last executing test programs: 7.315860096s ago: executing program 0 (id=843): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x3b}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'team_slave_0\x00', &(0x7f0000000040)=@ethtool_stats={0x37}}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0xb, 0x6, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)='%-010d \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r4, &(0x7f0000000600)="147b", &(0x7f0000000700)=""/95}, 0x20) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x3, 0x400000000000000, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x3, 0x1}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7, 0x0, 0x0, 0xaf3e}}, 0xe8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0xc, &(0x7f0000000000)=0x7fffffff, 0x4) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="19936f616c0fc69e72adad12e41c0913788fefb6300cc3d41de030fe0846f3c069d813dde842ce342f31ad534741e507d2f194bd6a63ce729ca28004107683c5bc0dd6f4b98737", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000060a0b04000000000000000002000000040004800900010073797a30000000000900020073797a32000000000400074014000000000000000000000500000a"], 0x5c}}, 0x0) 7.120904284s ago: executing program 0 (id=844): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x20, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24004085}, 0x4010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r2 = socket$inet(0x2, 0x800, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0xfffffffd, @empty, 0x9}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 6.065324824s ago: executing program 4 (id=851): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x2b}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0xfd, 0x2, 0x8, 0x9, @remote, @empty, 0x8000, 0x7, 0x2, 0x8}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x204c800) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x80800) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000080)={0xbf, 0x99, 0x15, 0x5, 0xff, 0x5, 0xfb, 0x8, 0xec, 0x2, 0x81, 0x84, 0x8, 0x5}, 0xe) sendto$inet6(r8, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) shutdown(r8, 0x1) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000000240)=0x5, 0x4) recvmsg(r8, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001180)="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", 0x545}], 0x1}}], 0x1, 0x40) 5.617691119s ago: executing program 1 (id=854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x64}}, 0x24002800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x80, 0x1, 0x7, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3ff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x26}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x24009010}, 0x20080d0) 5.60503439s ago: executing program 3 (id=856): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x11, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x600}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0xff2, &(0x7f0000002e00)=""/4082, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.525163818s ago: executing program 1 (id=857): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x4, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc7", 0xb8}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000001080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) pread64(r5, &(0x7f0000001840)=""/4096, 0x1000, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x4, &(0x7f0000000000)=@ccm_128={{0x303}, "a89b05ebc671ec5a", "80cecc3ee027ee88efb6663e9ecc309a", "31b4c9cc", "bb3ab446dad41233"}, 0x28) 5.141212252s ago: executing program 3 (id=858): r0 = socket$inet6(0xa, 0x3, 0x3a) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="f7f72cbd7000919eab276645a1e5a2fbdbdf25010000000800010001040000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x844) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x9, @private1, 0xfffffff8}}, 0x5, 0x6, 0x80000000, 0x5, 0x2}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r3, 0xb6c}, &(0x7f00000001c0)=0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x8}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) openat$ppp(0xffffffffffffff9c, 0x0, 0xc6681, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) socket$kcm(0xf, 0x3, 0x2) unshare(0x68060200) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000800)=@security={'security\x00', 0xe, 0x4, 0x2f0, 0xffffffff, 0x0, 0xf0, 0xf0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, &(0x7f0000000300), {[{{@ip={@broadcast, @multicast2, 0xff000000, 0xffffffff, 'ip6gre0\x00', 'netpci0\x00', {0xff}, {0xff}, 0x5e, 0x0, 0x20}, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x6, 0xf21c41476e32b2a4, 0x2, 0x1, 0x3], 0x1, 0x5}, {0x4, [0x1, 0x3, 0x3, 0x0, 0x0, 0x2], 0x0, 0x1}}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff, 'vlan1\x00', 'macvlan0\x00', {0xff}, {}, 0x88, 0x3, 0x5a}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x90, 0xd0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x5, 0x0, "2c4c3f108b76a6515144f40cda87543c30f0a9a0ab9aa0c5496de30603c8"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60e5ff0401140600fe5e18d39f9d8000000000000000000000000000aafe8000000000000200000000000000aa00004e22be07a2bb8064a4d16029d4e5480710a67788c2e7e86ebc6dfe86dd881dd2d3272d80ad10922bf1bdc81cf0c7ea4c0ade19240ef33efdda80075d9a743e9657826267943272e69e40582d42bc45b2754cfe44ce44d04d091e36fc5ad86bfe8353f5b3676b174e9acaed0f051b86350d52bdf871f6b46ded8968772011c23064e9193a9b645b97c41b3442ca63acba195bebd5cdd7bf033960bd738b5ec0fd4cde7e3173fea7e9278d85038315ce49", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000390780200"], 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff?\x11\xc8\xdd\x15\xcc\xd2\xf1\xfb\'%\xa0\x00\x00\x00,'}, 0x30) write$tun(r7, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r7, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x147cc1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) 4.579163251s ago: executing program 1 (id=859): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000005c0)='cgroup.freeze\x00', 0x275a, 0x0) sendfile(r0, r2, 0x0, 0xffffffff002) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48014}, 0x20004000) listen(r3, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x2b, 0x80801, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="a905000000007464000100000000000000e5c064", 0x14}], 0x1}}], 0x1, 0x24004044) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xffffffab, @private1}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000002000000000e50003000000000085100000fc026e696e0000f6ffffffffffffff00000000000000009d50bc32001a627fc29eb51b11822c46faa3cb560f102732871cf51a0201d1a531a4f38a2f962207e40d4ebedcfa48d578a33afdf9d6"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3e, &(0x7f00000000c0)=0x200007, 0x4) bind$llc(r8, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) recvfrom$inet6(r5, 0x0, 0x0, 0x12000, 0x0, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x4f0, 0x138, 0xffffffff, 0x370, 0x0, 0x608, 0x608, 0xffffffff, 0x608, 0x608, 0x5, 0x0, {[{{@ipv6={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffffff, 0xff000000, 0xff], [0xffffff00, 0x0, 0x0, 0xff000000], 'pim6reg\x00', 'dummy0\x00', {0xff}, {0xff}, 0x84, 0xf, 0x6, 0xc28627634e0e09ee}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x13, @ipv4=@loopback, @ipv6=@mcast2, @icmp_id=0x67, @gre_key=0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x13, @ipv4=@local, @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, @icmp_id=0x64, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xb, @ipv4=@local, @ipv4=@dev={0xac, 0x14, 0x14, 0x19}, @gre_key=0x3, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x8, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@dev={0xfe, 0x80, '\x00', 0x16}, @port=0x4e21, @port=0x4e23}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) recvmmsg(r4, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/195, 0xc3}, {&(0x7f0000000840)=""/241, 0xf6}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80), 0x6}, 0xb0}, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x4a}, 0x6}, {{&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/188, 0xbc}], 0x1, &(0x7f0000000340)=""/146, 0x92}, 0x8}], 0x9, 0x20, 0x0) bind$rxrpc(r3, &(0x7f0000000400)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24) 4.384581477s ago: executing program 4 (id=861): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000e61d02323315dbda01433d3c0b73ff681bd04c03d02b89bf90fc66c63fb1f6386390b323352f34feec7d40fc16659935633cbc97d9a02aeb5ee6ca3c1db55f4b358ac85f0b0819bf011e94707033b3e359a1ad5ba5380000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00', 0xc, 0xff9, &(0x7f0000002300)=""/4089, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, 0x0, @in=@multicast1}}, 0xe8) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x1, 0x8, 0xc, 0x1, 0xffffffffffffffff, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x2, 0x0}, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x2e) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000a00000000000f7ffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001c5808000400000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001858000004000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa2000c0000000007020000f8ffffffb703000008000000b704000002000000850000008200000018290000", @ANYRES32=r1, @ANYBLOB="000000000400000018", @ANYRES32=r3, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000180), &(0x7f0000000300)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x6) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) 4.264559267s ago: executing program 0 (id=872): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x20, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24004085}, 0x4010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r2 = socket$inet(0x2, 0x800, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0xfffffffd, @empty, 0x9}, 0x1c) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e23, 0x4, @mcast2, 0xb9}, 0x1c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 4.211184635s ago: executing program 4 (id=863): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000001000000080000000c00000001000000", @ANYRES32, @ANYBLOB="f9ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x18, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@alu={0x7, 0x0, 0x7, 0x4, 0x7, 0xfffffffffffffffc, 0xfffffffffffffffc}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ldst={0x0, 0x0, 0x3, 0x4, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000300)=r1}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000203dae2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000043950f8206fcd23a00000000850000001000000018110000", @ANYRESHEX=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640)="900000001c001f4d154a817393", 0xd, 0x4040080, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x12, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x2080, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r8}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20) close(r2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r8, &(0x7f0000000900)}, 0x20) r9 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000680)="1b93153941a6414b359c220193acd607dab6879a2eee0a2945b65bfa8e546b380285fd56bb96364aa916794498572e3bc7f60adf2f9f69c3fa3e61adab01bee8ea5d4006a41d2f3a971ce2c05e654928ec3efd4bfe6ec900fef400e84a7d1493e40b38a7bf54ff1ab905708270db221a2c42f884359db0a9e10bbd7d261237b6e64ed5c2a579f49e7a488c33a2d15ba02022eea993af4d016051de9bd8eacfdf5fa71de47b49f807af53d39d5e5bb884501a0218ec8441bb7066e06436e4a9faf4251ab292a602eb848c23ea4d1ac8565c03b672e2"}, {&(0x7f00000003c0)="1c0b"}], 0x2, 0x0, 0x56}, 0x400c010) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r10, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r10, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="99", 0x1}], 0x1}}], 0x1, 0x40000) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000000206030000050000000000000000000b05000100070000000c000300686173683a6970000c000780080013000000000005000500020000000900020073797a31000000000500040000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r11, &(0x7f0000000040)={0x23, 0x44}, 0x10) close(r11) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.100467887s ago: executing program 3 (id=864): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x11, r0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000003000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0xa, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1b, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd24e}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0xff2, &(0x7f0000002e00)=""/4082, 0x0, 0x4, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.645201854s ago: executing program 1 (id=867): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220000018000000", @ANYRES32, @ANYBLOB="0000000001000000b702000014000000b7030000000000001800000005000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) 3.533213813s ago: executing program 1 (id=868): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x20, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24004085}, 0x4010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r2 = socket$inet(0x2, 0x800, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0xfffffffd, @empty, 0x9}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 3.099060475s ago: executing program 2 (id=869): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x4, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000001080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) pread64(r5, &(0x7f0000001840)=""/4096, 0x1000, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x4, &(0x7f0000000000)=@ccm_128={{0x303}, "a89b05ebc671ec5a", "80cecc3ee027ee88efb6663e9ecc309a", "31b4c9cc", "bb3ab446dad41233"}, 0x28) 2.06029028s ago: executing program 3 (id=870): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x3b}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'team_slave_0\x00', &(0x7f0000000040)=@ethtool_stats={0x37}}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0xb, 0x6, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)='%-010d \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r4, &(0x7f0000000600)="147b", &(0x7f0000000700)=""/95}, 0x20) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x3, 0x400000000000000, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x3, 0x1}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7, 0x0, 0x0, 0xaf3e}}, 0xe8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0xc, &(0x7f0000000000)=0x7fffffff, 0x4) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="19936f616c0fc69e72adad12e41c0913788fefb6300cc3d41de030fe0846f3c069d813dde842ce342f31ad534741e507d2f194bd6a63ce729ca28004107683c5bc0dd6f4b98737", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000060a0b04000000000000000002000000040004800900010073797a30000000000900020073797a32000000000400074014000000000000000000000500000a"], 0x5c}}, 0x0) 2.016803287s ago: executing program 0 (id=871): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x2b}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0xfd, 0x2, 0x8, 0x9, @remote, @empty, 0x8000, 0x7, 0x2, 0x8}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x204c800) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x80800) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000080)={0xbf, 0x99, 0x15, 0x5, 0xff, 0x5, 0xfb, 0x8, 0xec, 0x2, 0x81, 0x84, 0x8, 0x5}, 0xe) sendto$inet6(r8, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) shutdown(r8, 0x1) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000000240)=0x5, 0x4) recvmsg(r8, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001180)="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", 0x545}], 0x1}}], 0x1, 0x40) 1.967418513s ago: executing program 4 (id=873): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x2c, r0, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @val={0xc, 0x99, {0x8}}}}, [@NL80211_ATTR_TID_CONFIG={0x4, 0x142}]}, 0x2c}}, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000001440)=ANY=[@ANYBLOB="85000000080000007600000000000000270000000000000095000000000000008796f32e8f85d735d047a9414961e3b176c2e0f3fe61d16cbe73a05329f1aec7d7ff37e190c481c9727f532ff99f59a42d192eb233084e7ac96b3fc37457916943cd580e8b156888b7d73f0647eee7bb3fdeb805286004f2f7"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x20, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001800000001000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000100), &(0x7f00000013c0)=r3}, 0x20) sendmsg(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x6, 0x1, 0x0, r2}, @generic={0x66, 0x0, 0x0, 0xfffc}, @initr0, @exit, @printk={@s, {0x3, 0x0, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.966342794s ago: executing program 2 (id=874): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000e61d02323315dbda01433d3c0b73ff681bd04c03d02b89bf90fc66c63fb1f6386390b323352f34feec7d40fc16659935633cbc97d9a02aeb5ee6ca3c1db55f4b358ac85f0b0819bf011e94707033b3e359a1ad5ba5380000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00', 0xc, 0xff9, &(0x7f0000002300)=""/4089, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, 0x0, @in=@multicast1}}, 0xe8) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x1, 0x8, 0xc, 0x1, 0xffffffffffffffff, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x2, 0x0}, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x2e) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000a00000000000f7ffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001c5808000400000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001858000004000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa2000c0000000007020000f8ffffffb703000008000000b704000002000000850000008200000018290000", @ANYRES32=r1, @ANYBLOB="000000000400000018", @ANYRES32=r3, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000180), &(0x7f0000000300)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x6) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) 1.867238851s ago: executing program 2 (id=875): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 689.740661ms ago: executing program 4 (id=876): r0 = socket$inet6(0xa, 0x3, 0x3a) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="f7f72cbd7000919eab276645a1e5a2fbdbdf25010000000800010001040000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x844) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x9, @private1, 0xfffffff8}}, 0x5, 0x6, 0x80000000, 0x5, 0x2}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r3, 0xb6c}, &(0x7f00000001c0)=0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x8}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) openat$ppp(0xffffffffffffff9c, 0x0, 0xc6681, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) socket$kcm(0xf, 0x3, 0x2) unshare(0x68060200) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000800)=@security={'security\x00', 0xe, 0x4, 0x2f0, 0xffffffff, 0x0, 0xf0, 0xf0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, &(0x7f0000000300), {[{{@ip={@broadcast, @multicast2, 0xff000000, 0xffffffff, 'ip6gre0\x00', 'netpci0\x00', {0xff}, {0xff}, 0x5e, 0x0, 0x20}, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x6, 0xf21c41476e32b2a4, 0x2, 0x1, 0x3], 0x1, 0x5}, {0x4, [0x1, 0x3, 0x3, 0x0, 0x0, 0x2], 0x0, 0x1}}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff, 'vlan1\x00', 'macvlan0\x00', {0xff}, {}, 0x88, 0x3, 0x5a}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x90, 0xd0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x5, 0x0, "2c4c3f108b76a6515144f40cda87543c30f0a9a0ab9aa0c5496de30603c8"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60e5ff0401140600fe5e18d39f9d8000000000000000000000000000aafe8000000000000200000000000000aa00004e22be07a2bb8064a4d16029d4e5480710a67788c2e7e86ebc6dfe86dd881dd2d3272d80ad10922bf1bdc81cf0c7ea4c0ade19240ef33efdda80075d9a743e9657826267943272e69e40582d42bc45b2754cfe44ce44d04d091e36fc5ad86bfe8353f5b3676b174e9acaed0f051b86350d52bdf871f6b46ded8968772011c23064e9193a9b645b97c41b3442ca63acba195bebd5cdd7bf033960bd738b5ec0fd4cde7e3173fea7e9278d85038315ce49", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000390780200"], 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff?\x11\xc8\xdd\x15\xcc\xd2\xf1\xfb\'%\xa0\x00\x00\x00,'}, 0x30) write$tun(r7, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r7, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x147cc1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) 688.773268ms ago: executing program 2 (id=886): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x8, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000b4321f00000000000a00630018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000100b706000014000600b7030000000648638500000008000000bf0900000000000055090100000000009500000000000000bf91000700000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x1000, &(0x7f0000001e40)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 663.713381ms ago: executing program 3 (id=877): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf", @ANYRES32=r2, @ANYBLOB="2400238005001d0001000000050011000100000008001c000900cb0008001a0003"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 647.972508ms ago: executing program 0 (id=878): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x2, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x300, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xfd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="18000000010003", 0x7) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x4102}}}, 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xd0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4000000, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x11, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000000c0)="0800b699f75b626f00000200fc00ffffffdf009a27012f27", 0x18) r6 = socket$kcm(0xa, 0x2, 0x73) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000004f80)={0x30, r11, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}]}, 0x30}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[{0xc, 0x118, 0xb}], 0xc}, 0x4040044) socket(0x40000000015, 0x5, 0x0) 582.48653ms ago: executing program 1 (id=879): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000200)=@file={0x1}, 0x6e) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180fffffdef0000883795c04a31ba377a1b2cc32b38d37400"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xa) getpeername(r7, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0ffe0000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800ca10100400000000600000089e6784300040000000000000c00010006000000090000000600050088a8000008000a00", @ANYRES32=r6, @ANYBLOB="08000500", @ANYRES32=r6], 0x8c}, 0x1, 0xba01}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000040)=ANY=[@ANYBLOB="060000005500e8cfb18100dcc656b86ee7103d7980e18ec5096458c9511e6351945af8f73fc2a0226e689f72a16dc5"]) socket$packet(0x11, 0x3, 0x300) 535.795948ms ago: executing program 2 (id=880): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r1, 0x2000000, 0x9, 0x0, &(0x7f00000000c0)="13435cb8b9f6ff0049", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000006800019ef00000000000000008000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x8000, 0x10, 0x2, 0xcae33875, {{0x19, 0x4, 0x3, 0x1, 0x64, 0x66, 0x0, 0x8, 0x4, 0x0, @empty, @loopback, {[@generic={0x89, 0x12, "9dfe994d69e200df2ea84c9da3ddba87"}, @lsrr={0x83, 0x17, 0x3a, [@loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, @multicast2, @remote]}, @timestamp={0x44, 0x24, 0x5e, 0x0, 0x8, [0x80000000, 0xce21, 0x19a2, 0x92da, 0x4, 0x2, 0x10001, 0x0]}]}}}}}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x3, 0x9, 0xfffffff7, 0x800, r2, 0x7f, '\x00', r3, r4, 0x1, 0x9, 0x5, 0xe, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 534.694198ms ago: executing program 3 (id=881): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11c, 0x11c, 0x4, [@enum64={0x10, 0x4, 0x0, 0x13, 0x0, 0x8, [{0xc, 0x40, 0x1c}, {0xb, 0x9726, 0xe}, {0xe, 0x3ff, 0xa}, {0xd, 0x6, 0x3ff}]}, @enum={0xa, 0x1, 0x0, 0x6, 0x4, [{0x7, 0x3}]}, @enum64={0x9, 0x3, 0x0, 0x13, 0x0, 0x3, [{0x4, 0x6, 0x1000}, {0x4, 0x7c2, 0xc00}, {0xa, 0x1000, 0x100}]}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, 0x25, 0x4}, @ptr={0x2, 0x0, 0x0, 0x2, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xd, 0x2}]}, @enum64={0x5, 0x6, 0x0, 0x13, 0x1, 0x2, [{0x8, 0xfffffffa, 0xfffffff8}, {0xf, 0x20}, {0xe, 0x6}, {0x7, 0x7, 0x9}, {0x9, 0x80, 0xa8fd}, {0x2, 0x7, 0x47c}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x2}}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000a40)=""/83, 0x138, 0x53, 0x1, 0x6, 0x10000, @value}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r2, 0x0, 0x9}, 0x18) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@bloom_filter={0x1e, 0xe, 0x9, 0x8000, 0x2000, 0x1, 0x1, '\x00', 0x0, r1, 0x5, 0x3, 0x3, 0xe, @void, @value, @void, @value}, 0x50) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="180100001f00010000000000000096000601008014000300fc010000000000000000000000000000140001"], 0x118}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0xc, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xfc14635ac3933271, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000002c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) unshare(0x22020600) r8 = socket(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r10, 0x400454c9, 0xad356f19b320d40b) ioctl$TUNSETLINK(r10, 0x400454cd, 0x300) write(r8, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0), r9) preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000002060103000000000000000300686173683a6e65742c6e657400010000050005000300000005000100070000000c00078008000940000000030900020073797a3100"/80], 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x8084) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000440)=""/77, 0x4d}, {&(0x7f0000000700)=""/253, 0xfd}, {&(0x7f0000000800)=""/163, 0xa3}, {&(0x7f00000008c0)=""/64, 0x40}], 0x4}, 0x2}], 0x1, 0x22, 0x0) 276.993598ms ago: executing program 2 (id=882): r0 = socket$inet6(0xa, 0x3, 0x3a) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="f7f72cbd7000919eab276645a1e5a2fbdbdf25010000000800010001040000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x844) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x9, @private1, 0xfffffff8}}, 0x5, 0x6, 0x80000000, 0x5, 0x2}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r3, 0xb6c}, &(0x7f00000001c0)=0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x8}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) openat$ppp(0xffffffffffffff9c, 0x0, 0xc6681, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) socket$kcm(0xf, 0x3, 0x2) unshare(0x68060200) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000800)=@security={'security\x00', 0xe, 0x4, 0x2f0, 0xffffffff, 0x0, 0xf0, 0xf0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, &(0x7f0000000300), {[{{@ip={@broadcast, @multicast2, 0xff000000, 0xffffffff, 'ip6gre0\x00', 'netpci0\x00', {0xff}, {0xff}, 0x5e, 0x0, 0x20}, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x6, 0xf21c41476e32b2a4, 0x2, 0x1, 0x3], 0x1, 0x5}, {0x4, [0x1, 0x3, 0x3, 0x0, 0x0, 0x2], 0x0, 0x1}}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff, 'vlan1\x00', 'macvlan0\x00', {0xff}, {}, 0x88, 0x3, 0x5a}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x90, 0xd0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x5, 0x0, "2c4c3f108b76a6515144f40cda87543c30f0a9a0ab9aa0c5496de30603c8"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60e5ff0401140600fe5e18d39f9d8000000000000000000000000000aafe8000000000000200000000000000aa00004e22be07a2bb8064a4d16029d4e5480710a67788c2e7e86ebc6dfe86dd881dd2d3272d80ad10922bf1bdc81cf0c7ea4c0ade19240ef33efdda80075d9a743e9657826267943272e69e40582d42bc45b2754cfe44ce44d04d091e36fc5ad86bfe8353f5b3676b174e9acaed0f051b86350d52bdf871f6b46ded8968772011c23064e9193a9b645b97c41b3442ca63acba195bebd5cdd7bf033960bd738b5ec0fd4cde7e3173fea7e9278d85038315ce49", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000390780200"], 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff?\x11\xc8\xdd\x15\xcc\xd2\xf1\xfb\'%\xa0\x00\x00\x00,'}, 0x30) write$tun(r7, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r7, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x147cc1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) 230.971981ms ago: executing program 0 (id=883): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x20, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24004085}, 0x4010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r2 = socket$inet(0x2, 0x800, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0xfffffffd, @empty, 0x9}, 0x1c) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e23, 0x4, @mcast2, 0xb9}, 0x1c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 0s ago: executing program 4 (id=884): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (fail_nth: 5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.117' (ED25519) to the list of known hosts. [ 77.813827][ T5818] cgroup: Unknown subsys name 'net' [ 77.949357][ T5818] cgroup: Unknown subsys name 'cpuset' [ 77.958736][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.642415][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.253875][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.262035][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.269985][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.288631][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.296605][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.304380][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.361018][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.368510][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.377618][ T56] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.385349][ T5140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.386252][ T56] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.393253][ T5140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.400249][ T56] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.414059][ T56] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.424261][ T56] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.431592][ T56] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.439960][ T56] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.447903][ T56] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.476326][ T56] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.487881][ T56] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.496110][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.511613][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.521474][ T56] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.529696][ T56] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.537495][ T56] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.201509][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 83.215602][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 83.328742][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 83.347465][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 83.404604][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 83.584621][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.593023][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.600593][ T5836] bridge_slave_0: entered allmulticast mode [ 83.607893][ T5836] bridge_slave_0: entered promiscuous mode [ 83.617310][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.624455][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.631712][ T5836] bridge_slave_1: entered allmulticast mode [ 83.639164][ T5836] bridge_slave_1: entered promiscuous mode [ 83.776969][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.784180][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.792328][ T5832] bridge_slave_0: entered allmulticast mode [ 83.799858][ T5832] bridge_slave_0: entered promiscuous mode [ 83.808181][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.815488][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.822670][ T5838] bridge_slave_0: entered allmulticast mode [ 83.830632][ T5838] bridge_slave_0: entered promiscuous mode [ 83.837890][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.845649][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.852802][ T5828] bridge_slave_0: entered allmulticast mode [ 83.860072][ T5828] bridge_slave_0: entered promiscuous mode [ 83.883310][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.895748][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.919483][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.926823][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.933943][ T5832] bridge_slave_1: entered allmulticast mode [ 83.942315][ T5832] bridge_slave_1: entered promiscuous mode [ 83.949614][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.957378][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.964530][ T5838] bridge_slave_1: entered allmulticast mode [ 83.971929][ T5838] bridge_slave_1: entered promiscuous mode [ 83.979773][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.987012][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.994184][ T5828] bridge_slave_1: entered allmulticast mode [ 84.002458][ T5828] bridge_slave_1: entered promiscuous mode [ 84.009633][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.016976][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.024120][ T5837] bridge_slave_0: entered allmulticast mode [ 84.031649][ T5837] bridge_slave_0: entered promiscuous mode [ 84.089400][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.096726][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.104947][ T5837] bridge_slave_1: entered allmulticast mode [ 84.114034][ T5837] bridge_slave_1: entered promiscuous mode [ 84.123665][ T5836] team0: Port device team_slave_0 added [ 84.160478][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.197100][ T5836] team0: Port device team_slave_1 added [ 84.219309][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.232500][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.258824][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.283074][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.296701][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.308369][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.344985][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.385845][ T56] Bluetooth: hci0: command tx timeout [ 84.400980][ T5832] team0: Port device team_slave_0 added [ 84.409848][ T5838] team0: Port device team_slave_0 added [ 84.429874][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.436905][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.463356][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.474384][ T56] Bluetooth: hci2: command tx timeout [ 84.496492][ T5832] team0: Port device team_slave_1 added [ 84.505436][ T5837] team0: Port device team_slave_0 added [ 84.513207][ T5838] team0: Port device team_slave_1 added [ 84.545122][ T56] Bluetooth: hci1: command tx timeout [ 84.546766][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.555528][ T56] Bluetooth: hci3: command tx timeout [ 84.557600][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.589510][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.621975][ T5837] team0: Port device team_slave_1 added [ 84.635244][ T56] Bluetooth: hci4: command tx timeout [ 84.647709][ T5828] team0: Port device team_slave_0 added [ 84.657109][ T5828] team0: Port device team_slave_1 added [ 84.679077][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.686086][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.714143][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.739658][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.746826][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.772830][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.825685][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.832681][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.859089][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.884685][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.891821][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.918582][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.948590][ T5836] hsr_slave_0: entered promiscuous mode [ 84.956132][ T5836] hsr_slave_1: entered promiscuous mode [ 84.988252][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.995582][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.021533][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.039392][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.046964][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.073086][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.085816][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.092775][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.118700][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.142625][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.149813][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.175794][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.245551][ T5832] hsr_slave_0: entered promiscuous mode [ 85.251872][ T5832] hsr_slave_1: entered promiscuous mode [ 85.258485][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.266257][ T5832] Cannot create hsr debugfs directory [ 85.301086][ T5838] hsr_slave_0: entered promiscuous mode [ 85.308344][ T5838] hsr_slave_1: entered promiscuous mode [ 85.314372][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.322048][ T5838] Cannot create hsr debugfs directory [ 85.412942][ T5837] hsr_slave_0: entered promiscuous mode [ 85.419648][ T5837] hsr_slave_1: entered promiscuous mode [ 85.430570][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.439015][ T5837] Cannot create hsr debugfs directory [ 85.547777][ T5828] hsr_slave_0: entered promiscuous mode [ 85.554467][ T5828] hsr_slave_1: entered promiscuous mode [ 85.561769][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.570276][ T5828] Cannot create hsr debugfs directory [ 86.056871][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.069566][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.081128][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.101470][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.163757][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.188134][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.201857][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.214516][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.290091][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.314653][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.327494][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.338420][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.463374][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.483055][ T56] Bluetooth: hci0: command tx timeout [ 86.500155][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.532378][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.554562][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.557258][ T56] Bluetooth: hci2: command tx timeout [ 86.586587][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.625191][ T5830] Bluetooth: hci1: command tx timeout [ 86.630695][ T56] Bluetooth: hci3: command tx timeout [ 86.663470][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.702162][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.714843][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.715508][ T56] Bluetooth: hci4: command tx timeout [ 86.730017][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.750413][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.830985][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.857847][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.865326][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.883120][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.890310][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.952001][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.039107][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.046326][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.063770][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.131200][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.138353][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.162450][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.191386][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.229612][ T1316] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.236818][ T1316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.299385][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.318061][ T1316] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.325293][ T1316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.390807][ T1316] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.398012][ T1316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.442377][ T1316] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.449587][ T1316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.599745][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.683274][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.717587][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.788199][ T3431] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.795700][ T3431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.840887][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.863992][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.871239][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.098925][ T5832] veth0_vlan: entered promiscuous mode [ 88.153660][ T5832] veth1_vlan: entered promiscuous mode [ 88.217574][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.239827][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.298493][ T5832] veth0_macvtap: entered promiscuous mode [ 88.370147][ T5832] veth1_macvtap: entered promiscuous mode [ 88.443212][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.470963][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.478897][ T5828] veth0_vlan: entered promiscuous mode [ 88.485786][ T5838] veth0_vlan: entered promiscuous mode [ 88.510665][ T5828] veth1_vlan: entered promiscuous mode [ 88.526590][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.535932][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.544686][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.553986][ T56] Bluetooth: hci0: command tx timeout [ 88.563671][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.624322][ T5838] veth1_vlan: entered promiscuous mode [ 88.635817][ T56] Bluetooth: hci2: command tx timeout [ 88.705479][ T56] Bluetooth: hci3: command tx timeout [ 88.705507][ T5830] Bluetooth: hci1: command tx timeout [ 88.721013][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.725356][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.731420][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.744774][ T5836] veth0_vlan: entered promiscuous mode [ 88.797496][ T5830] Bluetooth: hci4: command tx timeout [ 88.804464][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.811968][ T5838] veth0_macvtap: entered promiscuous mode [ 88.818329][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.841319][ T5836] veth1_vlan: entered promiscuous mode [ 88.873212][ T5828] veth0_macvtap: entered promiscuous mode [ 88.891229][ T5838] veth1_macvtap: entered promiscuous mode [ 88.906059][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.952192][ T5828] veth1_macvtap: entered promiscuous mode [ 88.991901][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.007665][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.020720][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.033166][ T5837] veth0_vlan: entered promiscuous mode [ 89.050220][ T5836] veth0_macvtap: entered promiscuous mode [ 89.070645][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.082072][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.100949][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.131213][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.148563][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.161405][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.171048][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.190555][ T5836] veth1_macvtap: entered promiscuous mode [ 89.201068][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.215464][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.225716][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.238975][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.250549][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.310734][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.321838][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.333673][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.344689][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.357570][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.366420][ T5837] veth1_vlan: entered promiscuous mode [ 89.392979][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6'. [ 89.405233][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.413962][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.425877][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.434666][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.458594][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.469308][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.479461][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.492403][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.502522][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.516194][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.528528][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.543457][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.554936][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.565500][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.576491][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.586949][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.597612][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.608908][ T5925] Illegal XDP return value 2033022808 on prog (id 2) dev N/A, expect packet loss! [ 89.609584][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.798693][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.811327][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.821862][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.834146][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.913042][ T5928] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7'. [ 89.922776][ T5837] veth0_macvtap: entered promiscuous mode [ 89.952938][ T5837] veth1_macvtap: entered promiscuous mode [ 90.008257][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.028967][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.089039][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.097325][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.111523][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.118586][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.136078][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.144537][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.159549][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.175612][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.185508][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.199130][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.209137][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.221362][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.234459][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.247959][ T5930] IPv6: NLM_F_REPLACE set, but no existing node found! [ 90.329639][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.340716][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.350980][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.361944][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.372031][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.382842][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.392883][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.403630][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.414829][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.423776][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.436337][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.492219][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.536398][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.554931][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.565386][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.578447][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.601960][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.607453][ T5936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9'. [ 90.670675][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 90.699781][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.710724][ T5830] Bluetooth: hci2: command tx timeout [ 90.711838][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.785605][ T5830] Bluetooth: hci1: command tx timeout [ 90.790738][ T56] Bluetooth: hci3: command tx timeout [ 90.875129][ T56] Bluetooth: hci4: command tx timeout [ 90.917016][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.942609][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.021626][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.046709][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.199727][ T5945] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.247995][ T5945] xt_hashlimit: size too large, truncated to 1048576 [ 91.706854][ T5951] netlink: 84 bytes leftover after parsing attributes in process `syz.2.11'. [ 91.757299][ T1780] cfg80211: failed to load regulatory.db [ 92.016144][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14'. [ 92.170362][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14'. [ 92.195819][ T5965] netlink: 'syz.3.15': attribute type 12 has an invalid length. [ 92.216776][ T5965] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15'. [ 93.501655][ T6001] Bluetooth: MGMT ver 1.23 [ 93.808136][ T5999] Cannot find del_set index 0 as target [ 93.810975][ T6005] Cannot find del_set index 0 as target [ 93.858547][ T56] block nbd0: Receive control failed (result -104) [ 93.964663][ T56] block nbd1: Receive control failed (result -104) [ 94.618253][ T6040] tipc: Started in network mode [ 94.666976][ T6040] tipc: Node identity 9ace9354ba41, cluster identity 4711 [ 94.692123][ T6040] tipc: Enabled bearer , priority 0 [ 94.723068][ T6047] Zero length message leads to an empty skb [ 94.959862][ T6043] syzkaller0: entered promiscuous mode [ 94.970629][ T6043] syzkaller0: entered allmulticast mode [ 94.981300][ T6043] tipc: Resetting bearer [ 95.083726][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.36'. [ 95.098667][ T1135] tipc: Resetting bearer [ 95.135656][ T6058] netlink: 44 bytes leftover after parsing attributes in process `syz.1.37'. [ 95.146256][ T6030] tipc: Resetting bearer [ 95.237286][ T6063] Cannot find del_set index 0 as target [ 95.368266][ T56] block nbd2: Receive control failed (result -104) [ 95.638442][ T6069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.649796][ T6064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.37'. [ 95.716399][ T49] tipc: Node number set to 546280276 [ 95.734492][ T6070] netlink: 40 bytes leftover after parsing attributes in process `syz.1.37'. [ 96.248410][ T6030] tipc: Disabling bearer [ 96.432996][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'. [ 96.474503][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'. [ 96.603382][ T6086] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.680797][ T6086] team_slave_0: entered promiscuous mode [ 96.686727][ T6086] team_slave_1: entered promiscuous mode [ 96.755324][ T6086] vlan2: entered promiscuous mode [ 96.760433][ T6086] team0: entered promiscuous mode [ 97.228932][ T6098] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 97.398170][ T6106] netlink: 'syz.4.52': attribute type 10 has an invalid length. [ 97.515635][ T6106] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 97.661981][ T6106] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.670422][ T6106] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.750338][ T6106] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 98.090990][ T6132] FAULT_INJECTION: forcing a failure. [ 98.090990][ T6132] name failslab, interval 1, probability 0, space 0, times 1 [ 98.176003][ T6132] CPU: 1 UID: 0 PID: 6132 Comm: syz.1.60 Not tainted 6.15.0-rc5-syzkaller-01088-g664bf117a308 #0 PREEMPT(full) [ 98.176031][ T6132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 98.176048][ T6132] Call Trace: [ 98.176059][ T6132] [ 98.176068][ T6132] dump_stack_lvl+0x189/0x250 [ 98.176113][ T6132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.176141][ T6132] ? __pfx__printk+0x10/0x10 [ 98.176163][ T6132] ? __pfx___might_resched+0x10/0x10 [ 98.176181][ T6132] ? fs_reclaim_acquire+0x7d/0x100 [ 98.176214][ T6132] should_fail_ex+0x414/0x560 [ 98.176240][ T6132] should_failslab+0xa8/0x100 [ 98.176266][ T6132] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 98.176292][ T6132] ? __alloc_skb+0x112/0x2d0 [ 98.176328][ T6132] __alloc_skb+0x112/0x2d0 [ 98.176357][ T6132] alloc_skb_with_frags+0xca/0x890 [ 98.176388][ T6132] ? __might_fault+0xb0/0x130 [ 98.176419][ T6132] sock_alloc_send_pskb+0x857/0x990 [ 98.176468][ T6132] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 98.176502][ T6132] ? __pfx__copy_from_iter+0x10/0x10 [ 98.176536][ T6132] nfc_alloc_send_skb+0x94/0x1c0 [ 98.176564][ T6132] nfc_llcp_send_ui_frame+0x27d/0x540 [ 98.176602][ T6132] ? __pfx_nfc_llcp_send_ui_frame+0x10/0x10 [ 98.176625][ T6132] ? llcp_sock_sendmsg+0x240/0x3c0 [ 98.176652][ T6132] ? llcp_sock_sendmsg+0x240/0x3c0 [ 98.176674][ T6132] ? __pfx_llcp_sock_sendmsg+0x10/0x10 [ 98.176699][ T6132] __sock_sendmsg+0x219/0x270 [ 98.176723][ T6132] ____sys_sendmsg+0x52d/0x830 [ 98.176773][ T6132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.176811][ T6132] ? import_iovec+0x74/0xa0 [ 98.176842][ T6132] ___sys_sendmsg+0x21f/0x2a0 [ 98.176873][ T6132] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.176939][ T6132] ? __fget_files+0x2a/0x420 [ 98.176964][ T6132] ? __fget_files+0x3a0/0x420 [ 98.177001][ T6132] __sys_sendmmsg+0x227/0x430 [ 98.177035][ T6132] ? __pfx___sys_sendmmsg+0x10/0x10 [ 98.177074][ T6132] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 98.177114][ T6132] ? ksys_write+0x1f0/0x250 [ 98.177136][ T6132] ? rcu_is_watching+0x15/0xb0 [ 98.177177][ T6132] __x64_sys_sendmmsg+0xa0/0xc0 [ 98.177207][ T6132] do_syscall_64+0xf6/0x210 [ 98.177229][ T6132] ? clear_bhb_loop+0x45/0xa0 [ 98.177253][ T6132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.177272][ T6132] RIP: 0033:0x7ff31258e969 [ 98.177297][ T6132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.177321][ T6132] RSP: 002b:00007ff313461038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 98.177349][ T6132] RAX: ffffffffffffffda RBX: 00007ff3127b5fa0 RCX: 00007ff31258e969 [ 98.177364][ T6132] RDX: 0000000000000003 RSI: 0000200000000b00 RDI: 0000000000000006 [ 98.177376][ T6132] RBP: 00007ff313461090 R08: 0000000000000000 R09: 0000000000000000 [ 98.177388][ T6132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.177399][ T6132] R13: 0000000000000000 R14: 00007ff3127b5fa0 R15: 00007ffe2361a028 [ 98.177430][ T6132] [ 98.177439][ T6132] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-105) [ 98.912017][ T6149] syzkaller0: entered promiscuous mode [ 98.968301][ T6149] syzkaller0: entered allmulticast mode [ 99.800300][ T6173] netlink: 16 bytes leftover after parsing attributes in process `syz.2.72'. [ 101.155993][ T6202] Cannot find del_set index 0 as target [ 101.292147][ T6207] syz.2.85 uses obsolete (PF_INET,SOCK_PACKET) [ 101.406779][ T6206] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.85'. [ 101.581370][ T6212] xt_CT: No such helper "snmp" [ 101.669669][ T6220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.90'. [ 101.800466][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.92'. [ 102.087553][ T6235] SET target dimension over the limit! [ 102.110727][ T6235] block nbd0: NBD_DISCONNECT [ 102.120950][ T6235] block nbd0: Send disconnect failed -32 [ 102.130123][ T6235] block nbd0: shutting down sockets [ 102.371297][ T6245] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 103.043162][ T6271] netlink: 20 bytes leftover after parsing attributes in process `syz.4.113'. [ 103.141592][ T6275] xt_CT: No such helper "snmp" [ 103.161896][ T6276] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 103.204109][ T6271] netlink: 16 bytes leftover after parsing attributes in process `syz.4.113'. [ 103.508673][ T6289] x_tables: unsorted entry at hook 2 [ 103.790923][ T6300] netlink: 248 bytes leftover after parsing attributes in process `syz.0.122'. [ 104.148872][ T6313] vlan2: entered promiscuous mode [ 104.350423][ T6322] Cannot find del_set index 0 as target [ 104.395225][ T6322] block nbd1: NBD_DISCONNECT [ 104.406606][ T6322] block nbd1: Send disconnect failed -32 [ 104.417658][ T6322] block nbd1: shutting down sockets [ 104.911960][ T6330] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101 [ 104.990840][ T6333] netlink: 24 bytes leftover after parsing attributes in process `syz.4.134'. [ 105.193691][ T6343] xt_CT: No such helper "snmp" [ 105.251393][ T6346] netlink: 'syz.2.140': attribute type 1 has an invalid length. [ 105.399485][ T6346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.831069][ T6373] x_tables: duplicate underflow at hook 2 [ 105.857157][ T6375] x_tables: duplicate underflow at hook 2 [ 106.314523][ T6402] openvswitch: netlink: Missing valid actions attribute. [ 106.324446][ T6402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.420396][ T6405] netlink: 'syz.2.158': attribute type 33 has an invalid length. [ 106.421929][ T6407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.159'. [ 106.430203][ T6405] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.158'. [ 106.740044][ T6423] xt_CT: No such helper "snmp" [ 107.709961][ T6466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.179'. [ 107.803006][ T6472] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 107.822801][ T6466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.873233][ T6471] bond1: (slave veth3): Enslaving as an active interface with an up link [ 107.952795][ T6479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.183'. [ 107.974984][ T6478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.183'. [ 108.099595][ T6481] sock: sock_timestamping_bind_phc: sock not bind to device [ 108.217566][ T6486] sctp: [Deprecated]: syz.1.186 (pid 6486) Use of struct sctp_assoc_value in delayed_ack socket option. [ 108.217566][ T6486] Use struct sctp_sack_info instead [ 108.355113][ T6492] xt_CT: No such helper "snmp" [ 108.395445][ T6495] netlink: 20 bytes leftover after parsing attributes in process `syz.0.190'. [ 108.467869][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'. [ 108.660440][ T6505] netlink: 'syz.1.194': attribute type 5 has an invalid length. [ 108.680080][ T6505] netlink: 'syz.1.194': attribute type 5 has an invalid length. [ 108.710130][ T6505] netlink: 16 bytes leftover after parsing attributes in process `syz.1.194'. [ 109.063834][ T6520] netlink: 'syz.1.199': attribute type 1 has an invalid length. [ 109.118741][ T6524] IPv6: syztnl1: Disabled Multicast RS [ 109.644924][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'. [ 109.672631][ T6551] netlink: 48 bytes leftover after parsing attributes in process `syz.2.208'. [ 109.690361][ T6550] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 109.795973][ T30] audit: type=1800 audit(1747259689.642:2): pid=6555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.210" name="memory.events" dev="tmpfs" ino=197 res=0 errno=0 [ 109.845366][ T30] audit: type=1804 audit(1747259689.692:3): pid=6555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.210" name="memory.events" dev="tmpfs" ino=197 res=1 errno=0 [ 109.847223][ T6555] netlink: 'syz.0.210': attribute type 1 has an invalid length. [ 109.947990][ T6555] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.987166][ T6563] bond1: (slave gretap1): making interface the new active one [ 109.996889][ T6563] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 110.010381][ T6567] xt_CT: No such helper "snmp" [ 110.094698][ T6555] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.171700][ T6571] tipc: Started in network mode [ 110.182957][ T6571] tipc: Node identity d2746bdd89e2, cluster identity 4711 [ 110.194752][ T6571] tipc: Enabled bearer , priority 0 [ 110.224169][ T6555] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.251536][ T6570] tipc: Disabling bearer [ 110.316811][ T6555] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.401998][ T6584] netlink: 'syz.4.219': attribute type 2 has an invalid length. [ 110.416224][ T6584] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.423560][ T6584] IPv6: NLM_F_CREATE should be set when creating new route [ 110.481420][ T6555] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.864129][ T6555] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.951065][ T6606] delete_channel: no stack [ 111.060451][ T6563] syz.0.210 (6563) used greatest stack depth: 20008 bytes left [ 111.144043][ T6608] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.733554][ T6555] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.773115][ T6555] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.850064][ T6608] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.897110][ T6617] tipc: Enabled bearer , priority 0 [ 111.913735][ T6616] tipc: Disabling bearer [ 111.928969][ T6635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.997789][ T6635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.038983][ T6638] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 112.094680][ T6555] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.152310][ T6636] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 112.224525][ T6636] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 112.236302][ T6608] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.414620][ T6608] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.441283][ T6648] __nla_validate_parse: 5 callbacks suppressed [ 112.441301][ T6648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.240'. [ 112.589484][ T6608] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.644374][ T6608] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.733609][ T6608] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.760321][ T6608] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.032233][ T6666] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 113.061408][ T6662] tipc: Started in network mode [ 113.090875][ T6662] tipc: Node identity ba1d2b40e6f2, cluster identity 4711 [ 113.101181][ T6662] tipc: Enabled bearer , priority 0 [ 113.354412][ T6660] tipc: Disabling bearer [ 113.956062][ T6706] tipc: Started in network mode [ 113.969841][ T6706] tipc: Node identity 7238c551e5ff, cluster identity 4711 [ 114.055342][ T6706] tipc: Enabled bearer , priority 0 [ 114.137619][ T6708] syzkaller0: entered promiscuous mode [ 114.143284][ T6708] syzkaller0: entered allmulticast mode [ 114.151724][ T6708] tipc: Resetting bearer [ 114.276210][ T6705] tipc: Resetting bearer [ 114.443671][ T6701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.258'. [ 115.125836][ T49] tipc: Node number set to 2546451793 [ 115.620767][ T6705] tipc: Disabling bearer [ 115.764105][ T6726] syzkaller0: entered promiscuous mode [ 115.791944][ T6726] syzkaller0: entered allmulticast mode [ 116.184248][ T6767] SET target dimension over the limit! [ 116.290327][ T56] block nbd0: Receive control failed (result -104) [ 116.339297][ T6771] netlink: 'syz.2.281': attribute type 10 has an invalid length. [ 116.773471][ T6790] FAULT_INJECTION: forcing a failure. [ 116.773471][ T6790] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 116.810154][ T6790] CPU: 1 UID: 0 PID: 6790 Comm: syz.1.287 Not tainted 6.15.0-rc5-syzkaller-01088-g664bf117a308 #0 PREEMPT(full) [ 116.810184][ T6790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.810196][ T6790] Call Trace: [ 116.810204][ T6790] [ 116.810214][ T6790] dump_stack_lvl+0x189/0x250 [ 116.810252][ T6790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.810281][ T6790] ? __pfx__printk+0x10/0x10 [ 116.810316][ T6790] should_fail_ex+0x414/0x560 [ 116.810342][ T6790] _copy_from_user+0x2d/0xb0 [ 116.810372][ T6790] sctp_setsockopt+0x19f/0x1200 [ 116.810398][ T6790] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 116.810425][ T6790] do_sock_setsockopt+0x257/0x3e0 [ 116.810455][ T6790] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 116.810479][ T6790] ? __fget_files+0x2a/0x420 [ 116.810510][ T6790] ? __fget_files+0x3a0/0x420 [ 116.810534][ T6790] ? __fget_files+0x2a/0x420 [ 116.810567][ T6790] __x64_sys_setsockopt+0x18b/0x220 [ 116.810601][ T6790] do_syscall_64+0xf6/0x210 [ 116.810624][ T6790] ? clear_bhb_loop+0x45/0xa0 [ 116.810649][ T6790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.810668][ T6790] RIP: 0033:0x7ff31258e969 [ 116.810686][ T6790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.810702][ T6790] RSP: 002b:00007ff313461038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 116.810723][ T6790] RAX: ffffffffffffffda RBX: 00007ff3127b5fa0 RCX: 00007ff31258e969 [ 116.810737][ T6790] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 116.810749][ T6790] RBP: 00007ff313461090 R08: 000000000000009c R09: 0000000000000000 [ 116.810761][ T6790] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001 [ 116.810773][ T6790] R13: 0000000000000000 R14: 00007ff3127b5fa0 R15: 00007ffe2361a028 [ 116.810804][ T6790] [ 117.983983][ T6771] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 118.169694][ T6801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.290'. [ 118.307146][ T6811] Cannot find del_set index 0 as target [ 118.346155][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'. [ 118.375114][ T6814] bridge_slave_1: left allmulticast mode [ 118.380810][ T6814] bridge_slave_1: left promiscuous mode [ 118.449056][ T6814] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.533393][ T6828] netlink: 5 bytes leftover after parsing attributes in process `syz.0.295'. [ 118.552561][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'. [ 118.593219][ T56] block nbd1: Receive control failed (result -104) [ 118.739482][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.298'. [ 118.761965][ T6814] bridge_slave_0: left allmulticast mode [ 118.843203][ T6814] bridge_slave_0: left promiscuous mode [ 118.863094][ T6814] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.882430][ T6835] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 118.990949][ T6840] netlink: 84 bytes leftover after parsing attributes in process `syz.1.298'. [ 119.008062][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.298'. [ 119.323176][ T6857] netlink: 'syz.2.305': attribute type 11 has an invalid length. [ 119.444354][ T6843] syzkaller0: entered promiscuous mode [ 119.450728][ T6843] syzkaller0: entered allmulticast mode [ 119.613653][ T6868] Cannot find del_set index 0 as target [ 119.754592][ T6875] block nbd2: NBD_DISCONNECT [ 119.764334][ T6875] block nbd2: Send disconnect failed -32 [ 119.779317][ T6875] block nbd2: shutting down sockets [ 119.805347][ T56] block nbd3: Receive control failed (result -104) [ 120.144225][ T6884] netlink: 'syz.2.311': attribute type 21 has an invalid length. [ 121.233524][ T6914] Cannot find del_set index 0 as target [ 121.307085][ T6922] FAULT_INJECTION: forcing a failure. [ 121.307085][ T6922] name failslab, interval 1, probability 0, space 0, times 0 [ 121.320327][ T6922] CPU: 1 UID: 0 PID: 6922 Comm: syz.4.322 Not tainted 6.15.0-rc5-syzkaller-01088-g664bf117a308 #0 PREEMPT(full) [ 121.320357][ T6922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.320368][ T6922] Call Trace: [ 121.320375][ T6922] [ 121.320383][ T6922] dump_stack_lvl+0x189/0x250 [ 121.320419][ T6922] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.320445][ T6922] ? __pfx__printk+0x10/0x10 [ 121.320470][ T6922] ? rcu_is_watching+0x15/0xb0 [ 121.320502][ T6922] should_fail_ex+0x414/0x560 [ 121.320525][ T6922] should_failslab+0xa8/0x100 [ 121.320550][ T6922] kmem_cache_alloc_noprof+0x73/0x3c0 [ 121.320600][ T6922] ? _sctp_make_chunk+0x14e/0x430 [ 121.320626][ T6922] _sctp_make_chunk+0x14e/0x430 [ 121.320652][ T6922] sctp_make_heartbeat+0xa7/0x470 [ 121.320679][ T6922] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 121.320708][ T6922] ? sctp_transport_hold+0x142/0x1c0 [ 121.320735][ T6922] ? __pfx_sctp_transport_hold+0x10/0x10 [ 121.320766][ T6922] sctp_sf_do_prm_requestheartbeat+0x32/0x280 [ 121.320799][ T6922] sctp_do_sm+0x1e4/0x5a20 [ 121.320814][ T6922] ? __pfx_sctp_pname+0x10/0x10 [ 121.320830][ T6922] ? __pfx_sctp_hash_cmp+0x10/0x10 [ 121.320859][ T6922] ? __pfx_sctp_do_sm+0x10/0x10 [ 121.320874][ T6922] ? stack_trace_save+0x9c/0xe0 [ 121.320892][ T6922] ? __pfx_sctp_hash_key+0x10/0x10 [ 121.320906][ T6922] ? __pfx_sctp_hash_obj+0x10/0x10 [ 121.320958][ T6922] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 121.320983][ T6922] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 121.321006][ T6922] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 121.321031][ T6922] ? sctp_v6_addr_to_user+0x217/0x420 [ 121.321055][ T6922] sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0 [ 121.321087][ T6922] sctp_apply_peer_addr_params+0xdf/0x1880 [ 121.321119][ T6922] sctp_setsockopt_peer_addr_params+0x5e5/0x940 [ 121.321158][ T6922] sctp_setsockopt+0x709/0x1200 [ 121.321181][ T6922] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 121.321204][ T6922] do_sock_setsockopt+0x257/0x3e0 [ 121.321232][ T6922] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 121.321253][ T6922] ? __fget_files+0x2a/0x420 [ 121.321281][ T6922] ? __fget_files+0x3a0/0x420 [ 121.321302][ T6922] ? __fget_files+0x2a/0x420 [ 121.321338][ T6922] __x64_sys_setsockopt+0x18b/0x220 [ 121.321387][ T6922] do_syscall_64+0xf6/0x210 [ 121.321432][ T6922] ? clear_bhb_loop+0x45/0xa0 [ 121.321456][ T6922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.321475][ T6922] RIP: 0033:0x7f308818e969 [ 121.321492][ T6922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.321508][ T6922] RSP: 002b:00007f3088fd8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 121.321528][ T6922] RAX: ffffffffffffffda RBX: 00007f30883b6080 RCX: 00007f308818e969 [ 121.321542][ T6922] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 121.321553][ T6922] RBP: 00007f3088fd8090 R08: 000000000000009c R09: 0000000000000000 [ 121.321571][ T6922] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001 [ 121.321583][ T6922] R13: 0000000000000001 R14: 00007f30883b6080 R15: 00007ffc90754458 [ 121.321614][ T6922] [ 121.658240][ T6925] block nbd2: NBD_DISCONNECT [ 121.663155][ T6925] block nbd2: Disconnected due to user request. [ 121.670123][ T6925] block nbd2: shutting down sockets [ 121.920906][ T6932] xt_CT: No such helper "pptp" [ 121.942900][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.330'. [ 122.303680][ T6939] syzkaller0: entered promiscuous mode [ 122.341297][ T6956] openvswitch: netlink: Missing key (keys=40, expected=80) [ 122.368877][ T1780] IPVS: starting estimator thread 0... [ 122.381691][ T6939] syzkaller0: entered allmulticast mode [ 122.416356][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'. [ 122.472501][ T6961] netlink: 'syz.0.338': attribute type 4 has an invalid length. [ 122.489535][ T6958] IPVS: using max 25 ests per chain, 60000 per kthread [ 122.560115][ T6963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.339'. [ 124.247679][ T6992] FAULT_INJECTION: forcing a failure. [ 124.247679][ T6992] name failslab, interval 1, probability 0, space 0, times 0 [ 124.295342][ T6992] CPU: 0 UID: 0 PID: 6992 Comm: syz.1.350 Not tainted 6.15.0-rc5-syzkaller-01088-g664bf117a308 #0 PREEMPT(full) [ 124.295370][ T6992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.295382][ T6992] Call Trace: [ 124.295390][ T6992] [ 124.295398][ T6992] dump_stack_lvl+0x189/0x250 [ 124.295436][ T6992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.295465][ T6992] ? __pfx__printk+0x10/0x10 [ 124.295491][ T6992] ? __pfx___might_resched+0x10/0x10 [ 124.295507][ T6992] ? fs_reclaim_acquire+0x7d/0x100 [ 124.295541][ T6992] should_fail_ex+0x414/0x560 [ 124.295566][ T6992] should_failslab+0xa8/0x100 [ 124.295593][ T6992] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 124.295619][ T6992] ? __alloc_skb+0x112/0x2d0 [ 124.295647][ T6992] __alloc_skb+0x112/0x2d0 [ 124.295683][ T6992] sctp_packet_transmit+0x2cc/0x2ab0 [ 124.295713][ T6992] ? __lock_acquire+0xaac/0xd20 [ 124.295749][ T6992] ? sctp_outq_flush+0xbef/0x3140 [ 124.295785][ T6992] ? sctp_outq_flush+0xbef/0x3140 [ 124.295812][ T6992] ? sctp_outq_flush+0xbef/0x3140 [ 124.295842][ T6992] sctp_outq_flush+0xecb/0x3140 [ 124.295870][ T6992] ? sctp_outq_flush+0xbef/0x3140 [ 124.295899][ T6992] ? sctp_make_heartbeat+0x389/0x470 [ 124.295928][ T6992] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 124.295954][ T6992] ? __pfx_sctp_outq_flush+0x10/0x10 [ 124.295990][ T6992] ? sctp_outq_tail+0x612/0x8c0 [ 124.296017][ T6992] ? sctp_do_8_2_transport_strike+0x43c/0x8b0 [ 124.296038][ T6992] ? sctp_outq_uncork+0x4d/0xa0 [ 124.296070][ T6992] sctp_do_sm+0x5332/0x5a20 [ 124.296105][ T6992] ? __pfx_sctp_do_sm+0x10/0x10 [ 124.296121][ T6992] ? stack_trace_save+0x9c/0xe0 [ 124.296141][ T6992] ? __pfx_sctp_hash_key+0x10/0x10 [ 124.296155][ T6992] ? __pfx_sctp_hash_obj+0x10/0x10 [ 124.296204][ T6992] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 124.296227][ T6992] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 124.296249][ T6992] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 124.296273][ T6992] ? sctp_v6_addr_to_user+0x217/0x420 [ 124.296297][ T6992] sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0 [ 124.296328][ T6992] sctp_apply_peer_addr_params+0xdf/0x1880 [ 124.296380][ T6992] sctp_setsockopt_peer_addr_params+0x5e5/0x940 [ 124.296420][ T6992] sctp_setsockopt+0x709/0x1200 [ 124.296443][ T6992] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 124.296466][ T6992] do_sock_setsockopt+0x257/0x3e0 [ 124.296492][ T6992] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 124.296514][ T6992] ? __fget_files+0x2a/0x420 [ 124.296542][ T6992] ? __fget_files+0x3a0/0x420 [ 124.296564][ T6992] ? __fget_files+0x2a/0x420 [ 124.296596][ T6992] __x64_sys_setsockopt+0x18b/0x220 [ 124.296627][ T6992] do_syscall_64+0xf6/0x210 [ 124.296648][ T6992] ? clear_bhb_loop+0x45/0xa0 [ 124.296678][ T6992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.296696][ T6992] RIP: 0033:0x7ff31258e969 [ 124.296712][ T6992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.296727][ T6992] RSP: 002b:00007ff313461038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 124.296747][ T6992] RAX: ffffffffffffffda RBX: 00007ff3127b5fa0 RCX: 00007ff31258e969 [ 124.296760][ T6992] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 124.296771][ T6992] RBP: 00007ff313461090 R08: 000000000000009c R09: 0000000000000000 [ 124.296782][ T6992] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001 [ 124.296793][ T6992] R13: 0000000000000000 R14: 00007ff3127b5fa0 R15: 00007ffe2361a028 [ 124.296823][ T6992] [ 125.849557][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.363'. [ 126.086409][ T7040] netlink: 'syz.2.366': attribute type 1 has an invalid length. [ 126.130066][ T7031] syzkaller0: entered promiscuous mode [ 126.150244][ T7031] syzkaller0: entered allmulticast mode [ 126.169514][ T7029] bridge_slave_1: left allmulticast mode [ 126.176560][ T7029] bridge_slave_1: left promiscuous mode [ 126.192720][ T7029] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.213557][ T7029] bridge_slave_0: left allmulticast mode [ 126.224066][ T7029] bridge_slave_0: left promiscuous mode [ 126.239174][ T7029] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.394677][ T7040] 8021q: adding VLAN 0 to HW filter on device bond3 [ 127.611047][ T7068] FAULT_INJECTION: forcing a failure. [ 127.611047][ T7068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.627547][ T7068] CPU: 0 UID: 0 PID: 7068 Comm: syz.4.375 Not tainted 6.15.0-rc5-syzkaller-01088-g664bf117a308 #0 PREEMPT(full) [ 127.627575][ T7068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.627588][ T7068] Call Trace: [ 127.627596][ T7068] [ 127.627605][ T7068] dump_stack_lvl+0x189/0x250 [ 127.627642][ T7068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.627670][ T7068] ? __pfx__printk+0x10/0x10 [ 127.627703][ T7068] should_fail_ex+0x414/0x560 [ 127.627729][ T7068] _copy_to_user+0x31/0xb0 [ 127.627759][ T7068] simple_read_from_buffer+0xe1/0x170 [ 127.627793][ T7068] proc_fail_nth_read+0x1df/0x250 [ 127.627823][ T7068] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.627854][ T7068] ? rw_verify_area+0x258/0x650 [ 127.627875][ T7068] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.627904][ T7068] vfs_read+0x1fd/0x980 [ 127.627932][ T7068] ? __pfx___mutex_lock+0x10/0x10 [ 127.627953][ T7068] ? __pfx_vfs_read+0x10/0x10 [ 127.627977][ T7068] ? __fget_files+0x2a/0x420 [ 127.628007][ T7068] ? __fget_files+0x3a0/0x420 [ 127.628031][ T7068] ? __fget_files+0x2a/0x420 [ 127.628065][ T7068] ksys_read+0x145/0x250 [ 127.628089][ T7068] ? __pfx_ksys_read+0x10/0x10 [ 127.628115][ T7068] ? do_syscall_64+0xba/0x210 [ 127.628141][ T7068] do_syscall_64+0xf6/0x210 [ 127.628162][ T7068] ? clear_bhb_loop+0x45/0xa0 [ 127.628186][ T7068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.628205][ T7068] RIP: 0033:0x7f308818d37c [ 127.628222][ T7068] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 127.628238][ T7068] RSP: 002b:00007f3088fd8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.628257][ T7068] RAX: ffffffffffffffda RBX: 00007f30883b6080 RCX: 00007f308818d37c [ 127.628272][ T7068] RDX: 000000000000000f RSI: 00007f3088fd80a0 RDI: 0000000000000004 [ 127.628284][ T7068] RBP: 00007f3088fd8090 R08: 0000000000000000 R09: 0000000000000000 [ 127.628295][ T7068] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001 [ 127.628307][ T7068] R13: 0000000000000001 R14: 00007f30883b6080 R15: 00007ffc90754458 [ 127.628338][ T7068] [ 128.085581][ T7076] netlink: 16 bytes leftover after parsing attributes in process `syz.4.379'. [ 128.889071][ T7109] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.391'. [ 128.899842][ T7109] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.391'. [ 129.044847][ T7109] ipip0: entered promiscuous mode [ 129.053025][ T7109] ipip0: entered allmulticast mode [ 129.105933][ T7113] block nbd2: server does not support multiple connections per device. [ 129.147340][ T7113] block nbd2: shutting down sockets [ 129.290290][ T7124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.395'. [ 129.480343][ T7126] syzkaller0: entered promiscuous mode [ 129.486131][ T7126] syzkaller0: entered allmulticast mode [ 130.934490][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.402'. [ 130.948816][ T7147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.402'. [ 131.137313][ T7160] netlink: 16 bytes leftover after parsing attributes in process `syz.0.408'. [ 131.232672][ T7167] warning: `syz.4.411' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 131.487890][ T7180] Bluetooth: MGMT ver 1.23 [ 131.530335][ T7180] xt_nfacct: accounting object `syz1' does not exists [ 131.919512][ T7188] syzkaller0: entered promiscuous mode [ 131.955555][ T7188] syzkaller0: entered allmulticast mode [ 132.188960][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.420'. [ 132.236333][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.420'. [ 132.730042][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.742062][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.598623][ T7242] netlink: 'syz.2.434': attribute type 10 has an invalid length. [ 133.606693][ T7242] netlink: 40 bytes leftover after parsing attributes in process `syz.2.434'. [ 133.681793][ T7242] dummy0: entered promiscuous mode [ 133.703656][ T7242] bond0: (slave dummy0): Releasing backup interface [ 133.752933][ T7242] bridge0: port 3(dummy0) entered blocking state [ 133.771947][ T7242] bridge0: port 3(dummy0) entered disabled state [ 133.781269][ T7242] dummy0: entered allmulticast mode [ 134.058161][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.440'. [ 134.246622][ T10] IPVS: starting estimator thread 0... [ 134.335477][ T7270] IPVS: using max 27 ests per chain, 64800 per kthread [ 134.690926][ T7289] tipc: Started in network mode [ 134.696205][ T7289] tipc: Node identity da0b5d23744f, cluster identity 4711 [ 134.704857][ T7289] tipc: Enabled bearer , priority 0 [ 134.762680][ T7289] syzkaller0: entered promiscuous mode [ 134.769312][ T7289] syzkaller0: entered allmulticast mode [ 134.776236][ T7289] tipc: Resetting bearer [ 134.933184][ T7285] tipc: Resetting bearer [ 135.215747][ T7297] netlink: 'syz.0.450': attribute type 2 has an invalid length. [ 135.229626][ T7298] netlink: 'syz.0.450': attribute type 2 has an invalid length. [ 135.328289][ T7303] netlink: 'syz.4.453': attribute type 1 has an invalid length. [ 135.775211][ T5931] tipc: Node number set to 2923715875 [ 136.290706][ T7285] tipc: Disabling bearer [ 136.314947][ T7297] k›*·]‘: entered promiscuous mode [ 136.512098][ T7328] netlink: 16 bytes leftover after parsing attributes in process `syz.3.463'. [ 137.224482][ T7365] tipc: Enabled bearer , priority 0 [ 137.364768][ T7361] syzkaller0: entered promiscuous mode [ 137.372548][ T7361] syzkaller0: entered allmulticast mode [ 137.382933][ T7361] tipc: Resetting bearer [ 137.389431][ T7368] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.414539][ T7360] tipc: Resetting bearer [ 138.275335][ T5883] tipc: Node number set to 1536584669 [ 138.902708][ T7360] tipc: Disabling bearer [ 139.168631][ T7420] openvswitch: netlink: Key type 16144 is out of range max 32 [ 139.197699][ T7423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.311591][ T7426] SET target dimension over the limit! [ 139.315346][ T7431] SET target dimension over the limit! [ 139.342394][ T7414] xt_CT: No such helper "snmp" [ 139.448923][ T7434] block nbd0: NBD_DISCONNECT [ 139.454941][ T7434] block nbd0: Send disconnect failed -32 [ 139.469692][ T7434] block nbd0: shutting down sockets [ 139.512373][ T56] block nbd2: Receive control failed (result -104) [ 139.587553][ T7435] block nbd3: NBD_DISCONNECT [ 139.598728][ T7435] block nbd3: Send disconnect failed -32 [ 139.609704][ T7435] block nbd3: shutting down sockets [ 139.686660][ T56] block nbd0: Receive control failed (result -104) [ 139.855306][ T7451] netlink: 16 bytes leftover after parsing attributes in process `syz.3.504'. [ 139.968050][ T7456] tipc: Enabled bearer , priority 0 [ 140.439266][ T7458] syzkaller0: entered promiscuous mode [ 140.463875][ T7458] syzkaller0: entered allmulticast mode [ 140.507891][ T7458] tipc: Resetting bearer [ 140.753402][ T3431] tipc: Resetting bearer [ 141.051282][ T7447] tipc: Resetting bearer [ 141.117150][ T7478] FAULT_INJECTION: forcing a failure. [ 141.117150][ T7478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.171557][ T7478] CPU: 0 UID: 0 PID: 7478 Comm: syz.2.510 Not tainted 6.15.0-rc5-syzkaller-01088-g664bf117a308 #0 PREEMPT(full) [ 141.171586][ T7478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.171598][ T7478] Call Trace: [ 141.171606][ T7478] [ 141.171614][ T7478] dump_stack_lvl+0x189/0x250 [ 141.171647][ T7478] ? __lock_acquire+0xaac/0xd20 [ 141.171678][ T7478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.171707][ T7478] ? __pfx__printk+0x10/0x10 [ 141.171727][ T7478] ? __might_fault+0xb0/0x130 [ 141.171764][ T7478] should_fail_ex+0x414/0x560 [ 141.171789][ T7478] _copy_from_user+0x2d/0xb0 [ 141.171817][ T7478] __sys_bpf+0x1ed/0x860 [ 141.171845][ T7478] ? __pfx___sys_bpf+0x10/0x10 [ 141.171883][ T7478] ? ksys_write+0x1f0/0x250 [ 141.171905][ T7478] ? rcu_is_watching+0x15/0xb0 [ 141.171946][ T7478] __x64_sys_bpf+0x7c/0x90 [ 141.171968][ T7478] do_syscall_64+0xf6/0x210 [ 141.171991][ T7478] ? clear_bhb_loop+0x45/0xa0 [ 141.172015][ T7478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.172034][ T7478] RIP: 0033:0x7f39cf98e969 [ 141.172050][ T7478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.172066][ T7478] RSP: 002b:00007f39d0713038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 141.172087][ T7478] RAX: ffffffffffffffda RBX: 00007f39cfbb6080 RCX: 00007f39cf98e969 [ 141.172101][ T7478] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 141.172113][ T7478] RBP: 00007f39d0713090 R08: 0000000000000000 R09: 0000000000000000 [ 141.172174][ T7478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.172185][ T7478] R13: 0000000000000000 R14: 00007f39cfbb6080 R15: 00007fff7af65618 [ 141.172215][ T7478] [ 141.351752][ T5888] tipc: Node number set to 1559178048 [ 141.570150][ T7480] Cannot find del_set index 0 as target [ 141.759635][ T7487] block nbd1: NBD_DISCONNECT [ 141.766611][ T7487] block nbd1: Send disconnect failed -32 [ 141.772401][ T7487] block nbd1: shutting down sockets [ 141.803614][ T7489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.514'. [ 141.819038][ T56] block nbd3: Receive control failed (result -104) [ 142.752688][ T7447] tipc: Disabling bearer [ 142.762354][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.511'. [ 142.771680][ T7475] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.121263][ T7508] xt_CT: No such helper "snmp" [ 143.130972][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'. [ 143.191933][ T7516] xt_CT: You must specify a L4 protocol and not use inversions on it [ 143.973862][ T7532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.528'. [ 144.004100][ T7534] netlink: 36 bytes leftover after parsing attributes in process `syz.1.529'. [ 144.813166][ T7570] FAULT_INJECTION: forcing a failure. [ 144.813166][ T7570] name failslab, interval 1, probability 0, space 0, times 0 [ 144.845098][ T7570] CPU: 0 UID: 0 PID: 7570 Comm: syz.0.540 Not tainted 6.15.0-rc5-syzkaller-01088-g664bf117a308 #0 PREEMPT(full) [ 144.845140][ T7570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.845151][ T7570] Call Trace: [ 144.845159][ T7570] [ 144.845168][ T7570] dump_stack_lvl+0x189/0x250 [ 144.845206][ T7570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.845233][ T7570] ? __pfx__printk+0x10/0x10 [ 144.845258][ T7570] ? __pfx___might_resched+0x10/0x10 [ 144.845274][ T7570] ? fs_reclaim_acquire+0x7d/0x100 [ 144.845308][ T7570] should_fail_ex+0x414/0x560 [ 144.845333][ T7570] should_failslab+0xa8/0x100 [ 144.845361][ T7570] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 144.845387][ T7570] ? __get_vm_area_node+0x131/0x2d0 [ 144.845417][ T7570] __get_vm_area_node+0x131/0x2d0 [ 144.845447][ T7570] __vmalloc_node_range_noprof+0x2f1/0x12c0 [ 144.845475][ T7570] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 144.845529][ T7570] ? aa_get_newest_label+0xf7/0x5d0 [ 144.845554][ T7570] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 144.845582][ T7570] ? _parse_integer_limit+0x1ae/0x1f0 [ 144.845606][ T7570] ? rcu_is_watching+0x15/0xb0 [ 144.845638][ T7570] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 144.845663][ T7570] __vmalloc_noprof+0x7a/0x90 [ 144.845690][ T7570] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 144.845717][ T7570] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 144.845748][ T7570] bpf_prog_alloc+0x3c/0x1a0 [ 144.845775][ T7570] bpf_prog_load+0x735/0x1930 [ 144.845808][ T7570] ? __lock_acquire+0xaac/0xd20 [ 144.845838][ T7570] ? __pfx_bpf_prog_load+0x10/0x10 [ 144.845886][ T7570] ? bpf_lsm_bpf+0x9/0x20 [ 144.845911][ T7570] ? security_bpf+0x7e/0x300 [ 144.845933][ T7570] __sys_bpf+0x5f1/0x860 [ 144.845960][ T7570] ? __pfx___sys_bpf+0x10/0x10 [ 144.845998][ T7570] ? ksys_write+0x1f0/0x250 [ 144.846020][ T7570] ? rcu_is_watching+0x15/0xb0 [ 144.846060][ T7570] __x64_sys_bpf+0x7c/0x90 [ 144.846083][ T7570] do_syscall_64+0xf6/0x210 [ 144.846112][ T7570] ? clear_bhb_loop+0x45/0xa0 [ 144.846137][ T7570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.846156][ T7570] RIP: 0033:0x7fba6058e969 [ 144.846174][ T7570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.846190][ T7570] RSP: 002b:00007fba613d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 144.846211][ T7570] RAX: ffffffffffffffda RBX: 00007fba607b6080 RCX: 00007fba6058e969 [ 144.846224][ T7570] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 144.846237][ T7570] RBP: 00007fba613d0090 R08: 0000000000000000 R09: 0000000000000000 [ 144.846249][ T7570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.846260][ T7570] R13: 0000000000000000 R14: 00007fba607b6080 R15: 00007fff9cd233f8 [ 144.846289][ T7570] [ 144.846479][ T7570] syz.0.540: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 144.899236][ T7571] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.541'. [ 144.918242][ T7570] ,cpuset= [ 144.933296][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.539'. [ 145.019310][ T7570] / [ 145.026351][ T7575] netlink: 36 bytes leftover after parsing attributes in process `syz.2.543'. [ 145.063376][ T7570] ,mems_allowed=0-1 [ 145.337314][ T7570] CPU: 1 UID: 0 PID: 7570 Comm: syz.0.540 Not tainted 6.15.0-rc5-syzkaller-01088-g664bf117a308 #0 PREEMPT(full) [ 145.337342][ T7570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.337354][ T7570] Call Trace: [ 145.337362][ T7570] [ 145.337370][ T7570] dump_stack_lvl+0x189/0x250 [ 145.337403][ T7570] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 145.337430][ T7570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.337457][ T7570] ? __pfx__printk+0x10/0x10 [ 145.337476][ T7570] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 145.337496][ T7570] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 145.337523][ T7570] warn_alloc+0x214/0x310 [ 145.337557][ T7570] ? __pfx_warn_alloc+0x10/0x10 [ 145.337595][ T7570] ? __get_vm_area_node+0x27f/0x2d0 [ 145.337626][ T7570] __vmalloc_node_range_noprof+0x316/0x12c0 [ 145.337678][ T7570] ? aa_get_newest_label+0xf7/0x5d0 [ 145.337702][ T7570] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 145.337729][ T7570] ? _parse_integer_limit+0x1ae/0x1f0 [ 145.337750][ T7570] ? rcu_is_watching+0x15/0xb0 [ 145.337780][ T7570] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 145.337805][ T7570] __vmalloc_noprof+0x7a/0x90 [ 145.337837][ T7570] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 145.337858][ T7570] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 145.337882][ T7570] bpf_prog_alloc+0x3c/0x1a0 [ 145.337904][ T7570] bpf_prog_load+0x735/0x1930 [ 145.337930][ T7570] ? __lock_acquire+0xaac/0xd20 [ 145.337953][ T7570] ? __pfx_bpf_prog_load+0x10/0x10 [ 145.337989][ T7570] ? bpf_lsm_bpf+0x9/0x20 [ 145.338009][ T7570] ? security_bpf+0x7e/0x300 [ 145.338026][ T7570] __sys_bpf+0x5f1/0x860 [ 145.338047][ T7570] ? __pfx___sys_bpf+0x10/0x10 [ 145.338077][ T7570] ? ksys_write+0x1f0/0x250 [ 145.338093][ T7570] ? rcu_is_watching+0x15/0xb0 [ 145.338124][ T7570] __x64_sys_bpf+0x7c/0x90 [ 145.338141][ T7570] do_syscall_64+0xf6/0x210 [ 145.338158][ T7570] ? clear_bhb_loop+0x45/0xa0 [ 145.338177][ T7570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.338192][ T7570] RIP: 0033:0x7fba6058e969 [ 145.338206][ T7570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.338218][ T7570] RSP: 002b:00007fba613d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 145.338235][ T7570] RAX: ffffffffffffffda RBX: 00007fba607b6080 RCX: 00007fba6058e969 [ 145.338246][ T7570] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 145.338255][ T7570] RBP: 00007fba613d0090 R08: 0000000000000000 R09: 0000000000000000 [ 145.338264][ T7570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.338273][ T7570] R13: 0000000000000000 R14: 00007fba607b6080 R15: 00007fff9cd233f8 [ 145.338295][ T7570] [ 145.338314][ T7570] Mem-Info: [ 145.630851][ T7570] active_anon:8169 inactive_anon:0 isolated_anon:0 [ 145.630851][ T7570] active_file:1463 inactive_file:39845 isolated_file:0 [ 145.630851][ T7570] unevictable:768 dirty:201 writeback:0 [ 145.630851][ T7570] slab_reclaimable:10108 slab_unreclaimable:100843 [ 145.630851][ T7570] mapped:32985 shmem:5146 pagetables:822 [ 145.630851][ T7570] sec_pagetables:0 bounce:0 [ 145.630851][ T7570] kernel_misc_reclaimable:0 [ 145.630851][ T7570] free:1334699 free_pcp:683 free_cma:0 [ 145.682331][ T7570] Node 0 active_anon:32776kB inactive_anon:0kB active_file:5852kB inactive_file:159180kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123540kB dirty:804kB writeback:0kB shmem:19048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10804kB pagetables:3288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 145.716115][ T7570] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 145.793893][ T7570] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 145.888798][ T7570] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 145.894647][ T7570] Node 0 DMA32 free:1415532kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:24828kB inactive_anon:0kB active_file:5852kB inactive_file:159084kB unevictable:1536kB writepending:724kB present:3129332kB managed:2564048kB mlocked:0kB bounce:0kB free_pcp:9940kB local_pcp:1040kB free_cma:0kB [ 145.942447][ T7570] lowmem_reserve[]: 0 0 0 0 0 [ 145.947580][ T7570] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 145.981731][ T7570] lowmem_reserve[]: 0 0 0 0 0 [ 146.008966][ T7570] Node 1 Normal free:3911576kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 146.070409][ T7570] lowmem_reserve[]: 0 0 0 0 0 [ 146.101797][ T7570] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 146.124294][ T7570] Node 0 DMA32: 770*4kB (UM) 318*8kB (UME) 188*16kB (UME) 284*32kB (UME) 151*64kB (UME) 36*128kB (UME) 16*256kB (UME) 12*512kB (UM) 6*1024kB (ME) 2*2048kB (M) 335*4096kB (M) = 1424632kB [ 146.153092][ T7604] netlink: 36 bytes leftover after parsing attributes in process `syz.4.554'. [ 146.175397][ T7570] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 146.204095][ T7607] SET target dimension over the limit! [ 146.225254][ T7570] Node 1 Normal: 222*4kB (UME) 48*8kB (UME) 44*16kB (UME) 225*32kB (UME) 95*64kB (UME) 30*128kB (UME) 17*256kB (UM) 8*512kB (UME) 3*1024kB (UM) 5*2048kB (U) 945*4096kB (M) = 3911576kB [ 146.276168][ T7570] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 146.285985][ T7570] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 146.291658][ T7613] netlink: 16 bytes leftover after parsing attributes in process `syz.4.556'. [ 146.296106][ T7570] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 146.305973][ T7611] block nbd3: NBD_DISCONNECT [ 146.314583][ T7570] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 146.323148][ T7611] block nbd3: Send disconnect failed -32 [ 146.333707][ T7570] 44453 total pagecache pages [ 146.333731][ T7570] 0 pages in swap cache [ 146.333741][ T7570] Free swap = 124996kB [ 146.347410][ T7570] Total swap = 124996kB [ 146.351689][ T7570] 2097051 pages RAM [ 146.355633][ T7570] 0 pages HighMem/MovableOnly [ 146.360656][ T7570] 424381 pages reserved [ 146.364914][ T7570] 0 pages cma reserved [ 146.388276][ T7611] block nbd3: shutting down sockets [ 146.456662][ T56] block nbd1: Receive control failed (result -104) [ 147.152460][ T7646] __nla_validate_parse: 2 callbacks suppressed [ 147.152480][ T7646] netlink: 36 bytes leftover after parsing attributes in process `syz.0.567'. [ 147.473194][ T7654] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.570'. [ 147.681979][ T7662] SET target dimension over the limit! [ 147.811284][ T56] block nbd3: Receive control failed (result -104) [ 148.107673][ T7682] netlink: 36 bytes leftover after parsing attributes in process `syz.4.579'. [ 148.758697][ T7707] Cannot find del_set index 0 as target [ 148.866045][ T7711] delete_channel: no stack [ 148.986029][ T7714] block nbd1: NBD_DISCONNECT [ 149.010104][ T7714] block nbd1: Send disconnect failed -32 [ 149.044345][ T7714] block nbd1: shutting down sockets [ 149.107533][ T56] block nbd4: Receive control failed (result -104) [ 149.330109][ T7732] tipc: Enabled bearer , priority 0 [ 149.445670][ T7738] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.608'. [ 149.765971][ T7725] tipc: Disabling bearer [ 150.126294][ T7765] netlink: 16 bytes leftover after parsing attributes in process `syz.4.610'. [ 150.308784][ T7771] netlink: 16 bytes leftover after parsing attributes in process `syz.2.613'. [ 150.702124][ T7783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.617'. [ 151.581899][ T7809] netlink: 16 bytes leftover after parsing attributes in process `syz.3.626'. [ 151.778361][ T7813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.629'. [ 151.855223][ T7819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.628'. [ 151.979392][ T7823] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 152.000374][ T7823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.657625][ T7844] netem: incorrect ge model size [ 152.663125][ T7844] netem: change failed [ 152.773580][ T7848] __nla_validate_parse: 1 callbacks suppressed [ 152.773598][ T7848] netlink: 16 bytes leftover after parsing attributes in process `syz.1.639'. [ 152.936197][ T7855] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 153.127265][ T7861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.644'. [ 153.158536][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 153.171431][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 153.187907][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 153.211666][ T7865] netlink: 16 bytes leftover after parsing attributes in process `syz.1.646'. [ 153.212026][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 153.230045][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 153.244035][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 153.256052][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 154.743820][ T1207] hid-generic 0005:04F3:0058.0001: unknown main item tag 0x0 [ 154.770654][ T1207] hid-generic 0005:04F3:0058.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 155.468146][ T7972] xt_hashlimit: size too large, truncated to 1048576 [ 156.450998][ T8011] SET target dimension over the limit! [ 156.552660][ T8020] block nbd3: NBD_DISCONNECT [ 156.600646][ T8020] block nbd3: Send disconnect failed -32 [ 156.627383][ T8020] block nbd3: shutting down sockets [ 156.654852][ T56] block nbd1: Receive control failed (result -104) [ 156.702500][ T8016] tipc: Enabled bearer , priority 0 [ 157.129714][ T8014] tipc: Disabling bearer [ 157.628601][ T8057] SET target dimension over the limit! [ 157.787271][ T8064] block nbd0: NBD_DISCONNECT [ 157.802863][ T8064] block nbd0: Send disconnect failed -32 [ 157.817291][ T8064] block nbd0: shutting down sockets [ 157.868168][ T56] block nbd3: Receive control failed (result -104) [ 157.895520][ T8071] __nla_validate_parse: 55 callbacks suppressed [ 157.895536][ T8071] netlink: 45 bytes leftover after parsing attributes in process `syz.1.721'. [ 158.097797][ T8081] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.726'. [ 158.228820][ T8091] delete_channel: no stack [ 158.542437][ T8106] Cannot find del_set index 0 as target [ 158.677714][ T8116] block nbd2: NBD_DISCONNECT [ 158.684149][ T8116] block nbd2: Send disconnect failed -32 [ 158.699968][ T8116] block nbd2: shutting down sockets [ 158.742155][ T8119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.740'. [ 158.761926][ T56] block nbd0: Receive control failed (result -104) [ 158.766538][ T8117] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.739'. [ 158.874093][ T8130] xt_TPROXY: Can be used only with -p tcp or -p udp [ 158.880741][ T8119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.011318][ T8136] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.744'. [ 159.025681][ T8125] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.071277][ T8125] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 159.089067][ T8125] bond1: (slave vcan1): Error -95 calling set_mac_address [ 159.230038][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 159.818505][ T8160] ksmbd: Unknown IPC event: 3, ignore. [ 159.837306][ T8161] SET target dimension over the limit! [ 159.976424][ T8161] block nbd0: NBD_DISCONNECT [ 159.981090][ T8161] block nbd0: Send disconnect failed -32 [ 159.993036][ T8161] block nbd0: shutting down sockets [ 160.009466][ T8173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.049484][ T56] block nbd2: Receive control failed (result -104) [ 160.113497][ T8177] netlink: 16 bytes leftover after parsing attributes in process `syz.4.757'. [ 160.162308][ T8173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.266099][ T8187] tipc: Enabling of bearer rejected, failed to enable media [ 160.430351][ T8191] batman_adv: batadv0: Adding interface: ip6gretap1 [ 160.449604][ T8191] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.713718][ T8191] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 161.007661][ T8215] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 161.093365][ T8220] netlink: 'syz.0.769': attribute type 72 has an invalid length. [ 161.381813][ T8239] FAULT_INJECTION: forcing a failure. [ 161.381813][ T8239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.396150][ T8239] CPU: 1 UID: 0 PID: 8239 Comm: syz.4.775 Not tainted 6.15.0-rc5-syzkaller-01088-g664bf117a308 #0 PREEMPT(full) [ 161.396175][ T8239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.396187][ T8239] Call Trace: [ 161.396194][ T8239] [ 161.396202][ T8239] dump_stack_lvl+0x189/0x250 [ 161.396232][ T8239] ? __lock_acquire+0xaac/0xd20 [ 161.396262][ T8239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.396289][ T8239] ? __pfx__printk+0x10/0x10 [ 161.396308][ T8239] ? __might_fault+0xb0/0x130 [ 161.396344][ T8239] should_fail_ex+0x414/0x560 [ 161.396368][ T8239] _copy_from_user+0x2d/0xb0 [ 161.396395][ T8239] ___sys_sendmsg+0x158/0x2a0 [ 161.396424][ T8239] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.396488][ T8239] ? __fget_files+0x2a/0x420 [ 161.396512][ T8239] ? __fget_files+0x3a0/0x420 [ 161.396547][ T8239] __x64_sys_sendmsg+0x19b/0x260 [ 161.396576][ T8239] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 161.396620][ T8239] ? do_syscall_64+0xba/0x210 [ 161.396644][ T8239] do_syscall_64+0xf6/0x210 [ 161.396665][ T8239] ? clear_bhb_loop+0x45/0xa0 [ 161.396694][ T8239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.396713][ T8239] RIP: 0033:0x7f308818e969 [ 161.396729][ T8239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.396744][ T8239] RSP: 002b:00007f3088ff9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.396763][ T8239] RAX: ffffffffffffffda RBX: 00007f30883b5fa0 RCX: 00007f308818e969 [ 161.396777][ T8239] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 161.396788][ T8239] RBP: 00007f3088ff9090 R08: 0000000000000000 R09: 0000000000000000 [ 161.396799][ T8239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.396810][ T8239] R13: 0000000000000000 R14: 00007f30883b5fa0 R15: 00007ffc90754458 [ 161.396840][ T8239] [ 161.986953][ T8236] tipc: Enabling of bearer rejected, failed to enable media [ 162.061878][ T8255] netlink: 24 bytes leftover after parsing attributes in process `syz.3.779'. [ 162.410563][ T8267] netlink: 'syz.2.782': attribute type 72 has an invalid length. [ 163.078175][ T8288] Cannot find del_set index 0 as target [ 163.225711][ T8294] block nbd1: NBD_DISCONNECT [ 163.231488][ T8294] block nbd1: Send disconnect failed -32 [ 163.237436][ T8294] block nbd1: shutting down sockets [ 163.326531][ T56] block nbd0: Receive control failed (result -104) [ 163.577552][ T8304] tipc: Enabled bearer , priority 0 [ 163.635509][ T8307] netlink: 'syz.2.795': attribute type 72 has an invalid length. [ 163.854183][ T8304] syzkaller0: entered promiscuous mode [ 163.867702][ T8304] syzkaller0: entered allmulticast mode [ 163.900544][ T8304] tipc: Resetting bearer [ 164.077531][ T8296] tipc: Resetting bearer [ 164.666259][ T8329] xt_CT: No such helper "snmp" [ 164.739606][ T8333] Cannot find del_set index 0 as target [ 164.914230][ T8338] block nbd2: NBD_DISCONNECT [ 164.919151][ T8338] block nbd2: Send disconnect failed -32 [ 164.929341][ T8338] block nbd2: shutting down sockets [ 164.980830][ T56] block nbd1: Receive control failed (result -104) [ 165.625822][ T8344] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.808'. [ 165.783095][ T8296] tipc: Disabling bearer [ 165.975434][ T8353] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.821'. [ 166.002825][ T8356] FAULT_INJECTION: forcing a failure. [ 166.002825][ T8356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.075086][ T8356] CPU: 1 UID: 0 PID: 8356 Comm: syz.1.810 Not tainted 6.15.0-rc5-syzkaller-01088-g664bf117a308 #0 PREEMPT(full) [ 166.075113][ T8356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.075124][ T8356] Call Trace: [ 166.075132][ T8356] [ 166.075139][ T8356] dump_stack_lvl+0x189/0x250 [ 166.075171][ T8356] ? __lock_acquire+0xaac/0xd20 [ 166.075200][ T8356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.075227][ T8356] ? __pfx__printk+0x10/0x10 [ 166.075246][ T8356] ? __might_fault+0xb0/0x130 [ 166.075281][ T8356] should_fail_ex+0x414/0x560 [ 166.075306][ T8356] _copy_from_user+0x2d/0xb0 [ 166.075334][ T8356] ___sys_sendmsg+0x158/0x2a0 [ 166.075365][ T8356] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.075428][ T8356] ? __fget_files+0x2a/0x420 [ 166.075452][ T8356] ? __fget_files+0x3a0/0x420 [ 166.075487][ T8356] __x64_sys_sendmsg+0x19b/0x260 [ 166.075516][ T8356] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 166.075560][ T8356] ? do_syscall_64+0xba/0x210 [ 166.075592][ T8356] do_syscall_64+0xf6/0x210 [ 166.075613][ T8356] ? clear_bhb_loop+0x45/0xa0 [ 166.075637][ T8356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.075654][ T8356] RIP: 0033:0x7ff31258e969 [ 166.075671][ T8356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.075686][ T8356] RSP: 002b:00007ff313440038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.075706][ T8356] RAX: ffffffffffffffda RBX: 00007ff3127b6080 RCX: 00007ff31258e969 [ 166.075719][ T8356] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 166.075730][ T8356] RBP: 00007ff313440090 R08: 0000000000000000 R09: 0000000000000000 [ 166.075741][ T8356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.075752][ T8356] R13: 0000000000000000 R14: 00007ff3127b6080 R15: 00007ffe2361a028 [ 166.075781][ T8356] [ 166.395596][ T8364] netlink: 'syz.0.812': attribute type 10 has an invalid length. [ 166.467018][ T8364] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 166.524887][ T30] audit: type=1800 audit(1747259746.372:4): pid=8373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.817" name="memory.events" dev="tmpfs" ino=906 res=0 errno=0 [ 166.550530][ T8373] netlink: 'syz.1.817': attribute type 1 has an invalid length. [ 166.623835][ T30] audit: type=1804 audit(1747259746.402:5): pid=8373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.817" name="memory.events" dev="tmpfs" ino=906 res=1 errno=0 [ 166.665725][ T8373] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.714056][ T8375] bond2: (slave gretap1): making interface the new active one [ 166.723428][ T8375] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 166.912228][ T8373] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.108371][ T8373] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.155505][ T8384] xt_CT: No such helper "snmp" [ 167.262995][ T8373] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.353205][ T8396] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.825'. [ 167.412443][ T8373] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.506024][ T8389] tipc: Enabled bearer , priority 0 [ 167.552758][ T8375] syz.1.817 (8375) used greatest stack depth: 19072 bytes left [ 167.782868][ T8389] syzkaller0: entered promiscuous mode [ 167.790613][ T8389] syzkaller0: entered allmulticast mode [ 167.798478][ T8389] tipc: Resetting bearer [ 167.812787][ T8388] tipc: Resetting bearer [ 167.932300][ T8403] netlink: 'syz.2.828': attribute type 9 has an invalid length. [ 167.948048][ T8403] netlink: 212160 bytes leftover after parsing attributes in process `syz.2.828'. [ 168.871821][ T8420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.831'. [ 169.412761][ T8388] tipc: Disabling bearer [ 169.484209][ T8373] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.599826][ T8373] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.653725][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.833'. [ 169.661808][ T8373] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.706903][ T8373] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.728224][ T8434] tap0: tun_chr_ioctl cmd 1074025677 [ 169.733897][ T8434] tap0: linktype set to 778 [ 169.941391][ T8441] xt_CT: No such helper "snmp" [ 170.069007][ T8456] netlink: 'syz.1.840': attribute type 10 has an invalid length. [ 170.100656][ T8456] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 170.594383][ T8470] tipc: Enabled bearer , priority 0 [ 170.746292][ T8467] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 170.818422][ T8467] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€ [ 170.893721][ T8461] syzkaller0: entered promiscuous mode [ 171.007227][ T8461] syzkaller0: entered allmulticast mode [ 171.013536][ T8461] tipc: Resetting bearer [ 171.219422][ T8460] tipc: Resetting bearer [ 172.826335][ T8511] xt_CT: No such helper "snmp" [ 172.841950][ T8460] tipc: Disabling bearer [ 173.153771][ T8526] tipc: Enabled bearer , priority 0 [ 173.340947][ T8526] syzkaller0: entered promiscuous mode [ 173.361589][ T8526] syzkaller0: entered allmulticast mode [ 173.371675][ T8526] tipc: Resetting bearer [ 173.491817][ T8519] tipc: Resetting bearer [ 175.191592][ T8519] tipc: Disabling bearer [ 175.224309][ T8550] tipc: Enabled bearer , priority 0 [ 175.372968][ T8551] syzkaller0: entered promiscuous mode [ 175.413844][ T8551] syzkaller0: entered allmulticast mode [ 175.429512][ T8551] tipc: Resetting bearer [ 175.490503][ T12] tipc: Resetting bearer [ 175.517510][ T8549] tipc: Resetting bearer [ 176.562140][ T8549] tipc: Disabling bearer [ 176.581095][ T8566] netlink: 'syz.4.873': attribute type 322 has an invalid length. [ 176.742017][ T8582] SET target dimension over the limit! [ 176.842632][ T5830] Bluetooth: hci4: link tx timeout [ 176.848260][ T5830] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 176.857362][ T5830] Bluetooth: hci4: link tx timeout [ 176.862509][ T5830] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 176.876601][ T8586] netlink: 'syz.3.881': attribute type 3 has an invalid length. [ 176.906298][ T8586] netlink: 'syz.3.881': attribute type 1 has an invalid length. [ 176.918109][ T8595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.879'. [ 176.929114][ T8586] netlink: 220 bytes leftover after parsing attributes in process `syz.3.881'. [ 176.938955][ T8595] netlink: 36 bytes leftover after parsing attributes in process `syz.1.879'. [ 176.939964][ T8590] block nbd0: NBD_DISCONNECT [ 176.967062][ T8590] block nbd0: Send disconnect failed -32 [ 176.975983][ T8590] block nbd0: shutting down sockets [ 177.008773][ T8595] vlan2: entered allmulticast mode [ 177.014080][ T8595] syz_tun: entered allmulticast mode [ 177.027747][ T56] block nbd2: Receive control failed (result -104) [ 177.223304][ T8605] tipc: Enabled bearer , priority 0 [ 177.407297][ T8608] FAULT_INJECTION: forcing a failure. [ 177.407297][ T8608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.408333][ T8608] [ 177.408341][ T8608] ====================================================== [ 177.408348][ T8608] WARNING: possible circular locking dependency detected [ 177.408359][ T8608] 6.15.0-rc5-syzkaller-01088-g664bf117a308 #0 Not tainted [ 177.408369][ T8608] ------------------------------------------------------ [ 177.408376][ T8608] syz.4.884/8608 is trying to acquire lock: [ 177.408385][ T8608] ffffffff8df2fa20 (console_owner){-...}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 177.408431][ T8608] [ 177.408431][ T8608] but task is already holding lock: [ 177.408436][ T8608] ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 177.408481][ T8608] [ 177.408481][ T8608] which lock already depends on the new lock. [ 177.408481][ T8608] [ 177.408487][ T8608] [ 177.408487][ T8608] the existing dependency chain (in reverse order) is: [ 177.408494][ T8608] [ 177.408494][ T8608] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 177.408516][ T8608] lock_acquire+0x120/0x360 [ 177.408539][ T8608] _raw_spin_lock_nested+0x32/0x50 [ 177.408554][ T8608] raw_spin_rq_lock_nested+0x2a/0x140 [ 177.408578][ T8608] task_rq_lock+0xbc/0x470 [ 177.408601][ T8608] cgroup_move_task+0x9a/0x590 [ 177.408635][ T8608] css_set_move_task+0x658/0x9e0 [ 177.408651][ T8608] cgroup_post_fork+0x1ef/0x790 [ 177.408666][ T8608] copy_process+0x37e6/0x3b80 [ 177.408683][ T8608] kernel_clone+0x21e/0x870 [ 177.408700][ T8608] user_mode_thread+0xdd/0x140 [ 177.408718][ T8608] rest_init+0x23/0x300 [ 177.408738][ T8608] start_kernel+0x470/0x4f0 [ 177.408770][ T8608] x86_64_start_reservations+0x2a/0x30 [ 177.408790][ T8608] x86_64_start_kernel+0x66/0x70 [ 177.408808][ T8608] common_startup_64+0x13e/0x147 [ 177.408834][ T8608] [ 177.408834][ T8608] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 177.408859][ T8608] lock_acquire+0x120/0x360 [ 177.408881][ T8608] _raw_spin_lock_irqsave+0xa7/0xf0 [ 177.408907][ T8608] try_to_wake_up+0x6e/0x1290 [ 177.408926][ T8608] create_worker+0x503/0x720 [ 177.408948][ T8608] workqueue_init+0x503/0x8a0 [ 177.408964][ T8608] kernel_init_freeable+0x3a7/0x570 [ 177.408979][ T8608] kernel_init+0x1d/0x1d0 [ 177.408999][ T8608] ret_from_fork+0x4b/0x80 [ 177.409028][ T8608] ret_from_fork_asm+0x1a/0x30 [ 177.409043][ T8608] [ 177.409043][ T8608] -> #3 (&pool->lock){-.-.}-{2:2}: [ 177.409066][ T8608] lock_acquire+0x120/0x360 [ 177.409105][ T8608] _raw_spin_lock+0x2e/0x40 [ 177.409128][ T8608] __queue_work+0x7b0/0xfe0 [ 177.409144][ T8608] queue_work_on+0x181/0x270 [ 177.409159][ T8608] rpm_suspend+0xe54/0x1720 [ 177.409177][ T8608] __pm_runtime_idle+0x12f/0x1a0 [ 177.409194][ T8608] __device_attach+0x342/0x400 [ 177.409214][ T8608] bus_probe_device+0x185/0x260 [ 177.409229][ T8608] device_add+0x7b6/0xb50 [ 177.409247][ T8608] serial_base_port_add+0x2f2/0x430 [ 177.409269][ T8608] serial_core_register_port+0x367/0x2700 [ 177.409285][ T8608] serial8250_register_8250_port+0x16dc/0x2050 [ 177.409312][ T8608] serial_pnp_probe+0x527/0x790 [ 177.409326][ T8608] pnp_device_probe+0x308/0x4c0 [ 177.409341][ T8608] really_probe+0x26a/0x9a0 [ 177.409363][ T8608] __driver_probe_device+0x18c/0x2f0 [ 177.409384][ T8608] driver_probe_device+0x4f/0x430 [ 177.409406][ T8608] __driver_attach+0x452/0x700 [ 177.409426][ T8608] bus_for_each_dev+0x230/0x2b0 [ 177.409441][ T8608] bus_add_driver+0x345/0x640 [ 177.409455][ T8608] driver_register+0x23a/0x320 [ 177.409478][ T8608] serial8250_init+0xc2/0x1c0 [ 177.409503][ T8608] do_one_initcall+0x233/0x820 [ 177.409517][ T8608] do_initcall_level+0x137/0x1f0 [ 177.409529][ T8608] do_initcalls+0x69/0xd0 [ 177.409543][ T8608] kernel_init_freeable+0x3d9/0x570 [ 177.409557][ T8608] kernel_init+0x1d/0x1d0 [ 177.409577][ T8608] ret_from_fork+0x4b/0x80 [ 177.409594][ T8608] ret_from_fork_asm+0x1a/0x30 [ 177.409609][ T8608] [ 177.409609][ T8608] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 177.409633][ T8608] lock_acquire+0x120/0x360 [ 177.409656][ T8608] _raw_spin_lock_irqsave+0xa7/0xf0 [ 177.409681][ T8608] __pm_runtime_resume+0x10f/0x180 [ 177.409699][ T8608] __uart_start+0x171/0x440 [ 177.409714][ T8608] uart_write+0x278/0xa40 [ 177.409729][ T8608] n_tty_write+0xd32/0x11d0 [ 177.409750][ T8608] file_tty_write+0x4fe/0x990 [ 177.409775][ T8608] vfs_write+0x548/0xa90 [ 177.409794][ T8608] ksys_write+0x145/0x250 [ 177.409822][ T8608] do_syscall_64+0xf6/0x210 [ 177.409838][ T8608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.409854][ T8608] [ 177.409854][ T8608] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 177.409877][ T8608] lock_acquire+0x120/0x360 [ 177.409898][ T8608] _raw_spin_lock_irqsave+0xa7/0xf0 [ 177.409939][ T8608] serial8250_console_write+0x17e/0x1ba0 [ 177.409958][ T8608] console_flush_all+0x728/0xc40 [ 177.409976][ T8608] console_unlock+0xc4/0x270 [ 177.409991][ T8608] vprintk_emit+0x5b7/0x7a0 [ 177.410005][ T8608] _printk+0xcf/0x120 [ 177.410020][ T8608] register_console+0xa8b/0xf90 [ 177.410038][ T8608] univ8250_console_init+0x52/0x90 [ 177.410063][ T8608] console_init+0x1a1/0x670 [ 177.410076][ T8608] start_kernel+0x2cb/0x4f0 [ 177.410101][ T8608] x86_64_start_reservations+0x2a/0x30 [ 177.410120][ T8608] x86_64_start_kernel+0x66/0x70 [ 177.410139][ T8608] common_startup_64+0x13e/0x147 [ 177.410164][ T8608] [ 177.410164][ T8608] -> #0 (console_owner){-...}-{0:0}: [ 177.410188][ T8608] validate_chain+0xb9b/0x2140 [ 177.410203][ T8608] __lock_acquire+0xaac/0xd20 [ 177.410226][ T8608] lock_acquire+0x120/0x360 [ 177.410248][ T8608] console_flush_all+0x6d2/0xc40 [ 177.410266][ T8608] console_unlock+0xc4/0x270 [ 177.410280][ T8608] vprintk_emit+0x5b7/0x7a0 [ 177.410295][ T8608] _printk+0xcf/0x120 [ 177.410309][ T8608] should_fail_ex+0x3f5/0x560 [ 177.410324][ T8608] strncpy_from_user+0x36/0x290 [ 177.410362][ T8608] strncpy_from_user_nofault+0x72/0x140 [ 177.410380][ T8608] bpf_probe_read_user_str+0x2a/0x70 [ 177.410403][ T8608] bpf_prog_0e924c91f9a1f0e4+0x40/0x68 [ 177.410416][ T8608] bpf_trace_run2+0x281/0x4b0 [ 177.410431][ T8608] __bpf_trace_tlb_flush+0xf5/0x150 [ 177.410453][ T8608] trace_tlb_flush+0x115/0x140 [ 177.410492][ T8608] switch_mm_irqs_off+0x4fc/0x810 [ 177.410514][ T8608] __schedule+0x105c/0x4cd0 [ 177.410540][ T8608] preempt_schedule_irq+0xb5/0x150 [ 177.410576][ T8608] irqentry_exit+0x6f/0x90 [ 177.410590][ T8608] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 177.410606][ T8608] unwind_next_frame+0x180c/0x2390 [ 177.410626][ T8608] arch_stack_walk+0x11c/0x150 [ 177.410645][ T8608] stack_trace_save+0x9c/0xe0 [ 177.410661][ T8608] save_stack+0xf7/0x1f0 [ 177.410680][ T8608] __reset_page_owner+0x71/0x1f0 [ 177.410697][ T8608] __free_frozen_pages+0xb14/0xce0 [ 177.410720][ T8608] __put_partials+0x161/0x1c0 [ 177.410742][ T8608] put_cpu_partial+0x17c/0x250 [ 177.410755][ T8608] __slab_free+0x2f7/0x400 [ 177.410777][ T8608] qlist_free_all+0x9a/0x140 [ 177.410793][ T8608] kasan_quarantine_reduce+0x148/0x160 [ 177.410810][ T8608] __kasan_slab_alloc+0x22/0x80 [ 177.410828][ T8608] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 177.410848][ T8608] __alloc_skb+0x112/0x2d0 [ 177.410867][ T8608] netlink_sendmsg+0x5c6/0xb30 [ 177.410888][ T8608] __sock_sendmsg+0x219/0x270 [ 177.410903][ T8608] ____sys_sendmsg+0x505/0x830 [ 177.410924][ T8608] ___sys_sendmsg+0x21f/0x2a0 [ 177.410945][ T8608] __x64_sys_sendmsg+0x19b/0x260 [ 177.410967][ T8608] do_syscall_64+0xf6/0x210 [ 177.411000][ T8608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.411016][ T8608] [ 177.411016][ T8608] other info that might help us debug this: [ 177.411016][ T8608] [ 177.411022][ T8608] Chain exists of: [ 177.411022][ T8608] console_owner --> &p->pi_lock --> &rq->__lock [ 177.411022][ T8608] [ 177.411054][ T8608] Possible unsafe locking scenario: [ 177.411054][ T8608] [ 177.411059][ T8608] CPU0 CPU1 [ 177.411065][ T8608] ---- ---- [ 177.411070][ T8608] lock(&rq->__lock); [ 177.411082][ T8608] lock(&p->pi_lock); [ 177.411095][ T8608] lock(&rq->__lock); [ 177.411107][ T8608] lock(console_owner); [ 177.411119][ T8608] [ 177.411119][ T8608] *** DEADLOCK *** [ 177.411119][ T8608] [ 177.411124][ T8608] 6 locks held by syz.4.884/8608: [ 177.411135][ T8608] #0: ffffffff8e05a730 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 177.411179][ T8608] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390 [ 177.411226][ T8608] #2: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 177.411277][ T8608] #3: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0 [ 177.411320][ T8608] #4: ffffffff8df2fa80 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 177.411365][ T8608] #5: ffffffff8de17350 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 177.411439][ T8608] [ 177.411439][ T8608] stack backtrace: [ 177.411448][ T8608] CPU: 0 UID: 0 PID: 8608 Comm: syz.4.884 Not tainted 6.15.0-rc5-syzkaller-01088-g664bf117a308 #0 PREEMPT(full) [ 177.411471][ T8608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.411482][ T8608] Call Trace: [ 177.411489][ T8608] [ 177.411497][ T8608] dump_stack_lvl+0x189/0x250 [ 177.411527][ T8608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.411555][ T8608] ? __pfx__printk+0x10/0x10 [ 177.411575][ T8608] ? print_lock_name+0xde/0x100 [ 177.411595][ T8608] print_circular_bug+0x2ee/0x310 [ 177.411617][ T8608] check_noncircular+0x134/0x160 [ 177.411640][ T8608] validate_chain+0xb9b/0x2140 [ 177.411671][ T8608] __lock_acquire+0xaac/0xd20 [ 177.411700][ T8608] ? console_flush_all+0x13a/0xc40 [ 177.411719][ T8608] lock_acquire+0x120/0x360 [ 177.411745][ T8608] ? console_flush_all+0x13a/0xc40 [ 177.411777][ T8608] ? do_raw_spin_unlock+0x122/0x240 [ 177.411799][ T8608] ? console_flush_all+0x13a/0xc40 [ 177.411821][ T8608] console_flush_all+0x6d2/0xc40 [ 177.411840][ T8608] ? console_flush_all+0x13a/0xc40 [ 177.411862][ T8608] ? console_flush_all+0x13a/0xc40 [ 177.411886][ T8608] ? __pfx_console_flush_all+0x10/0x10 [ 177.411908][ T8608] ? __lock_acquire+0xaac/0xd20 [ 177.411937][ T8608] ? is_printk_cpu_sync_owner+0x32/0x40 [ 177.411963][ T8608] console_unlock+0xc4/0x270 [ 177.411982][ T8608] ? __pfx_console_unlock+0x10/0x10 [ 177.412002][ T8608] ? is_printk_cpu_sync_owner+0x32/0x40 [ 177.412029][ T8608] vprintk_emit+0x5b7/0x7a0 [ 177.412048][ T8608] ? __pfx_vprintk_emit+0x10/0x10 [ 177.412066][ T8608] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 177.412088][ T8608] ? exc_page_fault+0x46/0x110 [ 177.412110][ T8608] _printk+0xcf/0x120 [ 177.412131][ T8608] ? __pfx__printk+0x10/0x10 [ 177.412150][ T8608] ? strncpy_from_user+0x24e/0x290 [ 177.412180][ T8608] ? strncpy_from_user+0x257/0x290 [ 177.412212][ T8608] should_fail_ex+0x3f5/0x560 [ 177.412232][ T8608] strncpy_from_user+0x36/0x290 [ 177.412264][ T8608] strncpy_from_user_nofault+0x72/0x140 [ 177.412287][ T8608] bpf_probe_read_user_str+0x2a/0x70 [ 177.412316][ T8608] bpf_prog_0e924c91f9a1f0e4+0x40/0x68 [ 177.412332][ T8608] bpf_trace_run2+0x281/0x4b0 [ 177.412351][ T8608] ? save_fpregs_to_fpstate+0xa3/0x210 [ 177.412378][ T8608] ? bpf_trace_run2+0x186/0x4b0 [ 177.412400][ T8608] ? __pfx_bpf_trace_run2+0x10/0x10 [ 177.412422][ T8608] ? kvm_sched_clock_read+0x11/0x20 [ 177.412468][ T8608] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 177.412496][ T8608] __bpf_trace_tlb_flush+0xf5/0x150 [ 177.412522][ T8608] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 177.412549][ T8608] ? psi_group_change+0xbc7/0x1210 [ 177.412568][ T8608] ? rcu_read_lock_sched_held+0x89/0x100 [ 177.412600][ T8608] trace_tlb_flush+0x115/0x140 [ 177.412626][ T8608] switch_mm_irqs_off+0x4fc/0x810 [ 177.412655][ T8608] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 177.412681][ T8608] ? psi_task_switch+0x318/0x6d0 [ 177.412703][ T8608] __schedule+0x105c/0x4cd0 [ 177.412732][ T8608] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 177.412799][ T8608] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 177.412834][ T8608] ? preempt_schedule_irq+0xb5/0x150 [ 177.412866][ T8608] ? __pfx___schedule+0x10/0x10 [ 177.412903][ T8608] ? preempt_schedule_irq+0xaa/0x150 [ 177.412934][ T8608] preempt_schedule_irq+0xb5/0x150 [ 177.412964][ T8608] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 177.412999][ T8608] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 177.413030][ T8608] irqentry_exit+0x6f/0x90 [ 177.413047][ T8608] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 177.413067][ T8608] RIP: 0010:unwind_next_frame+0x180c/0x2390 [ 177.413092][ T8608] Code: 85 f4 08 00 00 b3 01 8b 84 24 84 00 00 00 41 39 06 4c 8b 7c 24 48 48 8b 7c 24 70 0f 85 54 01 00 00 48 8b 44 24 58 80 3c 28 00 <74> 05 e8 fd 03 b0 00 4d 8b 66 38 49 8d 7e 08 48 89 f8 48 c1 e8 03 [ 177.413107][ T8608] RSP: 0018:ffffc9001b6c7278 EFLAGS: 00000246 [ 177.413125][ T8608] RAX: 1ffff920036d8e70 RBX: ffffffff90924901 RCX: 0000000000000001 [ 177.413139][ T8608] RDX: ffffc9001b6c7388 RSI: dffffc0000000000 RDI: ffffc9001b6c7380 [ 177.413153][ T8608] RBP: dffffc0000000000 R08: ffffc9001b6c78d0 R09: 0000000000000000 [ 177.413166][ T8608] R10: ffffc9001b6c7398 R11: fffff520036d8e75 R12: ffffc9001b6c78d0 [ 177.413180][ T8608] R13: ffffc9001b6c7398 R14: ffffc9001b6c7348 R15: ffffffff8171a9f5 [ 177.413194][ T8608] ? unwind_next_frame+0xa5/0x2390 [ 177.413225][ T8608] ? unwind_next_frame+0x17c4/0x2390 [ 177.413251][ T8608] ? unwind_next_frame+0xa5/0x2390 [ 177.413274][ T8608] ? __alloc_skb+0x112/0x2d0 [ 177.413299][ T8608] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 177.413321][ T8608] arch_stack_walk+0x11c/0x150 [ 177.413348][ T8608] ? netlink_sendmsg+0x5c6/0xb30 [ 177.413375][ T8608] stack_trace_save+0x9c/0xe0 [ 177.413395][ T8608] ? __pfx_stack_trace_save+0x10/0x10 [ 177.413420][ T8608] save_stack+0xf7/0x1f0 [ 177.413444][ T8608] ? __pfx_save_stack+0x10/0x10 [ 177.413465][ T8608] ? __free_frozen_pages+0xb14/0xce0 [ 177.413491][ T8608] ? __put_partials+0x161/0x1c0 [ 177.413517][ T8608] ? put_cpu_partial+0x17c/0x250 [ 177.413532][ T8608] ? __slab_free+0x2f7/0x400 [ 177.413548][ T8608] ? qlist_free_all+0x9a/0x140 [ 177.413566][ T8608] ? kasan_quarantine_reduce+0x148/0x160 [ 177.413586][ T8608] ? __kasan_slab_alloc+0x22/0x80 [ 177.413608][ T8608] ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 177.413631][ T8608] ? __alloc_skb+0x112/0x2d0 [ 177.413658][ T8608] ? page_ext_put+0x97/0xc0 [ 177.413685][ T8608] __reset_page_owner+0x71/0x1f0 [ 177.413709][ T8608] __free_frozen_pages+0xb14/0xce0 [ 177.413740][ T8608] __put_partials+0x161/0x1c0 [ 177.413777][ T8608] put_cpu_partial+0x17c/0x250 [ 177.413794][ T8608] ? put_cpu_partial+0x6d/0x250 [ 177.413812][ T8608] __slab_free+0x2f7/0x400 [ 177.413831][ T8608] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 177.413859][ T8608] ? __phys_addr+0xba/0x170 [ 177.413885][ T8608] qlist_free_all+0x9a/0x140 [ 177.413907][ T8608] kasan_quarantine_reduce+0x148/0x160 [ 177.413929][ T8608] __kasan_slab_alloc+0x22/0x80 [ 177.413952][ T8608] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 177.413988][ T8608] ? __alloc_skb+0x112/0x2d0 [ 177.414012][ T8608] __alloc_skb+0x112/0x2d0 [ 177.414036][ T8608] netlink_sendmsg+0x5c6/0xb30 [ 177.414065][ T8608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.414090][ T8608] ? aa_sock_msg_perm+0x94/0x160 [ 177.414111][ T8608] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 177.414132][ T8608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.414156][ T8608] __sock_sendmsg+0x219/0x270 [ 177.414176][ T8608] ____sys_sendmsg+0x505/0x830 [ 177.414204][ T8608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.414235][ T8608] ? import_iovec+0x74/0xa0 [ 177.414263][ T8608] ___sys_sendmsg+0x21f/0x2a0 [ 177.414289][ T8608] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.414333][ T8608] ? __fget_files+0x2a/0x420 [ 177.414356][ T8608] ? __fget_files+0x3a0/0x420 [ 177.414385][ T8608] __x64_sys_sendmsg+0x19b/0x260 [ 177.414412][ T8608] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.414446][ T8608] ? do_syscall_64+0xba/0x210 [ 177.414467][ T8608] do_syscall_64+0xf6/0x210 [ 177.414487][ T8608] ? clear_bhb_loop+0x45/0xa0 [ 177.414507][ T8608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.414525][ T8608] RIP: 0033:0x7f308818e969 [ 177.414539][ T8608] Code: Unable to access opcode bytes at 0x7f308818e93f. [ 177.414549][ T8608] RSP: 002b:00007f3088ff9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.414567][ T8608] RAX: ffffffffffffffda RBX: 00007f30883b5fa0 RCX: 00007f308818e969 [ 177.414580][ T8608] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 177.414591][ T8608] RBP: 00007f3088ff9090 R08: 0000000000000000 R09: 0000000000000000 [ 177.414601][ T8608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.414612][ T8608] R13: 0000000000000000 R14: 00007f30883b5fa0 R15: 00007ffc90754458 [ 177.414632][ T8608] [ 179.057265][ T8608] CPU: 0 UID: 0 PID: 8608 Comm: syz.4.884 Not tainted 6.15.0-rc5-syzkaller-01088-g664bf117a308 #0 PREEMPT(full) [ 179.057285][ T8608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 179.057294][ T8608] Call Trace: [ 179.057302][ T8608] [ 179.057310][ T8608] dump_stack_lvl+0x189/0x250 [ 179.057336][ T8608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.057356][ T8608] ? __pfx__printk+0x10/0x10 [ 179.057369][ T8608] ? strncpy_from_user+0x24e/0x290 [ 179.057391][ T8608] ? strncpy_from_user+0x257/0x290 [ 179.057413][ T8608] should_fail_ex+0x414/0x560 [ 179.057428][ T8608] strncpy_from_user+0x36/0x290 [ 179.057456][ T8608] strncpy_from_user_nofault+0x72/0x140 [ 179.057473][ T8608] bpf_probe_read_user_str+0x2a/0x70 [ 179.057493][ T8608] bpf_prog_0e924c91f9a1f0e4+0x40/0x68 [ 179.057505][ T8608] bpf_trace_run2+0x281/0x4b0 [ 179.057518][ T8608] ? save_fpregs_to_fpstate+0xa3/0x210 [ 179.057537][ T8608] ? bpf_trace_run2+0x186/0x4b0 [ 179.057551][ T8608] ? __pfx_bpf_trace_run2+0x10/0x10 [ 179.057566][ T8608] ? kvm_sched_clock_read+0x11/0x20 [ 179.057586][ T8608] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 179.057606][ T8608] __bpf_trace_tlb_flush+0xf5/0x150 [ 179.057624][ T8608] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 179.057644][ T8608] ? psi_group_change+0xbc7/0x1210 [ 179.057657][ T8608] ? rcu_read_lock_sched_held+0x89/0x100 [ 179.057679][ T8608] trace_tlb_flush+0x115/0x140 [ 179.057697][ T8608] switch_mm_irqs_off+0x4fc/0x810 [ 179.057717][ T8608] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 179.057734][ T8608] ? psi_task_switch+0x318/0x6d0 [ 179.057750][ T8608] __schedule+0x105c/0x4cd0 [ 179.057770][ T8608] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 179.057791][ T8608] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 179.057813][ T8608] ? preempt_schedule_irq+0xb5/0x150 [ 179.057835][ T8608] ? __pfx___schedule+0x10/0x10 [ 179.057860][ T8608] ? preempt_schedule_irq+0xaa/0x150 [ 179.057881][ T8608] preempt_schedule_irq+0xb5/0x150 [ 179.057913][ T8608] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 179.057936][ T8608] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 179.057956][ T8608] irqentry_exit+0x6f/0x90 [ 179.057967][ T8608] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 179.058000][ T8608] RIP: 0010:unwind_next_frame+0x180c/0x2390 [ 179.058017][ T8608] Code: 85 f4 08 00 00 b3 01 8b 84 24 84 00 00 00 41 39 06 4c 8b 7c 24 48 48 8b 7c 24 70 0f 85 54 01 00 00 48 8b 44 24 58 80 3c 28 00 <74> 05 e8 fd 03 b0 00 4d 8b 66 38 49 8d 7e 08 48 89 f8 48 c1 e8 03 [ 179.058029][ T8608] RSP: 0018:ffffc9001b6c7278 EFLAGS: 00000246 [ 179.058041][ T8608] RAX: 1ffff920036d8e70 RBX: ffffffff90924901 RCX: 0000000000000001 [ 179.058051][ T8608] RDX: ffffc9001b6c7388 RSI: dffffc0000000000 RDI: ffffc9001b6c7380 [ 179.058061][ T8608] RBP: dffffc0000000000 R08: ffffc9001b6c78d0 R09: 0000000000000000 [ 179.058070][ T8608] R10: ffffc9001b6c7398 R11: fffff520036d8e75 R12: ffffc9001b6c78d0 [ 179.058080][ T8608] R13: ffffc9001b6c7398 R14: ffffc9001b6c7348 R15: ffffffff8171a9f5 [ 179.058090][ T8608] ? unwind_next_frame+0xa5/0x2390 [ 179.058112][ T8608] ? unwind_next_frame+0x17c4/0x2390 [ 179.058130][ T8608] ? unwind_next_frame+0xa5/0x2390 [ 179.058145][ T8608] ? __alloc_skb+0x112/0x2d0 [ 179.058164][ T8608] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 179.058179][ T8608] arch_stack_walk+0x11c/0x150 [ 179.058198][ T8608] ? netlink_sendmsg+0x5c6/0xb30 [ 179.058217][ T8608] stack_trace_save+0x9c/0xe0 [ 179.058230][ T8608] ? __pfx_stack_trace_save+0x10/0x10 [ 179.058248][ T8608] save_stack+0xf7/0x1f0 [ 179.058264][ T8608] ? __pfx_save_stack+0x10/0x10 [ 179.058279][ T8608] ? __free_frozen_pages+0xb14/0xce0 [ 179.058297][ T8608] ? __put_partials+0x161/0x1c0 [ 179.058315][ T8608] ? put_cpu_partial+0x17c/0x250 [ 179.058325][ T8608] ? __slab_free+0x2f7/0x400 [ 179.058336][ T8608] ? qlist_free_all+0x9a/0x140 [ 179.058348][ T8608] ? kasan_quarantine_reduce+0x148/0x160 [ 179.058362][ T8608] ? __kasan_slab_alloc+0x22/0x80 [ 179.058376][ T8608] ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 179.058392][ T8608] ? __alloc_skb+0x112/0x2d0 [ 179.058411][ T8608] ? page_ext_put+0x97/0xc0 [ 179.058429][ T8608] __reset_page_owner+0x71/0x1f0 [ 179.058445][ T8608] __free_frozen_pages+0xb14/0xce0 [ 179.058472][ T8608] __put_partials+0x161/0x1c0 [ 179.058493][ T8608] put_cpu_partial+0x17c/0x250 [ 179.058504][ T8608] ? put_cpu_partial+0x6d/0x250 [ 179.058529][ T8608] __slab_free+0x2f7/0x400 [ 179.058541][ T8608] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 179.058559][ T8608] ? __phys_addr+0xba/0x170 [ 179.058575][ T8608] qlist_free_all+0x9a/0x140 [ 179.058590][ T8608] kasan_quarantine_reduce+0x148/0x160 [ 179.058604][ T8608] __kasan_slab_alloc+0x22/0x80 [ 179.058619][ T8608] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 179.058635][ T8608] ? __alloc_skb+0x112/0x2d0 [ 179.058651][ T8608] __alloc_skb+0x112/0x2d0 [ 179.058668][ T8608] netlink_sendmsg+0x5c6/0xb30 [ 179.058687][ T8608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.058704][ T8608] ? aa_sock_msg_perm+0x94/0x160 [ 179.058718][ T8608] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 179.058732][ T8608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.058748][ T8608] __sock_sendmsg+0x219/0x270 [ 179.058761][ T8608] ____sys_sendmsg+0x505/0x830 [ 179.058781][ T8608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.058801][ T8608] ? import_iovec+0x74/0xa0 [ 179.058818][ T8608] ___sys_sendmsg+0x21f/0x2a0 [ 179.058836][ T8608] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.058866][ T8608] ? __fget_files+0x2a/0x420 [ 179.058881][ T8608] ? __fget_files+0x3a0/0x420 [ 179.058900][ T8608] __x64_sys_sendmsg+0x19b/0x260 [ 179.058918][ T8608] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 179.058940][ T8608] ? do_syscall_64+0xba/0x210 [ 179.058954][ T8608] do_syscall_64+0xf6/0x210 [ 179.058967][ T8608] ? clear_bhb_loop+0x45/0xa0 [ 179.058980][ T8608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.058992][ T8608] RIP: 0033:0x7f308818e969 [ 179.059002][ T8608] Code: Unable to access opcode bytes at 0x7f308818e93f. [ 179.059008][ T8608] RSP: 002b:00007f3088ff9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.059019][ T8608] RAX: ffffffffffffffda RBX: 00007f30883b5fa0 RCX: 00007f308818e969 [ 179.059028][ T8608] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 179.059035][ T8608] RBP: 00007f3088ff9090 R08: 0000000000000000 R09: 0000000000000000 [ 179.059043][ T8608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.059049][ T8608] R13: 0000000000000000 R14: 00007f30883b5fa0 R15: 00007ffc90754458 [ 179.059063][ T8608] [ 179.675644][ T56] Bluetooth: hci4: command 0x0405 tx timeout [ 179.692953][ T8605] syzkaller0: entered promiscuous mode [ 179.698492][ T8605] syzkaller0: entered allmulticast mode [ 179.704674][ T8605] tipc: Resetting bearer [ 179.768973][ T12] tipc: Resetting bearer [ 179.776115][ T8600] tipc: Resetting bearer [ 179.856267][ T8600] tipc: Disabling bearer [ 181.825208][ T56] Bluetooth: hci4: command 0x0405 tx timeout