [ 196.144096][ T9312] ? __pfx_lock_release+0x10/0x10 [ 196.144117][ T9312] ? do_raw_spin_lock+0x14f/0x370 [ 196.144154][ T9312] ? do_raw_spin_unlock+0x13c/0x8b0 [ 196.144186][ T9312] ? console_flush_all+0x3a8/0xfd0 [ 196.144219][ T9312] console_flush_all+0x810/0xfd0 [ 196.144247][ T9312] ? console_flush_all+0x152/0xfd0 [ 196.144280][ T9312] ? console_flush_all+0x152/0xfd0 [ 196.144317][ T9312] ? __pfx_console_flush_all+0x10/0x10 [ 196.144349][ T9312] ? __pfx_lock_acquire+0x10/0x10 [ 196.144373][ T9312] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 196.144400][ T9312] ? __pfx_validate_chain+0x10/0x10 [ 196.144425][ T9312] ? strncpy_from_user+0x21a/0x2f0 [ 196.144456][ T9312] console_unlock+0x13b/0x4d0 [ 196.144487][ T9312] ? __pfx_console_unlock+0x10/0x10 [ 196.144513][ T9312] ? _printk+0xd5/0x120 [ 196.144532][ T9312] ? _printk+0xd5/0x120 [ 196.144550][ T9312] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 196.144586][ T9312] ? __bad_area_nosemaphore+0x118/0x770 [ 196.144612][ T9312] vprintk_emit+0x5a6/0x770 [ 196.144641][ T9312] ? __pfx_vprintk_emit+0x10/0x10 [ 196.144670][ T9312] ? __bad_area_nosemaphore+0x118/0x770 [ 196.144701][ T9312] _printk+0xd5/0x120 [ 196.144724][ T9312] ? __pfx__printk+0x10/0x10 [ 196.144754][ T9312] should_fail_ex+0x391/0x4e0 [ 196.144787][ T9312] strncpy_from_user+0x36/0x2f0 [ 196.144819][ T9312] strncpy_from_user_nofault+0x71/0x140 [ 196.144847][ T9312] bpf_probe_read_compat_str+0xe9/0x180 [ 196.144873][ T9312] ? bpf_trace_run4+0x244/0x590 [ 196.144908][ T9312] bpf_prog_c1796171ffc7efef+0x3d/0x3f [ 196.144926][ T9312] bpf_trace_run4+0x334/0x590 [ 196.144958][ T9312] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 196.144984][ T9312] ? __pfx_bpf_trace_run4+0x10/0x10 [ 196.145016][ T9312] ? __pfx_probe_sched_switch+0x10/0x10 [ 196.145047][ T9312] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 196.145079][ T9312] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 196.145107][ T9312] __traceiter_sched_switch+0x98/0xd0 [ 196.145139][ T9312] __schedule+0x2587/0x4a20 [ 196.145169][ T9312] ? __pfx_llist_add_batch+0x10/0x10 [ 196.145205][ T9312] ? __pfx___schedule+0x10/0x10 [ 196.145231][ T9312] ? irq_work_queue+0xca/0x150 [ 196.145253][ T9312] ? unit_alloc+0x29d/0x360 [ 196.145276][ T9312] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 196.145302][ T9312] ? preempt_schedule+0xe1/0xf0 [ 196.145328][ T9312] preempt_schedule_common+0x84/0xd0 [ 196.145355][ T9312] preempt_schedule+0xe1/0xf0 [ 196.145381][ T9312] ? __pfx_preempt_schedule+0x10/0x10 [ 196.145411][ T9312] preempt_schedule_thunk+0x1a/0x30 [ 196.145431][ T9312] ? htab_map_update_elem+0xbb4/0xe00 [ 196.145451][ T9312] ? htab_map_update_elem+0xc18/0xe00 [ 196.145472][ T9312] htab_map_update_elem+0xc1d/0xe00 [ 196.145500][ T9312] ? __pfx_htab_map_update_elem+0x10/0x10 [ 196.145521][ T9312] ? __pfx_lock_release+0x10/0x10 [ 196.145547][ T9312] bpf_map_update_value+0x4d3/0x540 [ 196.145579][ T9312] generic_map_update_batch+0x60d/0x900 [ 196.145617][ T9312] ? __pfx_generic_map_update_batch+0x10/0x10 [ 196.145648][ T9312] ? __pfx_generic_map_update_batch+0x10/0x10 [ 196.145676][ T9312] bpf_map_do_batch+0x3e0/0x690 [ 196.145701][ T9312] __sys_bpf+0x377/0x810 [ 196.145734][ T9312] ? __pfx___sys_bpf+0x10/0x10 [ 196.145773][ T9312] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 196.145798][ T9312] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 196.145825][ T9312] __x64_sys_bpf+0x7c/0x90 [ 196.145855][ T9312] do_syscall_64+0xf3/0x230 [ 196.145877][ T9312] ? clear_bhb_loop+0x35/0x90 [ 196.145912][ T9312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.145936][ T9312] RIP: 0033:0x7f3bfdb75bd9 [ 196.145954][ T9312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.145971][ T9312] RSP: 002b:00007f3bfe9d4048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 196.145992][ T9312] RAX: ffffffffffffffda RBX: 00007f3bfdd03f60 RCX: 00007f3bfdb75bd9 [ 196.146006][ T9312] RDX: 0000000000000038 RSI: 00000000200009c0 RDI: 000000000000001a [ 196.146018][ T9312] RBP: 00007f3bfe9d40a0 R08: 0000000000000000 R09: 0000000000000000 [ 196.146030][ T9312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.146041][ T9312] R13: 000000000000000b R14: 00007f3bfdd03f60 R15: 00007ffe6989a938 [ 196.146062][ T9312] [ 196.146884][ T9301] bridge0: port 2(veth1_to_bond) entered blocking state [ 196.159305][ T9312] CPU: 1 PID: 9312 Comm: syz.0.1299 Not tainted 6.10.0-rc5-syzkaller-01202-g0b8774586be5 #0 [ 196.159334][ T9312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 196.159347][ T9312] Call Trace: [ 196.159357][ T9312] [ 196.159367][ T9312] dump_stack_lvl+0x241/0x360 [ 196.159400][ T9312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.159425][ T9312] ? __pfx__printk+0x10/0x10 [ 196.159457][ T9312] should_fail_ex+0x3b0/0x4e0 [ 196.159493][ T9312] strncpy_from_user+0x36/0x2f0 [ 196.159527][ T9312] strncpy_from_user_nofault+0x71/0x140 [ 196.159557][ T9312] bpf_probe_read_compat_str+0xe9/0x180 [ 196.159587][ T9312] ? bpf_trace_run4+0x244/0x590 [ 196.159620][ T9312] bpf_prog_c1796171ffc7efef+0x3d/0x3f [ 196.159642][ T9312] bpf_trace_run4+0x334/0x590 [ 196.159677][ T9312] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 196.159705][ T9312] ? __pfx_bpf_trace_run4+0x10/0x10 [ 196.159743][ T9312] ? __pfx_probe_sched_switch+0x10/0x10 [ 196.159779][ T9312] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 196.159812][ T9312] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 196.159844][ T9312] __traceiter_sched_switch+0x98/0xd0 [ 196.159878][ T9312] __schedule+0x2587/0x4a20 [ 196.159924][ T9312] ? __pfx_llist_add_batch+0x10/0x10 [ 196.159961][ T9312] ? __pfx___schedule+0x10/0x10 [ 196.159988][ T9312] ? irq_work_queue+0xca/0x150 [ 196.160012][ T9312] ? unit_alloc+0x29d/0x360 [ 196.160037][ T9312] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 196.160065][ T9312] ? preempt_schedule+0xe1/0xf0 [ 196.160093][ T9312] preempt_schedule_common+0x84/0xd0 [ 196.160124][ T9312] preempt_schedule+0xe1/0xf0 [ 196.160208][ T9312] ? __pfx_preempt_schedule+0x10/0x10 [ 196.160258][ T9312] preempt_schedule_thunk+0x1a/0x30 [ 196.160285][ T9312] ? htab_map_update_elem+0xbb4/0xe00 [ 196.160317][ T9312] ? htab_map_update_elem+0xc18/0xe00 [ 196.160343][ T9312] htab_map_update_elem+0xc1d/0xe00 [ 196.160377][ T9312] ? __pfx_htab_map_update_elem+0x10/0x10 [ 196.160403][ T9312] ? __pfx_lock_release+0x10/0x10 [ 196.160434][ T9312] bpf_map_update_value+0x4d3/0x540 [ 196.160480][ T9312] generic_map_update_batch+0x60d/0x900 [ 196.160520][ T9312] ? __pfx_generic_map_update_batch+0x10/0x10 [ 196.160554][ T9312] ? __pfx_generic_map_update_batch+0x10/0x10 [ 196.160585][ T9312] bpf_map_do_batch+0x3e0/0x690 [ 196.160612][ T9312] __sys_bpf+0x377/0x810 [ 196.160646][ T9312] ? __pfx___sys_bpf+0x10/0x10 [ 196.160686][ T9312] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 196.172307][ T9301] bridge0: port 2(veth1_to_bond) entered disabled state [ 196.197367][ T9312] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 196.197409][ T9312] __x64_sys_bpf+0x7c/0x90 [ 196.197443][ T9312] do_syscall_64+0xf3/0x230 [ 196.197467][ T9312] ? clear_bhb_loop+0x35/0x90 [ 196.197495][ T9312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.197520][ T9312] RIP: 0033:0x7f3bfdb75bd9 [ 196.197539][ T9312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.197558][ T9312] RSP: 002b:00007f3bfe9d4048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 196.197582][ T9312] RAX: ffffffffffffffda RBX: 00007f3bfdd03f60 RCX: 00007f3bfdb75bd9 [ 196.197598][ T9312] RDX: 0000000000000038 RSI: 00000000200009c0 RDI: 000000000000001a [ 196.197613][ T9312] RBP: 00007f3bfe9d40a0 R08: 0000000000000000 R09: 0000000000000000 [ 196.197627][ T9312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.197640][ T9312] R13: 000000000000000b R14: 00007f3bfdd03f60 R15: 00007ffe6989a938 [ 196.197666][ T9312] [ 196.842617][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 196.867697][ T4493] Bluetooth: hci0: command 0x0406 tx timeout [ 196.878891][ T9301] veth1_to_bond: entered allmulticast mode [ 197.919462][ T9301] veth1_to_bond: entered promiscuous mode [ 197.938039][ T9301] bridge0: port 2(veth1_to_bond) entered blocking state [ 197.945178][ T9301] bridge0: port 2(veth1_to_bond) entered forwarding state [ 201.945845][ T4493] Bluetooth: hci4: command 0x0406 tx timeout