last executing test programs: 14.669597434s ago: executing program 4 (id=1643): unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001000000dc00000000000400"], 0x18}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="ec0000002100390d00000000000000000000008ce0b90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003928d6d77f4efeaf24bc8326d84fb580ae92ea8971d89456f3c55905182594f73a59169c23e1e2d0389b115e3bd4b432490216ad78ca0d19169909e3d2f76f4afe7edf2a3919fdc8dcd76ef13397229696cc7eff4086d06ddc", @ANYRES8=0x0, @ANYRES32=r1, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000e0000001000000000000000000000000ac141400000000000000000000000000000000000000000000000a00ff010000000000000000000000000001ffffffff00000000000000000000000034f8a3f796d16157fe8000000000000000000000000000bbac1414bb0000000000000000000000000003"], 0xec}}, 0x0) syz_emit_ethernet(0x21, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) r3 = socket$inet6(0xa, 0x0, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001a0001020000008000000000028000000002000000000000"], 0x1c}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="0002000000"], 0x210) ioctl$TUNSETOFFLOAD(r2, 0x40047440, 0x40b942b37d0000) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) socket$packet(0x11, 0x2, 0x300) 13.696482576s ago: executing program 0 (id=1651): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0xb, 0x8, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_sctp(0xa, 0x5, 0x84) socket$rds(0x15, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 13.650880773s ago: executing program 4 (id=1652): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000012000000080006000100000018000180140002007465616d5f736c6176655f3000000000080007"], 0x3c}}, 0x0) 13.539762508s ago: executing program 4 (id=1653): r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x11, @empty, 0x4e20, 0x1000002, 'lblcr\x00', 0x7}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x2e, 0x6, 0x0, 0xd, 0x100, 0x7, 0x7, 0x1, r3}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r3, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x3, 0x2c7}, &(0x7f0000000000)=0x90) 13.36967475s ago: executing program 4 (id=1655): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000005000000000000000100010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000130000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d50b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 13.16726023s ago: executing program 3 (id=1656): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) r2 = socket$pptp(0x18, 0x1, 0x2) listen(r2, 0xffffc2dc) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x76, @fixed, 0x0, 0x2}, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "e16c3b42a1"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x3c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r6, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg(r6, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xfffffffffffffee2, 0x407006}, 0x104) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000240009008e9200000000000003"], 0x14}}, 0x0) pselect6(0x40, &(0x7f0000000040)={0x7, 0x8, 0x9, 0x5093231e, 0x100000000, 0x5, 0xa1, 0x983e}, &(0x7f0000000100)={0x3, 0x176, 0x4, 0x8000, 0x10000, 0x2, 0x5, 0x2}, &(0x7f0000000140)={0x7, 0x4, 0x100000001, 0x8, 0x5, 0x0, 0x3, 0x80}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110790000000000c6000000400000009500000800000000"], &(0x7f0000003ff6)='GPL\x00', 0xef, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 13.072647327s ago: executing program 4 (id=1658): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$isdn(0x22, 0x2, 0x22) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000b16c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000180)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000003200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x603f000000000000}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000bc7c0)={0x0, 0x0, "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", "2dc61523ec68d0238ab94a45837db8a61698248c48b5f579dd28d547c6a0e0a27efe96586592ff2d6e0b1ea60f4742f78a68e2047c2c9ab5ed06c63743ec0d30584d414eac85fbd469387c60812097880a03148518806b2f2c35254f37065701619b01a596f20a06befbaf2706a28f4d275f8a70dfaf4a38bcc85431caf66c64641a2921d26e4b81291f3d34818e584b80dee687153326a0e03f7ce19532cc4b97171b3c2a8625691872ab1df2ffe2e24f3ca4294809ae5447067e12eca7db1c45ef019186e1913fe85c7e115780162193f1aafcb8821051816ff88330cd311fb1fa55f1ea11fb8e3e04a73cf51b1750c09dadee07f515cfd23280de81c1b4b002982cad694eee230672a2f47f8c986c0ef72a4c2b46bb38659dda6ef602373e4d7246b141facd8be995c41d76fa3469511ba1a2e53179b6babd9c60d8524e7e0225322a0ae325a136ccbee8e153b8a757b02a04742afa7ca0ab8e9b903406e078dee82930f7b3b2525ff1911d350c0d38c3d2fc3a0b188473e44d136772df711183034a7ec765aabc2f811b3916fd807bedcc8c9c385f527a7a3e8b1f534e0d0a5858c1dd09b81f4e3b4003509ccf0d7a582bb00d749e9a351a84a3060fccc2aede3aa571e180e972dfe374183b2985778b6975fb2282d83b3c19c97516f5af526bd03ed6024819760b4f5138f8681a9b911c8a26aa13175486663ca117378d2ceb8336b40ea39acee0b76f619146215a9956c8648f55a8fafcbed7f112a556a152ee44b17a763fed468dd8b3b98a26a8bff8778027d68da3d96c619fcb6bad4d08dd638368e1d34d7c79178f8bf297dc9fa7012323d6aa776d2d2284a770e66d6cd4176c454e8435eaf0121848db1c789d6b30df267190da28a7b732fdd78a0bce1b378f3a388790918a5c5baa6969d9f4877f77197c53b18367c407464656cebd3c7911970cc88af7dbc0acb7dc58101fde70424839e554748b7809a79d31a97cfec1a3177a5d96e5428a46965df321394e1955bc1a3cb1c711ae6b859f8ea0a0ad3be347a4abf879709b57ce62768d38f2e572fca22958f2ece5840544ff31b7ce47104b142c8900a4583c83f987cad015cc3f6362eba04cf2a4173cae8c105c2adda9f5ce3d05790e1657073339474b4fa6c7c1cbf7afe5cabea5e5d83b20feb1e2897cb514924b15627cb71b2c4afaf7e5599838b406cd5bfad9443bf42f094c114f1146dd1d1962acaf1c147fdd98b8005d287db4210f58e7145087288fbe4ead2bacb25b269e461db2666728a6ad71016908f1f2442cf262aea9286c8f0b1f91639cbab31f6f6b4818c0ed9d06f9c1b0a30b13ad7419926bf4b2975537f9490f68f5fb8c444506a9ad16b5d5f47c7939ccbb9cee41e3f8a9fc25076e762584cce0ba66d66c33e24ac469061a7b6c2c497343991f26370590efa6db6ccfe6fad0ef2b1bf16599f53c815313bf585c67dbbbafe64a470da3ab680845a865047686aec04cd5cb83c10bdf40c2251779d126002cce09791f42832d4db685a4178a25a810db4203ff3703b70dff73cd3c88d78d9d930a9bf887b67ab4444817ce31acf4fd320694bd3cbd8c1f65968e86d1b0a0a5ba41d9dcf153bf5473b5d1cbdd697ad4686bfaafe70ca09f7630e88736cfd4023a56349300e5e91d14b5318310f46a4bdc3e6fbe4482eea141050b360d42b53a4731214d92eff088a65b09da102ef6f2904997652babb3cfcf10f2a32a2835d986d6b4ecfd38a784a1c0a410b4087405432c7fcc405454668fe163fda5fce65d0e185ad4f7ea910abfd4d7b8e53ee1800c231601f7b148cbffec8bae563c1928107066f011ffe41f84bc3b561d0af3350d7c2f8998ea41c5fb67e2b41ecb43c8fdfe9cdd312c917ece62c6c5b5b46da4d8c683eaba99528fc444bd97fdfc214b393334f0e4bb08fb0d312a9c839922a1c91c0a4051c43a743b0f182d9b700f56e8d353866254fa3aac76f2b8647ba66ee3bfbae7f2495af28eba012172a42b46cc1750c56e8cf279db962e996abf4b8a16cca149f67c9c05495faf28696a8da3ffe20bcab91dc62a96700e58475d54fb17644b83fa410c050883f4c2db6e5774a6b258f04d3ffc3bf85ecf405055d5e735ad75fa0aaf9f0ead476e16121d1165f88858712feffd7cd31eed828f0899a0102d87c51d10aa7fa8c5cd9969894af52d803da96cec64df2036e5d4bdbf3114b555b56c9abf1599f57938b490eac68f244e5f283395104934728d6781ff86a99f6a317f27f69697994acef20f29f806c3fefe887ba93f2dfb932bb767ec283d3d9fcd2a2c660e1cba668d92773e4808eb102aaeebb9cc801ca0148eb449315c2cb45714924194bc60c4efc3df64a774785ddffc6b2096117832d18b461bb40688cf1787c8259af1eca8d3b671f75cde94b2c429007030e14d612ee1d45e67bfaa94a04888453d2bc024f7df09e7030e3cf1403cd6b9967fbbd94fd12b5642bfdfa06140fceedf726be1e6050f25570f3d694075e0f3cdb3c3decb7f0a7c69eda367469cf31e903f82df55fbc44543e0d1317b19b50e9851dbb2a0dec85f7bda3ec5e6685520bc34f012d910fdf399b8eb6a41b3a44144b65a9989edbd04ef09bca31ba07c87fb9f2b97703263675c94c2f93e2969b900556c7102b430f0a9042ad900f63ac3753f1a874182f4801538ada390df29108593d8f6bcab9d6b7456851a9ac2982d7ec8e8ff55325af7112e5ac991894123bf621e2689a5784c087f3bfb479996bdaf5b5636c9ce886867ee3abdbffc42d121a82217445650939826fb9ff215ed3be46cf0658ec951e4b55092fd1a029d8280e9a1b3dd5b5baf56e6cef7d9338531ac243abdfbc276579d0fd73065cfcdee67ba09997a50c55ab06edcdeb336f17cf81712730635e9982069d0af3200baba4827b090379d5818405a451db4755bc214a1d5cf747b4c1fd3218c96b533a8515bb492bf532a65d3dace6560644b62434ff1fdc8af9b0bce69e89214154a8f7a03cebe1819003bfc076dc24abf5c391338a91b3a0a6b3d7be5d78467836de29fa39575005cfe412695ca8d630f2a9e3eaa7a0c11ab4c9564fb98a4e442cd57a877b23a7566d632e0a1b0988b48b97fd7bb58aced1998ce7053cc7e3984c343d6ebabee81ee30bbb0a5a48d07e8ec6251eddb0eb0aabc95999c8337254ddecebabb010d04f442128340e104e912ad43313ee1ad9177bcc00224cf43aef344531c4324560c4841de2b5e26deefb82ef568e05462dc50eb4722394421a007b3a6225e45794154db935057cafd70f8ba46f7e5094ba77040855b277d4b86598b2ff142cf7b24a1a0d28fdfb3c2eed7b22187c4c79679c56250bde31837a6d6453e30f712cfc847ba1874bc0c4fd8b1096920b985ae1314dd457eddd99e3d63746ad265145bbc18d2cbb955239d6bd0d88e9fd393a84f105af1dbde8034cf16b36be2f5041496fe6851856eb73cc085bf545347a24aaba8c93d8f7463aad7b5b272802d27caafa14a8978757da67e2fbf87b81505333003e2b1d0e853471de711fde7e5c5d2cb5b482809ef219ed1e8e50c4d82a40062374e3a24b19baa967253d003935d073737f008c8815fcb8b47890203779a5b20dad0a9451998e39eebfbff1610036ba732a07fdf4934e314b6f5ef8b8e4fab070aa6bf48a0eac81873953cc6e087bc2903cbf0dc41f67424badfbddb157c8c76e717f76f9eb6e428bea5a08941cd6010c98bbd002cbff7ebddc7c237470a86d6fd305238de8cbb82d86cc3b1476a16e5b16cf685d922f653b3bf377e733ae3cf3865f29edae2ba529f7829ea546652fc7a752dcca944e1991a79f7bad4f2ccc4320937ba6d00cc520b1439572206bb63abe4c645fc36ad6933eec6ab294861d41adfc56f50f9e529ec125e2a4e8b058f2f4508469a76b656478550a762f1d77d18f1ac23a29406e19e408e8300bd1a6738692edbd54a27f34ff12b8b5b404a21cf05615c9500994f4e8b5fedaf661b495196814fe9a7a0cc8a4d4cecf21fb31664c8391c63805a31f385afab8c9b54a04a1d290029a5d3dac5b6c67ba88e1834e5c3cd14ab85a467690efc01006c88d5b7c54256957da59c56b30d80dda4aab1fc10aef6454d60ff9e83ea207dc14bdab29081aa03dcfcb33d1e63a9ba9311862636c81e0225a950dfe2b0794eee5e85700af5d1529dd09204c1ffedb1eadf175eca3310e5e1eab7de59a9efcda4bb147e4a7ef3c6bdd87e5b7435f3ddd019cf41f063a31e9a7411de9ec12bbf84047aa7e5981a93ed65b5017ab132bdf7da15ea2120e7c7cf45cc0ab36846ab7688d5e669771adadf548ba0f293d6254a68c33176f8a33e7f21dca5c27258b326efec6b597ed6d93c7fc90ed54475f3e2961f2c026669a231c587dd883531b2c4ea0f5e8dd2293e01514216ffd3324f8dfe8bee8441db9bd43b462d96b95ad8b0c55024ee8c4f747610ecf16b12749b5b8c63a6610b5cee791b919755c91e84494cdd517cf0f72b296116f48d0e796f28c8558172d82194cbf570487ae5443077bc155216120a15764a63309cbdc6f6db64469c6879938836c68e38a54a41bb11faa9a31cca5fd0dcccc77fa091f1fa547ab945d1835c808140b1ea1f267d5df4b6cb3b38753dc515ed27d0151d3465a3543ce09a8473fd4e40042e2a64059910f3558b18edc92ba8685f45026d3c39783abadf1d23e51aa7315fa0da4ab6dce0ae13a8f7bbf4daebe955cb6c6d9ba115fb0acb30c8ced0bf656bdc6d009200f972c564344901e059870c0d2e2f9723894102010ab074bd45e2ef83a483d3f069f436f51d5f1725c2c88b385921159b23d19555854a224f0ec55f785059c1dab7a5def927b1f4038f45a6dee442bb3d385fb0a58b995377855a549ca4399b15c3c81373aa7202c668a5bb260ff58dd249aba2d91f2bbd8fbadeb3722c9dbe327fb01c0bdfbe0e112dd21c41452627e565c3f7ba511310ac30db6b4b69c10eb2452e2d4ac67c87397d357dd04dc9e0106f7adc01045678626f65cd0a818f6b23c428c446d56bd710cde045c52e1815ef7928521fbe28d2ab165f46b9eff23be0f48cb9055e11e9a3f3258dd4d6ce2886f5b0f0040b9ad98f4efdc7f38c972d1fa58fa3f0644b5cbc357567e68da0bd8ada0f5ce6841b10d0252592bf7574db0eab5f286c78258b5411d083e1167aa81e582c26acedc19e97469f6d4daab1d43b8b103ceed45b245eced7d435bcc54da470d6d1e060915425c816232e1416f4802747bd3d77b5d754c8c870546fd68828134fb798b4850ed702aed351e069ce3e9899d090656fa034a0a6cf1f84a03919bfe2577e173bac872cbf6a720b64aa7031421574aa483e390e46d0f95ae331367b9bb0"}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) 12.632960497s ago: executing program 0 (id=1660): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f0000b9000001000000040000000c000180cafc089d0e000073080002"], 0x78}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xe, 0x2, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYBLOB="a51c922a019220d9346b96513c209c1688dd5153e75eb7fcc9eff276d20d621cbcffff5d5aca1fdae0bbd75dae99c8858e9b7962dcffc161d9981c2bbdb7158b67d5668644f43efdd1c3d6202a1d22110347614b0a4b2805e92093e8d4b6c294b44ac33f49fd744381f6586f201f3ca3b8003e5b69a8bd3b22436da9c4a7f6c1cb64a56c21c58bc1b92395e189bb5e6769653602f3484f381e9682f8a59d61247f0f74de56aabc653df473daef911604cc9881ec837313570f92efcf3931047727e17340f4032f7281635daf7d160c973ed87ea34d5e8ab247a07dee4681824f735fa1e5c04919", @ANYRESHEX=0x0, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRESHEX], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 12.549902293s ago: executing program 1 (id=1661): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = accept(r0, &(0x7f0000000200)=@caif=@rfm, &(0x7f0000000080)=0x80) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x32658aeb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14}}, 0xcc}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000014000580080001"], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) recvmmsg(r6, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)=""/180, 0x10002}], 0x1, 0x0, 0xe}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001400)=""/94, 0x5e}], 0x1}}], 0x2, 0x0, 0x0) sendto(r6, &(0x7f0000000180)='e', 0x1, 0x840, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000100)=@ccm_128={{}, "24eaf7a2ee66e95b", "3055fbfe96bf1afd87dc98fde2ee85b3", '\x00', "4e694600000000e4"}, 0x28) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x25, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1a8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @alu={0x0, 0x0, 0x0, 0x9, 0x7, 0x30, 0xfffffffffffffff0}, @ldst={0x3, 0x0, 0x3, 0x2, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x4, 0x0, 0x9, 0x8, 0x3, 0x40}, @call={0x85, 0x0, 0x0, 0xd4}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x80000001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xaf}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_fd={0x18, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x7, 0x6b, &(0x7f0000000280)=""/107, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x3e, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x1], &(0x7f0000000400), 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000000c0)='sock_exceed_buf_limit\x00', r8, 0x0, 0x4}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r10}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) connect$qrtr(r1, &(0x7f00000001c0)={0x2a, 0x3}, 0xc) 11.810632401s ago: executing program 4 (id=1662): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="02200000c04471d7300012800b000100697036746e6c00002000028005000900290000001400020000000000000000000000000000000001080004"], 0x58}}, 0x0) unshare(0x62040200) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}, 0x20}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000080)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000100)=""/6, &(0x7f0000000140)=0xffffffffffffff50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}}, 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SPORT={0x6, 0x1c, 0x4e22}, @RTA_SRC={0x8, 0x2, @loopback}]}, 0x2c}}, 0x0) 11.413917027s ago: executing program 3 (id=1663): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000280)='wg1\x00', 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000ec0)=ANY=[@ANYRES32], &(0x7f0000000080)='GPL\x00', 0x5, 0xc6, &(0x7f0000000500)=""/198, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x20, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @generic={0x8, 0x2}]}}}}}}}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x0, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f00000002c0)=0x46, 0x4) getpeername$l2tp6(r5, 0x0, &(0x7f00000000c0)) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socket$inet6(0xa, 0x800, 0x4) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f00000001c0)={r7, @in6={{0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7}}}, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000002c0)={r7, 0xfeff}, &(0x7f0000000600)=0x8) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xfdf6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r8, 0x58}, 0xb) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = accept(r9, 0x0, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000340)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x2, 0x7, 0x10, @private0, @private2, 0x10, 0x8000, 0x3, 0xd6}}) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000640)=""/28, &(0x7f0000000680)=0x1c) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000005600000825bd7000fedbdf2507000000", @ANYRES32=r11, @ANYBLOB="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"], 0x18}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x1404, 0x100, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x200400d4) 11.14199973s ago: executing program 3 (id=1664): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8001}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0xac, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x4044) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 'geneve0\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x20000400) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000100)=0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000280)={'geneve0\x00'}) ioctl$PPPIOCGUNIT(r3, 0x80047456, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000f40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket(0x2, 0x80805, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x7, 0x8, 0x101, 0x14}}}]}, 0x78}}, 0x0) sendmmsg$inet(r7, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x0, @private=0xa010103}, 0x10, &(0x7f0000000780)=[{&(0x7f00000006c0)='o', 0x1}], 0x1}}], 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000280)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup, r6, 0x2, 0x3, 0x0, @void, @value}, 0x10) 7.786801772s ago: executing program 2 (id=1665): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 7.73347305s ago: executing program 0 (id=1666): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x5, 0x0, 0xa, 0xa}, {0x85, 0x0, 0x0, 0x25}}}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0x1015, &(0x7f0000000880)=""/4117, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) (async) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0)="90d49aff3d9dc51827aeeb659ca08c773e331bef4cab91513d80711d8401285865f35138e262041bc71e25a79ccc13a19bf1feda61181d1b7e7747b0ffb3d955862cb0b941e5f3e77be1d03c02d17ea348cda56cd2df4c1248041ae0f23b2fb3abcf395118069fed22b03c563510c86be81387a71032f6a5efd1cc3b7bfeb8d1350dd1cdf246b042caa54d3c", &(0x7f0000000000)=@udp=r1, 0x2}, 0x20) 7.562153661s ago: executing program 1 (id=1667): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8001}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0xac, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x4044) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 'geneve0\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x20000400) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000100)=0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000280)={'geneve0\x00'}) ioctl$PPPIOCGUNIT(r3, 0x80047456, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000f40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket(0x2, 0x80805, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x7, 0x8, 0x101, 0x14}}}]}, 0x78}}, 0x0) sendmmsg$inet(r7, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x0, @private=0xa010103}, 0x10, &(0x7f0000000780)=[{&(0x7f00000006c0)='o', 0x1}], 0x1}}], 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000280)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup, r6, 0x2, 0x3, 0x0, @void, @value}, 0x10) 7.547925105s ago: executing program 3 (id=1668): r0 = socket(0x840000000002, 0x3, 0x100) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000c00)={0x104, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2002}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0xb0, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x104}, 0x1, 0x0, 0x0, 0x2c000081}, 0x4000) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @local}}, 0x80000, 0x9, 0x300, 0x0, 0x55}, 0x9c) (async) r2 = socket(0x10, 0x803, 0x0) (async) socket$kcm(0x29, 0x3, 0x0) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x5, 0x986, 0x4, 0xa, 0x7}, 0x14) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2e000000100081eee80000040000110010000000", @ANYRESHEX=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004400)=ANY=[@ANYBLOB="2c0000001400b59500020000000000000a000000", @ANYRES32=r5, @ANYBLOB="1400050000ae26651cd050e8418f25ba000000000000000b4c6ac4b60400905b6a0000000000000000"], 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b80)={&(0x7f0000004580)=@deltaction={0xe4, 0x31, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x88, 0x1, [{0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x201f, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x1000c804}, 0x4800) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000004240)={'erspan0\x00', &(0x7f00000041c0)={'erspan0\x00', r5, 0x10, 0x8000, 0x5, 0x6, {{0xf, 0x4, 0x0, 0x1, 0x3c, 0x64, 0x0, 0x2, 0x29, 0x0, @empty, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0x8, 0x6, 0x0, 0x3, [0x8]}, @timestamp={0x44, 0x8, 0xbb, 0x0, 0x1, [0xffff]}, @ssrr={0x89, 0xf, 0xb5, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x36}, @loopback]}, @ra={0x94, 0x4}]}}}}}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0x10003, @local, 0x1}}, 0x2}, 0x90) (async, rerun: 32) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000740)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x20000}, 0xfffffffffffffffe, &(0x7f0000003c80)={&(0x7f0000000780)={0x50, 0x9, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x2c}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x40) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000080)=@buf="1d"}, 0x20) (async, rerun: 32) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r7, &(0x7f0000000100)}, 0x20) (rerun: 32) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000ac141400000000000000000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) 7.304393827s ago: executing program 0 (id=1669): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {0x0}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f0000001480)=""/177, 0xb1}, {&(0x7f0000001300)=""/214, 0xd6}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f0000000380)=""/138, 0x8a}], 0x7}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001800090400000800000000000a0000000000000800000000f3edb7c19bf6167a1505450909f99364f34c046c14e1981fe3c312675940d0fa71b9ae6b44f57a48708282f60330246bc22c0db110ae05768a0f160d00030c19ba7fcf62e60e120953124ddb73125590666bba9a046c3598d4ed6a686fa73280c61d304735530df20d71f30c1b08dffc61a544a89c44c3ed4a7260d8ecbb1f9d177839275dfa501ddd033e32c72a4345d8b3e233cb864b31"], 0x1c}}, 0x4044000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001700)={'batadv0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r4, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="891000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x50000, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000), 0x4c}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000100000d0300000000000000030000000700da00000000001202000000000000005f00"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r9) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030001000000070000000000000005000300016900000500030080ffffff0500030005000000080002"], 0x50}}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000600)={@in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x50, 0x0, "8365cd5f703c39815473529c987840e25c089a8d163e3c8a6a95bb2a55f3ae214e5361de687d4107c92597add39e62e8439ca584a56ee6429fc99a5cc20c5ac27c12bcaf546884c72ed2e2404795d710"}, 0xd8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x0, 0x60000000}, 0x50) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000540)=@req3={0xfff, 0x8000, 0x1, 0x3ff, 0x7, 0x0, 0x6}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000700)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 7.221904926s ago: executing program 2 (id=1670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000005000000000000000100010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000130000850000008600000018110019", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d50b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 7.012125693s ago: executing program 2 (id=1671): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8001}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0xac, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x4044) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 'geneve0\x00'}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000100)=0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCGUNIT(r4, 0x80047456, 0x0) 6.917597179s ago: executing program 3 (id=1672): r0 = socket$kcm(0xa, 0x2, 0x3a) r1 = socket$unix(0x1, 0x1, 0x0) accept(r1, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, 0x140d, 0x800, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x10) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWSET={0x98, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_USERDATA={0x51, 0xd, 0x1, 0x0, "7f7075191a491cf0c9635300a5b3253a4347c7b932c79787e77d0a5786f97bb8eb984eb943b49111ba5323fc35df9ec642ca7ec11a56dec25f771af2bdf1f44fc43faaa960be0b42b3dacbb562"}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x10000f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4c}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}, 0x1, 0x0, 0x0, 0x10000080}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\b', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="0600eb0007000000"], 0x24}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = epoll_create(0x6e000000) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, &(0x7f0000000180)) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)="2e00000010008188e6b62aa73772cc9f1ba1f848030000005e140602000000000e000a000d000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) 6.76246357s ago: executing program 2 (id=1673): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x800, 0x0, 0xff, 0x1}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe107}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 6.607455939s ago: executing program 1 (id=1674): socket$kcm(0x11, 0xa, 0x300) socket$kcm(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r3, &(0x7f0000000200), 0x0) (async) close(r4) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) (async) sendmmsg$inet6(r5, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000000c0)={r8}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0600000004000000f10000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000d3e8080f8a437b2f40b80a6bdde0fbc808fc28841c949224d7a9a1a4b25bdfbf6ca7d6a91d9890", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000567387cf491e515528000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000008cce48b800000000000000000000000000000000000000002000000000001b00eab33c3b81bd6b8db259a38f71274ed4c359ca2ab0b3f1e6e6dceaf8634a"], 0xb8}}, 0x0) syz_emit_ethernet(0x11b, &(0x7f00000005c0)={@multicast, @empty, @val={@val={0x88a8, 0x3, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0xfffffffffffffefd, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@srh={0xc, 0x2, 0x4, 0x1, 0x53, 0x28, 0x9, [@private1]}], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x29, 0xff, @mcast1, @loopback, [], "1e520b34dc026d567cb0724c951ee12eb33c2fe38a674603e78e80c9afdfc126df4c5888af3a14db90bfe920fad44502000000003797e6e3d6aae308bcb3a73446c09bc543d3a2d9abbbeb925c2480bba96bd516ea881fee8061190d84181f96b34ddddb3346ff0c295068481bbb765571c147b775694bf4b9214bb9290c0a7ab3332668cfddb283643c03114ba0f7945f4cf783d6"}}}}}}}, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f00000000c0)=0x8, 0x4) connect$inet(r10, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async) setsockopt$sock_linger(r10, 0x1, 0x3d, &(0x7f0000000080), 0x8) 6.576642516s ago: executing program 0 (id=1675): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0xa, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x40003}, 0x8) sendto$inet(r5, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r5, &(0x7f0000000040)='\x00', 0x1, 0xc840, 0x0, 0x0) close(r5) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0xfffffffc, 0x0, 0x1}, {{@in=@private=0xa010102, 0x4d5, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 6.505687163s ago: executing program 2 (id=1676): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) socket$inet6(0xa, 0xa, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000000801020000000000000000000000000600024000000000040004800900010073797a31000000000500000000000000"], 0x34}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000240)=0x38a, 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000280), 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000002c0), 0x4) connect$inet(r3, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0x17, 0x0, &(0x7f0000000180)) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x5b, &(0x7f0000000640)={&(0x7f0000000100)={0x74, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x56, 0x33, @probe_response={{{}, {}, @device_b, @device_a, @from_mac=@device_b}, 0x0, @random=0x52, 0x0, @void, @val={0x1, 0x3, [{0x18}, {0x60, 0x1}, {0xb}]}, @void, @void, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @void, @val={0x71, 0x7}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x2000]}]}, 0x74}}, 0x0) sendto$inet(r5, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) 6.34819871s ago: executing program 1 (id=1677): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$isdn(0x22, 0x2, 0x22) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000b16c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000180)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000003200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000bc7c0)={0x0, 0x0, "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", "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"}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) 6.307472832s ago: executing program 0 (id=1678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast2}, &(0x7f00000002c0)=0x10, 0x80000) setsockopt$inet_tcp_int(r1, 0x6, 0x28, &(0x7f0000000340)=0x5, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x38, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x34}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r4, 0x400, 0x70bd2c, 0x25dfdc00, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_MS_ADDR6={0x14, 0xc, @private0}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000081}, 0x58891) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000300)={0x24, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x14}]}, @CTA_TUPLE_ORIG={0x4}]}, 0x24}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_getaddr={0x18, 0x16, 0x32b, 0x0, 0x0, {0x2, 0x3f}}, 0x18}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x27, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r9, 0x909, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x60, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000380)=@rose={'rose', 0x0}, 0x10) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)}, 0x4) 610.791557ms ago: executing program 3 (id=1680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r1, 0x6) syz_emit_ethernet(0x82, &(0x7f0000000400)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @cipso={0x86, 0x40, 0x0, [{0x0, 0x10, "9e0cec69d2dae06de9173b3f60c8"}, {0x0, 0x5, "f34629"}, {0x0, 0xb, "3033a70f1c0f9d1bfd"}, {0x0, 0xa, "3aba454f6dc54cc6"}, {0x0, 0xb, "debbd3e9f1fdeefc2c"}, {0x0, 0x5, "91ec92"}]}]}}}}}}}, 0x0) connect$llc(r1, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001440)={'vlan0\x00', &(0x7f0000000300)=@ethtool_link_settings={0x4c, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, [0x0, 0x0, 0x0, 0xfffffffe], [0x105]}}) r3 = socket(0x200000000000011, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000900)={&(0x7f0000000700)=@isdn={0x22, 0x0, 0x0, 0x9}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000780)="e0", 0x1}], 0x1, &(0x7f0000000a40)=[{0x10}], 0x6}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x40, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x40}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000004540)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r8 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0x3, @mcast2, 0x800}}, 0x8, 0x3}, &(0x7f0000000040)=0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200), 0xf000) recvmsg$kcm(r9, &(0x7f0000000dc0)={&(0x7f00000004c0)=@nfc_llcp, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000540)=""/212, 0xd4}, {&(0x7f00000007c0)=""/220, 0xdc}, {&(0x7f0000000640)=""/152, 0x98}, {&(0x7f0000000940)=""/232, 0xe8}, {&(0x7f0000000a80)=""/78, 0x4e}, {&(0x7f0000000100)=""/51, 0x33}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000000b80)=""/74, 0x4a}, {&(0x7f0000000c00)=""/111, 0x6f}], 0x9, &(0x7f0000000d40)=""/65, 0x41}, 0x40000000) 476.681765ms ago: executing program 1 (id=1681): r0 = openat$tun(0xffffff9c, &(0x7f0000000080), 0x200200, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x1, 0x8, 0x806a, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x8, @value, @void, @void, @value}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xc, 0x21, &(0x7f0000000580)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, @alu={0x7, 0x1, 0xa, 0x0, 0x6, 0x0, 0xfffffffffffffffc}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x2}, @map_idx={0x18, 0x5}, @exit, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x615e97c}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xe}, @ldst={0x1, 0x1, 0x4, 0x0, 0x6, 0x4, 0x10}], &(0x7f00000006c0)='syzkaller\x00', 0x3, 0xca, &(0x7f0000000700)=""/202, 0x40f00, 0x8857f93d6bb19683, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0xf, 0x200, 0x88b4}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000880)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x4, 0x4, 0x6, 0x4}, {0x4, 0x4, 0xd, 0x6}, {0x1, 0x4, 0xb, 0x6}, {0x2, 0x1, 0x0, 0x8}, {0x1ff, 0x3, 0x1, 0x4}], 0x10, 0x8, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%pS \x00'}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003900000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{r0, 0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xc698, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x2c, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd0}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x101}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f00000003c0)='GPL\x00', 0x3, 0xda, &(0x7f0000000400)=""/218, 0x41000, 0xd, '\x00', 0x0, 0x17, r3, 0x8, &(0x7f0000000500)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x2, 0x418, 0x3}, 0x10, 0x9377, r4, 0x3, &(0x7f0000000d00)=[r5, r7, r8, 0x1, r10], &(0x7f0000000d40)=[{0x1, 0x4, 0x10, 0x8}, {0x3, 0x1, 0x10f, 0x5}, {0x2, 0x1, 0x1, 0x2}], 0x10, 0x0, @void, @value}, 0x94) 408.53608ms ago: executing program 2 (id=1682): r0 = socket(0x28, 0x5, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x44, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "cabee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}]}, 0x44}}, 0x0) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x0, @host}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="58000028976d9428f12aaa000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067"], 0x58}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x1d3a, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r6, &(0x7f0000000280)=[{{&(0x7f0000000540)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/44}, {&(0x7f00000006c0)=""/119}, {&(0x7f0000000740)=""/174}, {&(0x7f0000000800)=""/176}], 0x0, &(0x7f00000008c0)=""/173}, 0x101}], 0x1c53e8b, 0x45833af92e4b39ff, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x300, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x24000805) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x201}, @jmp={0x5, 0x1, 0x2, 0x5, 0xb, 0xffffffffffffffe0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800a0158c4fb5000000000000180000001800000009000000000000000100000500000000060000000000000000000000000000ea0000002e5f"], 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 0s ago: executing program 1 (id=1683): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8001}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0xac, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x4044) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 'geneve0\x00'}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000100)=0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCGUNIT(r4, 0x80047456, 0x0) kernel console output (not intermixed with test programs): ] netlink: 'syz.2.1014': attribute type 1 has an invalid length. [ 214.180060][ T7629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.192172][ T35] hsr_slave_0: left promiscuous mode [ 214.205703][ T35] hsr_slave_1: left promiscuous mode [ 214.211627][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.234973][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.254989][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.273161][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.330242][ T35] veth1_macvtap: left promiscuous mode [ 214.354082][ T35] veth1_vlan: left promiscuous mode [ 214.365725][ T35] veth0_vlan: left promiscuous mode [ 214.411924][ T8723] ebtables: ebtables: counters copy to user failed while replacing table [ 214.940498][ T35] team0 (unregistering): Port device team_slave_1 removed [ 214.991140][ T35] team0 (unregistering): Port device team_slave_0 removed [ 215.214290][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.398578][ T8741] vcan0: left allmulticast mode [ 215.741429][ T8746] ebtables: ebtables: counters copy to user failed while replacing table [ 215.748488][ T8766] __nla_validate_parse: 3 callbacks suppressed [ 215.748504][ T8766] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1026'. [ 215.773587][ T7629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.792713][ T8767] netlink: 'syz.1.1025': attribute type 6 has an invalid length. [ 215.978594][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1030'. [ 216.003256][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1030'. [ 216.024262][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1030'. [ 216.097935][ T8782] Bluetooth: MGMT ver 1.23 [ 216.342080][ T8800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.352369][ T8788] ebtables: ebtables: counters copy to user failed while replacing table [ 216.355170][ T8800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.382118][ T35] bridge_slave_1: left allmulticast mode [ 216.388029][ T35] bridge_slave_1: left promiscuous mode [ 216.394995][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.407677][ T35] bridge_slave_0: left allmulticast mode [ 216.428641][ T35] bridge_slave_0: left promiscuous mode [ 216.443429][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.543376][ T8806] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1038'. [ 216.671749][ T8811] ipt_ECN: cannot use operation on non-tcp rule [ 217.039838][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.051658][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.066419][ T35] bond0 (unregistering): (slave team0): Releasing backup interface [ 217.079914][ T35] bond0 (unregistering): Released all slaves [ 217.203151][ T35] tipc: Disabling bearer [ 217.216661][ T35] tipc: Left network mode [ 217.658565][ T35] hsr_slave_0: left promiscuous mode [ 217.674621][ T35] hsr_slave_1: left promiscuous mode [ 217.693713][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.708197][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.723736][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.753557][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.799457][ T35] veth1_macvtap: left promiscuous mode [ 217.810176][ T35] veth0_macvtap: left promiscuous mode [ 217.815960][ T35] veth1_vlan: left promiscuous mode [ 217.821232][ T35] veth0_vlan: left promiscuous mode [ 218.058443][ T8822] delete_channel: no stack [ 218.291138][ T35] team0 (unregistering): Port device team_slave_1 removed [ 218.332880][ T35] team0 (unregistering): Port device team_slave_0 removed [ 218.764470][ T8856] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1053'. [ 218.894176][ T25] net_ratelimit: 15 callbacks suppressed [ 218.894195][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.919866][ T8875] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1056'. [ 219.054461][ T8871] ebtables: ebtables: counters copy to user failed while replacing table [ 219.170837][ T8899] sctp: [Deprecated]: syz.0.1061 (pid 8899) Use of int in max_burst socket option deprecated. [ 219.170837][ T8899] Use struct sctp_assoc_value instead [ 219.237768][ T8904] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1062'. [ 219.263079][ T8904] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1062'. [ 219.313286][ T8904] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1062'. [ 219.366002][ T8904] vlan0: entered allmulticast mode [ 219.387576][ T8904] veth0_vlan: entered allmulticast mode [ 219.601565][ T8921] openvswitch: netlink: Message has 13 unknown bytes. [ 219.669832][ T8913] netlink: 'syz.0.1063': attribute type 19 has an invalid length. [ 219.724160][ T35] IPVS: stop unused estimator thread 0... [ 219.916943][ T8928] ebtables: ebtables: counters copy to user failed while replacing table [ 219.940248][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.980382][ T8937] macvlan2: entered promiscuous mode [ 219.987115][ T8937] team_slave_0: entered promiscuous mode [ 219.992803][ T8937] team_slave_1: entered promiscuous mode [ 220.003065][ T8937] team0: entered promiscuous mode [ 220.032047][ T8937] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 220.177846][ T8951] x_tables: duplicate underflow at hook 1 [ 220.353666][ T8952] ebtables: ebtables: counters copy to user failed while replacing table [ 220.519273][ T8966] netlink: 'syz.0.1077': attribute type 9 has an invalid length. [ 220.572389][ T8972] openvswitch: netlink: Actions may not be safe on all matching packets [ 220.642422][ T8977] bridge_slave_1: left allmulticast mode [ 220.655138][ T5278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.693073][ T8977] bridge_slave_1: left promiscuous mode [ 220.709833][ T8977] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.744341][ T8983] @: renamed from veth0_vlan (while UP) [ 220.885925][ T8981] ebtables: ebtables: counters copy to user failed while replacing table [ 220.891678][ T8996] __nla_validate_parse: 2 callbacks suppressed [ 220.891695][ T8996] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1084'. [ 220.941304][ T8996] netlink: 'syz.2.1084': attribute type 3 has an invalid length. [ 220.959852][ T9000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.973319][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.989699][ T9000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.055815][ T9003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1087'. [ 221.117107][ T9010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1090'. [ 221.371034][ T9022] tipc: Started in network mode [ 221.378539][ T9022] tipc: Node identity 080211, cluster identity 4711 [ 221.389560][ T9022] tipc: Enabled bearer , priority 10 [ 221.413354][ T9022] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1094'. [ 221.423914][ T9022] unsupported nlmsg_type 40 [ 221.430186][ T9022] netlink: 'syz.2.1094': attribute type 1 has an invalid length. [ 221.440870][ T9022] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1094'. [ 221.784247][ T9046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1100'. [ 221.808019][ T9047] netlink: 'syz.4.1102': attribute type 10 has an invalid length. [ 221.829693][ T9047] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 221.909829][ T9047] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 221.991198][ T9058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1105'. [ 222.110327][ T9065] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1108'. [ 222.128014][ T9070] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1108'. [ 222.152235][ T9065] Cannot find add_set index 0 as target [ 222.256224][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1112'. [ 222.291956][ T9076] syz.1.1110 uses old SIOCAX25GETINFO [ 222.503434][ T5266] tipc: Node number set to 134353152 [ 222.590427][ T9090] netlink: 'syz.4.1116': attribute type 21 has an invalid length. [ 222.838779][ T9118] netlink: 'syz.1.1118': attribute type 29 has an invalid length. [ 222.989586][ T25] IPVS: starting estimator thread 0... [ 223.093241][ T9128] IPVS: using max 20 ests per chain, 48000 per kthread [ 223.141145][ T9140] netlink: 'syz.2.1128': attribute type 2 has an invalid length. [ 223.170819][ T9140] sock: sock_timestamping_bind_phc: sock not bind to device [ 223.498358][ T9161] tipc: Can't bind to reserved service type 2 [ 223.538642][ T9168] ieee802154 phy0 wpan0: encryption failed: -22 [ 223.545044][ T9168] ieee802154 phy0 wpan0: encryption failed: -22 [ 223.712076][ T9180] netlink: 'syz.1.1143': attribute type 142 has an invalid length. [ 223.770976][ T9180] team0: Port device team_slave_0 removed [ 223.866419][ T9187] x_tables: ip6_tables: DNAT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 224.000817][ T9201] xt_bpf: check failed: parse error [ 224.151609][ T9199] net_ratelimit: 9 callbacks suppressed [ 224.151630][ T9199] ebtables: ebtables: counters copy to user failed while replacing table [ 224.481594][ T9216] ebtables: ebtables: counters copy to user failed while replacing table [ 224.993954][ T9247] ebtables: ebtables: counters copy to user failed while replacing table [ 225.047494][ T9264] openvswitch: netlink: Actions may not be safe on all matching packets [ 225.061276][ T9265] netlink: 'syz.2.1171': attribute type 7 has an invalid length. [ 225.077471][ T9265] netlink: 'syz.2.1171': attribute type 8 has an invalid length. [ 225.348805][ T9275] ebtables: ebtables: counters copy to user failed while replacing table [ 225.707310][ T9307] ebtables: ebtables: counters copy to user failed while replacing table [ 225.917719][ T9326] netlink: 'syz.0.1189': attribute type 1 has an invalid length. [ 225.928890][ T9326] __nla_validate_parse: 18 callbacks suppressed [ 225.928909][ T9326] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1189'. [ 225.948710][ T9328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1187'. [ 225.957861][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1187'. [ 225.976609][ T9326] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1189'. [ 226.094854][ T9330] ebtables: ebtables: counters copy to user failed while replacing table [ 226.458867][ T9364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1194'. [ 226.691309][ T9368] ebtables: ebtables: counters copy to user failed while replacing table [ 227.074195][ T9386] ebtables: ebtables: counters copy to user failed while replacing table [ 227.149374][ T9402] tipc: Enabled bearer , priority 10 [ 227.234023][ T9409] geneve2: entered promiscuous mode [ 227.239269][ T9409] geneve2: entered allmulticast mode [ 227.351498][ T9406] ebtables: ebtables: counters copy to user failed while replacing table [ 227.871053][ T9452] syz.4.1224[9452] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.871149][ T9452] syz.4.1224[9452] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.941621][ T5229] Bluetooth: hci0: command 0x0405 tx timeout [ 227.957670][ T9452] syz.4.1224[9452] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.154329][ T9472] netlink: 'syz.1.1228': attribute type 10 has an invalid length. [ 228.232521][ T9472] batman_adv: batadv0: Adding interface: team0 [ 228.252876][ T9472] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.287050][ T9472] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 228.545676][ T9490] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1232'. [ 228.564094][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1233'. [ 228.879145][ T9517] netlink: 'syz.0.1239': attribute type 1 has an invalid length. [ 228.962180][ T9517] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 228.983642][ T9517] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 229.005209][ T9517] bond1: (slave ip6gre1): making interface the new active one [ 229.015319][ T9517] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 229.026253][ T9530] netlink: 'syz.4.1245': attribute type 10 has an invalid length. [ 229.034742][ T9530] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1245'. [ 229.050915][ T9530] bridge0: port 3(team0) entered blocking state [ 229.060959][ T9530] bridge0: port 3(team0) entered disabled state [ 229.068879][ T9530] team0: entered allmulticast mode [ 229.074261][ T9530] team_slave_0: entered allmulticast mode [ 229.080008][ T9530] team_slave_1: entered allmulticast mode [ 229.088055][ T9530] team0: left allmulticast mode [ 229.095135][ T9530] team_slave_0: left allmulticast mode [ 229.119881][ T9530] team_slave_1: left allmulticast mode [ 229.182043][ T9528] net_ratelimit: 2 callbacks suppressed [ 229.182063][ T9528] ebtables: ebtables: counters copy to user failed while replacing table [ 229.243839][ T9527] ebtables: ebtables: counters copy to user failed while replacing table [ 229.332388][ T9548] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1249'. [ 229.746646][ T9573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1257'. [ 230.104086][ T9586] xt_CT: No such helper "snmp" [ 230.124768][ T9586] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.283319][ T9583] ebtables: ebtables: counters copy to user failed while replacing table [ 230.319137][ T9593] ebtables: ebtables: counters copy to user failed while replacing table [ 230.481930][ T9617] openvswitch: netlink: Actions may not be safe on all matching packets [ 230.563860][ T9623] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 230.581708][ T9625] sctp: [Deprecated]: syz.1.1269 (pid 9625) Use of int in max_burst socket option deprecated. [ 230.581708][ T9625] Use struct sctp_assoc_value instead [ 230.925495][ T2893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.948116][ T2893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.045438][ T9645] ebtables: ebtables: counters copy to user failed while replacing table [ 231.096074][ T9658] netlink: 'syz.4.1280': attribute type 11 has an invalid length. [ 231.136991][ T9655] ebtables: ebtables: counters copy to user failed while replacing table [ 231.151033][ T9658] __nla_validate_parse: 2 callbacks suppressed [ 231.151047][ T9658] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.1280'. [ 231.224776][ T9664] netlink: 'syz.2.1282': attribute type 11 has an invalid length. [ 231.243505][ T9664] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.1282'. [ 231.268241][ T9664] openvswitch: netlink: Message has 8 unknown bytes. [ 231.278335][ T9667] FAULT_INJECTION: forcing a failure. [ 231.278335][ T9667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.281613][ T9668] xt_CT: You must specify a L4 protocol and not use inversions on it [ 231.310158][ T9670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1285'. [ 231.319603][ T9667] CPU: 0 UID: 0 PID: 9667 Comm: syz.3.1283 Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 231.329957][ T9667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 231.340035][ T9667] Call Trace: [ 231.343327][ T9667] [ 231.346270][ T9667] dump_stack_lvl+0x241/0x360 [ 231.351071][ T9667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.356269][ T9667] ? __pfx__printk+0x10/0x10 [ 231.360871][ T9667] ? __pfx_lock_release+0x10/0x10 [ 231.365904][ T9667] should_fail_ex+0x3b0/0x4e0 [ 231.370575][ T9667] _copy_from_user+0x2f/0xe0 [ 231.375175][ T9667] copy_msghdr_from_user+0xae/0x680 [ 231.380405][ T9667] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 231.386248][ T9667] __sys_sendmsg+0x22d/0x380 [ 231.390854][ T9667] ? __pfx___sys_sendmsg+0x10/0x10 [ 231.395971][ T9667] ? __pfx_vfs_write+0x10/0x10 [ 231.400748][ T9667] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 231.407071][ T9667] ? do_syscall_64+0x100/0x230 [ 231.411828][ T9667] ? do_syscall_64+0xb6/0x230 [ 231.416496][ T9667] do_syscall_64+0xf3/0x230 [ 231.420990][ T9667] ? clear_bhb_loop+0x35/0x90 [ 231.425836][ T9667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.431725][ T9667] RIP: 0033:0x7f832cd7dff9 [ 231.436131][ T9667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.455730][ T9667] RSP: 002b:00007f832dc0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.464142][ T9667] RAX: ffffffffffffffda RBX: 00007f832cf35f80 RCX: 00007f832cd7dff9 [ 231.472104][ T9667] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 231.480080][ T9667] RBP: 00007f832dc0c090 R08: 0000000000000000 R09: 0000000000000000 [ 231.488064][ T9667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.496037][ T9667] R13: 0000000000000000 R14: 00007f832cf35f80 R15: 00007fff5ce62598 [ 231.504018][ T9667] [ 231.531144][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1285'. [ 231.562263][ T9671] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1285'. [ 231.952653][ T9696] netlink: 'syz.1.1295': attribute type 11 has an invalid length. [ 231.968170][ T9696] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.1295'. [ 231.981097][ T9696] openvswitch: netlink: Message has 8 unknown bytes. [ 232.014132][ T9707] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1294'. [ 232.104418][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1298'. [ 232.122366][ T9699] ebtables: ebtables: counters copy to user failed while replacing table [ 232.221881][ T9716] netlink: 'syz.1.1299': attribute type 11 has an invalid length. [ 232.234434][ T9718] netlink: 'syz.4.1300': attribute type 11 has an invalid length. [ 232.250173][ T9718] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.1300'. [ 232.255613][ T9722] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1302'. [ 232.289190][ T9722] tipc: Resetting bearer [ 232.393210][ T9722] tipc: Disabling bearer [ 232.492520][ T9742] netlink: 'syz.1.1307': attribute type 4 has an invalid length. [ 232.515799][ T9742] netlink: 'syz.1.1307': attribute type 15 has an invalid length. [ 233.317552][ T9809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.452686][ T9812] bridge0: port 2(hsr0) entered blocking state [ 233.462538][ T9812] bridge0: port 2(hsr0) entered disabled state [ 233.469024][ T9812] hsr0: entered allmulticast mode [ 233.474652][ T9812] hsr_slave_0: entered allmulticast mode [ 233.480408][ T9812] hsr_slave_1: entered allmulticast mode [ 233.482669][ T9820] FAULT_INJECTION: forcing a failure. [ 233.482669][ T9820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.487080][ T9812] hsr0: entered promiscuous mode [ 233.505718][ T9812] bridge0: port 2(hsr0) entered blocking state [ 233.511990][ T9812] bridge0: port 2(hsr0) entered forwarding state [ 233.527951][ T9803] Bluetooth: MGMT ver 1.23 [ 233.535045][ T9820] CPU: 0 UID: 0 PID: 9820 Comm: syz.3.1329 Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 233.545393][ T9820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 233.555441][ T9820] Call Trace: [ 233.558712][ T9820] [ 233.561632][ T9820] dump_stack_lvl+0x241/0x360 [ 233.566313][ T9820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.571507][ T9820] ? __pfx__printk+0x10/0x10 [ 233.576094][ T9820] ? __pfx_lock_release+0x10/0x10 [ 233.581121][ T9820] should_fail_ex+0x3b0/0x4e0 [ 233.585907][ T9820] _copy_from_iter+0x1ed/0x1d60 [ 233.590767][ T9820] ? __virt_addr_valid+0x183/0x530 [ 233.595881][ T9820] ? __pfx_lock_release+0x10/0x10 [ 233.600914][ T9820] ? __pfx__copy_from_iter+0x10/0x10 [ 233.606224][ T9820] ? __virt_addr_valid+0x183/0x530 [ 233.611506][ T9820] ? __virt_addr_valid+0x183/0x530 [ 233.616611][ T9820] ? __virt_addr_valid+0x45f/0x530 [ 233.621716][ T9820] ? __check_object_size+0x48e/0x900 [ 233.627004][ T9820] netlink_sendmsg+0x73d/0xcb0 [ 233.631777][ T9820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.637064][ T9820] ? aa_sock_msg_perm+0x91/0x160 [ 233.641999][ T9820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.647282][ T9820] __sock_sendmsg+0x221/0x270 [ 233.651959][ T9820] ____sys_sendmsg+0x52a/0x7e0 [ 233.656723][ T9820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.662010][ T9820] __sys_sendmsg+0x292/0x380 [ 233.666592][ T9820] ? __pfx___sys_sendmsg+0x10/0x10 [ 233.671707][ T9820] ? __pfx_vfs_write+0x10/0x10 [ 233.676487][ T9820] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 233.682811][ T9820] ? do_syscall_64+0x100/0x230 [ 233.687569][ T9820] ? do_syscall_64+0xb6/0x230 [ 233.692237][ T9820] do_syscall_64+0xf3/0x230 [ 233.696734][ T9820] ? clear_bhb_loop+0x35/0x90 [ 233.701405][ T9820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.707291][ T9820] RIP: 0033:0x7f832cd7dff9 [ 233.711698][ T9820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.731298][ T9820] RSP: 002b:00007f832dc0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.739716][ T9820] RAX: ffffffffffffffda RBX: 00007f832cf35f80 RCX: 00007f832cd7dff9 [ 233.747680][ T9820] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 233.755642][ T9820] RBP: 00007f832dc0c090 R08: 0000000000000000 R09: 0000000000000000 [ 233.763626][ T9820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.771614][ T9820] R13: 0000000000000000 R14: 00007f832cf35f80 R15: 00007fff5ce62598 [ 233.779592][ T9820] [ 233.868623][ T9827] validate_nla: 2 callbacks suppressed [ 233.868642][ T9827] netlink: 'syz.2.1332': attribute type 11 has an invalid length. [ 234.371215][ T9871] FAULT_INJECTION: forcing a failure. [ 234.371215][ T9871] name failslab, interval 1, probability 0, space 0, times 0 [ 234.384161][ T9871] CPU: 0 UID: 0 PID: 9871 Comm: syz.0.1343 Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 234.394530][ T9871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 234.404579][ T9871] Call Trace: [ 234.407851][ T9871] [ 234.410774][ T9871] dump_stack_lvl+0x241/0x360 [ 234.415459][ T9871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.420670][ T9871] ? __pfx__printk+0x10/0x10 [ 234.425275][ T9871] ? ref_tracker_alloc+0x332/0x490 [ 234.430398][ T9871] should_fail_ex+0x3b0/0x4e0 [ 234.435089][ T9871] ? skb_clone+0x20c/0x390 [ 234.439505][ T9871] should_failslab+0xac/0x100 [ 234.444177][ T9871] ? skb_clone+0x20c/0x390 [ 234.448588][ T9871] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 234.453965][ T9871] skb_clone+0x20c/0x390 [ 234.458211][ T9871] __netlink_deliver_tap+0x3cc/0x7c0 [ 234.463504][ T9871] ? netlink_deliver_tap+0x2e/0x1b0 [ 234.468703][ T9871] netlink_deliver_tap+0x19d/0x1b0 [ 234.473834][ T9871] netlink_unicast+0x7c4/0x990 [ 234.478619][ T9871] ? __pfx_netlink_unicast+0x10/0x10 [ 234.483910][ T9871] ? __virt_addr_valid+0x183/0x530 [ 234.489023][ T9871] ? __check_object_size+0x48e/0x900 [ 234.494308][ T9871] netlink_sendmsg+0x8e4/0xcb0 [ 234.499093][ T9871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.504389][ T9871] ? aa_sock_msg_perm+0x91/0x160 [ 234.509322][ T9871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.514602][ T9871] __sock_sendmsg+0x221/0x270 [ 234.519281][ T9871] ____sys_sendmsg+0x52a/0x7e0 [ 234.524048][ T9871] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.529341][ T9871] __sys_sendmsg+0x292/0x380 [ 234.533928][ T9871] ? __pfx___sys_sendmsg+0x10/0x10 [ 234.539048][ T9871] ? __pfx_vfs_write+0x10/0x10 [ 234.543832][ T9871] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 234.550166][ T9871] ? do_syscall_64+0x100/0x230 [ 234.554931][ T9871] ? do_syscall_64+0xb6/0x230 [ 234.559607][ T9871] do_syscall_64+0xf3/0x230 [ 234.564103][ T9871] ? clear_bhb_loop+0x35/0x90 [ 234.568773][ T9871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.574662][ T9871] RIP: 0033:0x7faebf57dff9 [ 234.579072][ T9871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.598672][ T9871] RSP: 002b:00007faec02cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.607257][ T9871] RAX: ffffffffffffffda RBX: 00007faebf735f80 RCX: 00007faebf57dff9 [ 234.615234][ T9871] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 234.623209][ T9871] RBP: 00007faec02cc090 R08: 0000000000000000 R09: 0000000000000000 [ 234.631175][ T9871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.639142][ T9871] R13: 0000000000000000 R14: 00007faebf735f80 R15: 00007ffc469ee188 [ 234.647128][ T9871] [ 234.671802][ T9871] netlink: 'syz.0.1343': attribute type 11 has an invalid length. [ 234.698995][ T9871] net_ratelimit: 10 callbacks suppressed [ 234.703042][ T9871] openvswitch: netlink: Message has 8 unknown bytes. [ 234.779016][ T9876] netlink: 'syz.0.1345': attribute type 1 has an invalid length. [ 235.134846][ T9887] ebtables: ebtables: counters copy to user failed while replacing table [ 235.148710][ T9898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.342186][ T9903] ebtables: ebtables: counters copy to user failed while replacing table [ 235.359494][ T9910] netlink: 'syz.0.1353': attribute type 10 has an invalid length. [ 235.443951][ T9910] bond0: (slave team0): Enslaving as an active interface with an up link [ 235.501887][ T9914] sctp: [Deprecated]: syz.0.1355 (pid 9914) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.501887][ T9914] Use struct sctp_sack_info instead [ 235.565223][ T9917] FAULT_INJECTION: forcing a failure. [ 235.565223][ T9917] name failslab, interval 1, probability 0, space 0, times 0 [ 235.578290][ T9917] CPU: 0 UID: 0 PID: 9917 Comm: syz.1.1356 Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 235.588612][ T9917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 235.598659][ T9917] Call Trace: [ 235.601929][ T9917] [ 235.604854][ T9917] dump_stack_lvl+0x241/0x360 [ 235.609529][ T9917] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.614720][ T9917] ? __pfx__printk+0x10/0x10 [ 235.619308][ T9917] should_fail_ex+0x3b0/0x4e0 [ 235.623979][ T9917] ? skb_clone+0x20c/0x390 [ 235.628386][ T9917] should_failslab+0xac/0x100 [ 235.633063][ T9917] ? skb_clone+0x20c/0x390 [ 235.637484][ T9917] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 235.642849][ T9917] skb_clone+0x20c/0x390 [ 235.647080][ T9917] ? dev_queue_xmit_nit+0x220/0xc10 [ 235.652271][ T9917] dev_queue_xmit_nit+0x419/0xc10 [ 235.657289][ T9917] ? dev_queue_xmit_nit+0x2b/0xc10 [ 235.662394][ T9917] ? validate_xmit_skb+0x9f9/0x1120 [ 235.667582][ T9917] dev_hard_start_xmit+0x15f/0x7e0 [ 235.672686][ T9917] ? __pfx_validate_xmit_skb+0x10/0x10 [ 235.678142][ T9917] __dev_queue_xmit+0x1b58/0x3e80 [ 235.683175][ T9917] ? kasan_save_track+0x51/0x80 [ 235.688049][ T9917] ? do_syscall_64+0xf3/0x230 [ 235.692748][ T9917] ? __dev_queue_xmit+0x2da/0x3e80 [ 235.697883][ T9917] ? __pfx___dev_queue_xmit+0x10/0x10 [ 235.703288][ T9917] ? __copy_skb_header+0x437/0x5b0 [ 235.708424][ T9917] ? __asan_memcpy+0x40/0x70 [ 235.713037][ T9917] ? __copy_skb_header+0x437/0x5b0 [ 235.718174][ T9917] ? __skb_clone+0x454/0x6c0 [ 235.722790][ T9917] ? skb_clone+0x240/0x390 [ 235.727226][ T9917] __netlink_deliver_tap+0x54d/0x7c0 [ 235.732522][ T9917] ? netlink_deliver_tap+0x2e/0x1b0 [ 235.737719][ T9917] netlink_deliver_tap+0x19d/0x1b0 [ 235.742830][ T9917] netlink_unicast+0x7c4/0x990 [ 235.747594][ T9917] ? __pfx_netlink_unicast+0x10/0x10 [ 235.752870][ T9917] ? __virt_addr_valid+0x183/0x530 [ 235.757991][ T9917] ? __check_object_size+0x48e/0x900 [ 235.763276][ T9917] netlink_sendmsg+0x8e4/0xcb0 [ 235.768049][ T9917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.773331][ T9917] ? aa_sock_msg_perm+0x91/0x160 [ 235.778298][ T9917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.783587][ T9917] __sock_sendmsg+0x221/0x270 [ 235.788263][ T9917] ____sys_sendmsg+0x52a/0x7e0 [ 235.793028][ T9917] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.798314][ T9917] __sys_sendmsg+0x292/0x380 [ 235.802896][ T9917] ? __pfx___sys_sendmsg+0x10/0x10 [ 235.808008][ T9917] ? __pfx_vfs_write+0x10/0x10 [ 235.812786][ T9917] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 235.819111][ T9917] ? do_syscall_64+0x100/0x230 [ 235.823868][ T9917] ? do_syscall_64+0xb6/0x230 [ 235.828537][ T9917] do_syscall_64+0xf3/0x230 [ 235.833035][ T9917] ? clear_bhb_loop+0x35/0x90 [ 235.837711][ T9917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.843602][ T9917] RIP: 0033:0x7fac5197dff9 [ 235.848009][ T9917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.867603][ T9917] RSP: 002b:00007fac52862038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.876012][ T9917] RAX: ffffffffffffffda RBX: 00007fac51b35f80 RCX: 00007fac5197dff9 [ 235.883986][ T9917] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 235.891949][ T9917] RBP: 00007fac52862090 R08: 0000000000000000 R09: 0000000000000000 [ 235.899910][ T9917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.907869][ T9917] R13: 0000000000000000 R14: 00007fac51b35f80 R15: 00007fffb5c87e88 [ 235.915845][ T9917] [ 235.944789][ T9917] netlink: 'syz.1.1356': attribute type 11 has an invalid length. [ 235.952835][ T9917] openvswitch: netlink: Message has 8 unknown bytes. [ 236.048293][ T9930] netlink: 'syz.2.1358': attribute type 3 has an invalid length. [ 236.082783][ T9930] netlink: 'syz.2.1358': attribute type 2 has an invalid length. [ 236.139771][ T9930] : entered promiscuous mode [ 236.175228][ T9937] netlink: 'syz.1.1362': attribute type 11 has an invalid length. [ 236.215917][ T9937] __nla_validate_parse: 16 callbacks suppressed [ 236.215934][ T9937] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.1362'. [ 236.281652][ T9937] openvswitch: netlink: Message has 8 unknown bytes. [ 236.392471][ T9957] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 236.421761][ T9954] netlink: 'syz.2.1367': attribute type 11 has an invalid length. [ 236.459552][ T9954] netlink: 134600 bytes leftover after parsing attributes in process `syz.2.1367'. [ 236.518945][ T9950] ebtables: ebtables: counters copy to user failed while replacing table [ 236.563356][ T9959] ebtables: ebtables: counters copy to user failed while replacing table [ 236.624733][ T9974] netlink: 'syz.1.1370': attribute type 11 has an invalid length. [ 236.632599][ T9974] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.1370'. [ 236.691662][ T9974] FAULT_INJECTION: forcing a failure. [ 236.691662][ T9974] name failslab, interval 1, probability 0, space 0, times 0 [ 236.726334][ T9974] CPU: 0 UID: 0 PID: 9974 Comm: syz.1.1370 Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 236.736702][ T9974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 236.746771][ T9974] Call Trace: [ 236.750065][ T9974] [ 236.753006][ T9974] dump_stack_lvl+0x241/0x360 [ 236.757710][ T9974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.762924][ T9974] ? __pfx__printk+0x10/0x10 [ 236.767520][ T9974] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 236.773505][ T9974] ? __pfx___might_resched+0x10/0x10 [ 236.778801][ T9974] should_fail_ex+0x3b0/0x4e0 [ 236.783489][ T9974] should_failslab+0xac/0x100 [ 236.788179][ T9974] ? __alloc_skb+0x1c3/0x440 [ 236.792790][ T9974] kmem_cache_alloc_node_noprof+0x71/0x320 [ 236.798599][ T9974] ? rcu_is_watching+0x15/0xb0 [ 236.803360][ T9974] __alloc_skb+0x1c3/0x440 [ 236.807772][ T9974] ? genl_rcv+0x28/0x40 [ 236.811931][ T9974] ? netlink_unicast+0x7f6/0x990 [ 236.816869][ T9974] ? __pfx___alloc_skb+0x10/0x10 [ 236.821810][ T9974] __netdev_alloc_skb+0x104/0xa10 [ 236.826836][ T9974] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 236.832385][ T9974] ovs_packet_cmd_execute+0x241/0xcc0 [ 236.837765][ T9974] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 236.844011][ T9974] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 236.849905][ T9974] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 236.856233][ T9974] genl_rcv_msg+0xb14/0xec0 [ 236.860726][ T9974] ? mark_lock+0x9a/0x360 [ 236.865052][ T9974] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.870089][ T9974] ? __pfx_lock_acquire+0x10/0x10 [ 236.875110][ T9974] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 236.881000][ T9974] ? __pfx___might_resched+0x10/0x10 [ 236.886285][ T9974] netlink_rcv_skb+0x1e3/0x430 [ 236.891048][ T9974] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.896065][ T9974] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 236.901358][ T9974] ? __netlink_deliver_tap+0x77e/0x7c0 [ 236.906828][ T9974] genl_rcv+0x28/0x40 [ 236.910803][ T9974] netlink_unicast+0x7f6/0x990 [ 236.915569][ T9974] ? __pfx_netlink_unicast+0x10/0x10 [ 236.920846][ T9974] ? __virt_addr_valid+0x183/0x530 [ 236.925948][ T9974] ? __check_object_size+0x48e/0x900 [ 236.931226][ T9974] netlink_sendmsg+0x8e4/0xcb0 [ 236.935999][ T9974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.941285][ T9974] ? aa_sock_msg_perm+0x91/0x160 [ 236.946217][ T9974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.951494][ T9974] __sock_sendmsg+0x221/0x270 [ 236.956170][ T9974] ____sys_sendmsg+0x52a/0x7e0 [ 236.960931][ T9974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.966241][ T9974] __sys_sendmsg+0x292/0x380 [ 236.970844][ T9974] ? __pfx___sys_sendmsg+0x10/0x10 [ 236.975966][ T9974] ? __pfx_vfs_write+0x10/0x10 [ 236.980765][ T9974] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 236.987103][ T9974] ? do_syscall_64+0x100/0x230 [ 236.991872][ T9974] ? do_syscall_64+0xb6/0x230 [ 236.996544][ T9974] do_syscall_64+0xf3/0x230 [ 237.001040][ T9974] ? clear_bhb_loop+0x35/0x90 [ 237.005718][ T9974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.011612][ T9974] RIP: 0033:0x7fac5197dff9 [ 237.016023][ T9974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.035622][ T9974] RSP: 002b:00007fac52862038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.044031][ T9974] RAX: ffffffffffffffda RBX: 00007fac51b35f80 RCX: 00007fac5197dff9 [ 237.051994][ T9974] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 237.059956][ T9974] RBP: 00007fac52862090 R08: 0000000000000000 R09: 0000000000000000 [ 237.067944][ T9974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.075907][ T9974] R13: 0000000000000000 R14: 00007fac51b35f80 R15: 00007fffb5c87e88 [ 237.083884][ T9974] [ 237.363971][T10000] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.1379'. [ 237.385074][T10000] openvswitch: netlink: Message has 8 unknown bytes. [ 237.485482][T10011] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.1382'. [ 237.503283][T10009] veth1_macvtap: entered allmulticast mode [ 237.513678][T10011] openvswitch: netlink: Message has 8 unknown bytes. [ 237.713245][T10013] ebtables: ebtables: counters copy to user failed while replacing table [ 237.860600][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1390'. [ 237.898613][T10046] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.1388'. [ 238.046337][T10053] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.1394'. [ 238.092400][T10058] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.1396'. [ 238.132238][T10059] team_slave_1: entered promiscuous mode [ 238.158435][T10059] vlan0: entered promiscuous mode [ 238.201476][T10059] team0: entered promiscuous mode [ 238.213600][T10059] team_slave_0: entered promiscuous mode [ 238.235985][T10059] team0: left promiscuous mode [ 238.240866][T10059] team_slave_0: left promiscuous mode [ 238.254359][T10059] team_slave_1: left promiscuous mode [ 238.291512][T10066] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1398'. [ 238.618008][T10088] lo speed is unknown, defaulting to 1000 [ 238.645275][T10088] lo speed is unknown, defaulting to 1000 [ 238.674162][T10088] lo speed is unknown, defaulting to 1000 [ 238.690944][T10088] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 238.702015][T10093] batman_adv: batadv0: Adding interface: ipvlan1 [ 238.711388][T10093] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 238.754155][T10088] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 238.910427][T10088] lo speed is unknown, defaulting to 1000 [ 238.944698][T10098] wireguard0: entered promiscuous mode [ 238.951430][T10098] wireguard0: entered allmulticast mode [ 239.103827][T10101] validate_nla: 6 callbacks suppressed [ 239.103844][T10101] netlink: 'syz.1.1405': attribute type 11 has an invalid length. [ 239.173151][T10088] lo speed is unknown, defaulting to 1000 [ 239.194981][T10094] lo speed is unknown, defaulting to 1000 [ 239.220056][T10088] lo speed is unknown, defaulting to 1000 [ 239.234228][T10088] lo speed is unknown, defaulting to 1000 [ 239.240950][T10088] lo speed is unknown, defaulting to 1000 [ 239.287394][T10088] lo speed is unknown, defaulting to 1000 [ 239.310838][T10088] lo speed is unknown, defaulting to 1000 [ 239.318638][T10088] lo speed is unknown, defaulting to 1000 [ 239.365504][T10109] netlink: 'syz.4.1408': attribute type 11 has an invalid length. [ 239.645008][T10119] netlink: 'syz.1.1411': attribute type 15 has an invalid length. [ 239.867370][T10127] net_ratelimit: 10 callbacks suppressed [ 239.867390][T10127] ebtables: ebtables: counters copy to user failed while replacing table [ 239.989014][T10135] ebtables: ebtables: counters copy to user failed while replacing table [ 240.037544][T10145] netlink: 'syz.3.1418': attribute type 11 has an invalid length. [ 240.049777][T10144] Cannot find add_set index 0 as target [ 240.063708][T10145] FAULT_INJECTION: forcing a failure. [ 240.063708][T10145] name failslab, interval 1, probability 0, space 0, times 0 [ 240.093777][T10145] CPU: 1 UID: 0 PID: 10145 Comm: syz.3.1418 Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 240.104230][T10145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 240.114286][T10145] Call Trace: [ 240.117559][T10145] [ 240.120483][T10145] dump_stack_lvl+0x241/0x360 [ 240.125169][T10145] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.130368][T10145] ? __pfx__printk+0x10/0x10 [ 240.135133][T10145] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 240.141113][T10145] ? __pfx___might_resched+0x10/0x10 [ 240.146401][T10145] should_fail_ex+0x3b0/0x4e0 [ 240.151083][T10145] should_failslab+0xac/0x100 [ 240.155762][T10145] ? ovs_flow_alloc+0xee/0x1e0 [ 240.160522][T10145] kmem_cache_alloc_node_noprof+0x71/0x320 [ 240.166332][T10145] ovs_flow_alloc+0xee/0x1e0 [ 240.170923][T10145] ovs_packet_cmd_execute+0x586/0xcc0 [ 240.176318][T10145] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 240.182680][T10145] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 240.188689][T10145] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 240.195033][T10145] genl_rcv_msg+0xb14/0xec0 [ 240.199535][T10145] ? mark_lock+0x9a/0x360 [ 240.203866][T10145] ? __pfx_genl_rcv_msg+0x10/0x10 [ 240.208908][T10145] ? __pfx_lock_acquire+0x10/0x10 [ 240.213935][T10145] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 240.219829][T10145] ? __pfx___might_resched+0x10/0x10 [ 240.225120][T10145] netlink_rcv_skb+0x1e3/0x430 [ 240.229883][T10145] ? __pfx_genl_rcv_msg+0x10/0x10 [ 240.234906][T10145] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 240.240198][T10145] ? __netlink_deliver_tap+0x77e/0x7c0 [ 240.245669][T10145] genl_rcv+0x28/0x40 [ 240.249646][T10145] netlink_unicast+0x7f6/0x990 [ 240.254420][T10145] ? __pfx_netlink_unicast+0x10/0x10 [ 240.259718][T10145] ? __virt_addr_valid+0x183/0x530 [ 240.264827][T10145] ? __check_object_size+0x48e/0x900 [ 240.270110][T10145] netlink_sendmsg+0x8e4/0xcb0 [ 240.274888][T10145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.280181][T10145] ? aa_sock_msg_perm+0x91/0x160 [ 240.285121][T10145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.290406][T10145] __sock_sendmsg+0x221/0x270 [ 240.295088][T10145] ____sys_sendmsg+0x52a/0x7e0 [ 240.299854][T10145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 240.305142][T10145] __sys_sendmsg+0x292/0x380 [ 240.309727][T10145] ? __pfx___sys_sendmsg+0x10/0x10 [ 240.314840][T10145] ? __pfx_vfs_write+0x10/0x10 [ 240.319642][T10145] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 240.325986][T10145] ? do_syscall_64+0x100/0x230 [ 240.330768][T10145] ? do_syscall_64+0xb6/0x230 [ 240.335454][T10145] do_syscall_64+0xf3/0x230 [ 240.339952][T10145] ? clear_bhb_loop+0x35/0x90 [ 240.344626][T10145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.350529][T10145] RIP: 0033:0x7f832cd7dff9 [ 240.354943][T10145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.374554][T10145] RSP: 002b:00007f832dc0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.382979][T10145] RAX: ffffffffffffffda RBX: 00007f832cf35f80 RCX: 00007f832cd7dff9 [ 240.390964][T10145] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 240.398934][T10145] RBP: 00007f832dc0c090 R08: 0000000000000000 R09: 0000000000000000 [ 240.406902][T10145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 240.414868][T10145] R13: 0000000000000000 R14: 00007f832cf35f80 R15: 00007fff5ce62598 [ 240.422866][T10145] [ 240.612569][T10159] netlink: 'syz.3.1421': attribute type 11 has an invalid length. [ 240.631708][T10159] openvswitch: netlink: Message has 8 unknown bytes. [ 240.648209][T10161] netlink: 'syz.0.1424': attribute type 11 has an invalid length. [ 240.664593][T10166] erspan0: entered promiscuous mode [ 240.673614][T10166] vlan2: entered promiscuous mode [ 240.900345][T10186] netlink: 'syz.1.1432': attribute type 11 has an invalid length. [ 240.912691][T10171] ebtables: ebtables: counters copy to user failed while replacing table [ 240.930437][T10186] openvswitch: netlink: Message has 8 unknown bytes. [ 240.949871][T10186] FAULT_INJECTION: forcing a failure. [ 240.949871][T10186] name failslab, interval 1, probability 0, space 0, times 0 [ 240.976770][T10182] ebtables: ebtables: counters copy to user failed while replacing table [ 240.987886][T10186] CPU: 1 UID: 0 PID: 10186 Comm: syz.1.1432 Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 240.998344][T10186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 241.008510][T10186] Call Trace: [ 241.011805][T10186] [ 241.014752][T10186] dump_stack_lvl+0x241/0x360 [ 241.019462][T10186] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.024684][T10186] ? __pfx__printk+0x10/0x10 [ 241.029295][T10186] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 241.035295][T10186] ? __pfx___might_resched+0x10/0x10 [ 241.040606][T10186] should_fail_ex+0x3b0/0x4e0 [ 241.045312][T10186] should_failslab+0xac/0x100 [ 241.050006][T10186] ? __alloc_skb+0x1c3/0x440 [ 241.054619][T10186] kmem_cache_alloc_node_noprof+0x71/0x320 [ 241.060431][T10186] __alloc_skb+0x1c3/0x440 [ 241.064853][T10186] ? __pfx___alloc_skb+0x10/0x10 [ 241.069795][T10186] ? netlink_ack_tlv_len+0x6e/0x200 [ 241.074996][T10186] netlink_ack+0x13f/0xa30 [ 241.079409][T10186] ? __pfx_lock_acquire+0x10/0x10 [ 241.084432][T10186] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 241.090333][T10186] netlink_rcv_skb+0x262/0x430 [ 241.095184][T10186] ? __pfx_genl_rcv_msg+0x10/0x10 [ 241.100213][T10186] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 241.105514][T10186] ? __netlink_deliver_tap+0x77e/0x7c0 [ 241.110981][T10186] genl_rcv+0x28/0x40 [ 241.114957][T10186] netlink_unicast+0x7f6/0x990 [ 241.119724][T10186] ? __pfx_netlink_unicast+0x10/0x10 [ 241.125018][T10186] ? __virt_addr_valid+0x183/0x530 [ 241.130126][T10186] ? __check_object_size+0x48e/0x900 [ 241.135422][T10186] netlink_sendmsg+0x8e4/0xcb0 [ 241.140193][T10186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.145484][T10186] ? aa_sock_msg_perm+0x91/0x160 [ 241.150418][T10186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.155699][T10186] __sock_sendmsg+0x221/0x270 [ 241.160375][T10186] ____sys_sendmsg+0x52a/0x7e0 [ 241.165139][T10186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.170427][T10186] __sys_sendmsg+0x292/0x380 [ 241.175013][T10186] ? __pfx___sys_sendmsg+0x10/0x10 [ 241.180136][T10186] ? __pfx_vfs_write+0x10/0x10 [ 241.184918][T10186] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 241.191246][T10186] ? do_syscall_64+0x100/0x230 [ 241.196005][T10186] ? do_syscall_64+0xb6/0x230 [ 241.200676][T10186] do_syscall_64+0xf3/0x230 [ 241.205175][T10186] ? clear_bhb_loop+0x35/0x90 [ 241.209848][T10186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.215742][T10186] RIP: 0033:0x7fac5197dff9 [ 241.220161][T10186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.239761][T10186] RSP: 002b:00007fac52862038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.248172][T10186] RAX: ffffffffffffffda RBX: 00007fac51b35f80 RCX: 00007fac5197dff9 [ 241.256139][T10186] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 241.264106][T10186] RBP: 00007fac52862090 R08: 0000000000000000 R09: 0000000000000000 [ 241.272067][T10186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 241.280106][T10186] R13: 0000000000000000 R14: 00007fac51b35f80 R15: 00007fffb5c87e88 [ 241.288102][T10186] [ 241.349254][T10194] openvswitch: netlink: Actions may not be safe on all matching packets [ 241.746780][T10213] netlink: 'syz.2.1438': attribute type 11 has an invalid length. [ 241.765414][T10213] __nla_validate_parse: 14 callbacks suppressed [ 241.765432][T10213] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.1438'. [ 241.803577][T10213] openvswitch: netlink: Message has 8 unknown bytes. [ 242.067109][T10223] netlink: 'syz.2.1441': attribute type 11 has an invalid length. [ 242.314994][T10236] netlink: 'syz.1.1445': attribute type 11 has an invalid length. [ 242.347107][T10236] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.1445'. [ 242.357115][T10236] openvswitch: netlink: Message has 8 unknown bytes. [ 242.470207][T10237] ebtables: ebtables: counters copy to user failed while replacing table [ 242.538561][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1446'. [ 244.586915][T10226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1443'. [ 244.709171][T10256] netlink: 892 bytes leftover after parsing attributes in process `syz.0.1448'. [ 244.744635][T10259] netlink: 'syz.3.1449': attribute type 1 has an invalid length. [ 244.776007][T10259] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1449'. [ 244.789088][T10265] netlink: 'syz.4.1452': attribute type 11 has an invalid length. [ 244.795149][T10263] netlink: 'syz.2.1451': attribute type 2 has an invalid length. [ 244.799194][T10265] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.1452'. [ 244.926724][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1454'. [ 244.970075][T10267] netlink: 'syz.1.1450': attribute type 11 has an invalid length. [ 244.984528][T10278] netlink: 'syz.2.1456': attribute type 11 has an invalid length. [ 245.003381][T10267] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.1450'. [ 245.023181][T10278] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.1456'. [ 245.048651][T10267] net_ratelimit: 4 callbacks suppressed [ 245.048666][T10267] openvswitch: netlink: Message has 8 unknown bytes. [ 245.050266][T10278] openvswitch: netlink: Message has 8 unknown bytes. [ 245.189227][T10287] bond0: (slave team0): Releasing backup interface [ 245.204568][T10282] ebtables: ebtables: counters copy to user failed while replacing table [ 245.266741][T10287] bond0: (slave batadv0): Releasing backup interface [ 245.336586][T10287] bridge_slave_0: left allmulticast mode [ 245.342441][T10287] bridge_slave_0: left promiscuous mode [ 245.348793][T10287] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.361934][T10287] bridge_slave_1: left allmulticast mode [ 245.377176][T10287] bridge_slave_1: left promiscuous mode [ 245.384783][T10287] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.408954][T10287] bond0: (slave bond_slave_0): Releasing backup interface [ 245.427440][T10287] bond0: (slave bond_slave_1): Releasing backup interface [ 245.460404][T10287] team0: Port device team_slave_0 removed [ 245.518372][T10287] team0: Port device team_slave_1 removed [ 245.524476][T10311] ebtables: ebtables: counters copy to user failed while replacing table [ 245.535237][T10287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.542810][T10287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.569024][T10287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.577267][T10287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.592565][T10287] bond1: (slave ip6gre1): Releasing backup interface [ 245.612335][T10319] netlink: 'syz.3.1466': attribute type 11 has an invalid length. [ 245.612637][T10294] veth1_to_team: entered promiscuous mode [ 245.632598][T10319] openvswitch: netlink: Message has 8 unknown bytes. [ 245.637685][T10294] team0: Port device veth1_to_team added [ 245.759533][T10324] netlink: 'syz.2.1469': attribute type 1 has an invalid length. [ 245.871336][T10335] netlink: 'syz.0.1468': attribute type 2 has an invalid length. [ 245.921177][T10321] netlink: 'syz.3.1467': attribute type 7 has an invalid length. [ 245.931172][T10338] netlink: 'syz.1.1472': attribute type 11 has an invalid length. [ 245.941410][T10338] openvswitch: netlink: Message has 8 unknown bytes. [ 245.960038][T10338] FAULT_INJECTION: forcing a failure. [ 245.960038][T10338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.029152][T10338] CPU: 0 UID: 0 PID: 10338 Comm: syz.1.1472 Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 246.039611][T10338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 246.049685][T10338] Call Trace: [ 246.052983][T10338] [ 246.055938][T10338] dump_stack_lvl+0x241/0x360 [ 246.060651][T10338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.065879][T10338] ? __pfx__printk+0x10/0x10 [ 246.070503][T10338] ? snprintf+0xda/0x120 [ 246.074774][T10338] should_fail_ex+0x3b0/0x4e0 [ 246.079483][T10338] _copy_to_user+0x2f/0xb0 [ 246.083933][T10338] simple_read_from_buffer+0xca/0x150 [ 246.089338][T10338] proc_fail_nth_read+0x1e9/0x250 [ 246.094392][T10338] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 246.099966][T10338] ? rw_verify_area+0x55e/0x6f0 [ 246.104842][T10338] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 246.110417][T10338] vfs_read+0x201/0xbc0 [ 246.114601][T10338] ? __pfx_lock_release+0x10/0x10 [ 246.119657][T10338] ? __pfx_vfs_read+0x10/0x10 [ 246.124367][T10338] ? __fget_files+0x3f3/0x470 [ 246.129080][T10338] ? fdget_pos+0x24e/0x320 [ 246.133523][T10338] ksys_read+0x183/0x2b0 [ 246.137783][T10338] ? __pfx_ksys_read+0x10/0x10 [ 246.142551][T10338] ? do_syscall_64+0x100/0x230 [ 246.147315][T10338] ? do_syscall_64+0xb6/0x230 [ 246.151994][T10338] do_syscall_64+0xf3/0x230 [ 246.156487][T10338] ? clear_bhb_loop+0x35/0x90 [ 246.161154][T10338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.167046][T10338] RIP: 0033:0x7fac5197ca3c [ 246.171456][T10338] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 246.191056][T10338] RSP: 002b:00007fac52862030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 246.199467][T10338] RAX: ffffffffffffffda RBX: 00007fac51b35f80 RCX: 00007fac5197ca3c [ 246.207432][T10338] RDX: 000000000000000f RSI: 00007fac528620a0 RDI: 0000000000000004 [ 246.215394][T10338] RBP: 00007fac52862090 R08: 0000000000000000 R09: 0000000000000000 [ 246.223359][T10338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 246.231321][T10338] R13: 0000000000000000 R14: 00007fac51b35f80 R15: 00007fffb5c87e88 [ 246.239297][T10338] [ 246.368532][T10346] ebtables: ebtables: counters copy to user failed while replacing table [ 246.463785][T10363] openvswitch: netlink: Message has 8 unknown bytes. [ 246.637198][T10365] ebtables: ebtables: counters copy to user failed while replacing table [ 246.889448][T10393] __nla_validate_parse: 5 callbacks suppressed [ 246.889466][T10393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1487'. [ 246.945724][T10396] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.1487'. [ 247.204658][T10413] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.1493'. [ 247.240094][T10413] openvswitch: netlink: Message has 8 unknown bytes. [ 247.361291][T10422] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1494'. [ 247.690368][T10433] nbd: illegal input index -1 [ 247.815613][T10442] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1499'. [ 247.867448][T10439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1499'. [ 247.927549][T10448] team0: entered promiscuous mode [ 247.932883][T10448] team_slave_0: entered promiscuous mode [ 247.941380][T10448] team_slave_1: entered promiscuous mode [ 247.985870][T10445] team0: left promiscuous mode [ 247.994912][T10445] team_slave_0: left promiscuous mode [ 248.000474][T10445] team_slave_1: left promiscuous mode [ 248.340700][T10473] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.1510'. [ 248.353663][T10475] netem: change failed [ 248.400931][T10472] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1507'. [ 248.451356][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1507'. [ 248.557619][T10472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1507'. [ 249.050183][T10503] xt_ecn: cannot match TCP bits for non-tcp packets [ 249.140808][T10502] lo speed is unknown, defaulting to 1000 [ 249.163479][T10511] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20001 [ 249.648317][T10533] sch_fq: defrate 0 ignored. [ 250.115040][T10562] xt_NFQUEUE: number of total queues is 0 [ 250.387510][T10578] pimreg3: entered allmulticast mode [ 250.422089][T10578] pimreg3: left allmulticast mode [ 250.504940][T10583] validate_nla: 7 callbacks suppressed [ 250.504959][T10583] netlink: 'syz.2.1536': attribute type 33 has an invalid length. [ 250.608679][T10590] netlink: 'syz.2.1537': attribute type 11 has an invalid length. [ 250.630797][T10590] net_ratelimit: 7 callbacks suppressed [ 250.630815][T10590] openvswitch: netlink: Message has 8 unknown bytes. [ 250.909464][T10595] ebtables: ebtables: counters copy to user failed while replacing table [ 250.966851][T10604] ebtables: ebtables: counters copy to user failed while replacing table [ 251.074438][T10613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.101450][T10614] syzkaller0: entered promiscuous mode [ 251.107274][T10614] syzkaller0: entered allmulticast mode [ 251.530902][T10592] dccp_close: ABORT with 32 bytes unread [ 252.982019][T10632] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.002311][T10636] __nla_validate_parse: 16 callbacks suppressed [ 253.002330][T10636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1547'. [ 253.018015][T10638] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1546'. [ 253.316487][T10657] ebtables: ebtables: counters copy to user failed while replacing table [ 253.366165][T10681] netlink: 'syz.1.1559': attribute type 11 has an invalid length. [ 253.399392][T10681] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.1559'. [ 253.399671][T10669] ebtables: ebtables: counters copy to user failed while replacing table [ 253.441308][T10681] openvswitch: netlink: Message has 8 unknown bytes. [ 253.486619][T10686] vlan3: entered promiscuous mode [ 253.513531][T10686] vlan3: entered allmulticast mode [ 253.602356][T10695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.691170][T10705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 253.895372][T10718] lo speed is unknown, defaulting to 1000 [ 253.992258][T10723] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1572'. [ 254.133435][T10727] ebtables: ebtables: counters copy to user failed while replacing table [ 254.297636][T10737] ebtables: ebtables: counters copy to user failed while replacing table [ 254.442729][T10745] netlink: 'syz.4.1577': attribute type 11 has an invalid length. [ 254.470449][T10745] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.1577'. [ 254.647217][T10755] sctp: [Deprecated]: syz.2.1580 (pid 10755) Use of struct sctp_assoc_value in delayed_ack socket option. [ 254.647217][T10755] Use struct sctp_sack_info instead [ 255.863382][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.583378][ T2893] bridge_slave_1: left allmulticast mode [ 267.589075][ T2893] bridge_slave_1: left promiscuous mode [ 267.673277][ T2893] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.853908][ T2893] bridge_slave_0: left allmulticast mode [ 267.859602][ T2893] bridge_slave_0: left promiscuous mode [ 267.873176][ T2893] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.024660][ T2893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.036276][ T2893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.049032][ T2893] bond0 (unregistering): Released all slaves [ 275.710957][ T2893] hsr_slave_0: left promiscuous mode [ 275.763219][ T2893] hsr_slave_1: left promiscuous mode [ 275.823286][ T2893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.830745][ T2893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.914217][ T2893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.922065][ T2893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.108366][ T2893] veth1_macvtap: left promiscuous mode [ 276.143163][ T2893] veth0_macvtap: left promiscuous mode [ 276.148801][ T2893] veth1_vlan: left promiscuous mode [ 276.243262][ T2893] veth0_vlan: left promiscuous mode [ 295.054045][ T2893] team0 (unregistering): Port device team_slave_1 removed [ 295.863670][ T2893] team0 (unregistering): Port device team_slave_0 removed [ 324.069243][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.077928][ T4622] Bluetooth: hci2: command 0x0406 tx timeout [ 324.084237][ T4622] Bluetooth: hci3: command tx timeout [ 324.089660][ T4622] Bluetooth: hci1: command 0x0406 tx timeout [ 324.096114][ T4622] Bluetooth: hci4: command 0x0406 tx timeout [ 365.553034][ T5229] Bluetooth: hci0: command 0x0405 tx timeout [ 379.203352][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 428.150040][ T4622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 428.158555][ T4622] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 428.167358][ T4622] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 428.177695][ T4622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 428.185801][ T4622] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 428.194929][ T4622] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 428.203768][ T4622] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 428.206166][ T5239] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 428.219503][ T5239] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 428.227891][ T5239] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 428.235200][ T5239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 428.242294][ T5239] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 428.250310][T10797] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 428.264636][ T5239] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 428.272083][T10797] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 428.279276][T10797] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 428.286978][ T5239] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 428.294254][ T5239] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 428.309283][ T5239] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 428.316848][T10797] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 428.324005][T10797] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 428.331561][ T5239] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 428.334997][ T5245] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 428.346845][ T5245] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 428.465029][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 428.482556][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 428.499552][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 428.516564][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 428.524371][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 428.531788][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 428.617351][ T7253] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.630006][ T7253] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.640552][ T7253] bond0 (unregistering): Released all slaves [ 428.767933][T10790] lo speed is unknown, defaulting to 1000 [ 428.855553][T10791] lo speed is unknown, defaulting to 1000 [ 428.892760][T10792] lo speed is unknown, defaulting to 1000 [ 428.930947][T10789] lo speed is unknown, defaulting to 1000 [ 429.015369][T10798] lo speed is unknown, defaulting to 1000 [ 429.190035][ T7253] hsr_slave_0: left promiscuous mode [ 429.198568][ T7253] hsr_slave_1: left promiscuous mode [ 429.206168][ T7253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.215262][ T7253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.222907][ T7253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.230466][ T7253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.247212][ T7253] veth1_macvtap: left promiscuous mode [ 429.252710][ T7253] veth1_vlan: left promiscuous mode [ 429.258180][ T7253] veth0_vlan: left promiscuous mode [ 429.420323][ T7253] team0 (unregistering): Port device vlan0 removed [ 429.637678][ T7253] team0 (unregistering): Port device team_slave_1 removed [ 429.678945][ T7253] team0 (unregistering): Port device team_slave_0 removed [ 430.086289][T10790] chnl_net:caif_netlink_parms(): no params data found [ 430.254965][T10792] chnl_net:caif_netlink_parms(): no params data found [ 430.332169][T10791] chnl_net:caif_netlink_parms(): no params data found [ 430.394640][T10790] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.401794][T10790] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.413317][ T5234] Bluetooth: hci6: command tx timeout [ 430.419483][ T5234] Bluetooth: hci7: command tx timeout [ 430.425166][ T5245] Bluetooth: hci5: command tx timeout [ 430.425305][ T5244] Bluetooth: hci8: command tx timeout [ 430.431793][T10790] bridge_slave_0: entered allmulticast mode [ 430.444756][T10790] bridge_slave_0: entered promiscuous mode [ 430.459902][T10790] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.468991][T10790] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.476750][T10790] bridge_slave_1: entered allmulticast mode [ 430.484073][T10790] bridge_slave_1: entered promiscuous mode [ 430.571587][T10790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.587593][T10798] chnl_net:caif_netlink_parms(): no params data found [ 430.603529][T10792] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.610720][T10792] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.626192][T10792] bridge_slave_0: entered allmulticast mode [ 430.634211][T10792] bridge_slave_0: entered promiscuous mode [ 430.646129][T10792] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.653428][T10792] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.660641][T10792] bridge_slave_1: entered allmulticast mode [ 430.666734][ T5244] Bluetooth: hci1: command tx timeout [ 430.669026][T10792] bridge_slave_1: entered promiscuous mode [ 430.694129][T10790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.759308][T10790] team0: Port device team_slave_0 added [ 430.771725][T10789] chnl_net:caif_netlink_parms(): no params data found [ 430.804155][T10792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.816617][T10792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.827792][T10790] team0: Port device team_slave_1 added [ 430.924795][T10791] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.931951][T10791] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.939290][T10791] bridge_slave_0: entered allmulticast mode [ 430.946229][T10791] bridge_slave_0: entered promiscuous mode [ 430.954619][T10791] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.961891][T10791] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.969237][T10791] bridge_slave_1: entered allmulticast mode [ 430.976859][T10791] bridge_slave_1: entered promiscuous mode [ 430.989246][T10792] team0: Port device team_slave_0 added [ 430.997862][T10792] team0: Port device team_slave_1 added [ 431.004956][T10790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.011910][T10790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.037957][T10790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.110153][T10790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.117409][T10790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.144215][T10790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.187639][T10798] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.194969][T10798] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.202105][T10798] bridge_slave_0: entered allmulticast mode [ 431.208946][T10798] bridge_slave_0: entered promiscuous mode [ 431.218529][T10791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.236895][T10791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.246833][T10792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.255310][T10792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.282868][T10792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.296294][T10792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.303349][T10792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.329956][T10792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.354794][T10798] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.367103][T10798] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.374550][T10798] bridge_slave_1: entered allmulticast mode [ 431.381582][T10798] bridge_slave_1: entered promiscuous mode [ 431.423910][T10791] team0: Port device team_slave_0 added [ 431.434452][T10791] team0: Port device team_slave_1 added [ 431.482061][T10789] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.489364][T10789] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.499422][T10789] bridge_slave_0: entered allmulticast mode [ 431.510234][T10789] bridge_slave_0: entered promiscuous mode [ 431.551968][T10791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.559109][T10791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.586073][T10791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.598702][T10789] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.608298][T10789] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.615883][T10789] bridge_slave_1: entered allmulticast mode [ 431.622921][T10789] bridge_slave_1: entered promiscuous mode [ 431.640646][T10798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.676035][ T7253] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.699634][T10790] hsr_slave_0: entered promiscuous mode [ 431.708755][T10790] hsr_slave_1: entered promiscuous mode [ 431.736690][T10791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.748256][T10791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.775262][T10791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.801112][T10798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.827447][ T7253] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.848099][T10792] hsr_slave_0: entered promiscuous mode [ 431.858138][T10792] hsr_slave_1: entered promiscuous mode [ 431.864750][T10792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.872623][T10792] Cannot create hsr debugfs directory [ 431.887650][T10789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.899493][T10789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.953813][ T7253] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.982137][T10798] team0: Port device team_slave_0 added [ 432.016129][T10798] team0: Port device team_slave_1 added [ 432.051827][T10791] hsr_slave_0: entered promiscuous mode [ 432.058834][T10791] hsr_slave_1: entered promiscuous mode [ 432.072677][T10791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 432.080624][T10791] Cannot create hsr debugfs directory [ 432.100791][ T7253] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.119765][T10789] team0: Port device team_slave_0 added [ 432.147181][T10798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.154501][T10798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.185356][T10798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.220068][T10789] team0: Port device team_slave_1 added [ 432.251489][T10798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.259231][T10798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.286346][T10798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.387498][T10789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.397984][T10789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.431942][T10789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.444896][T10789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.451853][T10789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.478093][T10789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.500739][ T5244] Bluetooth: hci8: command tx timeout [ 432.500755][ T5234] Bluetooth: hci6: command tx timeout [ 432.506390][ T5244] Bluetooth: hci7: command tx timeout [ 432.512866][ T5245] Bluetooth: hci5: command tx timeout [ 432.532653][T10798] hsr_slave_0: entered promiscuous mode [ 432.539364][T10798] hsr_slave_1: entered promiscuous mode [ 432.551396][T10798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 432.559199][T10798] Cannot create hsr debugfs directory [ 432.709930][ T7253] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.733147][ T5245] Bluetooth: hci1: command tx timeout [ 432.742147][T10789] hsr_slave_0: entered promiscuous mode [ 432.748676][T10789] hsr_slave_1: entered promiscuous mode [ 432.755877][T10789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 432.764943][T10789] Cannot create hsr debugfs directory [ 432.787013][ T7253] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.835312][T10790] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.896892][ T7253] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.940323][T10790] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.986875][ T7253] bond0: (slave netdevsim0): Releasing backup interface [ 432.998410][ T7253] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.058322][T10790] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.125607][T10790] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.252132][ T7253] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.341089][ T7253] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.420765][ T7253] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.487959][ T7253] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.527997][T10792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 433.538679][T10792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 433.571197][T10792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 433.580909][T10792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 433.696858][ T7253] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.750062][T10792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.765934][T10792] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.777314][ T7232] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.784447][ T7232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.813643][ T7253] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.829795][ T9465] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.836903][ T9465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.945986][ T7253] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.975171][T10791] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 433.985700][T10791] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 434.006342][T10791] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 434.041590][ T7253] bond0: (slave ): Releasing backup interface [ 434.050721][ T7253] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.069131][T10791] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 434.194467][ T7253] bridge_slave_1: left allmulticast mode [ 434.200140][ T7253] bridge_slave_1: left promiscuous mode [ 434.208654][ T7253] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.217242][ T7253] bridge_slave_0: left allmulticast mode [ 434.222893][ T7253] bridge_slave_0: left promiscuous mode [ 434.233234][ T7253] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.242837][ T7253] bridge_slave_0: left allmulticast mode [ 434.249671][ T7253] bridge_slave_0: left promiscuous mode [ 434.257166][ T7253] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.270966][ T7253] bridge_slave_1: left allmulticast mode [ 434.277481][ T7253] bridge_slave_1: left promiscuous mode [ 434.283557][ T7253] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.292726][ T7253] bridge_slave_0: left allmulticast mode [ 434.298740][ T7253] bridge_slave_0: left promiscuous mode [ 434.304791][ T7253] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.580021][ T5245] Bluetooth: hci7: command tx timeout [ 434.587289][ T5234] Bluetooth: hci8: command tx timeout [ 434.592738][ T5234] Bluetooth: hci5: command tx timeout [ 434.597636][ T5244] Bluetooth: hci6: command tx timeout [ 434.815433][ T5244] Bluetooth: hci1: command tx timeout [ 435.523356][ T7253] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.538668][ T7253] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.549170][ T7253] bond0 (unregistering): Released all slaves [ 435.660516][ T7253] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.675955][ T7253] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.688087][ T7253] bond0 (unregistering): Released all slaves [ 435.807684][ T7253] bond0 (unregistering): Released all slaves [ 435.820328][ T7253] bond1 (unregistering): Released all slaves [ 435.938840][ T7253] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.950184][ T7253] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.961086][ T7253] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 435.978016][ T7253] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 435.989583][ T7253] team0: left promiscuous mode [ 435.994689][ T7253] team_slave_0: left promiscuous mode [ 436.000575][ T7253] team_slave_1: left promiscuous mode [ 436.009268][ T7253] bond0 (unregistering): Released all slaves [ 436.061285][T10792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.074554][T10791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.102180][T10791] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.174631][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.181730][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.200149][ T7253] : left promiscuous mode [ 436.232369][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.239463][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.290271][ T7253] tipc: Left network mode [ 436.294781][T10792] veth0_vlan: entered promiscuous mode [ 436.316413][ T7253] tipc: Disabling bearer [ 436.322247][ T7253] tipc: Left network mode [ 436.338144][T10792] veth1_vlan: entered promiscuous mode [ 436.402395][T10791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 436.468431][ T7253] IPVS: stopping master sync thread 9957 ... [ 436.507244][ T7253] IPVS: stopping backup sync thread 8650 ... [ 436.537367][T10792] veth0_macvtap: entered promiscuous mode [ 436.613850][T10792] veth1_macvtap: entered promiscuous mode [ 436.620242][T10790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 436.653415][ T5244] Bluetooth: hci6: command tx timeout [ 436.658887][ T5229] Bluetooth: hci5: command tx timeout [ 436.658909][ T5234] Bluetooth: hci7: command tx timeout [ 436.664574][ T5229] Bluetooth: hci8: command tx timeout [ 436.700128][T10790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 436.714824][T10790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 436.780350][T10790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 436.800548][T10792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.811278][T10792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.821891][T10792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.837210][T10792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.847153][T10792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.857886][T10792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.867807][T10792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.878367][T10792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.890645][T10792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.898056][ T5229] Bluetooth: hci1: command tx timeout [ 436.934111][T10792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.944977][T10792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.956175][T10792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.966789][T10792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.983094][T10792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.999161][T10792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.009212][T10792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.019995][T10792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.033973][T10792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.060568][T10791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.082128][T10792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.090959][T10792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.100624][T10792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.109755][T10792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.332328][T10790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.350175][T10789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 437.370502][T10789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 437.378667][ T9465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.389171][ T9465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.398732][T10789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 437.430659][ T2893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.451618][ T2893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.460990][T10789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 437.531824][T10790] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.571307][T10791] veth0_vlan: entered promiscuous mode [ 437.609809][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.616974][ T3026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.627744][ T3026] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.634893][ T3026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.659786][T10791] veth1_vlan: entered promiscuous mode [ 437.735540][T10840] net_ratelimit: 1 callbacks suppressed [ 437.735557][T10840] ebtables: ebtables: counters copy to user failed while replacing table [ 437.830350][T10798] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 437.929838][T10798] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 437.931440][T10846] netlink: 'syz.3.1591': attribute type 11 has an invalid length. [ 437.946333][T10846] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.1591'. [ 437.958636][T10846] openvswitch: netlink: Message has 8 unknown bytes. [ 437.992356][T10798] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 438.001584][T10798] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 438.089651][T10789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.168016][T10791] veth0_macvtap: entered promiscuous mode [ 438.196450][T10789] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.238514][T10791] veth1_macvtap: entered promiscuous mode [ 438.265548][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.272612][ T3026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.281862][ T3026] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.288953][ T3026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.320089][T10790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.432725][T10791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.456309][T10791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.466668][T10791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.477356][T10791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.488000][T10791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.499078][T10791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.509904][T10791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.521144][T10791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.531837][T10791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.547357][T10791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.558758][T10791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.637014][ T7253] hsr_slave_0: left promiscuous mode [ 438.642882][ T7253] hsr_slave_1: left promiscuous mode [ 438.649745][ T7253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.657584][ T7253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.670039][ T7253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.678768][ T7253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.691926][ T7253] hsr_slave_0: left promiscuous mode [ 438.698611][ T7253] hsr_slave_1: left promiscuous mode [ 438.707608][ T7253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.715834][ T7253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.724139][ T7253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.731871][ T7253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.741393][ T7253] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 438.749580][ T7253] batman_adv: batadv0: Removing interface: virt_wifi0 [ 438.757384][ T7253] batman_adv: batadv0: Removing interface: ipvlan1 [ 438.766605][ T7253] hsr_slave_0: left promiscuous mode [ 438.772548][ T7253] hsr_slave_1: left promiscuous mode [ 438.782378][ T7253] hsr_slave_0: left promiscuous mode [ 438.788816][ T7253] hsr_slave_1: left promiscuous mode [ 438.795119][ T7253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.802632][ T7253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.817159][ T7253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.825727][ T7253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.878533][ T7253] veth1_macvtap: left promiscuous mode [ 438.884372][ T7253] veth0_macvtap: left promiscuous mode [ 438.889993][ T7253] veth1_vlan: left promiscuous mode [ 438.897532][ T7253] veth0_vlan: left promiscuous mode [ 438.905382][ T7253] veth1_macvtap: left promiscuous mode [ 438.910959][ T7253] veth0_macvtap: left promiscuous mode [ 438.918785][ T7253] veth1_vlan: left promiscuous mode [ 438.924533][ T7253] veth0_vlan: left promiscuous mode [ 438.930399][ T7253] veth1_macvtap: left promiscuous mode [ 438.936877][ T7253] veth0_macvtap: left promiscuous mode [ 438.943379][ T7253] veth1_macvtap: left promiscuous mode [ 438.948933][ T7253] veth0_macvtap: left promiscuous mode [ 438.955073][ T7253] veth1_vlan: left promiscuous mode [ 438.960391][ T7253] veth0_vlan: left promiscuous mode [ 439.656024][ T7253] team0 (unregistering): Port device team_slave_1 removed [ 439.703246][ T7253] team0 (unregistering): Port device team_slave_0 removed [ 440.179610][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.438882][ T7253] team0 (unregistering): Port device team_slave_1 removed [ 440.482834][ T7253] team0 (unregistering): Port device team_slave_0 removed [ 441.167594][ T7253] team0 (unregistering): Port device veth1_to_team removed [ 441.920791][ T7253] team0 (unregistering): Port device team_slave_1 removed [ 441.974823][ T7253] team0 (unregistering): Port device team_slave_0 removed [ 442.381589][T10791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.392500][T10791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.404352][T10791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.415633][T10791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.427239][T10791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.441650][T10789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 442.473907][T10790] veth0_vlan: entered promiscuous mode [ 442.520343][ T938] lo speed is unknown, defaulting to 1000 [ 442.522778][T10791] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.536429][T10791] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.545534][T10791] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.565824][T10791] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.610409][T10790] veth1_vlan: entered promiscuous mode [ 442.723669][T10798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.777370][T10872] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 442.889213][ T7251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.889520][T10790] veth0_macvtap: entered promiscuous mode [ 442.918218][T10798] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.919744][ T7251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.018737][T10790] veth1_macvtap: entered promiscuous mode [ 443.028402][ T2893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.029376][ T965] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.043400][ T965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.050789][ T2893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.100529][T10790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.112103][T10790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.138903][T10790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.158429][T10790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.172248][T10790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.182861][T10790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.194711][T10790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.203742][ T965] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.210836][ T965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.242892][T10790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.263044][T10790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.273150][T10790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.291371][T10790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.301520][T10790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.312682][T10790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.324487][T10790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.355604][T10884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1588'. [ 443.382642][T10883] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1588'. [ 443.417468][T10790] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.442476][T10790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.457906][T10790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.469278][T10790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.491592][T10789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.828841][ T7232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.844208][T10899] ebtables: ebtables: counters copy to user failed while replacing table [ 443.864109][ T7232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.927721][T10789] veth0_vlan: entered promiscuous mode [ 443.970564][T10789] veth1_vlan: entered promiscuous mode [ 444.018856][T10798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.021650][ T7232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.047625][ T7232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.160983][T10789] veth0_macvtap: entered promiscuous mode [ 444.214708][T10789] veth1_macvtap: entered promiscuous mode [ 444.260323][T10789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.290142][T10789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.302909][T10919] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1604'. [ 444.307359][T10789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.314621][T10919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1604'. [ 444.324634][T10789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.353025][T10789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.371894][T10789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.383973][T10789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.394988][T10789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.407357][T10789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.440836][T10789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.489304][T10789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.520258][T10789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.531394][T10789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.543129][T10789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.556128][T10789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.566137][T10789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.577697][T10789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.607434][T10789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.661148][T10789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.688906][ T7253] IPVS: stop unused estimator thread 0... [ 444.695303][T10789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.712048][T10789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.741710][T10789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.743895][T10938] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1607'. [ 444.980753][T10798] veth0_vlan: entered promiscuous mode [ 445.088240][ T7251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.091145][T10798] veth1_vlan: entered promiscuous mode [ 445.098476][ T7251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.169558][ T7234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.229866][ T7234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.298545][T10798] veth0_macvtap: entered promiscuous mode [ 445.436624][T10953] xt_cluster: node mask cannot exceed total number of nodes [ 445.472604][T10798] veth1_macvtap: entered promiscuous mode [ 445.578663][T10798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.622799][T10798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.669071][T10798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.681943][T10798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.700451][T10798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.714634][T10798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.732638][T10798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.752876][T10798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.798384][T10798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.829453][T10798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.863173][T10798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.872790][T10798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.883420][T10798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.893344][T10798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.904376][T10798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.914711][T10798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.925222][T10798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.935384][T10798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.945895][T10798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.955821][T10798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.966353][T10798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.977628][T10798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.007520][T10963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1615'. [ 446.026413][T10959] ebtables: ebtables: counters copy to user failed while replacing table [ 446.094917][T10798] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.113019][T10798] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.121757][T10798] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.148000][T10798] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.347760][T10983] xt_TPROXY: Can be used only with -p tcp or -p udp [ 446.378166][ T7253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.431806][ T7253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.478295][T10986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.576731][ T2893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.592755][ T2893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.624163][T10989] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1620'. [ 447.098682][T11011] team0: Port device macvlan1 added [ 447.123324][T10981] delete_channel: no stack [ 447.130557][T11008] team_slave_0: entered promiscuous mode [ 447.136621][T11008] team_slave_1: entered promiscuous mode [ 447.192366][T11008] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 447.372463][T11018] bridge_slave_0: left allmulticast mode [ 447.389231][T11018] bridge_slave_0: left promiscuous mode [ 447.398783][T11018] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.429702][T11018] bridge_slave_1: left allmulticast mode [ 447.436989][T11018] bridge_slave_1: left promiscuous mode [ 447.454485][T11018] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.481981][T11018] bond0: (slave bond_slave_0): Releasing backup interface [ 447.517960][T11023] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1629'. [ 447.539536][T11018] bond0: (slave bond_slave_1): Releasing backup interface [ 447.590208][T11018] team0: Port device team_slave_0 removed [ 447.621772][T11018] team0: Port device team_slave_1 removed [ 447.632024][T11018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.652058][T11018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.669231][T11018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.677488][T11018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.740460][T11021] wg2: entered promiscuous mode [ 447.811697][T11021] team0: Port device wg2 added [ 447.844121][T11026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1629'. [ 447.893361][T11025] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1628'. [ 448.039975][T11043] 8021q: VLANs not supported on ipvlan0 [ 448.253560][T11035] delete_channel: no stack [ 448.285727][T11049] bridge2: entered promiscuous mode [ 448.350191][T11045] j,: renamed from veth0_virt_wifi (while UP) [ 448.449295][T11053] __nla_validate_parse: 3 callbacks suppressed [ 448.449314][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1634'. [ 448.692408][T11068] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1639'. [ 448.805787][ T9465] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.959919][T11077] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1641'. [ 449.042618][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 449.379333][T11095] vlan2: entered promiscuous mode [ 449.393109][T11095] bond0: entered promiscuous mode [ 449.415857][T11095] bond0: left promiscuous mode [ 449.594899][T11079] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1643'. [ 450.110827][ T5282] IPVS: starting estimator thread 0... [ 450.213250][T11115] IPVS: using max 20 ests per chain, 48000 per kthread [ 450.237372][T11096] delete_channel: no stack [ 450.522891][T11127] netlink: 404 bytes leftover after parsing attributes in process `syz.1.1657'. [ 450.547451][T11127] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1657'. [ 450.561182][T11127] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1657'. [ 450.561473][T11106] delete_channel: no stack [ 450.570725][T11127] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1657'. [ 450.628675][T11127] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1657'. [ 450.642808][T11127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1657'. [ 451.576943][T11128] delete_channel: no stack [ 455.728101][T11140] : entered promiscuous mode [ 456.162088][T11173] x_tables: duplicate underflow at hook 2 [ 456.430845][T11173] __nla_validate_parse: 4 callbacks suppressed [ 456.430863][T11173] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1668'. [ 458.252084][T11222] delete_channel: no stack [ 462.660351][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 462.678307][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 462.687318][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 462.701305][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 462.711030][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 462.718852][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 462.742712][T11192] netlink: 'syz.3.1672': attribute type 10 has an invalid length. [ 463.483885][T11236] ebtables: ebtables: counters copy to user failed while replacing table [ 464.813192][ T5244] Bluetooth: hci0: command tx timeout [ 466.893234][ T5244] Bluetooth: hci0: command tx timeout [ 468.671980][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 468.687810][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 468.696063][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 468.705626][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 468.718255][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 468.726292][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 468.974075][ T5244] Bluetooth: hci0: command tx timeout [ 470.172972][ C0] sched: DL replenish lagged too much [ 470.813258][ T5244] Bluetooth: hci2: command tx timeout [ 471.053151][ T5244] Bluetooth: hci0: command tx timeout [ 472.893193][ T5244] Bluetooth: hci2: command tx timeout [ 473.679732][ T5229] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 473.693818][ T5229] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 473.702275][ T5229] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 473.710271][ T5229] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 473.718696][ T5229] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 473.727306][ T5229] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 474.973305][ T5244] Bluetooth: hci2: command tx timeout [ 474.999040][ T5229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 475.015752][ T5229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 475.033177][ T5229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 475.044208][ T5229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 475.051907][ T5229] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 475.059506][ T5229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 475.113276][ T5244] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 475.125253][ T5244] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 475.136245][ T5244] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 475.154785][ T5244] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 475.162344][ T5244] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 475.170203][ T5244] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 475.773187][ T5244] Bluetooth: hci3: command tx timeout [ 477.053127][ T5244] Bluetooth: hci2: command tx timeout [ 477.133119][ T5244] Bluetooth: hci4: command tx timeout [ 477.213618][ T5244] Bluetooth: hci9: command tx timeout [ 477.853170][ T5244] Bluetooth: hci3: command tx timeout [ 479.213139][ T5244] Bluetooth: hci4: command tx timeout [ 479.293211][ T5244] Bluetooth: hci9: command tx timeout [ 479.933154][ T5244] Bluetooth: hci3: command tx timeout [ 481.293143][ T5244] Bluetooth: hci4: command tx timeout [ 481.373289][ T5244] Bluetooth: hci9: command tx timeout [ 482.013218][ T5244] Bluetooth: hci3: command tx timeout [ 483.373161][ T5244] Bluetooth: hci4: command tx timeout [ 483.453194][ T5244] Bluetooth: hci9: command tx timeout [ 489.149554][T11227] chnl_net:caif_netlink_parms(): no params data found [ 501.617836][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 525.253930][ T5229] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 525.282919][ T5229] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 525.308145][ T5229] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 525.367739][ T5229] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 525.398660][ T5229] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 525.420696][ T5229] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 527.533261][ T5229] Bluetooth: hci5: command tx timeout [ 528.593681][T11227] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 529.008318][ T5244] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 529.029296][ T5244] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 529.037861][ T5244] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 529.054438][ T5244] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 529.062557][ T5244] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 529.073788][ T5244] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 529.614938][ T5244] Bluetooth: hci5: command tx timeout [ 531.133152][ T5244] Bluetooth: hci7: command tx timeout [ 531.693382][ T5244] Bluetooth: hci5: command tx timeout [ 533.213115][ T5244] Bluetooth: hci7: command tx timeout [ 533.773637][ T5244] Bluetooth: hci5: command tx timeout [ 534.001894][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 534.010982][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 534.019483][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 534.028438][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 534.037462][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 534.045047][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 535.295408][ T5234] Bluetooth: hci7: command tx timeout [ 535.302532][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 535.312395][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 535.320357][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 535.330596][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 535.338241][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 535.354507][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 535.402806][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 535.414090][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 535.424222][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 535.432004][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 535.440008][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 535.448489][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 536.093243][ T5229] Bluetooth: hci0: command tx timeout [ 537.373045][ T5229] Bluetooth: hci7: command tx timeout [ 537.453248][ T5229] Bluetooth: hci1: command tx timeout [ 537.533240][ T5229] Bluetooth: hci2: command tx timeout [ 538.173057][ T5229] Bluetooth: hci0: command tx timeout [ 539.533390][ T5229] Bluetooth: hci1: command tx timeout [ 539.613296][ T5229] Bluetooth: hci2: command tx timeout [ 540.253123][ T5229] Bluetooth: hci0: command tx timeout [ 541.613131][ T5229] Bluetooth: hci1: command tx timeout [ 541.693148][ T5229] Bluetooth: hci2: command tx timeout [ 542.333196][ T5229] Bluetooth: hci0: command tx timeout [ 543.693206][ T5229] Bluetooth: hci1: command tx timeout [ 543.773138][ T5229] Bluetooth: hci2: command tx timeout [ 554.899551][ T5229] Bluetooth: hci6: command 0x0406 tx timeout [ 563.059681][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 571.651282][ T9465] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.665550][ T9465] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.255694][ T9465] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.315309][ T5229] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 585.332231][ T5229] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 585.340183][ T5229] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 585.349832][ T5229] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 585.357720][ T5229] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 585.365065][ T5229] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 587.453232][ T5229] Bluetooth: hci6: command tx timeout [ 589.533226][ T5229] Bluetooth: hci6: command tx timeout [ 589.654749][ T5244] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 589.669700][ T5244] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 589.679145][ T5244] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 589.687502][ T5244] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 589.697046][ T5244] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 589.704696][ T5244] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 591.613178][ T5244] Bluetooth: hci6: command tx timeout [ 591.773303][ T5244] Bluetooth: hci8: command tx timeout [ 593.693232][ T5244] Bluetooth: hci6: command tx timeout [ 593.853307][ T5244] Bluetooth: hci8: command tx timeout [ 594.401287][ T5234] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 594.411108][ T5234] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 594.420725][ T5234] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 594.428850][ T5234] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 594.436781][ T5234] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 594.444219][ T5234] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 595.649236][ T5244] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 595.660348][ T5244] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 595.668891][ T5244] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 595.680454][ T5244] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 595.689844][ T5244] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 595.698150][ T5244] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 595.789894][ T5244] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 595.801505][ T5244] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 595.810030][ T5244] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 595.818903][ T5244] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 595.827700][ T5244] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 595.835551][ T5244] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 595.861295][ T5234] Bluetooth: hci3: command 0x0406 tx timeout [ 595.933310][ T5229] Bluetooth: hci8: command tx timeout [ 596.493242][ T5229] Bluetooth: hci10: command tx timeout [ 597.773164][ T5229] Bluetooth: hci11: command tx timeout [ 597.853453][ T5229] Bluetooth: hci12: command tx timeout [ 598.013373][ T5229] Bluetooth: hci8: command tx timeout [ 598.573152][ T5229] Bluetooth: hci10: command tx timeout [ 599.853096][ T5229] Bluetooth: hci11: command tx timeout [ 599.933445][ T5229] Bluetooth: hci12: command tx timeout [ 600.660785][ T5229] Bluetooth: hci10: command tx timeout [ 600.984350][ T5229] Bluetooth: hci9: command 0x0406 tx timeout [ 600.990466][ T5245] Bluetooth: hci4: command 0x0406 tx timeout [ 601.933120][ T5244] Bluetooth: hci11: command tx timeout [ 602.027102][ T5244] Bluetooth: hci12: command tx timeout [ 602.733167][ T5244] Bluetooth: hci10: command tx timeout [ 604.015411][ T5244] Bluetooth: hci11: command tx timeout [ 604.093160][ T5244] Bluetooth: hci12: command tx timeout [ 608.921460][ T9465] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.495496][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 645.348996][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 645.358236][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 645.366672][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 645.375769][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 645.385098][ T5234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 645.393403][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 647.453092][ T5234] Bluetooth: hci4: command tx timeout [ 649.533178][ T5234] Bluetooth: hci4: command tx timeout [ 650.459165][ T5245] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 650.468430][ T5245] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 650.476514][ T5245] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 650.486640][ T5245] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 650.496812][ T5245] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 650.504404][ T5245] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 651.613123][ T5229] Bluetooth: hci4: command tx timeout [ 652.178761][ T5229] Bluetooth: hci5: command 0x0406 tx timeout [ 652.189135][ T5245] Bluetooth: hci7: command 0x0406 tx timeout [ 652.573253][ T5234] Bluetooth: hci9: command tx timeout [ 653.693122][ T5234] Bluetooth: hci4: command tx timeout [ 654.670733][ T5234] Bluetooth: hci9: command tx timeout [ 654.871845][ T5244] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 654.880971][ T5244] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 654.890063][ T5244] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 654.899350][ T5244] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 654.908293][ T5244] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 654.917279][ T5244] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 656.191953][ T5245] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 656.201421][ T5245] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 656.209888][ T5245] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 656.220526][ T5245] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 656.234973][ T5229] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 656.242388][ T5229] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 656.265477][ T5229] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 656.275820][ T5229] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 656.285595][ T5229] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 656.294715][ T5229] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 656.305272][ T5229] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 656.312611][ T5229] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 656.733190][ T5245] Bluetooth: hci9: command tx timeout [ 656.983064][ T5245] Bluetooth: hci13: command tx timeout [ 657.293192][ T5245] Bluetooth: hci0: command 0x0406 tx timeout [ 658.333123][ T5234] Bluetooth: hci14: command tx timeout [ 658.413405][ T5234] Bluetooth: hci15: command tx timeout [ 658.813216][ T5234] Bluetooth: hci9: command tx timeout [ 659.053281][ T5245] Bluetooth: hci13: command tx timeout [ 660.416669][ T5229] Bluetooth: hci14: command tx timeout [ 660.493281][ T5229] Bluetooth: hci15: command tx timeout [ 661.133190][ T5229] Bluetooth: hci13: command tx timeout [ 662.423047][ T5244] Bluetooth: hci1: command 0x0406 tx timeout [ 662.429145][ T5229] Bluetooth: hci2: command 0x0406 tx timeout [ 662.494340][ T5245] Bluetooth: hci14: command tx timeout [ 662.573261][ T5234] Bluetooth: hci15: command tx timeout [ 663.217387][ T5234] Bluetooth: hci13: command tx timeout [ 664.573222][ T5234] Bluetooth: hci14: command tx timeout [ 664.653335][ T5234] Bluetooth: hci15: command tx timeout [ 685.937444][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 707.882281][ T5229] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 707.917221][ T5229] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 707.938430][ T5229] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 708.009991][ T5229] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 708.052025][ T5229] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 708.069035][ T5229] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 708.494624][ T5229] Bluetooth: hci6: command 0x0406 tx timeout [ 710.173259][ T5234] Bluetooth: hci16: command tx timeout [ 711.760373][ T5245] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 711.777939][ T5245] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 711.789260][ T5245] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 711.802554][ T5245] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 711.810384][ T5245] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 711.818237][ T5245] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 712.253172][ T5245] Bluetooth: hci16: command tx timeout [ 713.618399][ T5245] Bluetooth: hci8: command 0x0406 tx timeout [ 713.853293][ T5234] Bluetooth: hci17: command tx timeout [ 714.333146][ T5234] Bluetooth: hci16: command tx timeout [ 715.888591][ T5245] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 715.904426][ T5245] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 715.913127][ T5245] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 715.921104][ T5245] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 715.932061][ T5245] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 715.939349][ T5229] Bluetooth: hci17: command tx timeout [ 715.947984][ T5245] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 716.413269][ T5245] Bluetooth: hci16: command tx timeout [ 717.185229][T10797] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 717.194865][T10797] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 717.204907][T10797] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 717.214682][T10797] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 717.222312][T10797] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 717.231170][T10797] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 717.638369][ T5245] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 717.649521][ T5245] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 717.658239][ T5245] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 717.667080][ T5245] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 717.677009][ T5245] Bluetooth: hci20: unexpected cc 0x0c25 length: 249 > 3 [ 717.684436][ T5245] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 718.013281][T10797] Bluetooth: hci17: command tx timeout [ 718.020081][ T5245] Bluetooth: hci18: command tx timeout [ 718.748176][ T5245] Bluetooth: hci12: command 0x0406 tx timeout [ 718.754424][T10797] Bluetooth: hci11: command 0x0406 tx timeout [ 718.760541][T10797] Bluetooth: hci10: command 0x0406 tx timeout [ 719.293150][ T5244] Bluetooth: hci19: command tx timeout [ 719.773119][ T5244] Bluetooth: hci20: command tx timeout [ 720.093205][ T5234] Bluetooth: hci17: command tx timeout [ 720.098767][ T5244] Bluetooth: hci18: command tx timeout [ 721.373106][ T5244] Bluetooth: hci19: command tx timeout [ 721.853110][ T5244] Bluetooth: hci20: command tx timeout [ 722.173146][ T5244] Bluetooth: hci18: command tx timeout [ 723.460556][ T5244] Bluetooth: hci19: command tx timeout [ 723.933107][ T5244] Bluetooth: hci20: command tx timeout [ 724.253129][ T5244] Bluetooth: hci18: command tx timeout [ 725.533239][ T5244] Bluetooth: hci19: command tx timeout [ 726.013212][ T5244] Bluetooth: hci20: command tx timeout [ 747.374987][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 758.253365][ T30] INFO: task syz-executor:11278 blocked for more than 143 seconds. [ 758.261315][ T30] Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 758.306470][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 758.343537][ T30] task:syz-executor state:D stack:24128 pid:11278 tgid:11278 ppid:1 flags:0x00004006 [ 758.437263][ T30] Call Trace: [ 758.440609][ T30] [ 758.475812][ T30] __schedule+0x1895/0x4b30 [ 758.480397][ T30] ? __pfx___schedule+0x10/0x10 [ 758.527477][ T30] ? __pfx_lock_release+0x10/0x10 [ 758.532564][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 758.583254][ T30] ? schedule+0x90/0x320 [ 758.587555][ T30] schedule+0x14b/0x320 [ 758.591734][ T30] schedule_preempt_disabled+0x13/0x30 [ 758.683111][ T30] __mutex_lock+0x6a7/0xd70 [ 758.687672][ T30] ? __mutex_lock+0x52a/0xd70 [ 758.692366][ T30] ? ppp_exit_net+0xe3/0x3d0 [ 758.753051][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 758.758138][ T30] ? net_generic+0x1f/0x240 [ 758.762665][ T30] ppp_exit_net+0xe3/0x3d0 [ 758.807558][ T30] ? __pfx_ppp_exit_net+0x10/0x10 [ 758.812642][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 758.846811][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 758.852677][ T30] setup_net+0x794/0x9e0 [ 758.893784][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 758.912556][ T30] ? __pfx_setup_net+0x10/0x10 [ 758.940896][ T30] copy_net_ns+0x33f/0x570 [ 758.962571][ T30] create_new_namespaces+0x425/0x7b0 [ 758.983028][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 758.988800][ T30] ksys_unshare+0x619/0xc10 [ 759.031808][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 759.047402][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 759.072105][ T30] ? do_syscall_64+0x100/0x230 [ 759.090524][ T30] __x64_sys_unshare+0x38/0x40 [ 759.097868][ T30] do_syscall_64+0xf3/0x230 [ 759.102403][ T30] ? clear_bhb_loop+0x35/0x90 [ 759.123069][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.129006][ T30] RIP: 0033:0x7f19ebb7f7f7 [ 759.157094][ T30] RSP: 002b:00007fff286fbbb8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 759.189921][ T30] RAX: ffffffffffffffda RBX: 00007f19ebd35f40 RCX: 00007f19ebb7f7f7 [ 759.220753][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 759.247441][ T30] RBP: 00007f19ebd36a38 R08: 0000000000000000 R09: 0000000000000000 [ 759.271726][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 759.293459][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 759.301495][ T30] [ 759.322151][ T30] INFO: task syz-executor:11294 blocked for more than 144 seconds. [ 759.342990][ T30] Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 759.362563][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 759.394278][ T30] task:syz-executor state:D stack:24128 pid:11294 tgid:11294 ppid:1 flags:0x00004006 [ 759.418941][ T30] Call Trace: [ 759.422254][ T30] [ 759.436898][ T30] __schedule+0x1895/0x4b30 [ 759.441469][ T30] ? __pfx___schedule+0x10/0x10 [ 759.468936][ T30] ? __pfx_lock_release+0x10/0x10 [ 759.483061][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 759.488570][ T30] ? schedule+0x90/0x320 [ 759.492836][ T30] schedule+0x14b/0x320 [ 759.530656][ T30] schedule_preempt_disabled+0x13/0x30 [ 759.553048][ T30] __mutex_lock+0x6a7/0xd70 [ 759.557616][ T30] ? __mutex_lock+0x52a/0xd70 [ 759.573003][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 759.578264][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 759.603196][ T30] ? read_word_at_a_time+0xe/0x20 [ 759.608279][ T30] ? sized_strscpy+0x8d/0x220 [ 759.623056][ T30] ip_tunnel_init_net+0x20e/0x720 [ 759.628140][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 759.694395][ T30] ? ops_init+0x75/0x590 [ 759.698712][ T30] ops_init+0x31e/0x590 [ 759.702891][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 759.721159][ T30] setup_net+0x287/0x9e0 [ 759.741167][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 759.753218][ T30] ? __pfx_setup_net+0x10/0x10 [ 759.758885][ T30] copy_net_ns+0x33f/0x570 [ 759.783131][ T30] create_new_namespaces+0x425/0x7b0 [ 759.788477][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 759.823028][ T30] ksys_unshare+0x619/0xc10 [ 759.827598][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 759.832646][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 759.868564][ T30] ? do_syscall_64+0x100/0x230 [ 759.890056][ T30] __x64_sys_unshare+0x38/0x40 [ 759.894996][ T30] do_syscall_64+0xf3/0x230 [ 759.899520][ T30] ? clear_bhb_loop+0x35/0x90 [ 759.921690][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.941367][ T30] RIP: 0033:0x7f0e8177f7f7 [ 759.952359][ T30] RSP: 002b:00007ffc2ce792b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 759.977270][ T30] RAX: ffffffffffffffda RBX: 00007f0e81935f40 RCX: 00007f0e8177f7f7 [ 760.002837][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 760.027957][ T30] RBP: 00007f0e81936a38 R08: 0000000000000000 R09: 0000000000000000 [ 760.052040][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 760.082296][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 760.105219][ T30] [ 760.109930][ T30] [ 760.109930][ T30] Showing all locks held in the system: [ 760.137100][ T30] 1 lock held by khungtaskd/30: [ 760.141989][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 760.175412][ T30] 1 lock held by klogd/4674: [ 760.180046][ T30] 2 locks held by getty/4992: [ 760.203070][ T30] #0: ffff88802eaa70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 760.212890][ T30] #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 760.252517][ T30] 4 locks held by kworker/0:7/5282: [ 760.280933][ T30] 3 locks held by kworker/u8:10/7232: [ 760.299958][ T30] #0: ffff88814b4df948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 760.329458][ T30] #1: ffffc90003d97d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 760.352034][ T30] #2: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 760.378771][ T30] 3 locks held by kworker/1:6/7629: [ 760.390825][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 760.422593][ T30] #1: ffffc90003097d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 760.448386][ T30] #2: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 760.470480][ T30] 6 locks held by kworker/u8:23/9465: [ 760.484405][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 760.522568][ T30] #1: ffffc9000d44fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 760.543413][ T30] #2: ffffffff8fcc5f50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 760.552890][ T30] #3: ffff88804a82b0e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 760.600022][ T30] #4: ffff88804a82c250 (&devlink->lock_key#15){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 760.622500][ T30] #5: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: nsim_create+0x408/0x890 [ 760.663042][ T30] 2 locks held by syz-executor/11251: [ 760.668460][ T30] #0: ffffffff8fcc5f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 760.698127][ T30] #1: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: fib6_rules_net_exit_batch+0x20/0xc0 [ 760.720702][ T30] 2 locks held by syz-executor/11267: [ 760.740420][ T30] #0: ffffffff8fcc5f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 760.763060][ T30] #1: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 760.771846][ T30] 2 locks held by syz-executor/11271: [ 760.799789][ T30] #0: ffffffff8fcc5f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 760.818857][ T30] #1: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: mpls_net_exit+0x7d/0x2a0 [ 760.843082][ T30] 2 locks held by syz-executor/11274: [ 760.848499][ T30] #0: ffffffff8fcc5f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 760.877904][ T30] #1: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: mpls_net_exit+0x7d/0x2a0 [ 760.897388][ T30] 2 locks held by syz-executor/11278: [ 760.902799][ T30] #0: ffffffff8fcc5f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 760.940975][ T30] #1: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: ppp_exit_net+0xe3/0x3d0 [ 760.963134][ T30] 3 locks held by syz-executor/11280: [ 760.968547][ T30] #0: ffffffff8fcc5f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 760.999985][ T30] #1: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 761.013117][ T30] #2: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 761.051070][ T30] 2 locks held by syz-executor/11284: [ 761.060497][ T30] #0: ffffffff8fcc5f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 761.085520][ T30] #1: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 761.110136][ T30] 1 lock held by syz-executor/11287: [ 761.125552][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xab7/0x20a0 [ 761.149464][ T30] 2 locks held by syz-executor/11290: [ 761.163006][ T30] #0: ffffffff8fcc5f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 761.172476][ T30] #1: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 761.209818][ T30] 2 locks held by syz-executor/11294: [ 761.228360][ T30] #0: ffffffff8fcc5f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 761.248238][ T30] #1: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 761.267550][ T30] 2 locks held by syz-executor/11296: [ 761.283080][ T30] #0: ffffffff8fcc5f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 761.317370][ T30] #1: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 761.343609][ T30] 1 lock held by syz-executor/11307: [ 761.348922][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 761.379674][ T30] 1 lock held by syz-executor/11310: [ 761.400547][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 761.427343][ T30] 1 lock held by syz-executor/11313: [ 761.432665][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 761.463102][ T30] 1 lock held by syz-executor/11317: [ 761.468425][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 761.508787][ T30] 1 lock held by syz-executor/11318: [ 761.522415][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 761.545574][ T30] 1 lock held by syz-executor/11323: [ 761.550892][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 761.581655][ T30] 1 lock held by syz-executor/11326: [ 761.594305][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 761.633916][ T30] 1 lock held by syz-executor/11329: [ 761.639247][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 761.687143][ T30] 1 lock held by syz-executor/11332: [ 761.692473][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 761.723025][ T30] 1 lock held by syz-executor/11335: [ 761.728359][ T30] #0: ffffffff8fcd2a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 761.747041][ T30] [ 761.749392][ T30] ============================================= [ 761.749392][ T30] [ 761.783065][ T30] NMI backtrace for cpu 1 [ 761.787427][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 761.797591][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 761.807656][ T30] Call Trace: [ 761.810943][ T30] [ 761.813888][ T30] dump_stack_lvl+0x241/0x360 [ 761.818593][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 761.823816][ T30] ? __pfx__printk+0x10/0x10 [ 761.828440][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 761.833397][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 761.838866][ T30] ? _printk+0xd5/0x120 [ 761.843054][ T30] ? __pfx__printk+0x10/0x10 [ 761.847661][ T30] ? __wake_up_klogd+0xcc/0x110 [ 761.852533][ T30] ? __pfx__printk+0x10/0x10 [ 761.857142][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 761.862191][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 761.868193][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 761.874196][ T30] watchdog+0xff4/0x1040 [ 761.878459][ T30] ? watchdog+0x1ea/0x1040 [ 761.882898][ T30] ? __pfx_watchdog+0x10/0x10 [ 761.887588][ T30] kthread+0x2f0/0x390 [ 761.891665][ T30] ? __pfx_watchdog+0x10/0x10 [ 761.896359][ T30] ? __pfx_kthread+0x10/0x10 [ 761.900959][ T30] ret_from_fork+0x4b/0x80 [ 761.905393][ T30] ? __pfx_kthread+0x10/0x10 [ 761.909996][ T30] ret_from_fork_asm+0x1a/0x30 [ 761.914793][ T30] [ 761.918692][ T30] Sending NMI from CPU 1 to CPUs 0: [ 761.924381][ C0] NMI backtrace for cpu 0 [ 761.924394][ C0] CPU: 0 UID: 0 PID: 5282 Comm: kworker/0:7 Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 761.924414][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 761.924425][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 761.924449][ C0] RIP: 0010:ipt_do_table+0x847/0x1860 [ 761.924474][ C0] Code: 06 b2 f7 49 33 5e 28 4d 8d 7e 48 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 c9 06 b2 f7 <49> 23 1f 4c 09 e3 41 0f 94 c7 31 ff 48 89 de e8 b5 59 48 f7 44 89 [ 761.924488][ C0] RSP: 0018:ffffc90000006c60 EFLAGS: 00000246 [ 761.924501][ C0] RAX: 1ffff1100c333137 RBX: 0000000000000000 RCX: dffffc0000000000 [ 761.924513][ C0] RDX: ffff88806111bc00 RSI: 0000000000000000 RDI: ffff888061998998 [ 761.924525][ C0] RBP: ffffc90000006e48 R08: ffffffff8a4c5f5e R09: 0000000000000000 [ 761.924536][ C0] R10: ffffc90000006dc0 R11: fffff52000000dbc R12: 0000000000000000 [ 761.924547][ C0] R13: 0000000000000000 R14: ffff888061998970 R15: ffff8880619989b8 [ 761.924559][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 761.924573][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 761.924584][ C0] CR2: 0000001b2e310ff8 CR3: 000000000e734000 CR4: 00000000003506f0 [ 761.924598][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 761.924608][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 761.924618][ C0] Call Trace: [ 761.924624][ C0] [ 761.924631][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 761.924649][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 761.924674][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 761.924692][ C0] ? nmi_handle+0x2a/0x5a0 [ 761.924714][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 761.924733][ C0] ? nmi_handle+0x14f/0x5a0 [ 761.924749][ C0] ? nmi_handle+0x2a/0x5a0 [ 761.924764][ C0] ? ipt_do_table+0x847/0x1860 [ 761.924785][ C0] ? default_do_nmi+0x63/0x160 [ 761.924804][ C0] ? exc_nmi+0x123/0x1f0 [ 761.924821][ C0] ? end_repeat_nmi+0xf/0x53 [ 761.924839][ C0] ? ipt_do_table+0x74e/0x1860 [ 761.924861][ C0] ? ipt_do_table+0x847/0x1860 [ 761.924883][ C0] ? ipt_do_table+0x847/0x1860 [ 761.924905][ C0] ? ipt_do_table+0x847/0x1860 [ 761.924926][ C0] [ 761.924937][ C0] [ 761.924950][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 761.924974][ C0] ? ipt_do_table+0x312/0x1860 [ 761.924996][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 761.925023][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 761.925043][ C0] nf_hook_slow+0xc3/0x220 [ 761.925062][ C0] ? __pfx_dst_output+0x10/0x10 [ 761.925083][ C0] nf_hook+0x2c4/0x450 [ 761.925104][ C0] ? nf_hook+0x9e/0x450 [ 761.925122][ C0] ? __pfx_nf_hook+0x10/0x10 [ 761.925143][ C0] ? __pfx_dst_output+0x10/0x10 [ 761.925166][ C0] ? ip_fast_csum+0x1f0/0x2b0 [ 761.925185][ C0] __ip_local_out+0x3d9/0x4e0 [ 761.925203][ C0] ? __pfx_dst_output+0x10/0x10 [ 761.925225][ C0] ip_local_out+0x26/0x70 [ 761.925245][ C0] synproxy_send_client_synack+0x8b8/0xf30 [ 761.925273][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 761.925295][ C0] ? synproxy_pernet+0x45/0x270 [ 761.925318][ C0] nft_synproxy_eval_v4+0x3ca/0x610 [ 761.925343][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 761.925366][ C0] ? nf_ip_checksum+0x13a/0x500 [ 761.925390][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 761.925414][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 761.925435][ C0] ? validate_chain+0x11e/0x5920 [ 761.925454][ C0] ? __pfx_validate_chain+0x10/0x10 [ 761.925475][ C0] nft_do_chain+0x4ad/0x1da0 [ 761.925503][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 761.925524][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 761.925557][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 761.925584][ C0] nft_do_chain_inet+0x418/0x6b0 [ 761.925607][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 761.925628][ C0] ? ipt_do_table+0x312/0x1860 [ 761.925657][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 761.925678][ C0] nf_hook_slow+0xc3/0x220 [ 761.925697][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 761.925714][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 761.925732][ C0] NF_HOOK+0x29e/0x450 [ 761.925749][ C0] ? NF_HOOK+0x9a/0x450 [ 761.925764][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 761.925781][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 761.925801][ C0] ? ip_rcv_finish+0x406/0x560 [ 761.925819][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 761.925835][ C0] NF_HOOK+0x3a4/0x450 [ 761.925850][ C0] ? __lock_acquire+0x1384/0x2050 [ 761.925873][ C0] ? NF_HOOK+0x9a/0x450 [ 761.925888][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 761.925903][ C0] ? ip_rcv_core+0x801/0xd10 [ 761.925920][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 761.925944][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 761.925960][ C0] __netif_receive_skb+0x2bf/0x650 [ 761.925980][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 761.926001][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 761.926018][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 761.926040][ C0] ? __pfx_lock_release+0x10/0x10 [ 761.926063][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 761.926088][ C0] process_backlog+0x662/0x15b0 [ 761.926110][ C0] ? process_backlog+0x33b/0x15b0 [ 761.926133][ C0] ? __pfx_process_backlog+0x10/0x10 [ 761.926152][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 761.926175][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 761.926199][ C0] __napi_poll+0xcb/0x490 [ 761.926218][ C0] net_rx_action+0x89b/0x1240 [ 761.926247][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 761.926266][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 761.926302][ C0] handle_softirqs+0x2c5/0x980 [ 761.926324][ C0] ? do_softirq+0x11b/0x1e0 [ 761.926343][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 761.926367][ C0] do_softirq+0x11b/0x1e0 [ 761.926385][ C0] [ 761.926391][ C0] [ 761.926396][ C0] ? __pfx_do_softirq+0x10/0x10 [ 761.926415][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 761.926439][ C0] ? rcu_is_watching+0x15/0xb0 [ 761.926457][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 761.926477][ C0] ? neigh_periodic_work+0xb35/0xd50 [ 761.926495][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 761.926515][ C0] ? neigh_destroy+0x423/0x580 [ 761.926536][ C0] neigh_periodic_work+0xb35/0xd50 [ 761.926558][ C0] ? process_scheduled_works+0x976/0x1850 [ 761.926579][ C0] process_scheduled_works+0xa63/0x1850 [ 761.926610][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 761.926635][ C0] ? assign_work+0x364/0x3d0 [ 761.926657][ C0] worker_thread+0x870/0xd30 [ 761.926681][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 761.926704][ C0] ? __kthread_parkme+0x169/0x1d0 [ 761.926727][ C0] ? __pfx_worker_thread+0x10/0x10 [ 761.926747][ C0] kthread+0x2f0/0x390 [ 761.926761][ C0] ? __pfx_worker_thread+0x10/0x10 [ 761.926782][ C0] ? __pfx_kthread+0x10/0x10 [ 761.926796][ C0] ret_from_fork+0x4b/0x80 [ 761.926816][ C0] ? __pfx_kthread+0x10/0x10 [ 761.926831][ C0] ret_from_fork_asm+0x1a/0x30 [ 761.926859][ C0] [ 762.672707][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 762.679599][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11503-gc824deb1a897 #0 [ 762.689768][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 762.699831][ T30] Call Trace: [ 762.703121][ T30] [ 762.706057][ T30] dump_stack_lvl+0x241/0x360 [ 762.710757][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 762.715973][ T30] ? __pfx__printk+0x10/0x10 [ 762.720573][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 762.726576][ T30] ? vscnprintf+0x5d/0x90 [ 762.730924][ T30] panic+0x349/0x880 [ 762.734842][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 762.741009][ T30] ? __pfx_panic+0x10/0x10 [ 762.745440][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 762.750820][ T30] ? __irq_work_queue_local+0x137/0x410 [ 762.756386][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 762.761765][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 762.767931][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 762.774099][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 762.780264][ T30] watchdog+0x1033/0x1040 [ 762.784613][ T30] ? watchdog+0x1ea/0x1040 [ 762.789045][ T30] ? __pfx_watchdog+0x10/0x10 [ 762.793732][ T30] kthread+0x2f0/0x390 [ 762.797811][ T30] ? __pfx_watchdog+0x10/0x10 [ 762.802504][ T30] ? __pfx_kthread+0x10/0x10 [ 762.807102][ T30] ret_from_fork+0x4b/0x80 [ 762.811530][ T30] ? __pfx_kthread+0x10/0x10 [ 762.816125][ T30] ret_from_fork_asm+0x1a/0x30 [ 762.820912][ T30] [ 762.824163][ T30] Kernel Offset: disabled [ 762.828484][ T30] Rebooting in 86400 seconds..