last executing test programs: 3.276971431s ago: executing program 3 (id=1408): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000080)=0x1, 0x4) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) accept4$inet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x4) 3.220875761s ago: executing program 1 (id=1409): socket$key(0xf, 0x3, 0x2) 3.077017182s ago: executing program 1 (id=1412): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x258, 0x0, 0xb, 0x148, 0x0, 0x148, 0x1c0, 0x230, 0x242, 0x1c0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0xff, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x2e}, 0x0, 0xd0, 0x100, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@mac={{0x30}, {@local, 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {}, 0x367e1a3a}}}, {{@uncond, 0xec010000, 0xa0, 0xc0, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='xprtrdma_post_recvs_err\x00'}, 0x18) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}], 0x1c) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000000), 0x4) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.992680924s ago: executing program 3 (id=1413): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000000)=0x8, 0x4) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000040)=0x40000000, 0x4) recvmmsg(r1, &(0x7f0000004b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/152, 0x98}, 0x4}], 0x1, 0x45833af92e4b39ff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0xfa) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000700)="a8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000480)="ec", 0x1}], 0x1, 0x0, 0x0, 0x41020000}}], 0x2, 0x24004441) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4844}, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000100)=0x6, 0x4) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x40840d1) 2.449272888s ago: executing program 0 (id=1419): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x24, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x8f}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000089}, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async, rerun: 32) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea048500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r4}, 0x18) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) (async, rerun: 64) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (rerun: 64) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000000102010200000000000000000a0000004400018006000340000000000c00028004000100000000002c00018014000300", @ANYRESOCT=r8], 0x58}, 0x1, 0x0, 0x0, 0x2404c0c0}, 0x80008c0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0x1, 0x5) write$cgroup_subtree(r11, &(0x7f0000000000)={[{0x2b, 'io'}]}, 0x4) (async) r12 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000200)=0x1, 0x12) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000800e500", @ANYRES32=r3, @ANYBLOB], 0x28}}, 0x0) 2.360764182s ago: executing program 3 (id=1420): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000040), 0x4) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000540)={r3, 0x3, 0x2d00, 0x8, 0x7ff, 0x5, 0x0, 0x0, {0x0, @in6={{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x80000000}}, 0x800, 0x0, 0x8, 0xf59, 0x1}}, &(0x7f0000000600)=0xb0) (async) r5 = socket(0x200000000000011, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000900)={&(0x7f0000000700)=@isdn={0x22, 0x0, 0x0, 0x9}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000780)="e0", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="10000000000000000040000000000000"], 0x6}, 0x0) (async) r6 = socket$inet6(0xa, 0x800, 0x5) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000080)={r4, 0x1, 0x2}, 0x8) socket$inet6(0xa, 0x80002, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 2.324952032s ago: executing program 0 (id=1421): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) (async) r0 = socket(0x23, 0x5, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b0076a7000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r3 = socket(0x2a, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x4000040) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffe86) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x64, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x6d, '\x00', 0x3, 0xd, 0xffff2516, 0x6}}, @TCA_CBS_PARMS={0x18, 0x1, {0x10, '\x00', 0x8000, 0x2, 0xc, 0xff}}, @TCA_CBS_PARMS={0x18, 0x1, {0x9, '\x00', 0x52c0, 0x1, 0x10f2005e}}, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0x2, 0x5, 0x7, 0x7}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x44000040}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x64, 0x2c, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0xc, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xffffff00, 0xff, 0xff000000]}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40010}, 0x44050) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x1f67000) (async) sendmsg$IPCTNL_MSG_CT_NEW(r8, 0x0, 0x40000) (async) socket$unix(0x1, 0x1, 0x0) (async) r9 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r9, &(0x7f0000000140)=@id, 0x10) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r7], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) ppoll(&(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f00000004000000040000000200000000000000", @ANYRES32, @ANYRES16, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r6], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r12}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000001a00000600000008000300", @ANYRES32=r13, @ANYBLOB="0a00e800ffffffffffff0000"], 0x28}}, 0x0) write(r0, &(0x7f0000000000)="d1d0f7667a52", 0x6) 2.074033563s ago: executing program 1 (id=1423): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r0}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) recvfrom(r2, &(0x7f0000000c00)=""/4096, 0x1000, 0x140, 0x0, 0x0) (async) recvfrom(r2, &(0x7f0000000c00)=""/4096, 0x1000, 0x140, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000200)=""/132, &(0x7f00000002c0)=0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r4, 0x701, 0x0, 0x0, {0x26}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044014}, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.992878339s ago: executing program 3 (id=1424): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x13}) 1.869545065s ago: executing program 3 (id=1426): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x4, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xc9, @rand_addr=' \x01\x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) accept(r0, &(0x7f0000000940)=@x25, &(0x7f0000000a80)=0x80) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f00000003c0)=@nfc_llcp={0x27, 0x0, 0x50b4379d, 0x5, 0x1, 0x80, "2bfdbef67a41ffb6f7b357962b49b09a29cd0c615f55b39b74e2ad1689a77c7036f6f20499f786d2d428f1ebb6ae4a6666729d51e4016f75b7b7560826ccc2", 0x10}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000000)="da3165a3778839b293de50b154d21a7dea27b1563a8e75fd6425ef1318fdabaa3158", 0x22}, {&(0x7f0000000440)="e9d70b8736c0f3018f538849352bf34e2f9b11b7edb81f2e568d9fcb8c21ccbc33bb74cdd17f75960f1fb5a990d1d6ea0aa91df2fd505f57d5df4682a254f02765bee764db", 0x45}], 0x2, &(0x7f0000000bc0)=[{0xe0, 0x10f, 0xa8, "d174278447962b34e2f7db567002cbc8855369429a54f776ef8e3cbde09e1800fcbc43816af895b682af1109066395a414e81bf8ee8855b294cc9879a7b1841f31de0a8c163117e2751920e0f4b7508efaefc7894f0379bfe6ca910a7786197953e3557abf3ae6106844d2a40a1ac24a9238805a382f786d317f2f53d7cffd592dc891b08dac31f7826f72bf5816bf80a9068f0225752c15f22085f86eb1864237324c8803cb1a63794b9389e5cb3a1ea679e9b838d16df6db2666307b9ffc4f9a4cb6410807630b8869a2e89b"}, {0x108, 0x0, 0x2, "8bf8fb6bb9b7806583b8e42a338ecdcb957969cb5cd68753dfab6c3a73553a7d1967f583d0b8219d8be1afff703a958b931e878b03731261779eb5cc35adfec61822beef404bec0a70168996c97cb5182a6f047b1829b6fd20352d42a2faae0edcc9031233d355c1c593d196c9a9ee99486b910f17c8b375206cef15584a0b95ce115fd89111761e4eeda03e7efb86324a63230fe9af3f78928f13e5acc70d73ae76fe4671d5cdc65dbf9c8c58bd75becd337c612701cb25396524726c55d07f1667a5dd52ea56d5b6fbea0546f9d9cdc2403cd11f223cbde8a28ce5e8fde67931ec21c703bfdbbd3eb89dffbb8c60c359ac8971"}, {0x1010, 0x10a, 0x6, "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"}, {0x20, 0x10a, 0x3, "7b5de2371c1e84e42afb"}, {0x88, 0x10d, 0x8, "a3b282d5291e63171cb0036b006d51513418b6db4a31fcc7d60771f5d6cf13ddd7c3c1eb0a61c5529814f2e064f1e3355be66d106271741bb705c0a9e1398cc9c9d0e97dd91503e0f9e824dd5c7674c58951de96e61f76dedfaad002f2554a00b4f227d77920f68b855e90c755d699170d"}], 0x12a0}}, {{&(0x7f0000000540)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, &(0x7f0000000180)=[{&(0x7f00000005c0)="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", 0xff}, {&(0x7f00000006c0)="4496ed5e2183c2ae900720e757e6eed1f9f2bc0ce1be690515edcae4abfe6ce7b37f615200782af4b02b4c1b196a1c26c05a937c371007e7517a9e8b81b76c3e66a845b7d95b592e36b1ee1e63073a6f1256927fee26851971565d661afb4d5311387e32920a4e2941810d1f83ba8fe45c3828ab4982d4188d194bc2767adc84fa6a3fa590997e83e00798ff755bcfa69397be9eb43e8130f03405b9f2d1d5b4c328cf4114b88e3057b87931c1e1beebbd54e060f5cce0ca", 0xb8}, {&(0x7f0000000780)="99e62a7abeb9902c8835f0f73879e00a3089e872bba626ea45777951de239a71fe0191a875f63beeb90c7c7a4341e17b00b81466de179390308809bee7cc707894433857483c538d14aa25402edbde14", 0x50}], 0x3, &(0x7f0000000800)=[{0xa0, 0x0, 0x534, "c994e9b027cf6baa0ef69d05cae346618b62906efddc03ced3f63f31aa482de605754dcf0b92f39fe0501e0196a1cf3d2814b5997ad9402996c1fe1029fa46e2f341941d8b68ed7fa95f1f3061b370b01b52db256ae9e7e31f74b6a97bbd338607e89b91d0e4a89ff849ba4b4d2cca44493cbdacd8540c504071927b32977b84d6250d740648a7394bcc0f7b598f6f"}], 0xa0}}], 0x2, 0x14000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000001e80)={0x100, 0x2, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_REPLY={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x5}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_MARK_MASK={0x8}, @CTA_NAT_DST={0x6c, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x20040014) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a0080"], 0x1c}}, 0x0) shutdown(r1, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.776660501s ago: executing program 1 (id=1427): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) (async) socket(0x40000000002, 0x3, 0x2) socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', r4, 0x9fe99cc7b7e92564, 0x2, 0x9, 0xffffffff, 0xd, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x1, 0x401, 0x4}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r6 = socket(0x840000000002, 0x3, 0xff) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000200)={'caif0\x00', {0x2, 0x0, @multicast1}}) (async) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x4}, 0xc) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) 1.757916307s ago: executing program 2 (id=1428): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xe1) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000340)=@device_b, &(0x7f0000000380)=@mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x10}, @device_a, @broadcast, @from_mac=@broadcast, {0x6, 0x1}, @value=@ver_80211n={0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x2b, @val={0x8c, 0x10, {0xce9, "c13ec8bd3843", @short="67cabff74ddc6ec5"}}}, 0x30) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x8011}, 0x48080) 1.491520888s ago: executing program 1 (id=1431): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x13, 0xfff, 0x5, 0x6, 0x4810, r0, 0x5, '\x00', 0x0, r1, 0x1, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/571], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f0000000340)=""/109}, 0x20) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="05000000000000000000000000080000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="050000000000000000000089f8000000", @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x38}, 0x300}, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r3, 0x7963a000) 1.447433768s ago: executing program 4 (id=1432): openat$cgroup(0xffffffffffffffff, &(0x7f00000005c0)='syz1\x00', 0x200002, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000ed000095f4a222e8d63bbd40821f0201b26702aa5af47085b8", @ANYRESOCT], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0x35, 0x301, 0x70bd25, 0x25dfdbf9, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) getsockopt$packet_buf(r1, 0x107, 0x6, 0x0, &(0x7f0000000100)) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x0, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bind$xdp(r4, &(0x7f00000001c0), 0x2a) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x2) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESOCT=r4, @ANYRES8], 0x30}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414"], 0x528}}, 0xc000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000320800034000000007080004400000000f08000140000000002c0005800c0001007061796c6f6164001c00028008000340000000e1080004400000008b2c000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x40000) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000240)={'wlan0\x00', 0x400}) 1.41796602s ago: executing program 0 (id=1433): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x258, 0x0, 0xb, 0x148, 0x0, 0x148, 0x1c0, 0x230, 0x242, 0x1c0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0xff, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x2e}, 0x0, 0xd0, 0x100, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@mac={{0x30}, {@local, 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {}, 0x367e1a3a}}}, {{@uncond, 0xec010000, 0xa0, 0xc0, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='xprtrdma_post_recvs_err\x00'}, 0x18) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}], 0x1c) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000000), 0x4) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.352549973s ago: executing program 1 (id=1434): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0x19, 0x4, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0x19, 0x4, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r0, 0x1) (async) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r1, 0x0) (async) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000065c0)={0x44, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}]}]}, 0x44}}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) (async) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) recvfrom$inet(r2, &(0x7f0000000540)=""/234, 0xea, 0x40000182, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x0, [0x8001, 0xfffffc00, 0x6]}, &(0x7f0000000040)=0x44) (async) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x0, [0x8001, 0xfffffc00, 0x6]}, &(0x7f0000000040)=0x44) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10120, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r4, &(0x7f0000000140), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x10005, [{0x2, 0x5, 0xa}]}, @var={0x4, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/257, 0x4a, 0x101, 0x6, 0x0, 0x0, @void, @value}, 0x28) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) (async) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xa000000, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) (async) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000380)={0x0, 0x63, "013d67e7c7a0bbbd349597d6694e545ac7999bf6d34e7aa0fea9b233af02268955c8b6e722616377360290f7ab1c141d8b9432024cc0bc4a4aad1d87721319d46d0bd668d90a5a254221526771a19e2ad5c89a1f3a5bb0c6583a7140de71e265952404"}, &(0x7f0000000400)=0x6b) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000640)={r6, 0xec, "199c49cfd627cc1a9f527310aa16d673be0622dbec39fb6f37613144ccd055fe68d5c04dc6bfd83489d725915802836af1bc0179d56f06650f9796b0b3e0f5ddd1e2b8737cd47cc4d87135781d5bb086d0bfad3792716bbc885c80075aafd212f53492c4cc7a13761313c2c429848e9fec4a7b60709ef5fd3591a46be97a6f003b34ee050d0d2ccd72cbd313819dc12d109936befa75c41e6bc340e8d91b204b2ee6b5c37b1d17d94dd65ad61a3cdfa8782afc88ce4fe26386fb6bbf5e3fbf689a4a59a1ef723c4ccedbf62a808cf1e42bb8678f396486b77efab73dfd718a962e497dc3139e71e215895c21"}, &(0x7f0000000480)=0xf4) 1.305236623s ago: executing program 4 (id=1435): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="850000007500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x71}]}}}}}}}}, 0x0) 1.239657196s ago: executing program 4 (id=1436): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000940)={r2, &(0x7f0000000a40), 0x0}, 0x20) 1.116701637s ago: executing program 4 (id=1437): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0x0) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x71}]}}}}}}}}, 0x0) 1.01270273s ago: executing program 2 (id=1438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) pipe(&(0x7f0000000100)) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="470d000000000000000000000000080002"], 0x1c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000000)={0x3, 0x7, 0x0, 0x1000, 0x10, 0x9, 0x7, 0x10001}, 0x20) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@private1}}, {{@in=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000000040)=0xe8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xd, &(0x7f0000001480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000280)=0xc) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}, {&(0x7f0000001780)={0xbd4, 0x1a, 0x400, 0x70bd27, 0x25dfdbfb, "", [@generic="6d669f1cd0219355317c28c0a5a5f66e33e42a81bb95c5ef2b65820ac22562f98a7b53507b5e3d02994349a8158e3bcd64f966c86c3ab4121ebb9b8a0312382fe29fcc83", @nested={0x703, 0xe3, 0x0, 0x1, [@generic, @generic="1bff224db40b4106de556020e62f92980983c5c2f7c8ecda1f074fbbac66aae52fb814516bf5af0237e58ba666ef126aca29d79a37b8edf284f114624a473208598eb5cb8cb9c77220b640", @nested={0x660, 0x122, 0x0, 0x1, [@nested={0x352, 0x110, 0x0, 0x1, [@nested={0x4, 0xb3}, @generic="632211759a7d17d4a2ce82a95b48123e41e2d4b8", @generic="8456688f8b2fedc9201f58e047c615f818f7d12dacaf2a646a7090fe4fab324e22", @generic="3cb97cce8ad139b80af9e1e845493cc3e4263b6e8570023b78036e007cfcfb3090196adffe38ee9efcb339df7001f4182c49052aa1378d19ce3758e0a4acd4ffb52437b4f1fb12c05fe0a6a9b2bee34b1b5f135b7ffc7bc85f117b9bd07908a926b8daf369d51793d6d8f0287745bbc6c984dcdd9526a7fef4c2f6b6b7c084e6c795a61e6197e44734185eeca7aa384ceffe3882fe1c327aab573d73c3661fe0b94b3cf11ce8c807d042350f92657b", @nested={0x1b0, 0x81, 0x0, 0x1, [@typed={0x8, 0x36, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0x4, 0xbf}, @generic="d90164763f500f1bdb4295b47a75d7312e12d56c544dda35a0a08b8f44de216ed96d3882364bdc6e0031a54b551866bac6f12e2c49e4273b830ee5dc0eb62d65cf2f45601d4e9926d9abf291aaa61185390482f4430c02332a0bbb38517625efd6628b57c39af3ec6f72d7a811a1a4b14992a438cb5c340e23eac54c7059a379430cadce62fb8eedbe5ac2d730e4f05df4e26e8b7cdaa73d80085a452212745fd1a2594c08d14eca783bb76201b75442edf0e037734d347e66ef4c0a3a6fa4d86d1dcac153843500d5fc30886e6ae617c190b5ec4fe48efef53375bf49bc6ee32caac0bb3db770812b6f5ac82760f8fa3f975b80", @generic="5f89fa5571c980d4e7b47833c3c59e0d62c1fb23945c856754f1ee3719379e6b943baa9a8cc34adb99a0c29ba7663dff3ad4f2442687e411be7d2277e1b58bcd59a5910cddbdaf4a00987b1e6d945e474a4df9a963f4e258fbe8788a8e725c907bfb92b3dfb22efd7a15c53370be632c5a1472d2d0316a6df71d8312b5bb2d0b84eabe1d09f634bbbb60864b2107552d", @nested={0x4, 0x14a}, @typed={0x17, 0x72, 0x0, 0x0, @str='}\xb4.|-/).#+@!\'$!!/\'\x00'}]}, @typed={0x8, 0xb2, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="35ab3a740a5386349c0bedd09b56b05679d38fed0216bb87156c76131ed757920f624dc42432df1f25ba12dc867beb8d929e3051df671c19a20a03ef0cfed632fc4cefcade82776bbe90462d5489602c8deb3187be9898cdfba00216af52d8466555054801989c0cb6900973215def82ad8fb395062f90b17cac0bf15d611b720f83885037d5", @typed={0x1e, 0xed, 0x0, 0x0, @binary="f011793fe56dae3da097b60d0a4b82eaca0355b0f96a96784dbb"}, @typed={0x8, 0xb4, 0x0, 0x0, @fd=r5}]}, @typed={0xdc, 0xb8, 0x0, 0x0, @binary="d12f72c56a86f73aafec122e785b20d3cd0342376ee79d565337813309d3210e6dc13ea04fd3b3f784f3c84c2302499829fe64caf07bc4913c0df5c1cbee37ad17eb978a5899527c6712cb368c0a39dd013a8ecca57297e6f76f349e7416d1962a6be321bdd492691a7a2cdb5c5b629f05c661f6f0ecc9dd15c59e5f757453c820346526694a17b316591c0a78302300ee289298c5bdd36dbf40c689fac0115569dd37bbd4cff1419dc36ec7226b5d87fecbfd47f34e79deaa2610ffd4b65c03ea9a12faacc8510ad7effb7b36d56449e0238137a311c8c3"}, @generic="43a06dddb911de04ef81366bc4e5b86da2b7340609e334a18e399b15ab46f7ef38a49ac6ba93c8443bea7768bde5ec72022b5dcd07dd3f7d1cd3b86a8037c28cc399d1b962b9e277c2819cc647c4d86dfc64b182d82a04981af2bd54e67c3952896d21a6dd819d712c8ec64ab91a00b0ddf8955f7b774312", @nested={0x1b4, 0x11a, 0x0, 0x1, [@nested={0x18, 0x115, 0x0, 0x1, [@typed={0xc, 0x5a, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0xbf, 0x0, 0x0, @fd=r9}]}, @nested={0x4, 0x59}, @generic="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", @nested={0x95, 0xaa, 0x0, 0x1, [@nested={0x4, 0x132}, @generic="ccab92f66e1a8502aa49fb3f0fcacbd78b0a80988ee5cf", @generic="0c59ac73cbbad728eb7a9bd3f1b52077f808e669343fc4f8a50f74d8707f2114f1d6460155867c93427f76ca4927650d6150a2da6ecff8e557a558cf9ec92d126cbb8677053465a95cd3d7dc981d30f740e5c3ac9d35263245875d19dcfb8a823c218ba252758a300e6ada65edd8dfbcdc37332399af"]}]}]}, @typed={0x8, 0x125, 0x0, 0x0, @u32}, @generic="1816e02c2b530c35fcad44505f703a985cc57314babee194d5660d1c21245bf06b40c8a698c4fc7297c850c66766fe3d7526d8749d52e3deefcdd237d2356b51ea2e24b7865478a8", @generic, @nested={0x4, 0x117}]}, @nested={0xfa, 0x18, 0x0, 0x1, [@generic="4905cc4a743adb78089c88e3f16e6c18377d1f165de379fa8b77b683a7965166c5503050cdb05e118595cd4c562bf6c4cef07a052022b3b8391b7ae30afaa558b75743f1f4c8b425ee2307d388a328874fad4ad65988d13276768ce53990849b2eab42bcd8361aa9eecc1dc82fab459a3e793d7e47bf79c59e3496192bb88fc5e1159466e5aa151c12c6d9bc7597390aeeacb413775f2f120df6820397847beb644c3c3f3c77b789a878848ea25a414365eb99ecc8e890ca3609b1ba143b", @nested={0x4, 0x29}, @nested={0x34, 0x29, 0x0, 0x1, [@typed={0x19, 0x132, 0x0, 0x0, @binary="1dc438c989b494d579f8332a5d58d34eb5d7e24399"}, @typed={0x8, 0x13c, 0x0, 0x0, @fd=r5}, @generic="f2203733e1cde407fddc9a60"]}]}, @generic="dd68eec6c73e7e9bf4168e6d0b11b23187ba41caf93da9c60071929404a5116b30721b6569538c7323ad7612265767fafecae3197ba5133b8133c5a60b039c86fb054533aad4f05bed5e2f091799ba78", @nested={0xa7, 0xc8, 0x0, 0x1, [@typed={0x8, 0xbd, 0x0, 0x0, @u32=0x80000001}, @typed={0xc, 0xab, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0xac, 0x0, 0x0, @uid=r8}, @generic="25f2d255c4655dfae2b1c0bbaf8f82488edec90a9836a946e011a54993d8ad0368efcf6a00d907625d30b418aef831344626e0eeafb8aa7a73595449fdd220b0c94da865498bf1bd4d9806de3f5d436189f7c60700000092ccdaddf52fcce127ef6abb91bcaabf", @nested={0x4, 0xde}, @typed={0x14, 0x85, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x8, 0x30, 0x0, 0x0, @uid}]}, @nested={0xdc, 0x103, 0x0, 0x1, [@generic="e6fa36e0bd3c465dd34d5cca474195b9d1d65728ee4a01d6eca2134b02a01cff88d281d0b548683ead4300ffdf7003488fa4382d9efddbb19e12fc8acf92be739537c749998c1a2846ae95fadd1413a8d13b3991ee26050f2dc86f4da6c7e1eb02b948bff382a5cbcb979b14043e5345e1a5f02ddd4d2cc74e72df70b291cd3ee0590369660f98fa6c3ee5e170373711037bebfd9ad183286e63ce6ca8b2e5421d7bd5faea316f4aadeebae0d532c577e1f7b572f225746d4bd1e5daad616aa97eaa7c4166936ca98ead1452aed0b852", @typed={0x8, 0x5d, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}, @nested={0x111, 0xa6, 0x0, 0x1, [@typed={0xd, 0x80, 0x0, 0x0, @str='/dev/ppp\x00'}, @generic="396f1ee1dae96283c288abaa61ae4fe9fca7fbbbe251eadbcad659f4c6418b1721212cf4c8d75d35a850a7b2872ffbede63a09d4dc625bba122536d7fe46598752a943101632d1d8a396d32e446f9a7cfbf46d7d7516a5dd9f1277ce8c1c7f2ff81b0e8f018c27634a1975ffe6bc745d0b9264e392a0d4b13c27d2c9d75b5b8bb3ed140834c934e9bad6e235103e76cca1608783beec3e93a947cd3119c2c3379b8c1d191207376e67a351f8c654c3c568d29834d8397c59bbbadd9523a79610636a235aba932cbe949357dcdd03d3f47913874335f736135ddd0cc1bcde8c1ac3515089cf5cf0b0216973b9666e9f5ece600431003a9076af", @typed={0x4, 0xfa}]}, @typed={0xd, 0x5d, 0x0, 0x0, @str='/dev/ppp\x00'}, @generic="4e269b65f67d36ab54aaf8bc7aba8baed741b839f0dbc7b418c6747348d254a19ffbd74be3acba9ce220dcfbb59642fc60fdd9bb8288cfcdb62375885d92a6a3153fa57a3a373aca51c2727025e0a8309f6273a71d431ce57ca4a07265eb357587b93d451353fba291d5a0d491ad2b1a587b94892ab1c8c6a646c6bfb94c9555ca4705c0652d"]}, 0xbd4}], 0x2}, 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000000600)="384bc3f46ccc764bb9f1cfe1e0f14df89676b62e1e67e47eabfa5ceadb1310139ed89fc36a72ca1a8ae2ed67500a3e6268f6867369ae3354e1724f0ff7c4000000242c0554dc08d0efd39230acdc05729cfd2aef4d1643d7c717bd17727cea27d9a843d8b11a2678ce5d61999927247a7e0c3359a9b06ac01d0b3edaf1682b18766fe1623813911898adf3bb87b418550e33b3c8d73523c506b945cad3b514d81339fd17077a025c7ae103d34d16703171cec02f0556e916387db43e026ca64f49bbf0120429240c2fb6ad4b4dccc01d131871a1ac38ce7d4ecd0b4196d0e8bca14fccf79fb4a95d2f8722f6979a2d7aeb7f509f216d807160c94b15d2472d09848392518c3dc5a3e48cc75f3d41bde115b5cbc6103e681539d7da87fbf93a0cf5177afb9dbcc887baf6d569ee4b378505bf42", 0x41}, {&(0x7f0000000140)="ce903baa49", 0xfffffe11}], 0x2, 0x80000001, 0x4dc7a87d) 998.860425ms ago: executing program 4 (id=1439): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000060000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b7030000000080008500000006000000b7080000ff000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="1ca8d01e83c680007d0003000800090006004000800000000d00ff0f"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xe7a, 0x1, 0xe2800000}}]}]}]}, 0x4c}}, 0x0) 872.670882ms ago: executing program 3 (id=1440): bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) socket$l2tp(0x2, 0x2, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x478, 0x2c, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0xffffffffffffffff, 0x2, 0x2, 0x9, {0x3, 0x0, 0x5, 0x3, 0x8, 0xfffffc4e}, {0x2, 0x2, 0x6, 0x1, 0x0, 0x6}, 0x0, 0x795d, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfffffffd, 0x0, 0x1, 0x8, 0x7, 0x1, 0x7fff, 0x7, 0x20, 0xffffffff, 0x0, 0x5, 0x4, 0x7ff, 0x1, 0x8, 0x5, 0x2, 0x7, 0x2, 0x1ba, 0x1ff, 0xb, 0x8, 0x2800000, 0xfffffff7, 0x8, 0x11a8, 0x3, 0x9, 0x5, 0x5, 0x2, 0xffffffff, 0x6, 0x0, 0x7fffffff, 0x5, 0xf0f9, 0x7, 0x2b6, 0x7, 0x0, 0xfffffffc, 0xffff, 0x5, 0xfffffff8, 0xffff, 0x8, 0xffffffff, 0x1, 0xa, 0x300, 0x6, 0x8, 0x3, 0x6, 0x1, 0x9, 0x8, 0x8, 0x2000006, 0x5, 0x4, 0x7, 0x59b, 0x80000001, 0x6, 0x845, 0xff, 0x9, 0x91b7, 0x9917, 0x5, 0x6, 0x956, 0xc, 0x77c, 0x4, 0x3, 0x0, 0x640, 0x7, 0x3d621128, 0x0, 0x7, 0x8a, 0xc2e, 0x8, 0x6, 0xfdd, 0x2, 0x4, 0x2, 0xe, 0x4, 0x5, 0x0, 0x1, 0xc00, 0x8db, 0xc4ee, 0xf, 0x3, 0x4000000, 0x7000, 0xf21, 0x401, 0x8, 0x57, 0x2, 0x0, 0x6, 0x1, 0x3, 0x10001, 0x6, 0xbc4, 0x1, 0x1, 0xe2, 0x80, 0x9, 0xa6, 0x85f, 0x1, 0x8, 0x0, 0x1, 0x5, 0x0, 0x8000, 0x1, 0x7, 0x9, 0x1, 0x4, 0xa, 0x9, 0x5, 0x2, 0x61, 0x1, 0x200, 0x5cb8, 0x4, 0x7, 0x1, 0x1, 0x9, 0x5, 0x75, 0x400, 0x9, 0x1, 0x4, 0xdd7f, 0x8430, 0x1, 0x9, 0xb, 0x7, 0x4, 0x2, 0xb7cf, 0x5, 0x770f480, 0x8001, 0x0, 0xfffffbff, 0x7, 0xffff0000, 0x8, 0xffffffe0, 0x8, 0x67f, 0xffffff80, 0x2, 0x2, 0x69d774c5, 0x1, 0x515, 0x6, 0x2, 0x40009, 0x2, 0x80000001, 0xd, 0x2, 0xd, 0x9, 0xcb, 0x8, 0x5, 0x1, 0x0, 0xfffffffb, 0x6, 0x80, 0x3ed, 0x40000, 0x0, 0x9, 0x7, 0x0, 0x8, 0xff, 0xffffff3b, 0x9, 0x5, 0x1, 0xd, 0xffffffff, 0x401, 0x764, 0x0, 0x5, 0x6, 0x1, 0x694, 0x91d, 0x3, 0x1, 0x1, 0xb, 0xd, 0x6, 0x1, 0x4e, 0xffff0000, 0x4, 0x4, 0x400, 0x1ad9, 0xbe, 0x6efe6ee8, 0x400, 0x7ff, 0xd, 0x1ff, 0x80, 0x0, 0x9, 0x8, 0x7f, 0x5, 0x70dd, 0xd1, 0x1ff, 0x5, 0x3, 0x9, 0x2, 0x200, 0x3]}]}]}}]}, 0x478}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @tracing=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x8c6}, 0x8) 737.321435ms ago: executing program 4 (id=1441): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x4, 0x54}, 0x9c) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) write$cgroup_pid(r4, &(0x7f0000000880), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) 698.866546ms ago: executing program 2 (id=1442): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r1, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0xc800) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030000000000000000000000000000000000642d4d2a8a0d86dfaf6478a21076d09f9b15878259109212b005db2d05151dbe7925d15b05d1e2bff20f3ac4be6cf2244ec5fc867302a6c62371763e7aea51ac27aff9210e9f9db7107c864273dc53f4e5dd2887a1f64353d94ee502a4f7ce93009710dc130345125e1334225d09efc392ab73479aa1a81a5b212c29f89065c15d6aed0f5cf24404bc949ed416e24a8081aca02034f14eb04cfc5eb8cf783c", @ANYRES32=r2, @ANYBLOB="04003080"], 0x20}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0x241, 0x0, 0x4, 0x0, &(0x7f0000000700)="389ceff6"}, 0x50) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20296569eae6f60}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r1, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000004) 427.683892ms ago: executing program 0 (id=1443): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x16, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 252.548519ms ago: executing program 2 (id=1444): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x40000001}, 0x0) (async, rerun: 64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c00)={'syztnl1\x00', &(0x7f0000000b80)={'syztnl2\x00', 0x0, 0x700, 0x0, 0xc4a, 0x2, {{0x10, 0x4, 0x3, 0x9, 0x40, 0x65, 0x0, 0x9, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x2c, 0x91, 0x1, 0x1, [{@local, 0xa54}, {@multicast2, 0xfc85}, {@private=0xa010102, 0x8000}, {@loopback, 0x2}, {@remote, 0x8}]}]}}}}}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0xfffffee7}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800c0001007061796c6f6164001c0002800800034000000000080002401400000008000440000000020900010073797a30000000000900020073797a32000000001400000040d34111000100"/132], 0x84}}, 0x0) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00', 0x0}, 0x30) (async) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) pread64(r8, &(0x7f00000011c0)=""/99, 0x63, 0x2) (async) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100210100000000000000000a000000009df0000000000089851800", @ANYRES32=r6, @ANYRES32, @ANYBLOB], 0x28}}, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="3c040000180000032abd7000fedbdf25ac141435000000000000000000000000e00000020000000000000000000000004e2400034e20633a020090001d000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="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", @ANYRESHEX=r7, @ANYRES32=r5, @ANYRESHEX=r8], 0x43c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000080)=0x10) (async) sendmsg$NFT_MSG_GETTABLE(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="ec000000010a01080000000000000000020000090c00044000000000000000030900010073797a3100000000080002400000000089000600de8057c8facff0db3c4da1b5386929972821283e89a01ace82701402c1f277955899973e4dede3357acd6fb6d83fa6f473fc348ea24d077143e6c07b6895f2b54db9729cf5078e4f82f4ed3ea909de680523255d7dd01722a941a4034882b704182213d2d9955020255cff368d72df22ce9d918e72199922892e3b67c22fa72302324da9010000000c000440000000000000000418000600b82664f08bec8a118c33f37184e05b4b69a9804a08000240000000020513a65805aef2fe99a7fa889632565a3f3bd9a8f33ac56a93009638ca47b4583b4a14d23ffdfe426c5dcac7e962a35d7e79b92daa27faf61edb96f806444077980180ea84a97cca4066a77395e4defcf55e70e35c6351fc001ad4413af68efb9553e9f609bc9fa5f971a04aa37318c2bd191b2ec20c46ce343bed19dbdd4c495539c4dcc2d250321e664baeb4e34eecf1bdfef35a57b80d4fb81b9bc08edc4c0d8ad2e99214679399b88ee27e4c81bf00b327135141f422"], 0xec}, 0x1, 0x0, 0x0, 0x60001}, 0x4000000) (async, rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000005ec0)={0x0, 0x0, &(0x7f0000005e80)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000000203010200fd395700080800044000000003ade0d43fb27fc626c10633e643f8fa7cb59f5f2439da4acb28218553ccd55fc332247e300bb7131a2d8ed14200a9f82ec5000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x48010) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600000000206030000000000000000000000000705000100070000000900020073797a300000000014000780050015000500000008001240000000000500050002000000050004000100000013000300686173683a6e65742c69666163650000d8520208b89a516ef98cde14e37d017d7509b53604b093"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async, rerun: 64) socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64) setsockopt$CAN_RAW_FD_FRAMES(r10, 0x65, 0x5, &(0x7f00000002c0), 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', 0x0}) connect$can_j1939(r9, &(0x7f0000000ac0)={0x1d, r13, 0x0, {0x1, 0x0, 0x4}, 0xfd}, 0x18) 251.01937ms ago: executing program 0 (id=1445): openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 32) r0 = socket(0x40000000015, 0x5, 0x0) (rerun: 32) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) (async, rerun: 64) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x800, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async, rerun: 64) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) listen(r1, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000900000004000000", @ANYRES32, @ANYBLOB="0500000000000000203300000000020062", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000481418000000001004000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (rerun: 64) socket$kcm(0x10, 0x3, 0x10) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0xe0}}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) r7 = socket(0x10, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) (async, rerun: 32) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@ipv4_newrule={0x40, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_macvtap\x00'}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8}]}, 0x40}}, 0x0) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000a40)={0x23c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc99}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb5f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @local, 0xa}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8d}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xa3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000850) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400000002000000000000070000000002000000000000128200000000006100637dbf4a0af25561b6d85026c47f3bee8a07aff92e46d9aed484ce33a443e89fb65939"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000080000000000000002000000180100002020702500000000002020207b1af8ff00000000bda000000000000027000000f8ffffffb702000008000000b7030000000000002500f8ff0600100095"], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 165.944514ms ago: executing program 2 (id=1446): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="850000007500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x71}]}}}}}}}}, 0x0) 71.248533ms ago: executing program 0 (id=1447): r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000080)=@phonet, 0x80, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/168, 0xa8}, {&(0x7f0000000280)=""/218, 0xda}, {&(0x7f0000000100)=""/54, 0x36}, {&(0x7f0000000400)=""/157, 0x9d}, {&(0x7f00000004c0)=""/228, 0xe4}, {&(0x7f00000005c0)=""/92, 0x5c}], 0x6, &(0x7f00000006c0)=""/4096, 0x1000}, 0xffff}], 0x1, 0x40000000, &(0x7f0000000380)) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_PREFSRC={0x8, 0x7, @empty}]}, 0x24}}, 0x0) 0s ago: executing program 2 (id=1448): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4000001) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) (async) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000480)=""/123, 0x28}, {0x0}], 0x2) (async) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x23, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRES8=r0, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}, 0x1, 0x0, 0x0, 0x4000090}, 0x880) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f00000002c0)={0xffffffff, {{0x2, 0x4e21, @multicast2}}}, 0x88) (async) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000680)=0x3, 0x4) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x7ff) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000001100000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r7, r6, 0x1a, 0x0, 0x0, @void, @value=r6}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000540)="34ded9fe169eadda6e48aee45e57747584f800aa7e43a937ca89c8e87c98c8db9109c991853473a1c8a3446d8ef07e88fd78ce977d32c6f0552cec491c0900000000000000b0f3dcb32b3987cf0d74f85ed127b75af4b88ed8ab0095f9afcb9693139d9734069513b3bc3715e4f2ad272b566b5023588a1a74cd9e03a9fc6ebc885d435b1903f80a4302e7d0599c667c7a6196ab737395275d04803abf6337ba4c2e0b877624c8c07488989ddefaaa1b1b96403366f7d858c3a3d9874a312616fc2c7c1ea3a1afd469455bdf6204a2ce008cd3e31822b8cad58600"/229, &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0xc3ff}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) (async) sendmsg$IPVS_CMD_GET_SERVICE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002f40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000040000000c0001800600"], 0x20}}, 0x0) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r8, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, r10, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0x80010) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r11, 0x107, 0x5, &(0x7f0000000100)=@req3={0x0, 0x101, 0x0, 0x10001, 0x9, 0x4, 0xb}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.124' (ED25519) to the list of known hosts. [ 67.399716][ T5817] cgroup: Unknown subsys name 'net' [ 67.531172][ T5817] cgroup: Unknown subsys name 'cpuset' [ 67.540521][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.038813][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.721333][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.727867][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.815026][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.825416][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.835875][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.846156][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.854785][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.862968][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.870980][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.871350][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.878834][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.893166][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.902014][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.902334][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.909473][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.925294][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.930511][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.934874][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.947402][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.948871][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.957177][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.961435][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.970100][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.975963][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.987450][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.997164][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.005240][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.028405][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.049304][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.061553][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.069608][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.076985][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.400647][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 73.500228][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 73.596616][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 73.665488][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 73.732808][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.740241][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.747824][ T5844] bridge_slave_0: entered allmulticast mode [ 73.754734][ T5844] bridge_slave_0: entered promiscuous mode [ 73.807268][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.814456][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.821897][ T5830] bridge_slave_0: entered allmulticast mode [ 73.829416][ T5830] bridge_slave_0: entered promiscuous mode [ 73.837113][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.845161][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.852979][ T5830] bridge_slave_1: entered allmulticast mode [ 73.859820][ T5830] bridge_slave_1: entered promiscuous mode [ 73.867156][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.877698][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.884936][ T5844] bridge_slave_1: entered allmulticast mode [ 73.892518][ T5844] bridge_slave_1: entered promiscuous mode [ 74.005573][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.022257][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.037443][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.047528][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.054893][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.062408][ T5831] bridge_slave_0: entered allmulticast mode [ 74.070586][ T5831] bridge_slave_0: entered promiscuous mode [ 74.086739][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.104764][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 74.141635][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.149152][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.156473][ T5831] bridge_slave_1: entered allmulticast mode [ 74.164844][ T5831] bridge_slave_1: entered promiscuous mode [ 74.172104][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.179473][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.186683][ T5833] bridge_slave_0: entered allmulticast mode [ 74.193842][ T5833] bridge_slave_0: entered promiscuous mode [ 74.208411][ T5830] team0: Port device team_slave_0 added [ 74.217329][ T5844] team0: Port device team_slave_0 added [ 74.232750][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.240112][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.247377][ T5833] bridge_slave_1: entered allmulticast mode [ 74.255942][ T5833] bridge_slave_1: entered promiscuous mode [ 74.278290][ T5830] team0: Port device team_slave_1 added [ 74.285910][ T5844] team0: Port device team_slave_1 added [ 74.370608][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.377713][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.403991][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.419396][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.445395][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.462833][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.470065][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.496155][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.509151][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.516157][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.542821][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.555866][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.562923][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.589029][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.607050][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.631806][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.667204][ T5833] team0: Port device team_slave_0 added [ 74.696241][ T5833] team0: Port device team_slave_1 added [ 74.707223][ T5831] team0: Port device team_slave_0 added [ 74.753600][ T5831] team0: Port device team_slave_1 added [ 74.771085][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.782057][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.789339][ T5849] bridge_slave_0: entered allmulticast mode [ 74.796163][ T5849] bridge_slave_0: entered promiscuous mode [ 74.804633][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.812325][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.819571][ T5849] bridge_slave_1: entered allmulticast mode [ 74.826301][ T5849] bridge_slave_1: entered promiscuous mode [ 74.845477][ T5830] hsr_slave_0: entered promiscuous mode [ 74.852653][ T5830] hsr_slave_1: entered promiscuous mode [ 74.907027][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.914169][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.940532][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.953501][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.960664][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.986660][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.001262][ T5844] hsr_slave_0: entered promiscuous mode [ 75.008001][ T5844] hsr_slave_1: entered promiscuous mode [ 75.014243][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.022168][ T5844] Cannot create hsr debugfs directory [ 75.040433][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.047433][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.073641][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.084751][ T5843] Bluetooth: hci1: command tx timeout [ 75.087781][ T54] Bluetooth: hci3: command tx timeout [ 75.090847][ T5843] Bluetooth: hci2: command tx timeout [ 75.095884][ T54] Bluetooth: hci0: command tx timeout [ 75.103826][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.114361][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.140888][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.157749][ T54] Bluetooth: hci4: command tx timeout [ 75.171392][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.183896][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.255132][ T5849] team0: Port device team_slave_0 added [ 75.292365][ T5849] team0: Port device team_slave_1 added [ 75.333804][ T5831] hsr_slave_0: entered promiscuous mode [ 75.340612][ T5831] hsr_slave_1: entered promiscuous mode [ 75.346775][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.354481][ T5831] Cannot create hsr debugfs directory [ 75.386155][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.393220][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.419381][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.443777][ T5833] hsr_slave_0: entered promiscuous mode [ 75.450592][ T5833] hsr_slave_1: entered promiscuous mode [ 75.456926][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.464593][ T5833] Cannot create hsr debugfs directory [ 75.501062][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.508244][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.534810][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.700616][ T5849] hsr_slave_0: entered promiscuous mode [ 75.706982][ T5849] hsr_slave_1: entered promiscuous mode [ 75.714135][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.722079][ T5849] Cannot create hsr debugfs directory [ 75.824117][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.836627][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.871742][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.885126][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.991483][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.014443][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.026256][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.061974][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.115312][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.149197][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.161517][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.176841][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.221467][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.242622][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.256274][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.281111][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.353957][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.375073][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.394498][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.404683][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.420533][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.507334][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.537507][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.563200][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.574028][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.581459][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.592909][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.600123][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.679797][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.713310][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.727678][ T203] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.734809][ T203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.753963][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.761162][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.773427][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.780601][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.793860][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.809778][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.816897][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.833557][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.855400][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.944715][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.977076][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.984397][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.006845][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.034501][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.063551][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.071255][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.092320][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.099497][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.137357][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.158708][ T54] Bluetooth: hci0: command tx timeout [ 77.162886][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.164194][ T54] Bluetooth: hci2: command tx timeout [ 77.171876][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.177525][ T5142] Bluetooth: hci3: command tx timeout [ 77.184675][ T5843] Bluetooth: hci1: command tx timeout [ 77.238490][ T5836] Bluetooth: hci4: command tx timeout [ 77.282925][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.507546][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.531851][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.711148][ T5830] veth0_vlan: entered promiscuous mode [ 77.737012][ T5831] veth0_vlan: entered promiscuous mode [ 77.774499][ T5830] veth1_vlan: entered promiscuous mode [ 77.799140][ T5831] veth1_vlan: entered promiscuous mode [ 77.840264][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.869873][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.899308][ T5831] veth0_macvtap: entered promiscuous mode [ 77.923098][ T5831] veth1_macvtap: entered promiscuous mode [ 77.932056][ T5830] veth0_macvtap: entered promiscuous mode [ 77.981952][ T5830] veth1_macvtap: entered promiscuous mode [ 78.006166][ T5844] veth0_vlan: entered promiscuous mode [ 78.037161][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.051940][ T5849] veth0_vlan: entered promiscuous mode [ 78.062073][ T5833] veth0_vlan: entered promiscuous mode [ 78.073358][ T5844] veth1_vlan: entered promiscuous mode [ 78.092472][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.108799][ T5849] veth1_vlan: entered promiscuous mode [ 78.115539][ T5833] veth1_vlan: entered promiscuous mode [ 78.141419][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.150585][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.159930][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.169116][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.180113][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.191510][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.203257][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.230285][ T5844] veth0_macvtap: entered promiscuous mode [ 78.247054][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.261520][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.274152][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.302375][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.313171][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.322547][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.331915][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.346179][ T5833] veth0_macvtap: entered promiscuous mode [ 78.356158][ T5844] veth1_macvtap: entered promiscuous mode [ 78.382745][ T5833] veth1_macvtap: entered promiscuous mode [ 78.445292][ T5849] veth0_macvtap: entered promiscuous mode [ 78.470282][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.485592][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.495914][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.506741][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.518108][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.534019][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.544824][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.555118][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.566108][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.577049][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.589643][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.602376][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.621574][ T5849] veth1_macvtap: entered promiscuous mode [ 78.632415][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.643169][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.653469][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.664037][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.675062][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.695463][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.706570][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.719145][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.729769][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.739726][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.750236][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.761629][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.772166][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.780923][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.789819][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.791030][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.806458][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.815659][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.859770][ T5844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.868883][ T5844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.878268][ T5844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.887003][ T5844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.942363][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.953251][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.964922][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.975980][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.986135][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.996908][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.007506][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.018424][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.030011][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.050155][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.061551][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.084011][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.094692][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.106160][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.117041][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.127083][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.138376][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.148284][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.159028][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.174993][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.190537][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.198635][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.218848][ T5849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.228882][ T5849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.238200][ T5836] Bluetooth: hci1: command tx timeout [ 79.238257][ T5836] Bluetooth: hci2: command tx timeout [ 79.238290][ T5836] Bluetooth: hci3: command tx timeout [ 79.238368][ T5836] Bluetooth: hci0: command tx timeout [ 79.244766][ T5849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.268967][ T5849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.318463][ T5843] Bluetooth: hci4: command tx timeout [ 79.338212][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.346419][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.384494][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.410513][ T203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.419164][ T203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.530161][ T203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.567469][ T203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.624716][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.647912][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.802947][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.814970][ T203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.827419][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.842563][ T203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.972629][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.978958][ T5925] xt_bpf: check failed: parse error [ 80.002371][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.053375][ T5927] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.214499][ T5932] Zero length message leads to an empty skb [ 80.262169][ T5933] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'. [ 80.434357][ T5939] macvlan2: entered promiscuous mode [ 80.463507][ T5939] macvlan2: entered allmulticast mode [ 80.524093][ T5936] can: request_module (can-proto-0) failed. [ 81.324952][ T5843] Bluetooth: hci0: command tx timeout [ 81.330508][ T5843] Bluetooth: hci3: command tx timeout [ 81.336534][ T5843] Bluetooth: hci2: command tx timeout [ 81.342147][ T5836] Bluetooth: hci1: command tx timeout [ 81.398532][ T5836] Bluetooth: hci4: command tx timeout [ 81.404449][ T5971] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16'. [ 81.501124][ T5970] sctp: failed to load transform for md5: -4 [ 81.504542][ T5975] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11'. [ 81.853607][ T5987] syz.3.18 uses obsolete (PF_INET,SOCK_PACKET) [ 83.320811][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35'. [ 83.399696][ T6041] warning: `syz.3.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.609356][ T6035] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:0000:0000 with DS=0xf [ 84.028307][ T6055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.562457][ T25] IPVS: starting estimator thread 0... [ 84.562634][ T6087] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 84.708268][ T6092] IPVS: using max 18 ests per chain, 43200 per kthread [ 84.771655][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'. [ 84.818961][ T6099] netlink: 'syz.1.54': attribute type 4 has an invalid length. [ 84.927501][ T6109] syzkaller1: entered promiscuous mode [ 84.932311][ T6099] syz.1.54 (6099) used greatest stack depth: 18640 bytes left [ 84.933398][ T6109] syzkaller1: entered allmulticast mode [ 85.139686][ T6117] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 85.419843][ T6126] netlink: 'syz.3.60': attribute type 5 has an invalid length. [ 85.450721][ T6126] netlink: 'syz.3.60': attribute type 5 has an invalid length. [ 85.880144][ T6145] netlink: 76 bytes leftover after parsing attributes in process `syz.4.65'. [ 86.294555][ T6170] netlink: 20 bytes leftover after parsing attributes in process `syz.1.71'. [ 86.304533][ T6170] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 86.623507][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 86.910570][ T6196] netlink: 52 bytes leftover after parsing attributes in process `syz.3.75'. [ 87.010649][ T6196] ip6t_rpfilter: unknown options [ 87.554283][ T6211] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.708286][ T6225] netlink: 244 bytes leftover after parsing attributes in process `syz.2.81'. [ 87.978314][ T6229] netlink: 'syz.4.84': attribute type 3 has an invalid length. [ 88.068632][ T6229] netlink: 16 bytes leftover after parsing attributes in process `syz.4.84'. [ 91.096017][ T6246] team0 (unregistering): Port device team_slave_0 removed [ 91.110549][ T6246] team0 (unregistering): Port device team_slave_1 removed [ 91.163542][ T6249] netlink: 'syz.0.87': attribute type 21 has an invalid length. [ 91.473882][ T6262] netlink: 44 bytes leftover after parsing attributes in process `syz.2.91'. [ 91.486911][ T6260] netlink: 20 bytes leftover after parsing attributes in process `syz.1.90'. [ 91.698323][ T6268] netlink: 'syz.1.94': attribute type 21 has an invalid length. [ 91.728279][ T6268] netlink: 'syz.1.94': attribute type 1 has an invalid length. [ 91.759302][ T6271] netlink: 'syz.1.94': attribute type 21 has an invalid length. [ 91.796876][ T6271] netlink: 'syz.1.94': attribute type 1 has an invalid length. [ 92.215410][ T973] cfg80211: failed to load regulatory.db [ 92.657188][ T6305] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 92.760359][ T6331] netlink: 84 bytes leftover after parsing attributes in process `syz.4.111'. [ 92.809199][ T6331] netem: invalid attributes len -16 [ 92.822883][ T6331] netem: change failed [ 92.899891][ T6338] netlink: 24 bytes leftover after parsing attributes in process `syz.3.113'. [ 92.911416][ T6341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.115'. [ 93.129867][ T6349] netlink: 48 bytes leftover after parsing attributes in process `syz.4.116'. [ 93.398732][ T6369] netlink: 36 bytes leftover after parsing attributes in process `syz.2.121'. [ 93.695456][ T6387] netlink: 'syz.2.126': attribute type 13 has an invalid length. [ 93.787918][ T6387] macvtap0: entered promiscuous mode [ 93.813786][ T6387] macvtap0: refused to change device tx_queue_len [ 94.319285][ T6404] Cannot find set identified by id 0 to match [ 94.432048][ T6404] pim6reg: entered allmulticast mode [ 94.599408][ T6413] vlan2: entered promiscuous mode [ 94.634136][ T6413] vlan2: entered allmulticast mode [ 94.895569][ T6424] x_tables: duplicate underflow at hook 3 [ 95.030120][ T6427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.420663][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.142'. [ 96.690580][ T6493] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 96.852868][ T6497] Illegal XDP return value 4294967262 on prog (id 134) dev N/A, expect packet loss! [ 96.964793][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.165'. [ 96.965798][ T6501] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 97.102500][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807c39b400: rx timeout, send abort [ 97.112728][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807c39b400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 97.214017][ T6511] netlink: 'syz.4.168': attribute type 2 has an invalid length. [ 97.319443][ T6512] netlink: 32 bytes leftover after parsing attributes in process `syz.2.167'. [ 97.365563][ T6516] netlink: 'syz.1.170': attribute type 58 has an invalid length. [ 97.373783][ T6516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.170'. [ 97.626466][ T6532] netlink: 56 bytes leftover after parsing attributes in process `syz.4.176'. [ 97.646231][ T6528] syz.3.175 (6528) used greatest stack depth: 17744 bytes left [ 97.654105][ T6532] netlink: 'syz.4.176': attribute type 1 has an invalid length. [ 97.676359][ T6532] netlink: 134728 bytes leftover after parsing attributes in process `syz.4.176'. [ 97.823878][ T6539] can: request_module (can-proto-0) failed. [ 97.899008][ T6553] Bluetooth: MGMT ver 1.23 [ 98.376709][ T6585] tipc: Started in network mode [ 98.395141][ T6585] tipc: Node identity ac14140f, cluster identity 4711 [ 98.409786][ T6585] tipc: New replicast peer: 255.255.255.255 [ 98.423668][ T6585] tipc: Enabled bearer , priority 10 [ 98.574582][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 98.668328][ T6603] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.194'. [ 98.718055][ T6603] netlink: 36 bytes leftover after parsing attributes in process `syz.1.194'. [ 98.738386][ T3075] IPVS: starting estimator thread 0... [ 98.838834][ T6607] IPVS: using max 20 ests per chain, 48000 per kthread [ 98.895226][ T6614] netlink: 16 bytes leftover after parsing attributes in process `syz.2.197'. [ 98.911890][ T6614] vlan0: entered allmulticast mode [ 98.917222][ T6614] veth0_vlan: entered allmulticast mode [ 99.104741][ T6620] netlink: 'syz.2.200': attribute type 10 has an invalid length. [ 99.114420][ T6620] bridge0: entered promiscuous mode [ 99.524493][ T6645] tc_dump_action: action bad kind [ 99.549450][ T25] tipc: Node number set to 2886997007 [ 100.023172][ T6675] Can't find ip_set type [ 100.136018][ T6682] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 100.175798][ T6686] netlink: 'syz.1.220': attribute type 4 has an invalid length. [ 101.839787][ T6748] pimreg: entered allmulticast mode [ 102.080334][ T6756] ieee802154 phy0 wpan0: encryption failed: -22 [ 102.108388][ T6759] ipt_ECN: cannot use operation on non-tcp rule [ 102.116766][ T6760] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 102.236768][ T6760] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.370947][ T6760] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.490896][ T6760] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.582482][ T6760] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.683377][ T6781] bridge0: entered promiscuous mode [ 102.709296][ T6781] macvlan2: entered promiscuous mode [ 102.737270][ T6781] bridge0: port 3(macvlan2) entered blocking state [ 102.759020][ T6781] bridge0: port 3(macvlan2) entered disabled state [ 102.765888][ T6781] macvlan2: entered allmulticast mode [ 102.782546][ T6781] bridge0: entered allmulticast mode [ 102.799788][ T6781] macvlan2: left allmulticast mode [ 102.824475][ T6781] bridge0: left allmulticast mode [ 102.844931][ T6781] bridge0: left promiscuous mode [ 102.980739][ T6760] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.999414][ T6760] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.015558][ T6760] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.056724][ T6760] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.320621][ T6798] netlink: 'syz.1.262': attribute type 21 has an invalid length. [ 103.328667][ T6798] __nla_validate_parse: 10 callbacks suppressed [ 103.328685][ T6798] netlink: 132 bytes leftover after parsing attributes in process `syz.1.262'. [ 103.436003][ T6802] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.718062][ T6810] netlink: 32 bytes leftover after parsing attributes in process `syz.1.266'. [ 103.734444][ T6821] vlan2: entered promiscuous mode [ 104.142002][ T6834] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.242881][ T6834] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.323308][ T6834] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.385126][ T6834] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.425843][ T6841] xt_l2tp: missing protocol rule (udp|l2tpip) [ 104.590473][ T6834] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.666895][ T6834] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.710881][ T6834] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.742558][ T6834] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.903398][ T6856] tun0: tun_chr_ioctl cmd 21731 [ 104.911168][ T6858] netlink: 'syz.3.281': attribute type 21 has an invalid length. [ 104.922888][ T6858] netlink: 132 bytes leftover after parsing attributes in process `syz.3.281'. [ 104.959274][ T6854] netlink: 'syz.1.279': attribute type 1 has an invalid length. [ 104.983627][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'. [ 105.397918][ T5836] Bluetooth: hci0: command tx timeout [ 105.415655][ T6874] netlink: 256 bytes leftover after parsing attributes in process `syz.0.285'. [ 105.467325][ T6877] netlink: 'syz.2.286': attribute type 30 has an invalid length. [ 105.500820][ T6877] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 105.517953][ T6877] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 105.614964][ T6878] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.624539][ T6878] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.648164][ T6862] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 105.859516][ T6878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.872516][ T6878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.894777][ T6882] netlink: 'syz.1.287': attribute type 4 has an invalid length. [ 106.026268][ T6878] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.035824][ T6878] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.046216][ T6878] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.055542][ T6878] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.252238][ T6874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.261644][ T6874] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.273525][ T6874] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.705205][ T6904] netlink: 140 bytes leftover after parsing attributes in process `syz.1.295'. [ 106.719201][ T6911] netlink: 'syz.0.296': attribute type 3 has an invalid length. [ 106.726921][ T6911] netlink: 24 bytes leftover after parsing attributes in process `syz.0.296'. [ 106.819403][ T6917] netlink: 60 bytes leftover after parsing attributes in process `syz.0.296'. [ 107.397996][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.307'. [ 107.475804][ T6948] netlink: 56 bytes leftover after parsing attributes in process `syz.4.306'. [ 107.485751][ T5836] Bluetooth: hci0: command 0x0c20 tx timeout [ 107.603980][ T6955] netlink: 'syz.3.310': attribute type 1 has an invalid length. [ 107.764376][ T6959] ax25_connect(): syz.4.312 uses autobind, please contact jreuter@yaina.de [ 107.962480][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.970103][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.113775][ T6961] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 108.221218][ T6989] bond0: Unable to set up delay as MII monitoring is disabled [ 109.357958][ T7024] __nla_validate_parse: 2 callbacks suppressed [ 109.357985][ T7024] netlink: 28 bytes leftover after parsing attributes in process `syz.2.325'. [ 109.396051][ T7024] netlink: 28 bytes leftover after parsing attributes in process `syz.2.325'. [ 110.155276][ T7064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.337'. [ 110.244801][ T7074] bridge1: entered promiscuous mode [ 110.268304][ T7074] bridge1: entered allmulticast mode [ 110.718691][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.341'. [ 110.766225][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.343'. [ 110.777524][ T7094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.785529][ T7094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.945557][ T7094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.957455][ T7094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.315023][ T7108] netlink: 'syz.3.347': attribute type 1 has an invalid length. [ 111.323672][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.347'. [ 111.380748][ T7113] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 111.512890][ T7115] netlink: 'syz.4.348': attribute type 27 has an invalid length. [ 111.549860][ T7103] netlink: 'syz.1.345': attribute type 11 has an invalid length. [ 111.558220][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.348'. [ 111.567915][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.348'. [ 111.696682][ T7103] netlink: 36 bytes leftover after parsing attributes in process `syz.1.345'. [ 111.864731][ T7125] netlink: 68 bytes leftover after parsing attributes in process `syz.0.352'. [ 112.315637][ T7147] openvswitch: netlink: Message has 8 unknown bytes. [ 112.455590][ T7151] netlink: 'syz.1.359': attribute type 12 has an invalid length. [ 114.343588][ T7172] pimreg: entered allmulticast mode [ 114.423809][ T7174] dvmrp0: entered allmulticast mode [ 114.457354][ T7174] pimreg: entered allmulticast mode [ 114.471558][ T7174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.488028][ T7174] batadv_slave_1: entered promiscuous mode [ 114.613339][ T7182] netlink: 'syz.4.367': attribute type 58 has an invalid length. [ 114.621429][ T7182] __nla_validate_parse: 2 callbacks suppressed [ 114.621447][ T7182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.367'. [ 114.646980][ T7189] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 114.654747][ T7189] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 114.683597][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'. [ 114.698218][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'. [ 115.985694][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.390'. [ 115.986747][ T7268] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 116.015504][ T7269] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.057141][ T7268] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 116.102387][ T7269] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.111046][ T7269] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 116.126782][ T7269] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 116.256109][ T7270] netlink: 'syz.4.390': attribute type 21 has an invalid length. [ 116.267923][ T7270] netlink: 132 bytes leftover after parsing attributes in process `syz.4.390'. [ 116.283272][ T7270] netlink: 'syz.4.390': attribute type 1 has an invalid length. [ 116.301374][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.390'. [ 116.325971][ T7287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.393'. [ 116.358241][ T7287] netlink: 32 bytes leftover after parsing attributes in process `syz.1.393'. [ 117.237013][ T7330] ip6tnl1: entered allmulticast mode [ 117.318565][ T7334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.409'. [ 117.350929][ T7336] lo: entered promiscuous mode [ 117.429973][ T7335] lo: left promiscuous mode [ 117.504494][ T7340] netlink: 68 bytes leftover after parsing attributes in process `syz.0.412'. [ 117.621623][ T7347] geneve2: entered promiscuous mode [ 117.633205][ T7347] geneve2: entered allmulticast mode [ 118.068906][ T7369] xt_time: unknown flags 0x4 [ 118.096873][ T7371] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 118.394855][ T7381] ax25_connect(): syz.1.424 uses autobind, please contact jreuter@yaina.de [ 118.412801][ T7384] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (16) [ 118.936728][ T7402] xt_l2tp: missing protocol rule (udp|l2tpip) [ 119.774815][ T7448] __nla_validate_parse: 4 callbacks suppressed [ 119.774837][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'. [ 120.079123][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 120.115161][ T7452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.439'. [ 120.358961][ T7461] netlink: 84 bytes leftover after parsing attributes in process `syz.4.440'. [ 120.694556][ T7472] netlink: 'syz.3.443': attribute type 8 has an invalid length. [ 121.012340][ T7485] xt_l2tp: missing protocol rule (udp|l2tpip) [ 121.049152][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.447'. [ 121.259751][ T7502] netlink: 68 bytes leftover after parsing attributes in process `syz.0.452'. [ 121.312048][ T7501] netlink: 'syz.3.454': attribute type 11 has an invalid length. [ 121.324864][ T7501] netlink: 224 bytes leftover after parsing attributes in process `syz.3.454'. [ 121.609726][ T7513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.457'. [ 121.658672][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.457'. [ 121.734623][ T7513] gretap1: entered promiscuous mode [ 121.788121][ T7515] ipvlan2: entered promiscuous mode [ 121.802017][ T7515] bridge0: port 3(ipvlan2) entered blocking state [ 121.852852][ T7515] bridge0: port 3(ipvlan2) entered disabled state [ 121.867939][ T7517] netlink: 32 bytes leftover after parsing attributes in process `syz.3.458'. [ 121.874847][ T7515] ipvlan2: entered allmulticast mode [ 121.893123][ T7515] bridge0: entered allmulticast mode [ 121.909471][ T7515] ipvlan2: left allmulticast mode [ 121.920850][ T7515] bridge0: left allmulticast mode [ 121.971952][ T7519] netlink: 'syz.3.458': attribute type 10 has an invalid length. [ 121.995494][ T7519] bridge0: port 3(team0) entered blocking state [ 122.013959][ T7519] bridge0: port 3(team0) entered disabled state [ 122.024860][ T7519] team0: entered allmulticast mode [ 122.042247][ T7519] team_slave_0: entered allmulticast mode [ 122.048511][ T7519] team_slave_1: entered allmulticast mode [ 122.056098][ T7519] team0: entered promiscuous mode [ 122.072090][ T7519] team_slave_0: entered promiscuous mode [ 122.092658][ T7519] team_slave_1: entered promiscuous mode [ 122.104239][ T7519] bridge0: port 3(team0) entered blocking state [ 122.110709][ T7519] bridge0: port 3(team0) entered forwarding state [ 122.421771][ T7531] netlink: 'syz.3.462': attribute type 1 has an invalid length. [ 122.582350][ T5836] Bluetooth: hci4: link tx timeout [ 122.589093][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 122.852749][ T7544] netlink: 'syz.1.465': attribute type 21 has an invalid length. [ 123.075663][ T7549] raw_sendmsg: syz.4.467 forgot to set AF_INET. Fix it! [ 123.548703][ T7568] netlink: 'syz.0.476': attribute type 1 has an invalid length. [ 123.600021][ T7568] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 124.191091][ T7591] dvmrp0: entered allmulticast mode [ 124.716931][ T7593] No such timeout policy "syz0" [ 124.751554][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 125.127178][ T7603] netlink: 'syz.2.484': attribute type 10 has an invalid length. [ 125.227784][ T7603] __nla_validate_parse: 4 callbacks suppressed [ 125.227808][ T7603] netlink: 2 bytes leftover after parsing attributes in process `syz.2.484'. [ 125.268575][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b15b400: rx timeout, send abort [ 125.277342][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b15b400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 125.371081][ T7603] team0: entered promiscuous mode [ 125.385134][ T7603] team_slave_0: entered promiscuous mode [ 125.407983][ T7603] team_slave_1: entered promiscuous mode [ 125.418175][ T7603] bridge0: port 3(team0) entered blocking state [ 125.434942][ T7603] bridge0: port 3(team0) entered disabled state [ 125.448423][ T7603] team0: entered allmulticast mode [ 125.467749][ T7603] team_slave_0: entered allmulticast mode [ 125.473734][ T7603] team_slave_1: entered allmulticast mode [ 125.500616][ T7603] bridge0: port 3(team0) entered blocking state [ 125.507085][ T7603] bridge0: port 3(team0) entered forwarding state [ 125.841755][ T7623] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 125.855748][ T7623] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 125.873707][ T7625] netlink: 20 bytes leftover after parsing attributes in process `syz.3.488'. [ 126.102715][ T7634] netlink: 'syz.1.489': attribute type 2 has an invalid length. [ 126.127630][ T7634] netlink: 'syz.1.489': attribute type 9 has an invalid length. [ 126.138022][ T7634] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.489'. [ 126.147291][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b158000: rx timeout, send abort [ 126.147509][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b16a000: rx timeout, send abort [ 126.155943][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b158000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 126.156092][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b16a000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 126.184085][ T7612] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 126.410916][ T7650] netlink: 28 bytes leftover after parsing attributes in process `syz.3.494'. [ 126.493934][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'. [ 126.855477][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 126.901350][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.497'. [ 127.304804][ T7676] pim6reg1: entered allmulticast mode [ 127.479896][ T7687] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 127.810138][ T7702] x_tables: duplicate underflow at hook 1 [ 127.847382][ T7695] netlink: 24 bytes leftover after parsing attributes in process `syz.2.508'. [ 127.910514][ T7702] macvtap1: entered promiscuous mode [ 127.932104][ T7702] macvtap1: entered allmulticast mode [ 127.963075][ T7702] vlan0: entered promiscuous mode [ 127.980972][ T7702] team0: Device macvtap1 failed to register rx_handler [ 127.995347][ T7702] vlan0: left promiscuous mode [ 128.065410][ T7705] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 128.194069][ T7716] netlink: 'syz.0.512': attribute type 1 has an invalid length. [ 128.284698][ T7720] FAULT_INJECTION: forcing a failure. [ 128.284698][ T7720] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 128.340943][ T7720] CPU: 0 UID: 0 PID: 7720 Comm: syz.2.513 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 128.351630][ T7720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 128.361746][ T7720] Call Trace: [ 128.365060][ T7720] [ 128.368027][ T7720] dump_stack_lvl+0x241/0x360 [ 128.372775][ T7720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.378026][ T7720] ? __pfx__printk+0x10/0x10 [ 128.382676][ T7720] ? __pfx_lock_release+0x10/0x10 [ 128.387773][ T7720] should_fail_ex+0x3b0/0x4e0 [ 128.392537][ T7720] _copy_from_iter+0x424/0x1c20 [ 128.397469][ T7720] ? __pfx__copy_from_iter+0x10/0x10 [ 128.402818][ T7720] ? __virt_addr_valid+0x183/0x530 [ 128.407960][ T7720] ? __virt_addr_valid+0x183/0x530 [ 128.413093][ T7720] ? __virt_addr_valid+0x45f/0x530 [ 128.418398][ T7720] ? __phys_addr_symbol+0x2f/0x70 [ 128.423451][ T7720] ? __check_object_size+0x47a/0x730 [ 128.428793][ T7720] l2cap_skbuff_fromiovec+0x9d/0x4f0 [ 128.434102][ T7720] ? skb_put+0x114/0x1f0 [ 128.438364][ T7720] l2cap_chan_send+0x389/0x2690 [ 128.443238][ T7720] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 128.449256][ T7720] ? l2cap_sock_sendmsg+0x1a4/0x2c0 [ 128.454503][ T7720] ? __pfx_l2cap_chan_send+0x10/0x10 [ 128.459820][ T7720] ? do_raw_spin_unlock+0x13c/0x8b0 [ 128.465080][ T7720] l2cap_sock_sendmsg+0x1b4/0x2c0 [ 128.470133][ T7720] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 128.475709][ T7720] __sock_sendmsg+0x221/0x270 [ 128.480433][ T7720] ____sys_sendmsg+0x52a/0x7e0 [ 128.485252][ T7720] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.490557][ T7720] ? __fget_files+0x2a/0x410 [ 128.495256][ T7720] ? __fget_files+0x2a/0x410 [ 128.499872][ T7720] __sys_sendmmsg+0x36a/0x720 [ 128.504661][ T7720] ? __pfx___sys_sendmmsg+0x10/0x10 [ 128.509886][ T7720] ? __pfx_lock_release+0x10/0x10 [ 128.514943][ T7720] ? kstrtouint_from_user+0x128/0x190 [ 128.520369][ T7720] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 128.526301][ T7720] ? ksys_write+0x22a/0x2b0 [ 128.530853][ T7720] ? __pfx_lock_release+0x10/0x10 [ 128.535924][ T7720] ? vfs_write+0x730/0xd30 [ 128.540361][ T7720] ? __mutex_unlock_slowpath+0x21e/0x790 [ 128.546030][ T7720] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 128.552043][ T7720] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 128.558400][ T7720] ? do_syscall_64+0x100/0x230 [ 128.563182][ T7720] __x64_sys_sendmmsg+0xa0/0xb0 [ 128.568062][ T7720] do_syscall_64+0xf3/0x230 [ 128.572582][ T7720] ? clear_bhb_loop+0x35/0x90 [ 128.577281][ T7720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.583201][ T7720] RIP: 0033:0x7f65b5385d29 [ 128.587638][ T7720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.607268][ T7720] RSP: 002b:00007f65b618d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 128.615718][ T7720] RAX: ffffffffffffffda RBX: 00007f65b5575fa0 RCX: 00007f65b5385d29 [ 128.623701][ T7720] RDX: 0000000000000001 RSI: 0000000020000d00 RDI: 0000000000000004 [ 128.631714][ T7720] RBP: 00007f65b618d090 R08: 0000000000000000 R09: 0000000000000000 [ 128.639716][ T7720] R10: 0000000004048010 R11: 0000000000000246 R12: 0000000000000001 [ 128.647709][ T7720] R13: 0000000000000000 R14: 00007f65b5575fa0 R15: 00007ffd540b50a8 [ 128.655763][ T7720] [ 128.987231][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'. [ 129.016003][ T7754] netlink: 152 bytes leftover after parsing attributes in process `syz.1.520'. [ 129.143124][ T7769] netlink: 16 bytes leftover after parsing attributes in process `syz.0.522'. [ 129.310419][ T7777] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 129.445514][ T7786] FAULT_INJECTION: forcing a failure. [ 129.445514][ T7786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.486486][ T7786] CPU: 0 UID: 0 PID: 7786 Comm: syz.1.529 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 129.497256][ T7786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 129.507365][ T7786] Call Trace: [ 129.510690][ T7786] [ 129.513661][ T7786] dump_stack_lvl+0x241/0x360 [ 129.518395][ T7786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.523675][ T7786] ? __pfx__printk+0x10/0x10 [ 129.528318][ T7786] ? __pfx_lock_release+0x10/0x10 [ 129.533405][ T7786] should_fail_ex+0x3b0/0x4e0 [ 129.538144][ T7786] _copy_from_iter+0x424/0x1c20 [ 129.543068][ T7786] ? __pfx__copy_from_iter+0x10/0x10 [ 129.548503][ T7786] ? __virt_addr_valid+0x183/0x530 [ 129.553666][ T7786] ? __virt_addr_valid+0x183/0x530 [ 129.558829][ T7786] ? __virt_addr_valid+0x45f/0x530 [ 129.563991][ T7786] ? __phys_addr_symbol+0x2f/0x70 [ 129.569066][ T7786] ? __check_object_size+0x47a/0x730 [ 129.574406][ T7786] l2cap_skbuff_fromiovec+0x9d/0x4f0 [ 129.579746][ T7786] ? skb_put+0x114/0x1f0 [ 129.584057][ T7786] l2cap_chan_send+0x389/0x2690 [ 129.588963][ T7786] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 129.594996][ T7786] ? l2cap_sock_sendmsg+0x1a4/0x2c0 [ 129.600255][ T7786] ? __pfx_l2cap_chan_send+0x10/0x10 [ 129.605696][ T7786] ? do_raw_spin_unlock+0x13c/0x8b0 [ 129.610954][ T7786] l2cap_sock_sendmsg+0x1b4/0x2c0 [ 129.616038][ T7786] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 129.621732][ T7786] __sock_sendmsg+0x221/0x270 [ 129.626466][ T7786] ____sys_sendmsg+0x52a/0x7e0 [ 129.631295][ T7786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.636646][ T7786] ? __fget_files+0x2a/0x410 [ 129.641297][ T7786] ? __fget_files+0x2a/0x410 [ 129.645967][ T7786] __sys_sendmmsg+0x36a/0x720 [ 129.650715][ T7786] ? __pfx___sys_sendmmsg+0x10/0x10 [ 129.655981][ T7786] ? __pfx_lock_release+0x10/0x10 [ 129.661058][ T7786] ? kstrtouint_from_user+0x128/0x190 [ 129.666539][ T7786] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 129.672502][ T7786] ? ksys_write+0x22a/0x2b0 [ 129.677096][ T7786] ? __pfx_lock_release+0x10/0x10 [ 129.682178][ T7786] ? vfs_write+0x730/0xd30 [ 129.686729][ T7786] ? __mutex_unlock_slowpath+0x21e/0x790 [ 129.692443][ T7786] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 129.698486][ T7786] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 129.704869][ T7786] ? do_syscall_64+0x100/0x230 [ 129.709689][ T7786] __x64_sys_sendmmsg+0xa0/0xb0 [ 129.714599][ T7786] do_syscall_64+0xf3/0x230 [ 129.719159][ T7786] ? clear_bhb_loop+0x35/0x90 [ 129.723886][ T7786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.729826][ T7786] RIP: 0033:0x7f5888d85d29 [ 129.734291][ T7786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.753952][ T7786] RSP: 002b:00007f5889b13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 129.762429][ T7786] RAX: ffffffffffffffda RBX: 00007f5888f75fa0 RCX: 00007f5888d85d29 [ 129.770448][ T7786] RDX: 0000000000000001 RSI: 0000000020000d00 RDI: 0000000000000004 [ 129.778483][ T7786] RBP: 00007f5889b13090 R08: 0000000000000000 R09: 0000000000000000 [ 129.786500][ T7786] R10: 0000000004048010 R11: 0000000000000246 R12: 0000000000000001 [ 129.794527][ T7786] R13: 0000000000000000 R14: 00007f5888f75fa0 R15: 00007ffc6ceda468 [ 129.802559][ T7786] [ 130.006096][ T7800] batadv_slave_0: entered promiscuous mode [ 130.024580][ T7800] batadv_slave_1: entered promiscuous mode [ 130.445115][ T7819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.485425][ T7823] netlink: 'syz.0.543': attribute type 4 has an invalid length. [ 130.523572][ T7825] netlink: 'syz.3.544': attribute type 3 has an invalid length. [ 130.604078][ T7827] __nla_validate_parse: 2 callbacks suppressed [ 130.604099][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.545'. [ 130.711420][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.546'. [ 130.809740][ T7799] batadv_slave_1: left promiscuous mode [ 130.815796][ T7799] batadv_slave_0: left promiscuous mode [ 130.913685][ T7845] sctp: [Deprecated]: syz.3.551 (pid 7845) Use of int in max_burst socket option. [ 130.913685][ T7845] Use struct sctp_assoc_value instead [ 130.944937][ T7845] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 131.272222][ T7852] netlink: 16 bytes leftover after parsing attributes in process `syz.4.555'. [ 131.285191][ T7858] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 131.286335][ T7857] IPVS: stopping master sync thread 7858 ... [ 131.356495][ T7852] batadv0: entered promiscuous mode [ 131.363987][ T7852] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 131.389044][ T7852] batadv0: left promiscuous mode [ 131.692928][ T7873] netlink: 'syz.0.557': attribute type 2 has an invalid length. [ 131.745138][ T7873] Tq€: entered promiscuous mode [ 131.850870][ T7875] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.874499][ T7880] tipc: Started in network mode [ 131.881812][ T7880] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 131.890808][ T7880] tipc: Enabled bearer , priority 0 [ 131.988660][ T7875] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.120782][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 132.139104][ T7875] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.198337][ T7895] netlink: 47 bytes leftover after parsing attributes in process `syz.4.566'. [ 132.290180][ T7875] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.349653][ T7901] netlink: 'syz.4.566': attribute type 1 has an invalid length. [ 132.357378][ T7901] netlink: 224 bytes leftover after parsing attributes in process `syz.4.566'. [ 132.447005][ T7905] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 132.447383][ T6985] IPVS: starting estimator thread 0... [ 132.458567][ T7875] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.494616][ T7875] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.526967][ T7875] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.558227][ T7907] IPVS: using max 18 ests per chain, 43200 per kthread [ 132.568794][ T7875] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.007835][ T6985] tipc: Node number set to 10136234 [ 133.162267][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.223244][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026d4a800: rx timeout, send abort [ 133.231751][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888026d4a800: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 133.267949][ T7938] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.402727][ T7938] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.424208][ T7940] lo speed is unknown, defaulting to 1000 [ 133.433422][ T7940] lo speed is unknown, defaulting to 1000 [ 133.453067][ T7940] lo speed is unknown, defaulting to 1000 [ 133.509250][ T7938] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.526238][ T7940] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 133.594896][ T7940] lo speed is unknown, defaulting to 1000 [ 133.632266][ T7940] lo speed is unknown, defaulting to 1000 [ 133.670426][ T7938] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.692903][ T7940] lo speed is unknown, defaulting to 1000 [ 133.728221][ T7942] lo speed is unknown, defaulting to 1000 [ 133.743433][ T7940] lo speed is unknown, defaulting to 1000 [ 133.771714][ T7938] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.794754][ T7940] lo speed is unknown, defaulting to 1000 [ 133.804235][ T7956] batadv_slave_1: entered promiscuous mode [ 133.829420][ T7955] batadv_slave_1: left promiscuous mode [ 133.955183][ T7938] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.016389][ T7938] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.078565][ T7963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.584'. [ 134.188824][ T7938] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.213203][ T7938] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.225830][ T7973] netlink: 'syz.3.586': attribute type 10 has an invalid length. [ 134.524614][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026d4bc00: rx timeout, send abort [ 134.533310][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888026d4bc00: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 134.632384][ T7992] netlink: 'syz.0.594': attribute type 12 has an invalid length. [ 134.691723][ T7976] netlink: 17212 bytes leftover after parsing attributes in process `syz.1.589'. [ 134.756027][ T7984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.589'. [ 135.577265][ T8015] netlink: 64 bytes leftover after parsing attributes in process `syz.1.601'. [ 135.603708][ T8017] netlink: 16 bytes leftover after parsing attributes in process `syz.4.600'. [ 135.640790][ T8021] netlink: 'syz.2.602': attribute type 1 has an invalid length. [ 135.657689][ T8019] netlink: 'syz.2.602': attribute type 1 has an invalid length. [ 136.286826][ T8048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.610'. [ 136.747947][ T8075] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20001 [ 136.859446][ T8077] netlink: 'syz.0.616': attribute type 3 has an invalid length. [ 137.218536][ T8093] netlink: 32 bytes leftover after parsing attributes in process `syz.0.621'. [ 137.252211][ T8093] netlink: 32 bytes leftover after parsing attributes in process `syz.0.621'. [ 137.267300][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.623'. [ 137.359844][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.622'. [ 137.369265][ T8102] openvswitch: netlink: Missing key (keys=40, expected=100) [ 137.416440][ T8107] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4. [ 137.869961][ T8124] tipc: Enabling of bearer rejected, failed to enable media [ 137.963893][ T8127] netlink: 'syz.3.633': attribute type 2 has an invalid length. [ 137.984557][ T8127] netlink: 'syz.3.633': attribute type 8 has an invalid length. [ 138.003835][ T8127] netlink: 132 bytes leftover after parsing attributes in process `syz.3.633'. [ 138.216462][ T8131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.380289][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'. [ 138.420753][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.636'. [ 138.425978][ T8140] netlink: 'syz.2.638': attribute type 1 has an invalid length. [ 138.898648][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.645'. [ 138.923293][ T8166] netlink: 'syz.3.644': attribute type 10 has an invalid length. [ 138.937085][ T8166] netlink: 40 bytes leftover after parsing attributes in process `syz.3.644'. [ 138.959376][ T8166] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 139.157842][ T5843] Bluetooth: hci0: command 0x0c20 tx timeout [ 139.170820][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 139.347185][ T8180] x_tables: duplicate underflow at hook 1 [ 139.452528][ T8185] pim6reg1: entered promiscuous mode [ 139.459047][ T8185] pim6reg1: entered allmulticast mode [ 139.873348][ T8204] lo speed is unknown, defaulting to 1000 [ 139.929120][ T8205] netlink: 'syz.4.656': attribute type 1 has an invalid length. [ 141.141954][ T8242] netlink: 'syz.0.668': attribute type 10 has an invalid length. [ 141.368298][ T8242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.398901][ T8242] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 141.691166][ T8260] netlink: 'syz.1.670': attribute type 21 has an invalid length. [ 141.712167][ T8260] __nla_validate_parse: 10 callbacks suppressed [ 141.712191][ T8260] netlink: 156 bytes leftover after parsing attributes in process `syz.1.670'. [ 141.826473][ T8253] syzkaller0: entered promiscuous mode [ 141.849917][ T8253] syzkaller0: entered allmulticast mode [ 142.092173][ T8279] netlink: 'syz.1.675': attribute type 1 has an invalid length. [ 142.121196][ T8279] netlink: 'syz.1.675': attribute type 2 has an invalid length. [ 143.534179][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 144.270115][ T8280] netlink: 'syz.1.675': attribute type 11 has an invalid length. [ 144.513254][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.678'. [ 145.569049][ T8317] netlink: 'syz.1.683': attribute type 10 has an invalid length. [ 145.577059][ T8317] netlink: 40 bytes leftover after parsing attributes in process `syz.1.683'. [ 146.464650][ T8300] tunl0: entered promiscuous mode [ 146.471177][ T8300] vlan2: entered promiscuous mode [ 146.476415][ T8300] vlan2: entered allmulticast mode [ 146.482031][ T8300] tunl0: entered allmulticast mode [ 146.732952][ T8313] netlink: 'syz.3.680': attribute type 5 has an invalid length. [ 146.751764][ T8317] ipvlan1: entered promiscuous mode [ 146.778495][ T8317] ipvlan1: entered allmulticast mode [ 146.783870][ T8317] veth0_vlan: entered allmulticast mode [ 146.809484][ T8317] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 147.032455][ T8329] ax25_connect(): syz.3.687 uses autobind, please contact jreuter@yaina.de [ 147.050387][ T8332] netlink: 76 bytes leftover after parsing attributes in process `syz.1.688'. [ 147.071132][ T8332] nbd: couldn't find device at index 0 [ 147.219234][ T8339] netlink: 68 bytes leftover after parsing attributes in process `syz.0.690'. [ 147.288974][ T8341] syzkaller0: refused to change device tx_queue_len [ 147.381068][ T8346] lo speed is unknown, defaulting to 1000 [ 147.478402][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.694'. [ 147.533013][ T8350] ip6gre1: entered allmulticast mode [ 147.588374][ T8355] vlan0: entered allmulticast mode [ 147.597685][ T8355] syz_tun: entered allmulticast mode [ 147.636275][ T8355] syz_tun: left allmulticast mode [ 147.848201][ T8362] netlink: 'syz.0.697': attribute type 11 has an invalid length. [ 148.125341][ T8380] lo speed is unknown, defaulting to 1000 [ 148.270121][ T8388] bridge0: entered promiscuous mode [ 148.277265][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.704'. [ 148.315779][ T8388] team0: left allmulticast mode [ 148.321240][ T8388] team_slave_0: left allmulticast mode [ 148.326844][ T8388] team_slave_1: left allmulticast mode [ 148.332700][ T8388] team0: left promiscuous mode [ 148.367797][ T8388] team_slave_0: left promiscuous mode [ 148.373727][ T8388] team_slave_1: left promiscuous mode [ 148.380215][ T8388] bridge0: port 3(team0) entered disabled state [ 148.465924][ T8398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.708'. [ 148.476542][ T8388] bridge_slave_1: left allmulticast mode [ 148.483138][ T8388] bridge_slave_1: left promiscuous mode [ 148.490160][ T8388] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.504270][ T8388] bridge_slave_0: left allmulticast mode [ 148.527971][ T8388] bridge_slave_0: left promiscuous mode [ 148.535247][ T8388] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.625368][ T8388] bridge0 (unregistering): left promiscuous mode [ 148.942076][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.709'. [ 148.986073][ T8406] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 149.035457][ T8406] macvlan3: entered allmulticast mode [ 149.061710][ T8406] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 149.451250][ T8425] ip6t_srh: unknown srh invflags 92A7 [ 149.466633][ T8427] netlink: 277 bytes leftover after parsing attributes in process `syz.4.716'. [ 149.654477][ T8432] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 149.754064][ T8410] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 149.754628][ T8436] tipc: Started in network mode [ 149.828631][ T8445] netlink: 24 bytes leftover after parsing attributes in process `syz.3.721'. [ 149.828751][ T8436] tipc: Node identity 6, cluster identity 1 [ 149.857764][ T8436] tipc: Node number set to 6 [ 149.892140][ T8447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.903504][ T8430] delete_channel: no stack [ 150.272329][ T8469] x_tables: duplicate underflow at hook 3 [ 150.298372][ T8469] x_tables: duplicate underflow at hook 3 [ 150.463941][ T8483] netlink: zone id is out of range [ 150.482521][ T8483] netlink: zone id is out of range [ 150.495909][ T8483] netlink: zone id is out of range [ 150.519457][ T8483] netlink: zone id is out of range [ 150.547313][ T8491] netlink: 32 bytes leftover after parsing attributes in process `syz.1.732'. [ 150.673692][ T8493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.733'. [ 151.754266][ T8556] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 151.786049][ T8556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.276630][ T8576] __nla_validate_parse: 9 callbacks suppressed [ 152.276654][ T8576] netlink: 36 bytes leftover after parsing attributes in process `syz.1.759'. [ 152.373878][ T8582] netlink: 'syz.0.758': attribute type 5 has an invalid length. [ 152.405811][ T8582] netlink: 40 bytes leftover after parsing attributes in process `syz.0.758'. [ 152.417938][ T8582] nbd: illegal input index 16744192 [ 152.515198][ T8582] lo speed is unknown, defaulting to 1000 [ 152.734179][ T8599] netlink: 'syz.4.764': attribute type 1 has an invalid length. [ 152.919394][ T8615] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 153.324995][ T8636] netlink: 20 bytes leftover after parsing attributes in process `syz.3.770'. [ 153.357783][ T8638] netlink: 104 bytes leftover after parsing attributes in process `syz.1.772'. [ 153.368902][ T8635] lo speed is unknown, defaulting to 1000 [ 153.379551][ T8639] netlink: 104 bytes leftover after parsing attributes in process `syz.1.772'. [ 153.561395][ T8650] netlink: 'syz.1.775': attribute type 2 has an invalid length. [ 153.607775][ T8652] netlink: 32 bytes leftover after parsing attributes in process `syz.2.776'. [ 153.621993][ T8650] netlink: 'syz.1.775': attribute type 9 has an invalid length. [ 153.675665][ T8650] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.775'. [ 154.196479][ T8678] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 154.309173][ T8685] set match dimension is over the limit! [ 154.344702][ T8685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.617273][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.789'. [ 154.689370][ T8700] x_tables: duplicate underflow at hook 3 [ 154.781022][ T8697] mac80211_hwsim hwsim6 wlan0 (unregistering): left promiscuous mode [ 154.814268][ T8708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.794'. [ 154.851777][ T8710] netlink: 'syz.1.795': attribute type 1 has an invalid length. [ 155.141379][ T8723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.799'. [ 155.716787][ T8775] netlink: 'syz.0.811': attribute type 11 has an invalid length. [ 155.771522][ T8778] lo speed is unknown, defaulting to 1000 [ 155.892890][ T8782] lo speed is unknown, defaulting to 1000 [ 155.923639][ T8790] xt_limit: Overflow, try lower: 262144/524288 [ 156.377302][ T8813] (unnamed net_device) (uninitialized): (slave team0): Device is not bonding slave [ 156.388623][ T8813] (unnamed net_device) (uninitialized): option active_slave: invalid value (team0) [ 156.466164][ T8771] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 156.496893][ T8814] bond2: entered promiscuous mode [ 156.505669][ T8814] bond2: entered allmulticast mode [ 156.514894][ T8814] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.715429][ T8823] IPVS: length: 253 != 24 [ 156.805739][ T8826] team0: Device ipvlan2 failed to register rx_handler [ 157.356128][ T8851] netlink: 'syz.1.835': attribute type 10 has an invalid length. [ 157.382182][ T8851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.427177][ T8851] team0: Port device batadv0 added [ 157.485026][ T8860] __nla_validate_parse: 8 callbacks suppressed [ 157.485048][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.838'. [ 157.583489][ T8862] lo speed is unknown, defaulting to 1000 [ 157.733330][ T8871] netlink: 'syz.1.841': attribute type 1 has an invalid length. [ 157.797994][ T8871] netlink: 224 bytes leftover after parsing attributes in process `syz.1.841'. [ 157.838561][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'. [ 158.504894][ T8895] syzkaller0: entered promiscuous mode [ 158.518181][ T8895] syzkaller0: entered allmulticast mode [ 158.606617][ T8899] netlink: 20 bytes leftover after parsing attributes in process `syz.4.848'. [ 158.752717][ T8910] netlink: 'syz.1.853': attribute type 1 has an invalid length. [ 158.798852][ T8910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.853'. [ 158.935874][ T8914] SET target dimension over the limit! [ 159.413963][ T8932] Bluetooth: MGMT ver 1.23 [ 161.260550][ T8939] netlink: 24 bytes leftover after parsing attributes in process `syz.4.861'. [ 161.551829][ T8955] netlink: 'syz.3.866': attribute type 5 has an invalid length. [ 161.581166][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.867'. [ 161.861343][ T8969] syz.3.870[8969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.861463][ T8969] syz.3.870[8969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.890703][ T8967] lo speed is unknown, defaulting to 1000 [ 161.908142][ T8969] syz.3.870[8969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.971780][ T8975] netlink: 'syz.1.869': attribute type 5 has an invalid length. [ 162.023558][ T8976] macsec0: entered promiscuous mode [ 162.101194][ T8967] veth1_macvtap: left promiscuous mode [ 162.160721][ T8967] macsec0 (unregistering): left promiscuous mode [ 162.388051][ T8990] netlink: 32 bytes leftover after parsing attributes in process `syz.0.877'. [ 162.412323][ T8992] xt_ecn: cannot match TCP bits for non-tcp packets [ 162.898175][ T9002] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.879'. [ 162.913182][ T9001] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.879'. [ 162.965363][ T9001] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.879'. [ 162.988334][ T9001] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.879'. [ 163.008381][ T9001] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.879'. [ 163.069406][ T9005] netlink: zone id is out of range [ 163.088887][ T9005] netlink: zone id is out of range [ 163.094120][ T9005] netlink: zone id is out of range [ 163.110654][ T9005] netlink: set zone limit has 8 unknown bytes [ 163.119000][ T9001] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.879'. [ 163.135342][ T9001] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.879'. [ 163.135468][ T9007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.881'. [ 163.161150][ T9001] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.879'. [ 163.188997][ T9007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.881'. [ 163.453679][ T9017] netlink: 'syz.1.884': attribute type 15 has an invalid length. [ 163.465461][ T9020] netlink: 'syz.4.885': attribute type 10 has an invalid length. [ 163.481258][ T9017] netlink: 'syz.1.884': attribute type 1 has an invalid length. [ 163.954457][ T9049] netlink: 'syz.1.892': attribute type 4 has an invalid length. [ 164.049090][ T9043] lo speed is unknown, defaulting to 1000 [ 164.086417][ T9052] syz.4.890: vmalloc error: size 27262976, failed to allocated page array size 53248, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 164.168753][ T9059] syz.0.894[9059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.168860][ T9059] syz.0.894[9059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.227772][ T9052] CPU: 1 UID: 0 PID: 9052 Comm: syz.4.890 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 164.228284][ T9059] syz.0.894[9059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.239025][ T9052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 164.239050][ T9052] Call Trace: [ 164.239060][ T9052] [ 164.239070][ T9052] dump_stack_lvl+0x241/0x360 [ 164.239119][ T9052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.239150][ T9052] ? __pfx__printk+0x10/0x10 [ 164.239184][ T9052] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 164.239220][ T9052] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 164.239264][ T9052] warn_alloc+0x278/0x410 [ 164.309348][ T9052] ? __pfx_warn_alloc+0x10/0x10 [ 164.314242][ T9052] ? translate_table+0x196/0x21f0 [ 164.319320][ T9052] ? __get_vm_area_node+0x1c8/0x2d0 [ 164.324590][ T9052] ? __get_vm_area_node+0x25c/0x2d0 [ 164.329863][ T9052] __vmalloc_node_range_noprof+0x62f/0x1380 [ 164.335805][ T9052] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 164.341587][ T9052] ? rcu_is_watching+0x15/0xb0 [ 164.346465][ T9052] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 164.352822][ T9052] ? rcu_is_watching+0x15/0xb0 [ 164.357616][ T9052] ? trace_kmalloc+0x1f/0xd0 [ 164.362237][ T9052] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 164.367734][ T9052] ? __kvmalloc_node_noprof+0x72/0x190 [ 164.373221][ T9052] __kvmalloc_node_noprof+0x142/0x190 [ 164.378616][ T9052] ? translate_table+0x196/0x21f0 [ 164.383665][ T9052] translate_table+0x196/0x21f0 [ 164.388555][ T9052] ? __pfx___might_resched+0x10/0x10 [ 164.393856][ T9052] ? __might_fault+0xaa/0x120 [ 164.398550][ T9052] ? __pfx_translate_table+0x10/0x10 [ 164.403866][ T9052] ? __might_fault+0xaa/0x120 [ 164.408559][ T9052] ? __might_fault+0xc6/0x120 [ 164.413259][ T9052] ? _copy_from_user+0x99/0xc0 [ 164.418108][ T9052] ? copy_from_sockptr_offset+0x6b/0xb0 [ 164.423696][ T9052] do_arpt_set_ctl+0x101c/0x1650 [ 164.428680][ T9052] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 164.434002][ T9052] ? __pfx___mutex_trylock_common+0x10/0x10 [ 164.439921][ T9052] ? nf_setsockopt+0x240/0x2c0 [ 164.444705][ T9052] ? __pfx_lock_release+0x10/0x10 [ 164.449749][ T9052] ? rcu_is_watching+0x15/0xb0 [ 164.454548][ T9052] ? __mutex_unlock_slowpath+0x21e/0x790 [ 164.460203][ T9052] ? __pfx___mutex_lock+0x10/0x10 [ 164.465248][ T9052] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 164.471252][ T9052] ? aa_sk_perm+0x96d/0xab0 [ 164.475789][ T9052] ? __pfx_aa_sk_perm+0x10/0x10 [ 164.480667][ T9052] nf_setsockopt+0x295/0x2c0 [ 164.485282][ T9052] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 164.491201][ T9052] do_sock_setsockopt+0x3af/0x720 [ 164.496250][ T9052] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 164.501851][ T9052] ? __fget_files+0x395/0x410 [ 164.506641][ T9052] ? __fget_files+0x2a/0x410 [ 164.511263][ T9052] __x64_sys_setsockopt+0x1ee/0x280 [ 164.516489][ T9052] do_syscall_64+0xf3/0x230 [ 164.521016][ T9052] ? clear_bhb_loop+0x35/0x90 [ 164.525720][ T9052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.531633][ T9052] RIP: 0033:0x7f7525985d29 [ 164.536065][ T9052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.555960][ T9052] RSP: 002b:00007f752673e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 164.564403][ T9052] RAX: ffffffffffffffda RBX: 00007f7525b76080 RCX: 00007f7525985d29 [ 164.572399][ T9052] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000004 [ 164.580390][ T9052] RBP: 00007f7525a01aa8 R08: 0000000000000068 R09: 0000000000000000 [ 164.588382][ T9052] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 164.596367][ T9052] R13: 0000000000000000 R14: 00007f7525b76080 R15: 00007fff11427818 [ 164.604371][ T9052] [ 164.648132][ T9052] Mem-Info: [ 164.651346][ T9052] active_anon:4499 inactive_anon:0 isolated_anon:0 [ 164.651346][ T9052] active_file:1570 inactive_file:38287 isolated_file:0 [ 164.651346][ T9052] unevictable:768 dirty:222 writeback:0 [ 164.651346][ T9052] slab_reclaimable:10809 slab_unreclaimable:103409 [ 164.651346][ T9052] mapped:29649 shmem:2540 pagetables:654 [ 164.651346][ T9052] sec_pagetables:0 bounce:0 [ 164.651346][ T9052] kernel_misc_reclaimable:0 [ 164.651346][ T9052] free:1336104 free_pcp:235 free_cma:0 [ 164.658055][ T9066] netlink: 'syz.3.896': attribute type 4 has an invalid length. [ 164.767752][ T9052] Node 0 active_anon:18896kB inactive_anon:0kB active_file:6280kB inactive_file:153076kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119596kB dirty:888kB writeback:0kB shmem:9624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11704kB pagetables:2516kB sec_pagetables:0kB all_unreclaimable? no [ 164.773815][ T9067] netlink: 'syz.3.896': attribute type 4 has an invalid length. [ 164.837796][ T9052] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 164.890313][ T9052] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 165.007630][ T9052] lowmem_reserve[]: 0 2465 2466 0 0 [ 165.013017][ T9052] Node 0 DMA32 free:1417708kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:22060kB inactive_anon:0kB active_file:6280kB inactive_file:152244kB unevictable:1536kB writepending:888kB present:3129332kB managed:2552756kB mlocked:0kB bounce:0kB free_pcp:2824kB local_pcp:2256kB free_cma:0kB [ 165.089250][ T9052] lowmem_reserve[]: 0 0 0 0 0 [ 165.094100][ T9052] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 165.154834][ T9073] tipc: Can't bind to reserved service type 1 [ 165.165873][ T9052] lowmem_reserve[]: 0 0 0 0 0 [ 165.176797][ T9052] Node 1 Normal free:3906084kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 165.186494][ T9077] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.218532][ T9052] lowmem_reserve[]: 0 0 0 0 0 [ 165.231441][ T9052] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 165.263602][ T9078] netlink: 'syz.0.901': attribute type 2 has an invalid length. [ 165.268197][ T9052] Node 0 DMA32: 3*4kB (UME) 460*8kB (UE) 565*16kB (UME) 268*32kB (UE) 111*64kB (UME) 118*128kB (UME) 112*256kB (UME) 35*512kB (UME) 45*1024kB (UM) 7*2048kB (U) 309*4096kB (UM) = 1416188kB [ 165.310721][ T9052] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 165.313576][ T9078] veth4: entered allmulticast mode [ 165.340131][ T9052] Node 1 Normal: 265*4kB (UME) 64*8kB (UME) 42*16kB (UME) 219*32kB (UME) 108*64kB (UME) 38*128kB (UME) 20*256kB (UME) 10*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3906084kB [ 165.372176][ T9052] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 165.382852][ T9052] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 165.393546][ T9052] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 165.403426][ T9052] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 165.413192][ T9052] 42556 total pagecache pages [ 165.418564][ T9052] 0 pages in swap cache [ 165.422942][ T9052] Free swap = 124996kB [ 165.427668][ T9052] Total swap = 124996kB [ 165.457663][ T9052] 2097051 pages RAM [ 165.461546][ T9052] 0 pages HighMem/MovableOnly [ 165.476553][ T9052] 427012 pages reserved [ 165.486701][ T9052] 0 pages cma reserved [ 165.574583][ T9084] netlink: 'syz.2.903': attribute type 1 has an invalid length. [ 165.617286][ T9088] netlink: 'syz.0.905': attribute type 1 has an invalid length. [ 165.730454][ T9089] bond2 (unregistering): Released all slaves [ 165.952897][ T9108] can: request_module (can-proto-3) failed. [ 166.216931][ T9112] @ÿ: renamed from bond_slave_0 (while UP) [ 167.180936][ T9183] netlink: 'syz.3.928': attribute type 21 has an invalid length. [ 167.435460][ T9200] veth0_vlan: left promiscuous mode [ 167.442381][ T9200] vlan0: entered promiscuous mode [ 167.480619][ T9200] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 168.112025][ T9213] __nla_validate_parse: 31 callbacks suppressed [ 168.112047][ T9213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.935'. [ 168.188800][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.939'. [ 168.352598][ T9230] lo speed is unknown, defaulting to 1000 [ 169.245958][ T9263] netlink: 88 bytes leftover after parsing attributes in process `syz.3.947'. [ 169.276329][ T9256] netlink: 16 bytes leftover after parsing attributes in process `syz.4.949'. [ 169.317090][ T9253] netlink: 16 bytes leftover after parsing attributes in process `syz.4.949'. [ 169.599441][ T9280] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.954'. [ 169.721813][ T9285] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 169.804161][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.956'. [ 169.892630][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'. [ 170.197194][ T9307] netlink: 60 bytes leftover after parsing attributes in process `syz.0.963'. [ 170.258684][ T9307] netlink: 44 bytes leftover after parsing attributes in process `syz.0.963'. [ 170.392853][ T9311] lo speed is unknown, defaulting to 1000 [ 171.033723][ T9313] block nbd3: not configured, cannot reconfigure [ 171.118481][ T9351] xt_l2tp: missing protocol rule (udp|l2tpip) [ 171.862178][ T9368] bridge0: port 3(team0) entered disabled state [ 171.868971][ T9368] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.876510][ T9368] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.910654][ T9368] bridge0: left promiscuous mode [ 172.098571][ T9368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.179984][ T9368] veth0_vlan: left allmulticast mode [ 172.185406][ T9368] vlan0: left allmulticast mode [ 172.216978][ T9368] macvtap0: left promiscuous mode [ 172.276749][ T9368] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 172.286612][ T9368] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 172.296172][ T9368] ip6tnl1: left allmulticast mode [ 172.332424][ T9368] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.341949][ T9368] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.356495][ T9368] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.365461][ T9368] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.374984][ T9368] geneve2: left promiscuous mode [ 172.380237][ T9368] geneve2: left allmulticast mode [ 173.046616][ T9422] netlink: 'syz.3.991': attribute type 1 has an invalid length. [ 173.452017][ T9433] __nla_validate_parse: 4 callbacks suppressed [ 173.452040][ T9433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.995'. [ 173.879557][ T5836] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 175.805035][ T9434] dvmrp8: entered allmulticast mode [ 175.832375][ T9436] dvmrp8: left allmulticast mode [ 175.923555][ T9456] netlink: 'syz.2.998': attribute type 29 has an invalid length. [ 176.249797][ T9485] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1005'. [ 176.273744][ T9484] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 176.300424][ T9483] xt_l2tp: missing protocol rule (udp|l2tpip) [ 177.377318][ T9503] lo speed is unknown, defaulting to 1000 [ 178.015882][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1025'. [ 178.047410][ T9541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1025'. [ 178.059932][ T9539] xt_l2tp: missing protocol rule (udp|l2tpip) [ 178.191110][ T9546] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1026'. [ 178.362794][ T9552] tipc: Enabling of bearer rejected, failed to enable media [ 178.463298][ T9558] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 178.557478][ T9563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1028'. [ 178.628407][ T9563] nbd: socks must be embedded in a SOCK_ITEM attr [ 178.874931][ T9577] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1035'. [ 179.200424][ T9590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1040'. [ 180.028987][ T9626] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1051'. [ 180.616996][ T9661] syzkaller1: entered promiscuous mode [ 180.622652][ T9661] syzkaller1: entered allmulticast mode [ 180.819953][ T9668] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 180.864687][ T9677] xt_hashlimit: invalid rate [ 181.020669][ T9686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1067'. [ 181.074190][ T9686] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1067'. [ 181.189022][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1065'. [ 181.976541][ T9737] xt_l2tp: missing protocol rule (udp|l2tpip) [ 182.262717][ T9748] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1081'. [ 182.292717][ T9748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1081'. [ 182.313323][ T9748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1081'. [ 182.481772][ T9753] netlink: 'syz.4.1082': attribute type 1 has an invalid length. [ 182.527817][ T9753] 8021q: adding VLAN 0 to HW filter on device bond4 [ 182.561931][ T9753] bond4: (slave bridge5): Enslaving as an active interface with a down link [ 183.414103][ T9776] team0: No ports can be present during mode change [ 183.434003][ T9788] tap0: tun_chr_ioctl cmd 2147767517 [ 183.680742][ T9798] xt_l2tp: missing protocol rule (udp|l2tpip) [ 183.705989][ T9800] lo speed is unknown, defaulting to 1000 [ 183.850135][ T9812] netlink: 'syz.1.1099': attribute type 4 has an invalid length. [ 184.004890][ T9821] __nla_validate_parse: 4 callbacks suppressed [ 184.004916][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1101'. [ 184.292215][ T9800] lo speed is unknown, defaulting to 1000 [ 184.462433][ T9833] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1104'. [ 184.585590][ T9826] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1103'. [ 184.897279][ T9833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.941109][ T9833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.191520][ T9833] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.206847][ T9833] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.218990][ T9833] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.228170][ T9833] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.324548][ T9826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.342479][ T9826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.352246][ T9826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.368833][ T9826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.420670][ T9867] netlink: 'syz.3.1110': attribute type 8 has an invalid length. [ 185.470209][ T9843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.489105][ T9843] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.511643][ T9843] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.744467][ T6986] lo speed is unknown, defaulting to 1000 [ 185.780886][ T9877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1113'. [ 185.812964][ T9879] netlink: 'syz.4.1114': attribute type 1 has an invalid length. [ 185.838037][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1114'. [ 186.274113][ T9912] netlink: 'syz.3.1122': attribute type 1 has an invalid length. [ 186.291312][ T9912] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1122'. [ 186.618183][ T9920] bridge0: port 1(gretap0) entered blocking state [ 186.625454][ T9920] bridge0: port 1(gretap0) entered disabled state [ 186.632573][ T9920] gretap0: entered allmulticast mode [ 186.640123][ T9920] gretap0: entered promiscuous mode [ 186.655055][ T9920] gretap0: left allmulticast mode [ 186.660495][ T9920] gretap0: left promiscuous mode [ 186.665908][ T9920] bridge0: port 1(gretap0) entered disabled state [ 186.752873][ T9922] vlan2: entered promiscuous mode [ 186.768047][ T9922] vlan2: entered allmulticast mode [ 186.774349][ T9922] vlan0: entered allmulticast mode [ 186.795046][ T9922] vlan0: entered promiscuous mode [ 186.813108][ T9922] team0: Port device vlan2 added [ 186.935458][ T9928] Cannot find del_set index 3 as target [ 187.169290][ T9936] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 187.192667][ T9939] xt_hashlimit: max too large, truncated to 1048576 [ 187.328086][ T9948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1132'. [ 187.422611][ T9951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1131'. [ 187.517785][ T9940] veth0_to_team: entered promiscuous mode [ 187.533319][ T9940] veth0_to_team: entered allmulticast mode [ 187.657896][ T9966] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1136'. [ 187.923347][ T9976] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1139'. [ 187.993872][ T9978] xt_l2tp: missing protocol rule (udp|l2tpip) [ 189.174755][ T9994] __nla_validate_parse: 1 callbacks suppressed [ 189.174779][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1146'. [ 189.211189][ T9994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1146'. [ 190.147215][T10048] xt_l2tp: missing protocol rule (udp|l2tpip) [ 190.656406][T10076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.687677][T10076] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.699369][T10076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.182771][T10103] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1172'. [ 191.206594][T10103] x_tables: duplicate underflow at hook 2 [ 191.215307][T10099] bridge0: port 3(vlan1) entered blocking state [ 191.259043][T10099] bridge0: port 3(vlan1) entered disabled state [ 191.265814][T10099] vlan1: entered allmulticast mode [ 191.276816][T10099] bond0: entered allmulticast mode [ 191.291371][T10099] bond_slave_0: entered allmulticast mode [ 191.309537][T10099] bond_slave_1: entered allmulticast mode [ 191.326823][T10099] vlan1: entered promiscuous mode [ 191.339720][T10099] bond0: entered promiscuous mode [ 191.345090][T10099] bond_slave_0: entered promiscuous mode [ 191.351953][T10099] bond_slave_1: entered promiscuous mode [ 191.359092][T10099] bridge0: port 3(vlan1) entered blocking state [ 191.365875][T10099] bridge0: port 3(vlan1) entered listening state [ 191.443986][T10108] lo speed is unknown, defaulting to 1000 [ 191.718909][T10121] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1177'. [ 191.728359][T10122] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1177'. [ 191.954283][T10127] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1178'. [ 192.264950][T10138] xt_l2tp: missing protocol rule (udp|l2tpip) [ 192.365507][T10144] delete_channel: no stack [ 192.455655][T10139] siw: device registration error -23 [ 192.569136][T10160] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1174'. [ 192.711556][T10167] geneve2: entered promiscuous mode [ 192.726982][T10167] geneve2: entered allmulticast mode [ 193.058347][T10178] netlink: 'syz.4.1193': attribute type 1 has an invalid length. [ 193.504611][T10203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1196'. [ 193.540014][T10203] netlink: 'syz.1.1196': attribute type 1 has an invalid length. [ 193.569947][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1196'. [ 193.855519][T10218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1202'. [ 193.887324][T10216] lo speed is unknown, defaulting to 1000 [ 194.174852][T10227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.188299][T10233] __nla_validate_parse: 3 callbacks suppressed [ 194.188329][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1207'. [ 194.272662][T10230] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 194.308191][T10230] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 194.375867][T10236] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1208'. [ 194.386985][T10238] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1209'. [ 194.713660][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1211'. [ 194.719116][T10250] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1212'. [ 194.739808][T10250] netem: unknown loss type 13 [ 194.750616][T10250] netem: change failed [ 194.788642][T10248] netlink: 'syz.1.1211': attribute type 21 has an invalid length. [ 194.806921][T10248] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1211'. [ 194.885528][T10263] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 195.110177][T10274] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1219'. [ 195.147737][T10271] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.393512][T10291] GUP no longer grows the stack in syz.3.1225 (10291): 20006000-2000a000 (20005000) [ 195.409882][T10291] CPU: 1 UID: 0 PID: 10291 Comm: syz.3.1225 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 195.420738][T10291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 195.430854][T10291] Call Trace: [ 195.434233][T10291] [ 195.437221][T10291] dump_stack_lvl+0x241/0x360 [ 195.442020][T10291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.447288][T10291] ? __pfx__printk+0x10/0x10 [ 195.452293][T10291] ? find_vma+0xf9/0x170 [ 195.456613][T10291] ? vma_is_secretmem+0xd/0x50 [ 195.461449][T10291] ? check_vma_flags+0x52b/0x5a0 [ 195.466457][T10291] __get_user_pages+0x4385/0x49e0 [ 195.471571][T10291] ? 0xffffffffa00007c8 [ 195.475849][T10291] ? __pfx___get_user_pages+0x10/0x10 [ 195.481365][T10291] __gup_longterm_locked+0x49a/0x17f0 [ 195.486786][T10291] ? __pfx___might_resched+0x10/0x10 [ 195.492154][T10291] ? __pfx___gup_longterm_locked+0x10/0x10 [ 195.497996][T10291] ? down_read+0x82b/0xa40 [ 195.502458][T10291] ? is_valid_gup_args+0x124/0x200 [ 195.507602][T10291] pin_user_pages+0x137/0x1f0 [ 195.512306][T10291] ? __pfx_pin_user_pages+0x10/0x10 [ 195.517527][T10291] ? trace_kmalloc+0x1f/0xd0 [ 195.522203][T10291] xdp_umem_create+0x978/0xf30 [ 195.527011][T10291] xsk_setsockopt+0x732/0x950 [ 195.531749][T10291] ? __pfx_xsk_setsockopt+0x10/0x10 [ 195.536984][T10291] ? __pfx_lock_acquire+0x10/0x10 [ 195.542033][T10291] ? aa_sock_opt_perm+0x79/0x120 [ 195.547019][T10291] ? __pfx_xsk_setsockopt+0x10/0x10 [ 195.552254][T10291] do_sock_setsockopt+0x3af/0x720 [ 195.557311][T10291] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 195.562915][T10291] ? __fget_files+0x395/0x410 [ 195.567642][T10291] ? __fget_files+0x2a/0x410 [ 195.572283][T10291] __x64_sys_setsockopt+0x1ee/0x280 [ 195.577532][T10291] do_syscall_64+0xf3/0x230 [ 195.582071][T10291] ? clear_bhb_loop+0x35/0x90 [ 195.586810][T10291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.592746][T10291] RIP: 0033:0x7f54c3985d29 [ 195.597273][T10291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.616911][T10291] RSP: 002b:00007f54c17f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 195.625358][T10291] RAX: ffffffffffffffda RBX: 00007f54c3b76080 RCX: 00007f54c3985d29 [ 195.633388][T10291] RDX: 0000000000000004 RSI: 000000000000011b RDI: 000000000000000d [ 195.641417][T10291] RBP: 00007f54c3a01aa8 R08: 0000000000000020 R09: 0000000000000000 [ 195.649436][T10291] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 195.657555][T10291] R13: 0000000000000000 R14: 00007f54c3b76080 R15: 00007fff23126958 [ 195.665636][T10291] [ 195.735829][T10299] veth4: entered allmulticast mode [ 195.866674][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1230'. [ 195.885185][T10307] netlink: 'syz.4.1227': attribute type 11 has an invalid length. [ 195.893499][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1230'. [ 195.919261][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1230'. [ 196.221157][T10318] : renamed from ipvlan1 [ 196.256118][T10318] SET target dimension over the limit! [ 196.306680][T10318] bridge0: port 4(gretap0) entered blocking state [ 196.329029][T10318] bridge0: port 4(gretap0) entered disabled state [ 196.348076][T10318] gretap0: entered allmulticast mode [ 196.354812][T10318] gretap0: entered promiscuous mode [ 196.369583][T10318] bridge0: port 4(gretap0) entered blocking state [ 196.376250][T10318] bridge0: port 4(gretap0) entered listening state [ 196.407854][T10330] netlink: 'syz.1.1234': attribute type 10 has an invalid length. [ 196.444437][T10324] netlink: 'syz.4.1236': attribute type 1 has an invalid length. [ 196.467684][T10318] netlink: 'syz.1.1234': attribute type 10 has an invalid length. [ 196.530368][T10330] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.576655][T10330] team0: entered promiscuous mode [ 196.602842][T10330] team_slave_0: entered promiscuous mode [ 196.611894][T10330] team_slave_1: entered promiscuous mode [ 196.619269][T10330] batadv0: entered promiscuous mode [ 196.624775][T10330] team0: entered allmulticast mode [ 196.633680][T10330] team_slave_0: entered allmulticast mode [ 196.640902][T10330] team_slave_1: entered allmulticast mode [ 196.646814][T10330] batadv0: entered allmulticast mode [ 196.676992][T10318] bridge0: port 5(team0) entered blocking state [ 196.690349][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 196.690390][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 196.707951][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 196.715827][T10318] bridge0: port 5(team0) entered disabled state [ 196.761634][T10339] lo speed is unknown, defaulting to 1000 [ 196.841436][ T7951] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 196.851525][ T7951] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 197.761263][T10380] bridge0: entered promiscuous mode [ 197.781626][T10380] macvlan2: entered promiscuous mode [ 197.791158][T10380] bridge0: port 6(macvlan2) entered blocking state [ 197.803682][T10380] bridge0: port 6(macvlan2) entered disabled state [ 197.810878][T10380] macvlan2: entered allmulticast mode [ 197.816656][T10380] bridge0: entered allmulticast mode [ 197.843354][T10380] macvlan2: left allmulticast mode [ 197.860246][T10389] netlink: 'syz.3.1255': attribute type 1 has an invalid length. [ 197.884152][T10380] bridge0: left allmulticast mode [ 197.903516][T10380] bridge0: left promiscuous mode [ 198.208996][T10401] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 198.519885][T10416] xt_l2tp: missing protocol rule (udp|l2tpip) [ 198.846066][T10438] lo speed is unknown, defaulting to 1000 [ 199.324685][T10460] trusted_key: syz.4.1277 sent an empty control message without MSG_MORE. [ 199.574295][T10465] rdma_rxe: rxe_newlink: failed to add lo [ 199.656956][T10471] __nla_validate_parse: 14 callbacks suppressed [ 199.656982][T10471] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1281'. [ 199.690487][T10471] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1281'. [ 199.728015][T10471] netlink: 'syz.4.1281': attribute type 5 has an invalid length. [ 199.735832][T10471] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1281'. [ 199.806463][T10474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1281'. [ 200.059915][T10481] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.322821][T10481] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.432484][T10481] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.442581][T10486] netlink: 'syz.3.1285': attribute type 1 has an invalid length. [ 200.442660][T10486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1285'. [ 200.524357][T10491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1287'. [ 200.537685][T10491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1287'. [ 200.567128][T10491] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1287'. [ 200.620851][T10481] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.772769][T10481] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.796523][T10481] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.829503][T10481] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.854304][T10481] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.024580][T10518] wg1: entered promiscuous mode [ 201.032908][T10507] : renamed from ipvlan1 [ 201.193585][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1295'. [ 201.203137][T10525] netlink: 4632 bytes leftover after parsing attributes in process `syz.3.1298'. [ 201.223002][T10523] bridge_slave_1: left allmulticast mode [ 201.232560][T10523] bridge_slave_1: left promiscuous mode [ 201.257377][T10523] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.274319][T10523] bridge_slave_0: left allmulticast mode [ 201.288143][T10523] bridge_slave_0: left promiscuous mode [ 201.308855][T10523] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.456467][T10530] syzkaller1: entered promiscuous mode [ 201.470170][T10530] syzkaller1: entered allmulticast mode [ 201.494086][T10535] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 201.718656][T10554] FAULT_INJECTION: forcing a failure. [ 201.718656][T10554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.745549][T10554] CPU: 0 UID: 0 PID: 10554 Comm: syz.1.1303 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 201.756403][T10554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 201.766595][T10554] Call Trace: [ 201.769917][T10554] [ 201.772916][T10554] dump_stack_lvl+0x241/0x360 [ 201.779666][T10554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.784974][T10554] ? __pfx__printk+0x10/0x10 [ 201.790278][T10554] ? __pfx_lock_release+0x10/0x10 [ 201.795400][T10554] should_fail_ex+0x3b0/0x4e0 [ 201.800181][T10554] _copy_from_user+0x2f/0xc0 [ 201.805217][T10554] core_sys_select+0x508/0x910 [ 201.810062][T10554] ? __pfx_core_sys_select+0x10/0x10 [ 201.815514][T10554] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 201.821504][T10554] ? __pfx_vfs_write+0x10/0x10 [ 201.821922][T10553] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.826296][T10554] ? __pfx_set_user_sigmask+0x10/0x10 [ 201.826341][T10554] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 201.852856][T10554] ? __fget_files+0x2a/0x410 [ 201.857487][T10554] __se_sys_pselect6+0x323/0x3f0 [ 201.862455][T10554] ? __pfx___se_sys_pselect6+0x10/0x10 [ 201.867935][T10554] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 201.874370][T10554] ? do_syscall_64+0x100/0x230 [ 201.879157][T10554] ? __x64_sys_pselect6+0x21/0xf0 [ 201.884206][T10554] do_syscall_64+0xf3/0x230 [ 201.888737][T10554] ? clear_bhb_loop+0x35/0x90 [ 201.893442][T10554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.899356][T10554] RIP: 0033:0x7f5888d85d29 [ 201.903794][T10554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.923434][T10554] RSP: 002b:00007f5889af2038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 201.931877][T10554] RAX: ffffffffffffffda RBX: 00007f5888f76080 RCX: 00007f5888d85d29 [ 201.939902][T10554] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000040 [ 201.947901][T10554] RBP: 00007f5889af2090 R08: 0000000000000000 R09: 0000000000000000 [ 201.955902][T10554] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 201.963978][T10554] R13: 0000000000000001 R14: 00007f5888f76080 R15: 00007ffc6ceda468 [ 201.971983][T10554] [ 202.332805][T10569] af_packet: tpacket_rcv: packet too big, clamped from 123 to 4294967272. macoff=96 [ 202.377432][T10571] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 202.409836][T10571] syzkaller1: entered promiscuous mode [ 202.415597][T10571] syzkaller1: entered allmulticast mode [ 202.685690][T10584] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 203.014244][T10603] netlink: 'syz.1.1319': attribute type 7 has an invalid length. [ 204.666707][T10647] lo speed is unknown, defaulting to 1000 [ 204.916290][T10656] lo speed is unknown, defaulting to 1000 [ 205.218986][T10670] xt_l2tp: missing protocol rule (udp|l2tpip) [ 206.082590][T10693] __nla_validate_parse: 10 callbacks suppressed [ 206.082614][T10693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1347'. [ 206.124039][T10696] wg2: entered promiscuous mode [ 206.135351][T10696] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 206.180272][T10676] FAULT_INJECTION: forcing a failure. [ 206.180272][T10676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.210838][T10676] CPU: 0 UID: 0 PID: 10676 Comm: syz.2.1343 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 206.221692][T10676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 206.231803][T10676] Call Trace: [ 206.235125][T10676] [ 206.238099][T10676] dump_stack_lvl+0x241/0x360 [ 206.242853][T10676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.248118][T10676] ? __pfx__printk+0x10/0x10 [ 206.252760][T10676] ? __pfx_lock_release+0x10/0x10 [ 206.257908][T10676] should_fail_ex+0x3b0/0x4e0 [ 206.262640][T10676] set_fd_set+0x3a/0xa0 [ 206.266851][T10676] core_sys_select+0x72c/0x910 [ 206.271671][T10676] ? __pfx_core_sys_select+0x10/0x10 [ 206.276998][T10676] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 206.282935][T10676] ? __pfx_vfs_write+0x10/0x10 [ 206.287714][T10676] ? __pfx_set_user_sigmask+0x10/0x10 [ 206.293115][T10676] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 206.299116][T10676] ? __fget_files+0x2a/0x410 [ 206.303732][T10676] __se_sys_pselect6+0x323/0x3f0 [ 206.308701][T10676] ? __pfx___se_sys_pselect6+0x10/0x10 [ 206.314179][T10676] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 206.320566][T10676] ? do_syscall_64+0x100/0x230 [ 206.325353][T10676] ? __x64_sys_pselect6+0x21/0xf0 [ 206.330413][T10676] do_syscall_64+0xf3/0x230 [ 206.334937][T10676] ? clear_bhb_loop+0x35/0x90 [ 206.339635][T10676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.345545][T10676] RIP: 0033:0x7f65b5385d29 [ 206.349977][T10676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.370040][T10676] RSP: 002b:00007f65b616c038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 206.378471][T10676] RAX: ffffffffffffffda RBX: 00007f65b5576080 RCX: 00007f65b5385d29 [ 206.386457][T10676] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000040 [ 206.394498][T10676] RBP: 00007f65b616c090 R08: 0000000000000000 R09: 0000000000000000 [ 206.402506][T10676] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 206.410536][T10676] R13: 0000000000000001 R14: 00007f65b5576080 R15: 00007ffd540b50a8 [ 206.418654][T10676] [ 206.680471][T10713] netlink: 'syz.3.1355': attribute type 1 has an invalid length. [ 206.688807][T10713] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1355'. [ 206.760285][ C1] bridge0: port 3(vlan1) entered learning state [ 206.844251][T10718] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 206.939011][T10724] netlink: 'syz.0.1358': attribute type 5 has an invalid length. [ 207.751684][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1359'. [ 207.762011][T10733] xt_l2tp: missing protocol rule (udp|l2tpip) [ 208.153264][T10757] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1368'. [ 208.228657][T10762] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1370'. [ 208.247800][T10762] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1370'. [ 208.257063][T10754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1368'. [ 208.282733][T10760] lo speed is unknown, defaulting to 1000 [ 208.395946][T10767] lo speed is unknown, defaulting to 1000 [ 209.009774][T10794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.155449][ T8742] tipc: Subscription rejected, illegal request [ 209.335621][T10806] siw: device registration error -23 [ 209.571467][T10818] tipc: Started in network mode [ 209.576832][T10818] tipc: Node identity 7f000001, cluster identity 4711 [ 209.589385][T10818] tipc: Enabling of bearer rejected, failed to enable media [ 209.625275][T10825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1382'. [ 209.915805][T10825] vlan0 (unregistering): left allmulticast mode [ 209.925428][T10825] vlan0 (unregistering): left promiscuous mode [ 209.966121][T10825] team0: Port device vlan2 removed [ 210.211116][T10836] netlink: 'syz.2.1386': attribute type 3 has an invalid length. [ 210.222690][T10836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1386'. [ 210.259711][T10836] netlink: 'syz.2.1386': attribute type 3 has an invalid length. [ 210.270718][T10836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1386'. [ 210.720887][T10852] IPv6: NLM_F_CREATE should be specified when creating new route [ 210.761127][T10858] vlan0: entered promiscuous mode [ 210.766942][T10858] team0: Device vlan0 is already an upper device of the team interface [ 211.001358][T10870] netlink: 'syz.4.1395': attribute type 1 has an invalid length. [ 211.012074][T10872] sctp: [Deprecated]: syz.1.1396 (pid 10872) Use of int in maxseg socket option. [ 211.012074][T10872] Use struct sctp_assoc_value instead [ 211.054807][T10872] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 211.089956][T10882] __nla_validate_parse: 3 callbacks suppressed [ 211.089978][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1395'. [ 211.218034][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1395'. [ 211.228641][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1395'. [ 211.238166][ T8749] wlan1: Trigger new scan to find an IBSS to join [ 211.486176][T10897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1401'. [ 211.662752][T10908] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1404'. [ 211.770125][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1406'. [ 211.877918][ C1] bridge0: port 4(gretap0) entered learning state [ 211.959054][T10921] sctp: [Deprecated]: syz.3.1408 (pid 10921) Use of int in max_burst socket option. [ 211.959054][T10921] Use struct sctp_assoc_value instead [ 211.972357][T10924] ax25_connect(): syz.2.1410 uses autobind, please contact jreuter@yaina.de [ 212.075224][T10924] lo speed is unknown, defaulting to 1000 [ 212.143259][T10929] xt_l2tp: missing protocol rule (udp|l2tpip) [ 213.401828][ T203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.411884][ T203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.462293][T10989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.474964][T10983] vlan2: entered promiscuous mode [ 213.497405][T10989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.519198][T10991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1429'. [ 213.715361][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1432'. [ 213.777115][T10999] xt_l2tp: missing protocol rule (udp|l2tpip) [ 214.285471][T11018] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1439'. [ 214.310061][T11016] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1438'. [ 215.173330][T11055] [ 215.175712][T11055] ====================================================== [ 215.182739][T11055] WARNING: possible circular locking dependency detected [ 215.189779][T11055] 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 Not tainted [ 215.197183][T11055] ------------------------------------------------------ [ 215.204297][T11055] syz.2.1448/11055 is trying to acquire lock: [ 215.210458][T11055] ffffffff8fcb3908 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0x127d/0x3cd0 [ 215.219548][T11055] [ 215.219548][T11055] but task is already holding lock: [ 215.226916][T11055] ffff88807bd0ad28 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1c3/0xe50 [ 215.237041][T11055] [ 215.237041][T11055] which lock already depends on the new lock. [ 215.237041][T11055] [ 215.247452][T11055] [ 215.247452][T11055] the existing dependency chain (in reverse order) is: [ 215.256518][T11055] [ 215.256518][T11055] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 215.265142][T11055] lock_acquire+0x1ed/0x550 [ 215.270183][T11055] __mutex_lock+0x1ac/0xee0 [ 215.275215][T11055] smc_switch_to_fallback+0x35/0xd90 [ 215.281320][T11055] smc_sendmsg+0x11f/0x530 [ 215.286285][T11055] __sock_sendmsg+0x221/0x270 [ 215.291514][T11055] __sys_sendto+0x363/0x4c0 [ 215.296555][T11055] __x64_sys_sendto+0xde/0x100 [ 215.301872][T11055] do_syscall_64+0xf3/0x230 [ 215.306912][T11055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.313342][T11055] [ 215.313342][T11055] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 215.321529][T11055] lock_acquire+0x1ed/0x550 [ 215.326566][T11055] lock_sock_nested+0x48/0x100 [ 215.331866][T11055] do_ip_setsockopt+0x1a2d/0x3cd0 [ 215.337474][T11055] ip_setsockopt+0x63/0x100 [ 215.342527][T11055] do_sock_setsockopt+0x3af/0x720 [ 215.348178][T11055] __x64_sys_setsockopt+0x1ee/0x280 [ 215.353925][T11055] do_syscall_64+0xf3/0x230 [ 215.358995][T11055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.365423][T11055] [ 215.365423][T11055] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 215.372658][T11055] validate_chain+0x18ef/0x5920 [ 215.378047][T11055] __lock_acquire+0x1397/0x2100 [ 215.383430][T11055] lock_acquire+0x1ed/0x550 [ 215.388466][T11055] __mutex_lock+0x1ac/0xee0 [ 215.393500][T11055] do_ip_setsockopt+0x127d/0x3cd0 [ 215.399059][T11055] ip_setsockopt+0x63/0x100 [ 215.404187][T11055] smc_setsockopt+0x275/0xe50 [ 215.409425][T11055] do_sock_setsockopt+0x3af/0x720 [ 215.414993][T11055] __x64_sys_setsockopt+0x1ee/0x280 [ 215.420730][T11055] do_syscall_64+0xf3/0x230 [ 215.425787][T11055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.432238][T11055] [ 215.432238][T11055] other info that might help us debug this: [ 215.432238][T11055] [ 215.442496][T11055] Chain exists of: [ 215.442496][T11055] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 215.442496][T11055] [ 215.456273][T11055] Possible unsafe locking scenario: [ 215.456273][T11055] [ 215.463911][T11055] CPU0 CPU1 [ 215.469288][T11055] ---- ---- [ 215.474845][T11055] lock(&smc->clcsock_release_lock); [ 215.480343][T11055] lock(sk_lock-AF_INET); [ 215.487411][T11055] lock(&smc->clcsock_release_lock); [ 215.495598][T11055] lock(rtnl_mutex); [ 215.499616][T11055] [ 215.499616][T11055] *** DEADLOCK *** [ 215.499616][T11055] [ 215.507806][T11055] 1 lock held by syz.2.1448/11055: [ 215.513124][T11055] #0: ffff88807bd0ad28 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1c3/0xe50 [ 215.523974][T11055] [ 215.523974][T11055] stack backtrace: [ 215.529908][T11055] CPU: 1 UID: 0 PID: 11055 Comm: syz.2.1448 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 215.540678][T11055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 215.550848][T11055] Call Trace: [ 215.554176][T11055] [ 215.557214][T11055] dump_stack_lvl+0x241/0x360 [ 215.561926][T11055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.567148][T11055] ? __pfx__printk+0x10/0x10 [ 215.571797][T11055] print_circular_bug+0x13a/0x1b0 [ 215.576844][T11055] check_noncircular+0x36a/0x4a0 [ 215.581824][T11055] ? __pfx_check_noncircular+0x10/0x10 [ 215.587299][T11055] ? lockdep_lock+0x123/0x2b0 [ 215.591984][T11055] ? validate_chain+0x11e/0x5920 [ 215.596958][T11055] ? __pfx_validate_chain+0x10/0x10 [ 215.602200][T11055] ? __pfx_validate_chain+0x10/0x10 [ 215.607427][T11055] validate_chain+0x18ef/0x5920 [ 215.612312][T11055] ? __pfx_validate_chain+0x10/0x10 [ 215.617552][T11055] ? mark_lock+0x9a/0x360 [ 215.621920][T11055] ? __lock_acquire+0x1397/0x2100 [ 215.626972][T11055] ? validate_chain+0x11e/0x5920 [ 215.631932][T11055] ? mark_lock+0x9a/0x360 [ 215.636276][T11055] __lock_acquire+0x1397/0x2100 [ 215.641148][T11055] lock_acquire+0x1ed/0x550 [ 215.645666][T11055] ? do_ip_setsockopt+0x127d/0x3cd0 [ 215.650885][T11055] ? __pfx_lock_acquire+0x10/0x10 [ 215.656009][T11055] ? __pfx___might_resched+0x10/0x10 [ 215.661312][T11055] ? mark_lock+0x9a/0x360 [ 215.665664][T11055] ? __lock_acquire+0x1397/0x2100 [ 215.670704][T11055] __mutex_lock+0x1ac/0xee0 [ 215.675222][T11055] ? do_ip_setsockopt+0x127d/0x3cd0 [ 215.680613][T11055] ? do_ip_setsockopt+0x127d/0x3cd0 [ 215.685832][T11055] ? __pfx___mutex_lock+0x10/0x10 [ 215.690879][T11055] ? __pfx___might_resched+0x10/0x10 [ 215.696173][T11055] ? __pfx___mutex_trylock_common+0x10/0x10 [ 215.702170][T11055] do_ip_setsockopt+0x127d/0x3cd0 [ 215.707209][T11055] ? trace_contention_end+0x3c/0x120 [ 215.712776][T11055] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 215.718173][T11055] ? smc_setsockopt+0x1c3/0xe50 [ 215.723046][T11055] ? __pfx___mutex_lock+0x10/0x10 [ 215.728090][T11055] ip_setsockopt+0x63/0x100 [ 215.732626][T11055] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 215.738541][T11055] smc_setsockopt+0x275/0xe50 [ 215.743321][T11055] ? __pfx_smc_setsockopt+0x10/0x10 [ 215.748537][T11055] ? aa_sock_opt_perm+0x79/0x120 [ 215.753489][T11055] ? __pfx_smc_setsockopt+0x10/0x10 [ 215.758704][T11055] do_sock_setsockopt+0x3af/0x720 [ 215.763742][T11055] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 215.769302][T11055] ? __fget_files+0x395/0x410 [ 215.773999][T11055] ? __fget_files+0x2a/0x410 [ 215.778816][T11055] __x64_sys_setsockopt+0x1ee/0x280 [ 215.784037][T11055] do_syscall_64+0xf3/0x230 [ 215.788559][T11055] ? clear_bhb_loop+0x35/0x90 [ 215.793252][T11055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.799162][T11055] RIP: 0033:0x7f65b5385d29 [ 215.803595][T11055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.823213][T11055] RSP: 002b:00007f65b618d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 215.831640][T11055] RAX: ffffffffffffffda RBX: 00007f65b5575fa0 RCX: 00007f65b5385d29 [ 215.839620][T11055] RDX: 000000000000002d RSI: 0000000000000000 RDI: 0000000000000006 [ 215.847624][T11055] RBP: 00007f65b5401aa8 R08: 0000000000000088 R09: 0000000000000000 [ 215.855605][T11055] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000000 [ 215.863586][T11055] R13: 0000000000000000 R14: 00007f65b5575fa0 R15: 00007ffd540b50a8 [ 215.871585][T11055] [ 216.197841][ T3556] wlan1: Trigger new scan to find an IBSS to join [ 217.088227][ T8749] wlan1: Creating new IBSS network, BSSID 7e:8f:8d:00:5b:49 [ 222.117595][ C1] bridge0: port 3(vlan1) entered forwarding state [ 222.124134][ C1] bridge0: topology change detected, propagating