last executing test programs: 1m11.641823009s ago: executing program 2 (id=780): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "329ed16af1eaa1dcff795bd064294b15b2e515f1901dc1df", "18b273c1496bddbb755959f90c1901890759b327294f7307bc01ce27af3c5f70"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81, @void, @value}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m4.09137898s ago: executing program 2 (id=780): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "329ed16af1eaa1dcff795bd064294b15b2e515f1901dc1df", "18b273c1496bddbb755959f90c1901890759b327294f7307bc01ce27af3c5f70"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81, @void, @value}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 55.210571368s ago: executing program 2 (id=780): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "329ed16af1eaa1dcff795bd064294b15b2e515f1901dc1df", "18b273c1496bddbb755959f90c1901890759b327294f7307bc01ce27af3c5f70"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81, @void, @value}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 44.49753619s ago: executing program 2 (id=780): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "329ed16af1eaa1dcff795bd064294b15b2e515f1901dc1df", "18b273c1496bddbb755959f90c1901890759b327294f7307bc01ce27af3c5f70"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81, @void, @value}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 41.543902766s ago: executing program 3 (id=1372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x6d200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 41.193973299s ago: executing program 3 (id=1376): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x20080, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x0, 0x0, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="02"], 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r5, 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) sendfile(r0, r1, 0x0, 0xffffffff000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r1, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xe4, &(0x7f0000000840)=[{}], 0x8, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r8, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f8008000140000000000800034000000000080002"], 0x88}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x114}, 0x1, 0x0, 0x0, 0x50}, 0x2c004000) socket$nl_route(0x10, 0x3, 0x0) 39.826810781s ago: executing program 3 (id=1385): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xf, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xdb, &(0x7f0000003e40)=""/219, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xf, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced\x00', 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200), 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xdb, &(0x7f0000003e40)=""/219, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) (async) 39.01783508s ago: executing program 3 (id=1394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001180)={0x2, 0x9, 0x9, 0x3, 0x2, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}}, 0x8010) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000000001010100000000000022000500000624001080080001400394000008000340000004010800014000000804080001400000000406001240000300002c001880080001400000001e08000240000009ef0800034000000e750800014000000001080002400000003e"], 0x6c}, 0x1, 0x0, 0x0, 0x40014}, 0x40000080) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88bd9edace00000000000000002100000002ff02000000000000000000000000000104004e20004d03"], 0x0) syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x9, 0x0, 0x0, 0x40, 0x4, {0x15, 0x4, 0x2, 0x1, 0x4, 0x67, 0x5, 0x5, 0x67, 0x598f, @local, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0xd6, 0x1, 0x3, [{@multicast2, 0xbede}, {@private=0xa010102, 0x2}, {@local, 0xb0e9}, {@loopback, 0x4}, {@multicast1, 0xf}, {@broadcast, 0xfffffffa}]}, @cipso={0x86, 0x6, 0x1}]}}}}}}}, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x9, 0x6, 0xd5, 0xfffffff8}, {0x9, 0x3, 0x0, 0x7f}, {0x80, 0x8, 0x10, 0x1000}, {0x7, 0x57, 0x5, 0x100}, {0x3, 0x1, 0x3, 0x9}, {0xd, 0x43, 0x3, 0x80000000}, {0x0, 0x6, 0x3, 0x9}, {0x3, 0x86, 0xe, 0xfffff17d}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x1c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 27.864469695s ago: executing program 2 (id=780): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "329ed16af1eaa1dcff795bd064294b15b2e515f1901dc1df", "18b273c1496bddbb755959f90c1901890759b327294f7307bc01ce27af3c5f70"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81, @void, @value}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 24.030431405s ago: executing program 3 (id=1394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001180)={0x2, 0x9, 0x9, 0x3, 0x2, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}}, 0x8010) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000000001010100000000000022000500000624001080080001400394000008000340000004010800014000000804080001400000000406001240000300002c001880080001400000001e08000240000009ef0800034000000e750800014000000001080002400000003e"], 0x6c}, 0x1, 0x0, 0x0, 0x40014}, 0x40000080) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88bd9edace00000000000000002100000002ff02000000000000000000000000000104004e20004d03"], 0x0) syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x9, 0x0, 0x0, 0x40, 0x4, {0x15, 0x4, 0x2, 0x1, 0x4, 0x67, 0x5, 0x5, 0x67, 0x598f, @local, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0xd6, 0x1, 0x3, [{@multicast2, 0xbede}, {@private=0xa010102, 0x2}, {@local, 0xb0e9}, {@loopback, 0x4}, {@multicast1, 0xf}, {@broadcast, 0xfffffffa}]}, @cipso={0x86, 0x6, 0x1}]}}}}}}}, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x9, 0x6, 0xd5, 0xfffffff8}, {0x9, 0x3, 0x0, 0x7f}, {0x80, 0x8, 0x10, 0x1000}, {0x7, 0x57, 0x5, 0x100}, {0x3, 0x1, 0x3, 0x9}, {0xd, 0x43, 0x3, 0x80000000}, {0x0, 0x6, 0x3, 0x9}, {0x3, 0x86, 0xe, 0xfffff17d}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x1c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 11.188572661s ago: executing program 2 (id=780): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "329ed16af1eaa1dcff795bd064294b15b2e515f1901dc1df", "18b273c1496bddbb755959f90c1901890759b327294f7307bc01ce27af3c5f70"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81, @void, @value}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9.801912921s ago: executing program 3 (id=1394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001180)={0x2, 0x9, 0x9, 0x3, 0x2, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}}, 0x8010) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000000001010100000000000022000500000624001080080001400394000008000340000004010800014000000804080001400000000406001240000300002c001880080001400000001e08000240000009ef0800034000000e750800014000000001080002400000003e"], 0x6c}, 0x1, 0x0, 0x0, 0x40014}, 0x40000080) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88bd9edace00000000000000002100000002ff02000000000000000000000000000104004e20004d03"], 0x0) syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x9, 0x0, 0x0, 0x40, 0x4, {0x15, 0x4, 0x2, 0x1, 0x4, 0x67, 0x5, 0x5, 0x67, 0x598f, @local, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0xd6, 0x1, 0x3, [{@multicast2, 0xbede}, {@private=0xa010102, 0x2}, {@local, 0xb0e9}, {@loopback, 0x4}, {@multicast1, 0xf}, {@broadcast, 0xfffffffa}]}, @cipso={0x86, 0x6, 0x1}]}}}}}}}, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x9, 0x6, 0xd5, 0xfffffff8}, {0x9, 0x3, 0x0, 0x7f}, {0x80, 0x8, 0x10, 0x1000}, {0x7, 0x57, 0x5, 0x100}, {0x3, 0x1, 0x3, 0x9}, {0xd, 0x43, 0x3, 0x80000000}, {0x0, 0x6, 0x3, 0x9}, {0x3, 0x86, 0xe, 0xfffff17d}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x1c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.767878352s ago: executing program 0 (id=1560): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002700010000000000000000000c000080080023"], 0x1c}], 0x1}, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000000)=0x8200, 0x4) 4.648848325s ago: executing program 0 (id=1561): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="e80100000202010800000000000000000a00000948010a80080001400000000008000140000000011800028006000340000000000c0002800500010021000000440002800c000280050001009c00000006000340000300002c00018014000300fc00000000000000000000000000000014000400fe80000000000000000000000000000f380002800c00028005000100840000000c0002800500010011000000060003400003000014000180080001000000000008000200ffffffffa00002802c00018014000300fe80000000000000000000000000000d14000400fe8000000000000000000000000000bb0c000280050001009900000014000180080001000000000008000200640101010c000280050001003a0000002c00018014000300ff02000000000000000000000000003b119d5fbb8616194a63e6150114000400fe8000000000000000000000000000bb0c00028005000100840000000c000280050001"], 0x1e8}, 0x1, 0x0, 0x0, 0x4048040}, 0x80) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r2 = socket$unix(0x1, 0x1, 0x0) unshare(0x6a040000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000034000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x23, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8b04040000000000700012800b00010067656e6576650000600002800500040001000000140007"], 0x90}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0x10}, {0x4, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xffffffffffffffba}, {0x8}}]}, 0x38}}, 0x40) unshare(0x22020600) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket(0xa, 0x557b440a9eb6e4ef, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002d40), r6) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000004f40)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="01002cbd7000fbdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x6819130f3aa8b09c}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_ACT={0x4}, @TCA_BPF_FD={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004c8c0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000036c0)) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000002d80)={0x0, 0xa}, &(0x7f0000003040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000003080)={r8, 0x4}, 0x8) 3.710189478s ago: executing program 4 (id=1565): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5f}}, {0x95, 0x0, 0x0, 0x4000}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xe3) 3.685106212s ago: executing program 4 (id=1566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48241, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000140)=0x1, 0x4) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711238000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000006c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc", 0x28}, {0x0}], 0x2}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c0001800800050003000100200001"], 0x44}}, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/19, 0x13, 0x40000040, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=@nat={'nat\x00', 0x8, 0x5, 0x490, 0x0, 0x0, 0xffffffff, 0x320, 0x320, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private1, @ipv6=@empty, @gre_key}}}, {{@ipv6={@dev, @mcast1, [], [], 'veth0_macvtap\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@multicast2, @port, @icmp_id}}}, {{@ipv6={@mcast2, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @gre_key, @icmp_id}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private1, [], [], 'vlan0\x00', 'team0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00003f10003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r8], 0x4c}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) writev(r0, 0x0, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r9, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="00a95524a7c388dd67c1d8b88eebae32a652d2951a95dd0465c514722c366b7f7d83ef6cff331b6038601488354f66cd5241f842696112c5f6444ab123d6973daf7267af783ac2ee9031083c851d85bab1f43b67c55394bbff129360c7f0c8f4fc84f0f974375076c47e8ec75eba8dd6eeb1ace13f0c3892a5529ccb03896bcc1da6a026d4fc94a8063433b5f6cdb83c887d9e35ef65a1b0086f200a6dd72b5359aa527d", @ANYBLOB="480281f3e8008e15c95a613ffab9475e5e1579110b069f60de76adbf5944e84cac379d3620be4f470aa7dee210e03f6a677ca7d40be2ea95f170d36564af84e6961bc9817af9ee81c6487ea4807c04748ce459dfecd8e558ee8e0a30673e35da60f69b43f9fb6c48a8ee1ea0ccb9adbb2a1a5c96866de45b8c5685c89e4fce7361d5ac9eac13", @ANYRESDEC=r9, @ANYBLOB, @ANYRES8=r9, @ANYRES32=r9, @ANYRES16=r9, @ANYRES8=r9, @ANYRES8=r9, @ANYRESOCT=r9], 0x4) 3.075850462s ago: executing program 4 (id=1570): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@sco={0x1f, @none}, 0x80, &(0x7f0000000500)}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x27, 0x8, 0x0, 0x9}, 0xe) socket(0x11, 0x4, 0x9) socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x6, 0x200, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x9, 0x6a, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac010000120a01020000000000000000020000000900020073797a300000000008000440000000000900010073797a30000000000800034000000005"], 0x1d4}}, 0x4) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r3, 0x0, &(0x7f00000000c0)=""/66}, 0x20) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x7fff, r2}, 0x38) 2.740565252s ago: executing program 4 (id=1573): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x4004800}, 0x4001) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x60, r3, 0x1c7f5176680816f3, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x30}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2e6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040880}, 0x20000000) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048000}, 0x20000840) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000280), &(0x7f00000002c0)=r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000400), r9) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r11, 0x601, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r13 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001880), 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f00000018c0)={[{0x2b, 'pids'}, {0x2b, 'net'}, {0x2b, 'net_prio'}, {0x2b, 'blkio'}, {0x2b, 'cpu'}, {0x2d, 'freezer'}, {0x2b, 'net'}, {0x2d, 'cpu'}]}, 0x34) r14 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r14, 0x89e1, &(0x7f0000000000)) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001900)=@deltfilter={0x540, 0x2d, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1}, {0xd, 0x4cc3b0973f5d0431}, {0xb, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x59}}, @filter_kind_options=@f_flow={{0x9}, {0x4f8, 0x2, [@TCA_FLOW_POLICE={0x4ac, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb3, 0x20000000, 0xfffffffd, 0x6, 0x73ad, {0x3, 0x1, 0xedb1, 0xffff, 0x8, 0x4}, {0x9, 0x2, 0x5, 0x0, 0x0, 0x401}, 0x6, 0x5, 0x5}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xfff, 0xaa1d, 0x1, 0x1, 0xffff423c, 0x6, 0x200, 0x9, 0x7, 0xfffffffc, 0x4, 0xd364, 0x10000, 0x7, 0x7, 0x5, 0x4, 0x1bb8, 0x0, 0x9, 0xaeb, 0x0, 0x78c, 0x9, 0xe, 0xffffffff, 0x3, 0x4, 0x7, 0xb6f6, 0x8, 0x3, 0x6, 0x0, 0x8, 0x7, 0xba, 0x7, 0x1, 0x6, 0x1, 0x20, 0x9, 0x5, 0xf, 0x80, 0x7fffffff, 0xfff, 0xd00000, 0x200, 0x538, 0x1ff, 0x7, 0x3ff, 0x3, 0x1, 0xfffffbff, 0xe, 0xffff0000, 0x6, 0x8, 0x2, 0xfffffff8, 0xfffffffc, 0x9, 0x3, 0x191, 0x359, 0x20, 0xfffffffb, 0xbbbd337, 0x1, 0x6, 0xd, 0x7, 0x4, 0x8, 0x40, 0x3, 0x80, 0x3, 0xfffffa18, 0x100, 0x3, 0x6, 0x9, 0x8, 0x7fff, 0x6, 0x4, 0x4f, 0x1730, 0x9, 0x9f14, 0x5, 0x80000000, 0x81, 0x6ff, 0xfffffcf7, 0x9, 0x1, 0x0, 0xa, 0x9, 0xe0000000, 0x9, 0x4, 0x2, 0x1, 0x8, 0xfc, 0x6, 0x5, 0xff, 0x2dcf, 0x1ff, 0x6, 0x5, 0x4, 0x9b, 0x5, 0x8000, 0xb1, 0x4, 0x9, 0x5, 0x6, 0x9, 0xfffffffe, 0xa, 0x3, 0xfa68, 0x0, 0x9, 0x43, 0x6d, 0x9, 0x80000001, 0x8, 0xfffffff7, 0x2, 0x4, 0x3, 0xb8, 0xffff, 0x0, 0x7fffffff, 0x3, 0x3ff, 0x61ed, 0x9a, 0x180, 0x4, 0xfffffff9, 0x100000, 0x1ff, 0xab, 0x5, 0x8, 0x8, 0x8, 0x8dc, 0x0, 0x7, 0x9, 0x10001, 0x9, 0x9, 0x7fffffff, 0xacec, 0x2, 0x100, 0x5, 0x2, 0x80000001, 0x0, 0x3ff, 0x1, 0x2, 0x8000, 0x7fffffff, 0x4, 0x10, 0x4, 0x0, 0x8001, 0x791, 0xe0, 0x401, 0x4, 0x0, 0x7, 0xc3, 0x1, 0x2, 0x7ff, 0x0, 0x4, 0x3, 0x6, 0x1, 0x9, 0xc, 0x5, 0x2, 0xb, 0x5, 0x5, 0xfffffc00, 0xb, 0x10000, 0x837042b, 0x4, 0xffffffff, 0x8001, 0x80000001, 0x7, 0x0, 0x8, 0x2, 0x1, 0x7fffffff, 0x1, 0x8, 0x6, 0x0, 0xb, 0x7, 0xc, 0x7, 0x9, 0x0, 0x480004, 0x100, 0x7, 0xcecc, 0x2a2, 0xc7, 0x5, 0x5, 0x3, 0xfffff3ef, 0x5, 0x80000001, 0x9, 0x4, 0x2, 0x7, 0x8, 0x100, 0x5, 0x9, 0x5, 0x80000001, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc3, 0xffffffffffffffff, 0x8, 0x8, 0x21e, {0xd, 0x2, 0x5, 0x5deb, 0x1, 0x163e}, {0x80, 0x2, 0x6, 0x8, 0x7, 0x4}, 0x8, 0x8000004, 0x10000}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}]}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x7}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xfffffffb}, @TCA_FLOW_MASK={0x8, 0x6, 0x6}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x1445}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0x6}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xc4}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x1d}}]}, 0x540}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0) 2.546085708s ago: executing program 1 (id=1574): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRESOCT], 0xf8}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000006c0000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 2.483243392s ago: executing program 1 (id=1575): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060000000000c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001811000000000000000000200000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000280)='skb_copy_datagram_iovec\x00', r4}, 0x18) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000020202000900030073797a30000000000900010073797a30000000000900010073797a310000000005227d0001000000"], 0x40}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800470400000000000000", @ANYRES32=0x0, @ANYBLOB="0000020000000000280012800b0001006d61637365630000180002800c0004000000000000000000050003000d000000"], 0x48}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000014"], 0x34}}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x2, 0x1ff, 0x34, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x0, 0xc, 0x3}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'hsr0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xac, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc0d016e4ecff866b}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r12, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) 1.255349964s ago: executing program 0 (id=1576): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5f}}, {0x95, 0x0, 0x0, 0x1000000}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xe3) 1.127331918s ago: executing program 4 (id=1577): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000090900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800a0001007175657565000000140002800600014000020000060003400001000014000000110001"], 0xd8}}, 0x4000040) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001c00000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x128, 0x5802, 0x294, 0x0, 0x294, 0x288, 0x378, 0x378, 0x288, 0x378, 0x3, 0x0, {[{{@uncond, 0xf202, 0xd8, 0xf8, 0x52020000, {0x0, 0x600}, [@common=@frag={{0x30}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private0, [], [], 'team_slave_1\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@mh={{0x28}, {"123a"}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0xa, 0x801, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002e80)={0x30, r5, 0x1, 0x10001, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40008d5}, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000c000500ff000000000000000c0002000000020000000000040007800c00080000fffd000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r6, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 1.073887587s ago: executing program 0 (id=1578): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="02130209020000", 0x7}, {&(0x7f0000000780)="a112fde44010973762", 0x9}], 0x2}, 0x400c010) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) splice(r1, &(0x7f0000000c40)=0x1ff, r0, &(0x7f0000000c80)=0x5, 0x4, 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gretap0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x8000, 0x7800, 0xd58abb2, 0xfffffffb, {{0x1f, 0x4, 0x3, 0x8, 0x7c, 0x67, 0x0, 0x4, 0x29, 0x0, @private=0xa010101, @remote, {[@end, @lsrr={0x83, 0x7, 0xa8, [@loopback]}, @lsrr={0x83, 0x23, 0x56, [@loopback, @rand_addr=0x64010101, @remote, @local, @loopback, @multicast2, @private=0xa010102, @local]}, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0x3c, [@broadcast]}, @ssrr={0x89, 0x7, 0xc3, [@local]}, @generic={0x86, 0xb, "7ad59097730b43443f"}, @timestamp_prespec={0x44, 0xc, 0xa5, 0x3, 0xd, [{@rand_addr=0x64010100, 0xfd}]}, @timestamp_prespec={0x44, 0x14, 0xd3, 0x3, 0x2, [{@private=0xa010102}, {@multicast2, 0x5}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d80)={'syztnl1\x00', &(0x7f0000001080)={'gre0\x00', 0x0, 0x20, 0x700, 0xbcd, 0x105, {{0x5, 0x4, 0x3, 0x6, 0x14, 0x65, 0x0, 0xf, 0x29, 0x0, @multicast1, @empty}}}}) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x401, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0x10a5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000e80)={'ip6_vti0\x00', &(0x7f0000000e00)={'syztnl2\x00', 0x0, 0x4, 0xd, 0x5, 0x10000, 0x45, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x1, 0x0, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'batadv_slave_0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r12, 0x1, 0x8, &(0x7f0000000000), 0x4) r13 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r13, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000058c0)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000001040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0xc4, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20040891}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.009221787s ago: executing program 1 (id=1579): unshare(0x22020600) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000004e80)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004ec0)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@remote}}, &(0x7f0000004fc0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005000)={0x0, 0x0, 0x0}, &(0x7f0000005040)=0xc) r4 = gettid() r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r5, 0x400454cc, r7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005080)={0x0, 0x0, 0x0}, &(0x7f00000050c0)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = gettid() sendmmsg$unix(r9, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[@cred={{0x1c, 0x1, 0x2, {r10}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x40094}}], 0x2, 0x20000400) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) r12 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x70bd05, 0x4, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r13}]}, 0x1c}}, 0x800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005100)={0x0, 0x0, 0x0}, &(0x7f0000005140)=0xc) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_int(r15, 0x29, 0x19, 0x0, &(0x7f0000000140)) r16 = socket$nl_route(0x10, 0x3, 0x0) r17 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendmsg$nl_route(r16, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000001000030400000000fcdbdf2500000400", @ANYRES32=r18, @ANYBLOB="08130000800000003000128009000100766c616e0000000020000280100004"], 0x50}, 0x1, 0x0, 0x0, 0x3040}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="2887234e1090787b6f18f0799581b36af1fe39c549105e6da3805e7058917ed89cda97b3f743b28889e87816c2fa111b565d964e1ff3086b2918946f537026b2ae2c3b5fe5c504ec33246e8d1e9f6429b296f03ddf009820bad6ab40a837b4fb913bea1a4620c3ca2af988bded26754d6dfeb15745f15adbf028b04a3ec822dc44b5943121fe004c7250a0b87f9346424cf04b702a8ce29bdf227acaac9b14d02c280e936024944439d71f795b4564b6", 0xb0}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="015502cb2419a97177287f32511cb514fab7a6e9cacef2c682161d1e862374325402460f4cd9e6cbdc47e9ab13d6d70a4b986f36aeda53971f7fee18855a056df856789911231405bd013559a95692a6821ad76501345d0880c4fa9a6c66ff3ea25bafd383f29d9d1c7683de80463a72fff4c85769b1d55cbcca94eaf77e7d67d9e0a42a4aec5b792c8c92ea4c258c1149ac8966db44ccee0103bf6701b45fda2b36e51036b00489f92a16480723f6cc4a170739462aeaee97ac3dba0a975c", 0xbf}, {&(0x7f00000011c0)="e7ebdaad951bb7d89429240b104068a11d7b1d8deba2bbab61b50eba3b0d4d3d26c8bc00e3e805f0121b1b9840bed997ee76a89fbd62ea4d6f290eba98d646faf434ce52a9d42772ccabce1e9cad01ae1f52e61fe3ebb166db3ae236a1f44d4b239bcb748ecce705d9b1044b6e40162d2037b115a116dbc6c07c2c57cce568ba8354ba44c052", 0x86}, {&(0x7f0000001280)="add39418affde84cb3d60966469f9a0fe9081b1eac6cbb17deb9aef65add1e994e76dc00a141a1bfd63366919efb3ebaea89be91dfbee49718e3d057ce6d3cfbc50be547b338fee80de34922b39a39c848a6423df78f241e6aa431b9e1910ceaa7eca8f08d362887bfd6aa19cbb5785ef152fd8961d010d10190b156c56e658bd942bcf0206112db370a634f472952ec9bb136763bd50ce853d981d2330e23a2108d4f37b5cb61725a199e72d6599b54991ad17fa12460622576781980d7ffb981", 0xc1}, {&(0x7f0000001380)="4d9178e8ee03ba25d7a4f3eb96064a1df6439f4cb98e7ef124206162653d702bdc71885924ac144896eec42e1ede0d7532af2d7cc12d1b35b7b303a5488d453f24e173a93a14896a9ae98e9e66f6bf541904ffb370cc807add6f1ecd6005be2f186413a5e2acab757871fa3c1f71ea0f54a388b10caf19326ee5e5eacdc060c8dd772e1b46f33768764d5b5580201053400ab197f931f84fdfb4cf92719f38e9c0126789209e013939a58ca7560eece793e8e5fc0bb1744836413957df388c6f895698673ab3660d1290034f8257bf23c901063c252366dc7c", 0xd9}, {&(0x7f0000001480)="39c13d48bfe85f73c398a66fd336ce8ba3c4ed2962ecb072a90b1d276b006fe45cbd109ec9b82b99a9506167b02d15bac419951b33d37863c39b99d5", 0x3c}, {&(0x7f00000014c0)="1c0fa1178b8698601a6a467920adcf8117701f787d78199851162590fc4d8601e049b61fcb4eca9da42561ea7e1f05232cb302261c851ed6a7", 0x39}], 0x8, &(0x7f0000001740)=[@cred={{0x1c}}], 0x20, 0x800}}, {{&(0x7f0000001780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002b80)=[{&(0x7f0000001800)="24f6535c9ae0164b4b346b03bf06b4bbf755ffcf4578197f7e4bc8e555162431c23ca7b4970e2639a7e9c6f14a9281600ffe123ba97a976464eb517e8856d51e5a77a8751c4871bc5c8392fda356bdac75d4bef3bcff41e3b7d6d5a32317cd1121d62afd6923c06962c28d6213a74069d7e8b9a00d6fca5edba254f5a642bb31cd6be0bcd8ba6272ec7e99b7ce96f8addeb09aea249fd4b5236ca9787b2a3cd7b61449bae4ee034738c60dced104df338a9c88119756e01ee9f8fab1c21813f5065c2302493bd254d3600035e4675e994f1b00932bf32e0a6dcd457bacbf5db615baf2f0d2e2c73071b5b9585f618d96f3f250fb3821", 0xf6}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000002900)="5fe8adf5e48d8d", 0x7}, {&(0x7f0000002940)="3572c1492fd4a5d94520bda13bd48055e44b7fabfc8a28fe1b09151cfcfb667b321e82043ddb304648179cdd34cc8e6c2a94a18ba02bb34badd4da27ba6e8792136eead55e9279ca3acb3811998e9fa11e7d7df5f1a8dce399bbfd1734d18fa2d908e8e930923caec038194d1ae2ddbcb1e4c9ceb8c746bf07cddbc7e64be33ef4cb4638f1a4f75a92d7cb377f7a2c259c6c86f33119572e0093", 0x9a}, {&(0x7f0000002a00)="a3b473f89c336942bb1beaa8170a33aa395289dc8a19cbb4c32500a45cccaa5cd78deb906f7d22c6e1ed42251ca2e31a081dcc816a692bd729f8d36e13f712a026bc8860582eb04b615d60eb093af248e00546576cf2fd47d2a75460f89ec1427fcecf88ab774267f1ba5623fef3424641c6c940dc9e309c8437ff7b957c", 0x7e}, {&(0x7f0000002a80)="5d7e275ef918765fb42ea118f5391c3384a55bc257dffc7e617f25cda7c1bcb2483df3c295fc853d3ea495cdfb120641c2a50e117dfd75147173947f7409256f72df4f41b82ae9859a47066fa70fc60121578c3549bd79a3e41086eb4dcdbf7ed42c06ec856982561f23a169544538e4f44154c0aca43114562bee43aaec93c45fa23bbc75d5066013b51e28ee843aa03bf5c3352ba2de6fbf861c94a45e3a0a17a876b99b38e340b59bb08ba9c57e18739f37ef9b409600eac081d2db2acaf0687bc07581647d10b3d011dbed96f9d70d46de1005284cf3bf76a77eac5263", 0xdf}], 0x6, &(0x7f0000002cc0)=[@rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r0, r0, r0, r0, r0]}}], 0x68, 0x20048000}}, {{&(0x7f0000002d40)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000004100)=[{&(0x7f0000002dc0)="795b891aa6dcf818d05badd11aeeb6945221b0dea6c5572aceedb4b51284b5501b8ba30a2d7c54750f3a8798aae92d2722c982994eebffc1a778259536a2cdf77b900fb4bf7608af3f950b36abdf90f72655437b32667e1fb9b1677de244ac711c3f2356ca4315feac1e5c341b1d80bf36e1bf4018c6c98d408753ff2a00bd688b538f106256676b7e288de48d5a7d984c095ba5f61505e747", 0x99}, {&(0x7f0000002e80)="d53fb463f0ff6c3aae4b06e2127948e468de678eb1b1568cb51df8a629353b541c92b02754cc5473eaafcbe9ba7e553e956c63def765ac93549d8c073d05b7d05e3ef3ed8570571606ef101c4f5a0d7fa450fcba8ba5b6cf38f7da1b50ee756a601f164c25e99d849832bc1a5671aeafbe3c4aea8dbca1cae06f1cd4b7", 0x7d}, {&(0x7f0000002f00)="091a694c10f1568f3b24ecb524e664146a4026ce4654a8d68ed3d717cdef3706fa290ffacfe48534e18cdec156a4fe63d4", 0x31}, {&(0x7f0000002f40)="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", 0x1000}, {&(0x7f0000003f40)="889f9a0803ca2e185854a799d1cebd385b5972649d4495cfd5c35d56018ac929c3ee06800da4869e2b973f2c2c6cf33ba7027fd3a7799f898be46377484a2a79ae639c097697d988b07f9deaa16145972f592c21e43641ef9cf984b36fd2f74627bac9356929162819a47a63516df3b06b8cdb788b4cba96b06d83734f28352172c6c48ad3cd024c8cea26584d133b458e54357a968f7205f49f09172312a902d2a3ef7f4206895a7826db6f86c309aabb8d1291e6e12ca3207d9e75dbd1c9bbc9334b3ec7d6f64e8cf8", 0xca}, {&(0x7f0000004040)="2025fbaea1b8075375f309ee70c66eb08ce0ef1d81416d6c7776daea1306d04bc58375008db8dea0ab172dfb393a0c8ee1a2968da767799d31ed116711387756ae65d310405c02907a5e755e2532606d100f44be67d1f98a921132b48bb7c9648ce277434f8c3b20e3866e8bc356745e2118eac5769ab75ef021922079f2ba51ea913416456a96772dda0aee62ee6676b61ca6554bc158", 0x97}], 0x6, &(0x7f0000004440)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0]}}, @cred={{0x1c}}], 0xa8, 0x24040000}}, {{&(0x7f0000004500)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000047c0)=[{&(0x7f0000004580)="cde260a11734fffc32a761fcf13ccc1ffedafd1e7aea8e2dfbbace", 0x1b}, {&(0x7f00000045c0)="0a4e3aff3aca38c57957a507fb839084490084b606a6c554766cae621ad5e9237545d407e5d3228ce30756ee6b2d32045feb5c8c1c2ab6a537d695f77d460711b9e7a97f1dc0c2228c457967c40520f52333095cd4faf02a22a1ef049c7a42e31a027d27ac8006796c913342ef4e25151c995b6f0bcb29a6d738dd1dac0918cbd37dd7c678f174db7bed5ee27cf9adefc4ee75f3dbd548f8fccf84876545d552f607759755379d1820cbcc59f0c4dffad431d46a4601e0129b", 0xb9}, {&(0x7f0000004680)="b381bc1544bce197ffbf2854482884b3f55993b185089c67a616bb9875eab9885ae8dcfdcc817072c9299910e144ee1828664867d0400bd8a59248e5b6dd303856c2bff66521007820bfeccdb1b6874043436d8bb730577ddaadfce0c62c5201c46c49291e9c01e5a24badeacd139671727344c1544660b998f974bf4964ec1137d5eae9cabd6d8e72c48e97e201f87f4eceaf6553408818fb14", 0x9a}, {&(0x7f0000004740)="cc2709505b71aaae71eb84b0836ce5e90359615c0be8ce5743e1377e15f1df238bdc77138c11335f3a", 0x29}, {&(0x7f0000004780)="83", 0x1}], 0x5, 0x0, 0x0, 0x10}}, {{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000004840)="e3c0c66b8e47ab8a7a3e1a35eb04adad2e79cf9fe8aebc5ab9c96147b417ff9bc340d5a6f617e0dbbd07772d4a7ba136a87d7d47dc939a70e499ab1327a05300e975115d1544a892aac7553c7563e87b1ade74cb319c09193d5e3618e7fa6347ec9d07ad38beb4012e557f2060c70f9fda28a87dae7bb40f196f1a51b7859cb1eb602a193863be77602cacaa5ac8d3452b9c7da9f151b53ca89f6f7a3670de5aa27e680b90ef584b97417359c6dc2228c15aaf2e73bc7b0c4e0e2811b609c8986aadedae1cc5debbc780f988b9b38d3fc2e233da6634cfd3238ce0e0baaa3227f22b75d8e252", 0xe6}, {&(0x7f0000004940)="36452e5e142b4bc60ba1a2d5e67a7947a44590701ebbc76043b729d43154320e1ffffc9b6109c804a482e9f7d4c1134f805e0f591f0e0a812969f9c28a9dc0f7340b4462b794264744464f13884a23cb0b2c8c4ae4d6114174a7231e1471b81ceeb277e6a5771a79dbe9edd802a28b0ea4744501", 0x74}, {&(0x7f00000049c0)="56f0276cc70021917e8234890fef6ffa9d243a1fcd038b0ef1f23479f5919b7ae5db09ba1858944fc29b2c3095736633b0aa897f6260e8726cbabf5e3063643bec4257161fdb0a3d96907b6c47b7e15023cc1879ecd4dd7174fe89da2a07e8facd54a295e450ecb46210cd1f77d80941b82999ba5fd24d1eff0aee843fea0b0b1a6fdf14a09287d1988fd50aff57ac18ca3ed860a5f6e909d8e77b0683a475e5e4c07f61eb3ad38bb11d8e2f5b2e8c493924d14f0bd62ad480dcce654fdbe921c418915f12c4fbca63aaf108becb0b92bb04954fe2c5e3ff1c021c", 0xdb}, {&(0x7f0000004ac0)="98cca55d3525739e64c236581c5feb8428ef12c51002e25aa54ab007cf2bd7308c5bda3f467735848d1dc929d96049ae110754268f0f1b835bda5ae0cae8a10e8a323b72cb3136addf4815681f7ff596c743f76223e64eb3c879e86eae54d1e97450a8c2079ec30af39339c2f635c118de7f19600d89b228f5479bcda86366aaffcded2a795037a1d60cc6f31fe9a139a6c22376d15110995f05237d6284a51389f5a2e343", 0xa5}, {&(0x7f0000004b80)="4aae4babb5484c122f37a79719d06555ce2f70070a0c7bddb14e96334968", 0x1e}, {&(0x7f0000004bc0)="804a4b4142e3a5cc373f94eef21d67462199da2e443823c7f6f626d2ee14ea92f1557a648819dc1bac03f8f3f794e2981f57448bacb3f0f3fdbe30dc78a27a2b5736", 0x42}, {&(0x7f0000004c40)="eec8f15fd746ff0b0ced18ac667ce88d7ea74b8832caeee533378cb369b0036a8de0f890ff5d283e4cf697dc9d2738337f58b99230be1f529ab844520e66242ca03634d27681c2deb981d0ab5341f56963cba709b79f8541fac06be4679ae694f94903ee2b92b0e0a166950237ae07f79a9af4356f41cdd58ad4", 0x7a}, {&(0x7f0000004cc0)="cf56b752d6a59cf1284a4654c2afc8fffa6d147b3cb38c9e2d30eaa9a5e822a050aef8f80b463aa02c62a5320591b7680b0ae6abb14e1b7affae38ac709365bfec7451c45c2ed51bafac363d2d6fb67fd4266b4acba09a8be229d2430a1ba93267faa51c41657f2090e032c1610991fc43fea47224e8351ce20c938a1bb330ae2c4f8a036009bd3b9790826e8b84033fb168b51f64add52057a7eb45e079c9c9f5ab43bb0bf184ac0319fabc5d0b0d8f381652467601bda991bd3b0247c1fb878f30f6fe8beb7496c60e", 0xca}], 0x8, &(0x7f0000005180)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {r4, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r10, r13, r14}}}, @rights={{0x18, 0x1, 0x1, [r0, r15]}}, @rights={{0x20, 0x1, 0x1, [r16, r0, r0, r0]}}], 0xf8, 0x4000080}}], 0x5, 0x800) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, 0x0) 787.951478ms ago: executing program 0 (id=1580): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48241, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000140)=0x1, 0x4) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711238000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000006c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc", 0x28}, {0x0}], 0x2}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c0001800800050003000100200001"], 0x44}}, 0x0) recvfrom$inet6(r2, &(0x7f0000000100)=""/19, 0x13, 0x40000040, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=@nat={'nat\x00', 0x8, 0x5, 0x490, 0x0, 0x0, 0xffffffff, 0x320, 0x320, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private1, @ipv6=@empty, @gre_key}}}, {{@ipv6={@dev, @mcast1, [], [], 'veth0_macvtap\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@multicast2, @port, @icmp_id}}}, {{@ipv6={@mcast2, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @gre_key, @icmp_id}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private1, [], [], 'vlan0\x00', 'team0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000103f3df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r8], 0x4c}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) writev(r0, 0x0, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r9, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="00a95524a7c388dd67c1d8b88eebae32a652d2951a95dd0465c514722c366b7f7d83ef6cff331b6038601488354f66cd5241f842696112c5f6444ab123d6973daf7267af783ac2ee9031083c851d85bab1f43b67c55394bbff129360c7f0c8f4fc84f0f974375076c47e8ec75eba8dd6eeb1ace13f0c3892a5529ccb03896bcc1da6a026d4fc94a8063433b5f6cdb83c887d9e35ef65a1b0086f200a6dd72b5359aa527d", @ANYBLOB="480281f3e8008e15c95a613ffab9475e5e1579110b069f60de76adbf5944e84cac379d3620be4f470aa7dee210e03f6a677ca7d40be2ea95f170d36564af84e6961bc9817af9ee81c6487ea4807c04748ce459dfecd8e558ee8e0a30673e35da60f69b43f9fb6c48a8ee1ea0ccb9adbb2a1a5c96866de45b8c5685c89e4fce7361d5ac9eac13", @ANYRESDEC=r9, @ANYBLOB, @ANYRES8=r9, @ANYRES32=r9, @ANYRES16=r9, @ANYRES8=r9, @ANYRES8=r9, @ANYRESOCT=r9], 0x4) 689.964741ms ago: executing program 4 (id=1581): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x38, 0xfffffffe}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr, 0xfffffffc}}, 0x40000000, 0x0, 0x0, 0x0, 0x2c}, 0x9c) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pselect6(0x40, &(0x7f0000000140)={0x800000e4, 0xfffffffffffffffb, 0x800000006, 0x0, 0x5, 0x2, 0x80000000, 0xfffffffffffffff0}, &(0x7f0000000180)={0x9, 0xc0, 0x1, 0x5, 0xff, 0xd, 0x1, 0x3}, &(0x7f00000001c0)={0x0, 0x7, 0x5, 0x0, 0x9, 0x1, 0x0, 0x7fffffff}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x12f85901]}, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000080)="fc") writev(r2, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) ppoll(&(0x7f0000000380), 0x0, &(0x7f0000000400)={0x77359400}, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0x10) socket$inet(0x2, 0x5, 0x1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 436.344569ms ago: executing program 1 (id=1582): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000532000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) 333.449862ms ago: executing program 0 (id=1583): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@sco={0x1f, @none}, 0x80, &(0x7f0000000500)}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x27, 0x8, 0x0, 0x9}, 0xe) socket(0x11, 0x4, 0x9) socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x6, 0x200, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x9, 0x6a, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac010000120a01020000000000000000020000000900020073797a300000000008000440000000000900010073797a30000000000800034000000005"], 0x1d4}}, 0x4) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r3, 0x0, &(0x7f00000000c0)=""/66}, 0x20) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x7fff, r2}, 0x38) 284.543676ms ago: executing program 1 (id=1584): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getpid() ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x14, r2, 0xb63}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x9, 0x3, 0x0, 0x6, 0xfffffefa, 0x22}, [@TCA_NETEM_RATE={0x14, 0x6, {0xe1, 0x79d, 0x0, 0x3}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xe61c6a5c983a3b82}]}}}]}, 0x6c}}, 0x0) socket$inet(0x2, 0x2, 0x2) 0s ago: executing program 1 (id=1585): socket$inet6(0xa, 0x802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r0, 0x0) unshare(0x2c060000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r2, 0x0, 0x20000000) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x14}}, 0x8018) sendmmsg$inet(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) unshare(0xc020400) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) close(0x3) kernel console output (not intermixed with test programs): [ T8666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.312226][ T8666] R13: 0000000000000000 R14: 00007f92b27a5fa0 R15: 00007ffcaed64058 [ 190.312259][ T8666] [ 190.540616][ T8670] netlink: 36 bytes leftover after parsing attributes in process `syz.4.843'. [ 190.692060][ T8500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.827333][ T8500] veth0_vlan: entered promiscuous mode [ 190.866741][ T8500] veth1_vlan: entered promiscuous mode [ 190.931289][ T5856] Bluetooth: hci3: command tx timeout [ 191.132716][ T8500] veth0_macvtap: entered promiscuous mode [ 191.176526][ T8500] veth1_macvtap: entered promiscuous mode [ 191.230939][ T8500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.255123][ T8500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.276657][ T8500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.296822][ T8500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.308808][ T8500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.323962][ T8500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.368591][ T8500] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.385840][ T8500] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.395643][ T8500] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.411818][ T8500] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.515473][ T8697] netlink: 16 bytes leftover after parsing attributes in process `syz.3.852'. [ 191.568425][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.604058][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.662374][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.670585][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.728845][ T8702] block nbd1: NBD_DISCONNECT [ 191.741712][ T8702] block nbd1: Send disconnect failed -32 [ 192.028170][ T8712] FAULT_INJECTION: forcing a failure. [ 192.028170][ T8712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.053315][ T8712] CPU: 0 UID: 0 PID: 8712 Comm: syz.3.856 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 192.053346][ T8712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 192.053358][ T8712] Call Trace: [ 192.053366][ T8712] [ 192.053374][ T8712] dump_stack_lvl+0x241/0x360 [ 192.053409][ T8712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.053435][ T8712] ? __pfx__printk+0x10/0x10 [ 192.053474][ T8712] should_fail_ex+0x424/0x570 [ 192.053509][ T8712] _copy_to_user+0x31/0xb0 [ 192.053537][ T8712] bpf_test_finish+0x626/0x930 [ 192.053573][ T8712] ? __pfx_bpf_test_finish+0x10/0x10 [ 192.053605][ T8712] ? rep_movs_alternative+0x4a/0x90 [ 192.053629][ T8712] bpf_prog_test_run_xdp+0x8f8/0x1200 [ 192.053676][ T8712] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 192.053703][ T8712] ? __fget_files+0x2a/0x420 [ 192.053732][ T8712] ? __fget_files+0x2a/0x420 [ 192.053763][ T8712] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 192.053790][ T8712] bpf_prog_test_run+0x2e4/0x360 [ 192.053814][ T8712] __sys_bpf+0x4ee/0x8b0 [ 192.053835][ T8712] ? __pfx___sys_bpf+0x10/0x10 [ 192.053870][ T8712] ? ksys_write+0x275/0x2d0 [ 192.053906][ T8712] __x64_sys_bpf+0x7c/0x90 [ 192.053934][ T8712] do_syscall_64+0xf3/0x230 [ 192.053958][ T8712] ? clear_bhb_loop+0x45/0xa0 [ 192.053991][ T8712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.054010][ T8712] RIP: 0033:0x7f9774d8d169 [ 192.054030][ T8712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.054046][ T8712] RSP: 002b:00007f9775c73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 192.054068][ T8712] RAX: ffffffffffffffda RBX: 00007f9774fa5fa0 RCX: 00007f9774d8d169 [ 192.054082][ T8712] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 192.054094][ T8712] RBP: 00007f9775c73090 R08: 0000000000000000 R09: 0000000000000000 [ 192.054106][ T8712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.054117][ T8712] R13: 0000000000000000 R14: 00007f9774fa5fa0 R15: 00007ffe3541c3a8 [ 192.054150][ T8712] [ 192.389196][ T6788] tipc: Subscription rejected, illegal request [ 192.457097][ T8720] xt_cgroup: invalid path, errno=-2 [ 192.457818][ T8723] netlink: 9 bytes leftover after parsing attributes in process `syz.1.862'. [ 192.482680][ T8723] gretap0: entered promiscuous mode [ 192.529289][ T8723] netlink: 5 bytes leftover after parsing attributes in process `syz.1.862'. [ 192.551382][ T8723] 0ªX¹¦D: renamed from gretap0 [ 192.574269][ T8723] 0ªX¹¦D: left promiscuous mode [ 192.579457][ T8723] 0ªX¹¦D: entered allmulticast mode [ 192.595895][ T8723] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 192.643690][ T5895] hid (null): unknown global tag 0xd [ 192.663862][ T5895] hid-generic 0005:0458:0009.0002: unknown global tag 0xd [ 192.677829][ T5895] hid-generic 0005:0458:0009.0002: item 0 2 1 13 parsing failed [ 192.687240][ T5895] hid-generic 0005:0458:0009.0002: probe with driver hid-generic failed with error -22 [ 192.717974][ T8738] netlink: 128 bytes leftover after parsing attributes in process `syz.1.866'. [ 192.850506][ T6788] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.979236][ T8738] gretap0 speed is unknown, defaulting to 1000 [ 193.334351][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.870'. [ 193.350676][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.870'. [ 193.406324][ T8748] netlink: 'syz.4.870': attribute type 1 has an invalid length. [ 193.440813][ T8753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.871'. [ 193.474537][ T6788] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.547356][ T8755] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (134217729), value rounded to 0 ms [ 193.713568][ T8763] netlink: 24 bytes leftover after parsing attributes in process `syz.4.874'. [ 193.775809][ T6788] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.834564][ T5149] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 193.847919][ T5149] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 193.857021][ T5149] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 193.867375][ T5149] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 193.877398][ T8770] netlink: 16 bytes leftover after parsing attributes in process `syz.3.876'. [ 193.886923][ T5149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.110014][ T8772] netlink: 84 bytes leftover after parsing attributes in process `syz.3.878'. [ 194.150203][ T6788] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.219245][ T8764] gretap0 speed is unknown, defaulting to 1000 [ 194.336920][ T8765] gretap0 speed is unknown, defaulting to 1000 [ 194.479974][ T8781] bridge0: port 4(ipvlan2) entered blocking state [ 194.502937][ T8781] bridge0: port 4(ipvlan2) entered disabled state [ 194.518655][ T8781] ipvlan2: entered allmulticast mode [ 194.535489][ T8781] bridge0: entered allmulticast mode [ 194.557803][ T8781] ipvlan2: left allmulticast mode [ 194.570771][ T8781] bridge0: left allmulticast mode [ 194.589801][ T8787] netlink: 'syz.3.882': attribute type 4 has an invalid length. [ 194.903146][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 194.972706][ T5856] block nbd1: Receive control failed (result -107) [ 195.012088][ T8800] nbd1: detected capacity change from 0 to 256 [ 195.085078][ T6788] bridge_slave_1: left allmulticast mode [ 195.107697][ T6788] bridge_slave_1: left promiscuous mode [ 195.118928][ T6788] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.188778][ T6788] bridge_slave_0: left allmulticast mode [ 195.196851][ T6788] bridge_slave_0: left promiscuous mode [ 195.205445][ T6788] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.254057][ T8815] block nbd3: NBD_DISCONNECT [ 195.276008][ T8815] block nbd3: Send disconnect failed -32 [ 195.865039][ T6788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.876111][ T6788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.887765][ T6788] bond0 (unregistering): Released all slaves [ 195.982723][ T5856] Bluetooth: hci3: command tx timeout [ 196.025062][ T8812] gretap0 speed is unknown, defaulting to 1000 [ 196.189757][ T8837] vlan0: entered promiscuous mode [ 196.412333][ T8845] netlink: 'syz.4.896': attribute type 6 has an invalid length. [ 196.534519][ T8765] chnl_net:caif_netlink_parms(): no params data found [ 196.768737][ T6788] hsr_slave_0: left promiscuous mode [ 196.795467][ T6788] hsr_slave_1: left promiscuous mode [ 196.804151][ T6788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.827985][ T6788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.843224][ T6788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.843245][ T8863] netlink: 'syz.0.901': attribute type 1 has an invalid length. [ 196.851087][ T6788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.895995][ T6788] veth1_macvtap: left promiscuous mode [ 196.910795][ T6788] veth0_macvtap: left promiscuous mode [ 196.918386][ T6788] veth1_vlan: left promiscuous mode [ 196.928275][ T6788] veth0_vlan: left promiscuous mode [ 197.708777][ T6788] team0 (unregistering): Port device team_slave_1 removed [ 197.749701][ T6788] team0 (unregistering): Port device team_slave_0 removed [ 198.066530][ T5856] Bluetooth: hci3: command tx timeout [ 198.163862][ T8874] sch_fq: defrate 511 ignored. [ 198.429714][ T8765] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.452595][ T8765] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.471931][ T8765] bridge_slave_0: entered allmulticast mode [ 198.496311][ T8765] bridge_slave_0: entered promiscuous mode [ 198.522510][ T8765] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.543134][ T8765] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.550764][ T8765] bridge_slave_1: entered allmulticast mode [ 198.576691][ T8765] bridge_slave_1: entered promiscuous mode [ 198.710709][ T8765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.752381][ T8765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.845276][ T8765] team0: Port device team_slave_0 added [ 198.863285][ T8765] team0: Port device team_slave_1 added [ 198.968850][ T8765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.995192][ T8765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.042054][ T8765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.058565][ T8765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.066152][ T8765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.093097][ T8765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.208467][ T8765] hsr_slave_0: entered promiscuous mode [ 199.215944][ T8765] hsr_slave_1: entered promiscuous mode [ 199.225362][ T8765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.233371][ T8765] Cannot create hsr debugfs directory [ 199.318224][ T8908] __nla_validate_parse: 9 callbacks suppressed [ 199.318247][ T8908] netlink: 16 bytes leftover after parsing attributes in process `syz.4.913'. [ 199.348364][ T8908] gretap0: entered promiscuous mode [ 199.356571][ T8908] gretap0: left promiscuous mode [ 199.465629][ T8912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.915'. [ 199.672552][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.916'. [ 199.717226][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.916'. [ 199.736337][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.916'. [ 199.766264][ T8921] block nbd1: NBD_DISCONNECT [ 199.780093][ T8921] block nbd1: Send disconnect failed -32 [ 199.788522][ T8921] block nbd1: shutting down sockets [ 200.079344][ T8932] netlink: 72 bytes leftover after parsing attributes in process `syz.0.922'. [ 200.132732][ T5856] Bluetooth: hci3: command tx timeout [ 200.195417][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.924'. [ 200.235309][ T8765] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 200.249078][ T8765] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 200.290777][ T8765] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 200.314613][ T8765] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 200.390303][ T8943] vlan2: entered promiscuous mode [ 200.666017][ T8959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.932'. [ 200.689645][ T8961] netlink: 44 bytes leftover after parsing attributes in process `syz.0.931'. [ 200.701360][ T8960] netlink: 44 bytes leftover after parsing attributes in process `syz.0.931'. [ 200.747904][ T8765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.887810][ T8765] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.996308][ T8969] 0ªX¹¦D: left allmulticast mode [ 201.214413][ T8969] bridge0: port 3(batadv0) entered disabled state [ 201.221447][ T8969] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.229045][ T8969] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.446762][ T8969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.481169][ T8969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.706871][ T8969] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.718180][ T8969] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.728157][ T8969] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.737907][ T8969] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.882574][ T8969] ip6gre1: left allmulticast mode [ 201.909291][ T3010] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.916709][ T3010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.116908][ T3010] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.124477][ T3010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.148885][ T9004] netlink: 'syz.1.940': attribute type 1 has an invalid length. [ 202.191486][ T9004] netlink: 'syz.1.940': attribute type 4 has an invalid length. [ 202.213215][ T5856] Bluetooth: hci3: command tx timeout [ 202.229262][ T9004] netlink: 'syz.1.940': attribute type 1 has an invalid length. [ 202.279838][ T9004] netlink: 'syz.1.940': attribute type 4 has an invalid length. [ 202.400840][ T9013] vlan0: entered promiscuous mode [ 202.645433][ T9018] @ÿ,: renamed from bond_slave_0 [ 202.685215][ T5856] block nbd1: Receive control failed (result -107) [ 202.716285][ T9026] nbd1: detected capacity change from 0 to 256 [ 202.724594][ T8765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.844010][ T8765] veth0_vlan: entered promiscuous mode [ 202.885272][ T9035] gretap0: entered promiscuous mode [ 202.898924][ T9035] gretap0: left promiscuous mode [ 203.222416][ T8765] veth1_vlan: entered promiscuous mode [ 203.360717][ T8765] veth0_macvtap: entered promiscuous mode [ 203.406765][ T8765] veth1_macvtap: entered promiscuous mode [ 203.512753][ T8765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.554496][ T8765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.633970][ T8765] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.646266][ T8765] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.669291][ T8765] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.680082][ T8765] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.698111][ T9061] IPv6: NLM_F_CREATE should be specified when creating new route [ 203.773276][ T9064] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.969705][ T9064] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.029631][ T3010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.037796][ T3010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.063506][ T9064] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.091391][ T9072] 0ªX¹¦D: entered promiscuous mode [ 204.100800][ T9072] 0ªX¹¦D: left promiscuous mode [ 204.151097][ T9074] gretap1: entered promiscuous mode [ 204.163342][ T9064] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.223032][ T6779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.242413][ T6779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.326078][ T9064] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.387757][ T9064] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.449030][ T9064] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.653700][ T9064] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.699984][ T9087] __nla_validate_parse: 15 callbacks suppressed [ 204.700012][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.967'. [ 204.730959][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.967'. [ 204.753598][ T9087] netlink: 'syz.4.967': attribute type 1 has an invalid length. [ 205.455686][ T9103] netlink: 9 bytes leftover after parsing attributes in process `syz.0.972'. [ 205.480824][ T9103] 0·: renamed from hsr_slave_1 [ 205.489514][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.974'. [ 205.516600][ T9103] 0·: entered allmulticast mode [ 205.528467][ T9103] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 205.803034][ T9119] netlink: 44 bytes leftover after parsing attributes in process `syz.0.978'. [ 205.929316][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.4.979'. [ 206.080547][ T5149] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 206.091500][ T5149] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 206.099818][ T5149] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 206.101858][ T9133] netlink: 132 bytes leftover after parsing attributes in process `syz.4.983'. [ 206.129338][ T5149] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 206.138784][ T5149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 206.179062][ T9133] ªªªªªª: renamed from lo [ 206.188773][ T9134] netlink: 88 bytes leftover after parsing attributes in process `syz.3.982'. [ 206.200650][ T9134] netlink: 'syz.3.982': attribute type 1 has an invalid length. [ 206.213609][ T9134] netlink: 224 bytes leftover after parsing attributes in process `syz.3.982'. [ 206.282124][ T9133] netlink: 136 bytes leftover after parsing attributes in process `syz.4.983'. [ 206.311169][ T9133] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 206.333090][ T9128] gretap0 speed is unknown, defaulting to 1000 [ 206.758704][ T9152] vlan2: entered promiscuous mode [ 206.857297][ T9154] pimreg: entered allmulticast mode [ 206.874472][ T9128] chnl_net:caif_netlink_parms(): no params data found [ 206.896612][ T9154] 8021q: VLANs not supported on pimreg [ 207.362682][ T9128] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.380309][ T9128] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.392786][ T9128] bridge_slave_0: entered allmulticast mode [ 207.415570][ T9128] bridge_slave_0: entered promiscuous mode [ 207.435946][ T9128] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.453478][ T9128] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.488577][ T9128] bridge_slave_1: entered allmulticast mode [ 207.516477][ T9128] bridge_slave_1: entered promiscuous mode [ 207.666669][ T9188] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 207.789622][ T9128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.820227][ T9128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.024908][ T9128] team0: Port device team_slave_0 added [ 208.052302][ T9128] team0: Port device team_slave_1 added [ 208.116542][ T9204] netlink: 'syz.4.1008': attribute type 1 has an invalid length. [ 208.211360][ T5149] Bluetooth: hci3: command tx timeout [ 208.250528][ T9128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.269884][ T9128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.331121][ T9128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.351664][ T9128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.371751][ T9128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.451635][ T9128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.525314][ T9207] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.855103][ T9128] hsr_slave_0: entered promiscuous mode [ 208.863495][ T9128] hsr_slave_1: entered promiscuous mode [ 208.887404][ T9128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.911175][ T9128] Cannot create hsr debugfs directory [ 209.054726][ T9243] 0ªX¹¦D: entered promiscuous mode [ 209.082079][ T9243] 0ªX¹¦D: left promiscuous mode [ 209.088476][ T9245] netlink: 'syz.3.1021': attribute type 1 has an invalid length. [ 209.318921][ T9252] IPv6: syztnl0: Disabled Multicast RS [ 209.487128][ T9] IPVS: starting estimator thread 0... [ 209.581735][ T9258] IPVS: using max 27 ests per chain, 64800 per kthread [ 209.676770][ T9128] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.794300][ T9128] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.815737][ T9274] sctp: [Deprecated]: syz.1.1030 (pid 9274) Use of int in max_burst socket option deprecated. [ 209.815737][ T9274] Use struct sctp_assoc_value instead [ 209.859965][ T9275] __nla_validate_parse: 10 callbacks suppressed [ 209.859992][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1032'. [ 209.951578][ T9128] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.088648][ T9128] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.210576][ T9286] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1036'. [ 210.291378][ T5843] Bluetooth: hci3: command tx timeout [ 210.299305][ T9286] gretap0: entered promiscuous mode [ 210.312845][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1035'. [ 210.331325][ T9288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1035'. [ 210.345074][ T9286] gretap0: left promiscuous mode [ 210.356777][ T9288] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1035'. [ 210.441905][ T5843] block nbd3: Receive control failed (result -107) [ 210.491086][ T9288] nbd3: detected capacity change from 0 to 256 [ 210.665444][ T9128] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 210.681867][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1037'. [ 210.709225][ T9128] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 210.745490][ T9290] xt_bpf: check failed: parse error [ 210.757886][ T9128] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 210.805783][ T9128] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 211.049851][ T9303] syzkaller0: entered promiscuous mode [ 211.063604][ T9303] syzkaller0: entered allmulticast mode [ 211.457472][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1045'. [ 211.534609][ T9320] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 211.615897][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1048'. [ 211.625032][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1048'. [ 211.634445][ T9322] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1048'. [ 211.704277][ T5843] block nbd16: Receive control failed (result -107) [ 211.737704][ T9322] nbd16: detected capacity change from 0 to 256 [ 212.296655][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 212.306339][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 212.374535][ T5149] Bluetooth: hci3: command tx timeout [ 212.935009][ T9317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.118259][ T9128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.247046][ T9128] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.285129][ T9333] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 213.360168][ T9340] netlink: 'syz.4.1055': attribute type 1 has an invalid length. [ 213.437688][ T3010] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.444965][ T3010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.559184][ T3010] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.566458][ T3010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.176869][ T9380] netlink: 'syz.1.1068': attribute type 1 has an invalid length. [ 214.224623][ T9128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.404953][ T9128] veth0_vlan: entered promiscuous mode [ 214.451638][ T5149] Bluetooth: hci3: command tx timeout [ 214.460162][ T9128] veth1_vlan: entered promiscuous mode [ 214.525049][ T9397] vlan2: entered promiscuous mode [ 214.648259][ T9128] veth0_macvtap: entered promiscuous mode [ 214.673497][ T9128] veth1_macvtap: entered promiscuous mode [ 214.744087][ T9128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.763657][ T9128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.780908][ T9128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.815783][ T9128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.832350][ T9128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.853026][ T9128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.868938][ T9128] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.884475][ T9128] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.897080][ T9128] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.951314][ T9128] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.975613][ T9412] netlink: 'syz.1.1076': attribute type 1 has an invalid length. [ 214.996465][ T9412] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 215.243501][ T9423] __nla_validate_parse: 9 callbacks suppressed [ 215.243525][ T9423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1081'. [ 215.279425][ T3010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.290582][ T3010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.388419][ T6779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.418780][ T6779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.472459][ T9427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1083'. [ 215.545185][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1082'. [ 215.554423][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1082'. [ 215.573798][ T9429] netlink: 'syz.3.1082': attribute type 1 has an invalid length. [ 215.636210][ T9439] netlink: 'syz.1.1083': attribute type 6 has an invalid length. [ 215.907222][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1088'. [ 215.931706][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1088'. [ 216.901154][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1095'. [ 217.125089][ T9478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'. [ 217.135701][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1097'. [ 217.161344][ T9478] netlink: 'syz.4.1097': attribute type 1 has an invalid length. [ 217.168586][ T9480] netlink: 'syz.0.1098': attribute type 1 has an invalid length. [ 217.326738][ T9485] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1099'. [ 217.333965][ T9482] 8021q: adding VLAN 0 to HW filter on device bond4 [ 217.345934][ T9482] bond3: (slave bond4): making interface the new active one [ 217.354423][ T9482] bond3: (slave bond4): Enslaving as an active interface with an up link [ 217.400825][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.412240][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.425009][ T9485] gretap0: entered promiscuous mode [ 217.432069][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.442666][ T9485] gretap0: left promiscuous mode [ 217.461357][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.475754][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.537993][ T9487] gretap0 speed is unknown, defaulting to 1000 [ 217.708856][ T9493] macsec1: entered promiscuous mode [ 217.718006][ T9493] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 217.728611][ T9493] macsec1: entered allmulticast mode [ 217.740916][ T9493] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 217.884866][ T9487] chnl_net:caif_netlink_parms(): no params data found [ 218.419282][ T9487] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.456170][ T9487] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.485159][ T9487] bridge_slave_0: entered allmulticast mode [ 218.514498][ T9487] bridge_slave_0: entered promiscuous mode [ 218.534202][ T9487] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.573366][ T9487] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.580697][ T9487] bridge_slave_1: entered allmulticast mode [ 218.588867][ T9487] bridge_slave_1: entered promiscuous mode [ 218.689622][ T9487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.710380][ T9487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.817772][ T9487] team0: Port device team_slave_0 added [ 218.837502][ T9487] team0: Port device team_slave_1 added [ 219.016705][ T9487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.034253][ T9487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.091093][ T9487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.120894][ T9487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.134073][ T9487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.182596][ T9487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.412494][ T9487] hsr_slave_0: entered promiscuous mode [ 219.440599][ T9487] hsr_slave_1: entered promiscuous mode [ 219.466065][ T9487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.494407][ T9487] Cannot create hsr debugfs directory [ 219.571280][ T5149] Bluetooth: hci3: command tx timeout [ 219.985198][ T9487] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.143711][ T9487] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.253444][ T9487] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.361638][ T9487] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.633799][ T9487] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 220.656369][ T9487] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 220.684269][ T9487] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 220.704010][ T9487] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 220.868970][ T9487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.906340][ T9487] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.940489][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.947647][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.000814][ T1010] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.008121][ T1010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.061828][ T9599] __nla_validate_parse: 9 callbacks suppressed [ 221.061851][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1131'. [ 221.318586][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1134'. [ 221.476740][ T9615] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1135'. [ 221.559453][ T9620] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 221.590272][ T9487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.641452][ T9620] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1137'. [ 221.654905][ T5149] Bluetooth: hci3: command tx timeout [ 221.684924][ T9623] vlan0: entered promiscuous mode [ 221.744035][ T9487] veth0_vlan: entered promiscuous mode [ 221.761443][ T9487] veth1_vlan: entered promiscuous mode [ 221.810650][ T9487] veth0_macvtap: entered promiscuous mode [ 221.825035][ T9487] veth1_macvtap: entered promiscuous mode [ 221.855888][ T9487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.867153][ T9487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.877589][ T9487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.891779][ T9487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.904354][ T9487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.918673][ T9487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.930539][ T9487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.951262][ T9487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.964852][ T9487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.977499][ T9487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.006273][ T9487] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.018861][ T9487] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.028249][ T9487] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.037402][ T9487] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.141573][ T9631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 222.158836][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.159099][ T9631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 222.185139][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.237687][ T6779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.247843][ T6779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.395368][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1143'. [ 222.693199][ T9649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1147'. [ 223.035962][ T9657] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1150'. [ 223.056094][ T9659] x_tables: unsorted underflow at hook 3 [ 223.132383][ T9661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1149'. [ 224.444588][ T5149] block nbd17: Receive control failed (result -107) [ 224.502908][ T9697] nbd17: detected capacity change from 0 to 256 [ 224.888281][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 224.899341][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 224.908053][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 224.918492][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 224.927543][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.100843][ T9718] gretap0 speed is unknown, defaulting to 1000 [ 225.178283][ T9733] macvlan3: entered promiscuous mode [ 225.194067][ T9733] bridge0: port 2(macvlan3) entered blocking state [ 225.210785][ T9733] bridge0: port 2(macvlan3) entered disabled state [ 225.218576][ T9733] macvlan3: entered allmulticast mode [ 225.232212][ T9733] bridge0: entered allmulticast mode [ 225.245537][ T9733] macvlan3: left allmulticast mode [ 225.250935][ T9733] bridge0: left allmulticast mode [ 225.410691][ T5856] block nbd18: Receive control failed (result -107) [ 225.451916][ T9741] nbd18: detected capacity change from 0 to 256 [ 225.579065][ T9751] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 225.877357][ T9718] chnl_net:caif_netlink_parms(): no params data found [ 226.163164][ T9783] FAULT_INJECTION: forcing a failure. [ 226.163164][ T9783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.177245][ T9783] CPU: 1 UID: 0 PID: 9783 Comm: syz.0.1189 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 226.177274][ T9783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 226.177286][ T9783] Call Trace: [ 226.177292][ T9783] [ 226.177301][ T9783] dump_stack_lvl+0x241/0x360 [ 226.177334][ T9783] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.177360][ T9783] ? __pfx__printk+0x10/0x10 [ 226.177400][ T9783] should_fail_ex+0x424/0x570 [ 226.177436][ T9783] _copy_from_user+0x2d/0xb0 [ 226.177463][ T9783] copy_msghdr_from_user+0xb3/0x580 [ 226.177495][ T9783] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 226.177524][ T9783] ? __fget_files+0x2a/0x420 [ 226.177554][ T9783] ? __fget_files+0x2a/0x420 [ 226.177589][ T9783] __sys_sendmsg+0x20a/0x360 [ 226.177616][ T9783] ? __pfx___sys_sendmsg+0x10/0x10 [ 226.177697][ T9783] ? do_syscall_64+0xb6/0x230 [ 226.177724][ T9783] do_syscall_64+0xf3/0x230 [ 226.177747][ T9783] ? clear_bhb_loop+0x45/0xa0 [ 226.177771][ T9783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.177790][ T9783] RIP: 0033:0x7f92b258d169 [ 226.177808][ T9783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.177825][ T9783] RSP: 002b:00007f92b23f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.177848][ T9783] RAX: ffffffffffffffda RBX: 00007f92b27a5fa0 RCX: 00007f92b258d169 [ 226.177862][ T9783] RDX: 00000000000000c0 RSI: 0000200000000280 RDI: 0000000000000004 [ 226.177875][ T9783] RBP: 00007f92b23f7090 R08: 0000000000000000 R09: 0000000000000000 [ 226.177888][ T9783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.177900][ T9783] R13: 0000000000000000 R14: 00007f92b27a5fa0 R15: 00007ffcaed64058 [ 226.177933][ T9783] [ 226.384976][ T9718] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.407275][ T9718] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.610768][ T9718] bridge_slave_0: entered allmulticast mode [ 226.630682][ T9718] bridge_slave_0: entered promiscuous mode [ 226.652901][ T9718] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.660366][ T9718] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.666836][ T9793] __nla_validate_parse: 13 callbacks suppressed [ 226.666857][ T9793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1191'. [ 226.674466][ T9718] bridge_slave_1: entered allmulticast mode [ 226.698997][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1192'. [ 226.761757][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1192'. [ 226.775665][ T9718] bridge_slave_1: entered promiscuous mode [ 226.793438][ T9795] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1192'. [ 226.847889][ T9796] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 226.857282][ T9801] netlink: 'syz.4.1191': attribute type 3 has an invalid length. [ 226.873158][ T9801] netlink: 'syz.4.1191': attribute type 1 has an invalid length. [ 226.873340][ T5856] block nbd19: Receive control failed (result -107) [ 226.880921][ T9801] netlink: 506 bytes leftover after parsing attributes in process `syz.4.1191'. [ 226.911422][ T9795] nbd19: detected capacity change from 0 to 256 [ 227.011521][ T5856] Bluetooth: hci3: command tx timeout [ 227.039883][ T9718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.063734][ T9718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.157358][ T9810] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1196'. [ 227.216218][ T9811] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 0, id = 0 [ 227.262900][ T9718] team0: Port device team_slave_0 added [ 227.310186][ T9718] team0: Port device team_slave_1 added [ 227.358541][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1197'. [ 227.374161][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1197'. [ 227.415573][ T9819] FAULT_INJECTION: forcing a failure. [ 227.415573][ T9819] name failslab, interval 1, probability 0, space 0, times 0 [ 227.456646][ T9819] CPU: 0 UID: 0 PID: 9819 Comm: syz.3.1200 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 227.456679][ T9819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 227.456691][ T9819] Call Trace: [ 227.456699][ T9819] [ 227.456708][ T9819] dump_stack_lvl+0x241/0x360 [ 227.456741][ T9819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.456766][ T9819] ? __pfx__printk+0x10/0x10 [ 227.456795][ T9819] ? __pfx___might_resched+0x10/0x10 [ 227.456822][ T9819] should_fail_ex+0x424/0x570 [ 227.456856][ T9819] should_failslab+0xac/0x100 [ 227.456882][ T9819] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 227.456906][ T9819] ? __alloc_skb+0x1c2/0x480 [ 227.456937][ T9819] __alloc_skb+0x1c2/0x480 [ 227.456968][ T9819] ? __pfx___alloc_skb+0x10/0x10 [ 227.456996][ T9819] ? netlink_autobind+0xd6/0x2f0 [ 227.457020][ T9819] ? netlink_autobind+0x2b0/0x2f0 [ 227.457048][ T9819] netlink_sendmsg+0x638/0xcd0 [ 227.457072][ T9819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.457097][ T9819] ? aa_sock_msg_perm+0x91/0x160 [ 227.457115][ T9819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.457129][ T9819] __sock_sendmsg+0x221/0x270 [ 227.457154][ T9819] ____sys_sendmsg+0x523/0x860 [ 227.457182][ T9819] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.457199][ T9819] ? __fget_files+0x2a/0x420 [ 227.457229][ T9819] ? __fget_files+0x2a/0x420 [ 227.457259][ T9819] __sys_sendmsg+0x271/0x360 [ 227.457274][ T9819] ? __pfx___sys_sendmsg+0x10/0x10 [ 227.457317][ T9819] ? do_syscall_64+0xb6/0x230 [ 227.457334][ T9819] do_syscall_64+0xf3/0x230 [ 227.457348][ T9819] ? clear_bhb_loop+0x45/0xa0 [ 227.457361][ T9819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.457373][ T9819] RIP: 0033:0x7f9774d8d169 [ 227.457385][ T9819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.457395][ T9819] RSP: 002b:00007f9775c73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.457410][ T9819] RAX: ffffffffffffffda RBX: 00007f9774fa5fa0 RCX: 00007f9774d8d169 [ 227.457419][ T9819] RDX: 00000000000000c0 RSI: 0000200000000280 RDI: 0000000000000004 [ 227.457426][ T9819] RBP: 00007f9775c73090 R08: 0000000000000000 R09: 0000000000000000 [ 227.457433][ T9819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.457440][ T9819] R13: 0000000000000000 R14: 00007f9774fa5fa0 R15: 00007ffe3541c3a8 [ 227.457465][ T9819] [ 227.702522][ T9718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.709712][ T9718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.750722][ T9718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.766189][ T9718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.774467][ T9718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.801189][ T9718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.938187][ T9718] hsr_slave_0: entered promiscuous mode [ 227.979818][ T9718] hsr_slave_1: entered promiscuous mode [ 228.017176][ T9718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.031672][ T9718] Cannot create hsr debugfs directory [ 228.511894][ T9718] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.582813][ T9850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1210'. [ 228.684504][ T9718] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.798575][ T9718] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.851675][ T9855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.875112][ T9718] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.888386][ T9855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.091392][ T5856] Bluetooth: hci3: command tx timeout [ 229.160860][ T9718] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 229.184041][ T9718] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 229.186257][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1216'. [ 229.209101][ T9718] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 229.227839][ T9718] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 229.576303][ T9718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.629180][ T9718] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.694844][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.702154][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.759837][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.767211][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.112519][ T9899] block nbd3: NBD_DISCONNECT [ 230.117219][ T9899] block nbd3: Send disconnect failed -32 [ 230.134129][ T9899] block nbd3: shutting down sockets [ 230.335869][ T9718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.463495][ T9908] dvmrp8: entered allmulticast mode [ 230.485913][ T9908] dvmrp8: left allmulticast mode [ 230.606214][ T9913] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 230.810664][ T9718] veth0_vlan: entered promiscuous mode [ 230.886612][ T9718] veth1_vlan: entered promiscuous mode [ 230.994186][ T9718] veth0_macvtap: entered promiscuous mode [ 231.025099][ T9718] veth1_macvtap: entered promiscuous mode [ 231.085413][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.097353][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.108227][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.155352][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.165475][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.176334][ T5856] Bluetooth: hci3: command tx timeout [ 231.182112][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.194931][ T9718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.214573][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.225832][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.237548][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.249311][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.259927][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.270644][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.308009][ T9718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.357000][ T9718] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.369206][ T9718] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.391423][ T9718] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.410562][ T9718] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.714964][ T6779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.726869][ T6779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.801568][ T9949] block nbd4: NBD_DISCONNECT [ 231.807107][ T9949] block nbd4: Send disconnect failed -32 [ 231.838426][ T6783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.861950][ T6783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.994002][ T9959] netlink: 'syz.3.1246': attribute type 39 has an invalid length. [ 232.321608][ T9961] gretap0 speed is unknown, defaulting to 1000 [ 232.418842][ T9970] __nla_validate_parse: 7 callbacks suppressed [ 232.418866][ T9970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1249'. [ 233.576715][ T9986] siw: device registration error -23 [ 233.957320][ T9996] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1258'. [ 233.975289][ T9993] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1257'. [ 234.000956][ T9996] gretap0: entered promiscuous mode [ 234.017434][ T9996] gretap0: left promiscuous mode [ 234.110800][ T5149] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 234.131457][ T5149] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 234.153189][ T5149] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 234.172869][ T5149] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 234.181524][ T5149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 234.440133][T10014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1264'. [ 234.449500][T10014] caif0: Master is either lo or non-ether device [ 234.456768][ T9999] gretap0 speed is unknown, defaulting to 1000 [ 234.458166][T10012] netlink: 'syz.0.1263': attribute type 4 has an invalid length. [ 234.621558][T10001] gretap0 speed is unknown, defaulting to 1000 [ 234.683382][T10000] gretap0 speed is unknown, defaulting to 1000 [ 234.721875][T10017] siw: device registration error -23 [ 235.205933][T10056] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1273'. [ 235.367511][T10050] gretap0 speed is unknown, defaulting to 1000 [ 235.397934][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1275'. [ 235.407238][T10063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1275'. [ 235.419783][T10063] netlink: 'syz.0.1275': attribute type 1 has an invalid length. [ 235.906770][T10076] siw: device registration error -23 [ 236.067461][T10000] chnl_net:caif_netlink_parms(): no params data found [ 236.212769][ T5149] Bluetooth: hci3: command tx timeout [ 236.219973][T10091] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1281'. [ 236.414467][T10082] gretap0 speed is unknown, defaulting to 1000 [ 236.523536][T10103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1284'. [ 236.960965][T10000] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.975186][T10000] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.997452][T10000] bridge_slave_0: entered allmulticast mode [ 237.018642][T10000] bridge_slave_0: entered promiscuous mode [ 237.041841][T10098] gretap0 speed is unknown, defaulting to 1000 [ 237.224433][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1287'. [ 237.233763][T10111] netlink: 'syz.0.1287': attribute type 1 has an invalid length. [ 237.271644][T10000] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.280707][T10000] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.304687][T10000] bridge_slave_1: entered allmulticast mode [ 237.318007][T10000] bridge_slave_1: entered promiscuous mode [ 237.502496][T10000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.538852][T10000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.689522][T10115] tc_dump_action: action bad kind [ 237.735277][T10000] team0: Port device team_slave_0 added [ 237.755678][T10000] team0: Port device team_slave_1 added [ 237.843116][T10000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.861578][T10000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.915945][T10000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.971289][T10000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.978328][T10000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.089766][T10000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.163133][T10126] __nla_validate_parse: 1 callbacks suppressed [ 238.163154][T10126] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1293'. [ 238.282978][T10000] hsr_slave_0: entered promiscuous mode [ 238.289943][T10000] hsr_slave_1: entered promiscuous mode [ 238.296336][ T5149] Bluetooth: hci3: command tx timeout [ 238.315716][T10000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.328548][T10000] Cannot create hsr debugfs directory [ 238.640865][T10000] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.687489][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1298'. [ 238.704684][T10144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1298'. [ 238.747499][T10144] netlink: 'syz.3.1298': attribute type 1 has an invalid length. [ 238.814475][T10000] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.934036][T10000] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.132130][T10000] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.501209][T10182] Bluetooth: MGMT ver 1.23 [ 239.559387][T10000] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 239.588959][T10000] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 239.627337][T10000] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 239.664557][T10000] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 239.822602][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 239.831662][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1310'. [ 239.851370][T10188] netlink: 'syz.3.1310': attribute type 1 has an invalid length. [ 239.994851][T10197] siw: device registration error -23 [ 240.018004][T10000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.086725][T10000] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.106043][T10199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1313'. [ 240.182913][ T6783] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.190241][ T6783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.227010][T10207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1316'. [ 240.237302][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1316'. [ 240.273571][ T6783] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.280762][ T6783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.371222][ T5149] Bluetooth: hci3: command tx timeout [ 240.383324][T10207] gretap0 speed is unknown, defaulting to 1000 [ 240.507671][T10212] ªªªªªª: entered allmulticast mode [ 240.516095][T10212] A link change request failed with some changes committed already. Interface ªªªªªª may have been left with an inconsistent configuration, please check. [ 240.749719][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1322'. [ 240.897432][T10227] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1323'. [ 240.917761][ T30] audit: type=1800 audit(1744509366.628:7): pid=10229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1325" name="memory.events" dev="tmpfs" ino=1540 res=0 errno=0 [ 241.004192][T10000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.025358][ T30] audit: type=1804 audit(1744509366.738:8): pid=10233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1325" name="/newroot/298/memory.events" dev="tmpfs" ino=1540 res=1 errno=0 [ 241.135589][T10000] veth0_vlan: entered promiscuous mode [ 241.178551][T10000] veth1_vlan: entered promiscuous mode [ 241.289611][T10000] veth0_macvtap: entered promiscuous mode [ 241.324266][T10000] veth1_macvtap: entered promiscuous mode [ 241.402749][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.415422][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.445562][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.458432][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.468785][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.501596][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.513902][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.525312][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.537981][T10000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.553227][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.568812][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.594205][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.610900][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.621455][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.632168][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.642946][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.654229][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.669290][T10000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.687746][T10250] team_slave_0: entered promiscuous mode [ 241.709650][T10257] bond0: option all_slaves_active: invalid value (7) [ 241.793171][T10258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.874561][T10000] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.897558][T10000] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.925569][T10000] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.935915][T10000] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.016529][T10249] team_slave_0: left promiscuous mode [ 242.266357][T10288] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 242.357483][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.386617][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.451520][ T5149] Bluetooth: hci3: command tx timeout [ 242.489191][ T6779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.543404][T10288] gretap0 speed is unknown, defaulting to 1000 [ 242.549893][ T6779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.974614][T10301] wg1: entered promiscuous mode [ 242.992513][T10301] wg1: entered allmulticast mode [ 243.017459][T10311] netlink: 'syz.4.1349': attribute type 1 has an invalid length. [ 243.026273][T10311] netlink: 'syz.4.1349': attribute type 3 has an invalid length. [ 243.334548][T10317] __nla_validate_parse: 12 callbacks suppressed [ 243.334573][T10317] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1352'. [ 244.388491][T10326] gretap0 speed is unknown, defaulting to 1000 [ 244.850973][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 244.871410][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 244.879764][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 244.899612][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 244.909593][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 244.986722][T10351] gretap0 speed is unknown, defaulting to 1000 [ 245.396431][T10351] chnl_net:caif_netlink_parms(): no params data found [ 245.470701][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1365'. [ 245.755657][T10375] xt_bpf: check failed: parse error [ 246.046312][T10351] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.124262][T10351] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.140913][T10351] bridge_slave_0: entered allmulticast mode [ 246.170877][T10351] bridge_slave_0: entered promiscuous mode [ 246.198221][T10351] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.226274][T10351] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.241451][T10351] bridge_slave_1: entered allmulticast mode [ 246.270659][T10351] bridge_slave_1: entered promiscuous mode [ 246.446064][T10351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.494131][T10351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.618791][T10410] bridge0: port 2(batadv1) entered blocking state [ 246.650199][T10410] bridge0: port 2(batadv1) entered disabled state [ 246.657433][T10410] batadv1: entered allmulticast mode [ 246.665472][T10410] batadv1: entered promiscuous mode [ 246.683806][T10351] team0: Port device team_slave_0 added [ 246.710225][T10351] team0: Port device team_slave_1 added [ 246.863079][T10351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.890823][T10351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.980538][T10351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.011300][ T5149] Bluetooth: hci3: command tx timeout [ 247.014113][T10351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.031238][T10421] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1381'. [ 247.040334][T10351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.122191][ T1010] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 247.132042][ T1010] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 247.191347][T10351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.089842][T10351] hsr_slave_0: entered promiscuous mode [ 248.102450][T10351] hsr_slave_1: entered promiscuous mode [ 248.122028][T10351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.133290][T10351] Cannot create hsr debugfs directory [ 248.358312][T10446] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1389'. [ 248.398322][T10446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1389'. [ 248.716315][T10456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1393'. [ 248.868626][T10351] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.042585][T10351] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.091621][ T5149] Bluetooth: hci3: command tx timeout [ 249.173955][T10351] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.333866][T10351] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.384779][T10461] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1396'. [ 249.406853][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1396'. [ 249.710758][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1397'. [ 249.720460][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1397'. [ 249.808099][T10351] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 249.837073][T10468] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 249.861098][T10468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.900544][T10468] hsr0: entered promiscuous mode [ 249.911090][T10468] hsr0: entered allmulticast mode [ 249.926564][T10468] hsr_slave_0: entered allmulticast mode [ 249.941327][T10468] hsr_slave_1: entered allmulticast mode [ 249.981391][T10351] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 250.011573][T10351] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 250.032944][T10468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1398'. [ 250.186180][T10351] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 250.242056][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 250.252461][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 250.262982][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 250.272242][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 250.282603][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 251.010569][T10475] gretap0 speed is unknown, defaulting to 1000 [ 251.120856][T10480] block nbd0: NBD_DISCONNECT [ 251.126228][T10480] block nbd0: Send disconnect failed -32 [ 251.174539][ T5856] Bluetooth: hci3: command tx timeout [ 251.230679][T10483] netlink: 'syz.4.1402': attribute type 2 has an invalid length. [ 251.277696][T10351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.289446][T10483] netlink: 'syz.4.1402': attribute type 2 has an invalid length. [ 251.356627][T10351] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.547133][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.554460][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.565762][T10485] gretap0 speed is unknown, defaulting to 1000 [ 251.706895][ T6779] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.714168][ T6779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.802104][T10475] chnl_net:caif_netlink_parms(): no params data found [ 252.163164][T10506] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1406'. [ 252.243389][T10475] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.266625][T10475] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.281935][T10475] bridge_slave_0: entered allmulticast mode [ 252.303735][T10475] bridge_slave_0: entered promiscuous mode [ 252.322761][T10475] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.343460][T10475] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.350926][T10475] bridge_slave_1: entered allmulticast mode [ 252.372631][T10475] bridge_slave_1: entered promiscuous mode [ 252.379228][ T5149] Bluetooth: hci4: command tx timeout [ 252.519756][T10475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.539229][T10475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.699237][T10475] team0: Port device team_slave_0 added [ 252.745574][T10475] team0: Port device team_slave_1 added [ 252.750898][T10521] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 252.901984][T10351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.958973][T10475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.977183][T10475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.015937][T10475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.110551][T10475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.124684][T10475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.167324][T10475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.251462][ T5149] Bluetooth: hci3: command tx timeout [ 254.457966][ T5149] Bluetooth: hci4: command tx timeout [ 254.780711][T10475] hsr_slave_0: entered promiscuous mode [ 254.810351][T10475] hsr_slave_1: entered promiscuous mode [ 254.827347][T10475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.841242][T10475] Cannot create hsr debugfs directory [ 254.884475][T10533] gretap0 speed is unknown, defaulting to 1000 [ 254.901315][T10351] veth0_vlan: entered promiscuous mode [ 254.945110][T10539] FAULT_INJECTION: forcing a failure. [ 254.945110][T10539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.974820][T10539] CPU: 0 UID: 0 PID: 10539 Comm: syz.4.1415 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 254.974851][T10539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 254.974863][T10539] Call Trace: [ 254.974871][T10539] [ 254.974880][T10539] dump_stack_lvl+0x241/0x360 [ 254.974916][T10539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.974942][T10539] ? __pfx__printk+0x10/0x10 [ 254.974979][T10539] should_fail_ex+0x424/0x570 [ 254.975014][T10539] _copy_from_user+0x2d/0xb0 [ 254.975041][T10539] ep_eventpoll_ioctl+0x1b8/0x6f0 [ 254.975070][T10539] ? __pfx_ep_eventpoll_ioctl+0x10/0x10 [ 254.975100][T10539] ? __pfx_ep_eventpoll_ioctl+0x10/0x10 [ 254.975127][T10539] __se_sys_ioctl+0xf1/0x160 [ 254.975151][T10539] do_syscall_64+0xf3/0x230 [ 254.975176][T10539] ? clear_bhb_loop+0x45/0xa0 [ 254.975200][T10539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.975219][T10539] RIP: 0033:0x7f329678d169 [ 254.975237][T10539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.975254][T10539] RSP: 002b:00007f32975d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.975276][T10539] RAX: ffffffffffffffda RBX: 00007f32969a5fa0 RCX: 00007f329678d169 [ 254.975291][T10539] RDX: 0000200000002200 RSI: 0000000040088a01 RDI: 0000000000000003 [ 254.975304][T10539] RBP: 00007f32975d1090 R08: 0000000000000000 R09: 0000000000000000 [ 254.975316][T10539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.975327][T10539] R13: 0000000000000000 R14: 00007f32969a5fa0 R15: 00007ffecbc73448 [ 254.975358][T10539] [ 255.263038][T10351] veth1_vlan: entered promiscuous mode [ 255.536685][T10551] netlink: 'syz.4.1418': attribute type 11 has an invalid length. [ 255.564854][T10551] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1418'. [ 255.728618][T10475] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.780622][T10556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1420'. [ 255.796916][T10351] veth0_macvtap: entered promiscuous mode [ 255.820614][T10556] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 255.841392][T10351] veth1_macvtap: entered promiscuous mode [ 255.892777][T10351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.911083][T10351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.952420][T10351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.990770][T10351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.009367][T10566] siw: device registration error -23 [ 256.011041][T10351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.044763][T10351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.067394][T10351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.081353][T10351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.091732][T10351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.102630][T10351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.115283][T10351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.330831][T10475] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.388863][T10565] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.398474][T10565] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.407764][T10565] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.416602][T10565] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.470693][T10351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.482545][T10351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.493041][T10351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.503807][T10351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.513773][T10351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.524709][T10351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.539039][T10351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.550001][ T5149] Bluetooth: hci4: command tx timeout [ 256.556548][T10351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.566869][T10351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.577559][T10351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.603664][T10351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.630621][T10351] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.640937][T10351] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.650404][T10351] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.659340][T10351] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.714683][T10475] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.370713][T10588] batadv1: entered allmulticast mode [ 257.399639][T10588] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 257.784549][T10475] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.324401][T10601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1431'. [ 258.377899][T10599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1431'. [ 258.431298][T10599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1431'. [ 258.578055][T10606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1433'. [ 258.634046][ T5149] Bluetooth: hci4: command tx timeout [ 258.789339][T10475] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 258.822119][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.830673][T10475] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 258.844606][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.920428][T10475] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 258.945553][T10475] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 258.985545][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.996960][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.152039][T10619] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1436'. [ 259.196820][T10619] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1436'. [ 259.304827][T10475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.718514][T10475] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.807631][T10637] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.972268][T10639] bond2: (slave veth5): Enslaving as an active interface with an up link [ 260.015304][T10633] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 260.075196][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.082470][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.171309][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.178565][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.621704][T10475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.689904][T10475] veth0_vlan: entered promiscuous mode [ 260.704721][T10475] veth1_vlan: entered promiscuous mode [ 260.743640][T10475] veth0_macvtap: entered promiscuous mode [ 260.760143][T10475] veth1_macvtap: entered promiscuous mode [ 260.784526][T10475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.795519][T10475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.805632][T10475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.816607][T10475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.829948][T10475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.840534][T10475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.850584][T10475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.867903][T10475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.878033][T10475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.888835][T10475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.898795][T10475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.910018][T10475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.922753][T10475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.950091][T10475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.961443][T10475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.974174][T10475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.985926][T10475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.995941][T10475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.006607][T10475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.018105][T10475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.029026][T10475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.041102][T10475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.052441][T10475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.062551][T10475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.073157][T10475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.084974][T10475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.096928][T10475] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.106632][T10475] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.115490][T10475] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.124258][T10475] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.220325][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.228576][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.305462][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.332233][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.354331][T10654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1441'. [ 261.588081][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1443'. [ 261.980809][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 261.994520][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 262.015639][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 262.034277][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 262.043143][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 263.606847][T10670] gretap0 speed is unknown, defaulting to 1000 [ 263.650762][T10683] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1448'. [ 263.726720][T10685] FAULT_INJECTION: forcing a failure. [ 263.726720][T10685] name failslab, interval 1, probability 0, space 0, times 0 [ 263.771531][T10685] CPU: 1 UID: 0 PID: 10685 Comm: syz.4.1447 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 263.771565][T10685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 263.771576][T10685] Call Trace: [ 263.771584][T10685] [ 263.771593][T10685] dump_stack_lvl+0x241/0x360 [ 263.771628][T10685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.771653][T10685] ? __pfx__printk+0x10/0x10 [ 263.771683][T10685] ? __pfx___might_resched+0x10/0x10 [ 263.771710][T10685] should_fail_ex+0x424/0x570 [ 263.771745][T10685] should_failslab+0xac/0x100 [ 263.771773][T10685] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 263.771798][T10685] ? __alloc_skb+0x1c2/0x480 [ 263.771830][T10685] __alloc_skb+0x1c2/0x480 [ 263.771863][T10685] ? __pfx___alloc_skb+0x10/0x10 [ 263.771893][T10685] ? netlink_autobind+0xd6/0x2f0 [ 263.771916][T10685] ? netlink_autobind+0x2b0/0x2f0 [ 263.771947][T10685] netlink_sendmsg+0x638/0xcd0 [ 263.771988][T10685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.772019][T10685] ? aa_sock_msg_perm+0x91/0x160 [ 263.772061][T10685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.772084][T10685] __sock_sendmsg+0x221/0x270 [ 263.772118][T10685] ____sys_sendmsg+0x523/0x860 [ 263.772148][T10685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.772165][T10685] ? __fget_files+0x2a/0x420 [ 263.772197][T10685] ? __fget_files+0x2a/0x420 [ 263.772234][T10685] __sys_sendmsg+0x271/0x360 [ 263.772261][T10685] ? __pfx___sys_sendmsg+0x10/0x10 [ 263.772346][T10685] ? do_syscall_64+0xb6/0x230 [ 263.772374][T10685] do_syscall_64+0xf3/0x230 [ 263.772397][T10685] ? clear_bhb_loop+0x45/0xa0 [ 263.772421][T10685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.772439][T10685] RIP: 0033:0x7f329678d169 [ 263.772457][T10685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.772473][T10685] RSP: 002b:00007f32975d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.772496][T10685] RAX: ffffffffffffffda RBX: 00007f32969a5fa0 RCX: 00007f329678d169 [ 263.772511][T10685] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000009 [ 263.772523][T10685] RBP: 00007f32975d1090 R08: 0000000000000000 R09: 0000000000000000 [ 263.772535][T10685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.772547][T10685] R13: 0000000000000000 R14: 00007f32969a5fa0 R15: 00007ffecbc73448 [ 263.772580][T10685] [ 264.131839][ T5149] Bluetooth: hci3: command tx timeout [ 264.182582][T10683] gretap0 speed is unknown, defaulting to 1000 [ 264.822995][T10695] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1450'. [ 265.077165][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 265.087659][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 265.107402][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 265.123230][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 265.141505][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 265.158339][T10670] chnl_net:caif_netlink_parms(): no params data found [ 265.174302][T10704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1453'. [ 265.307167][T10707] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1454'. [ 265.410393][T10700] gretap0 speed is unknown, defaulting to 1000 [ 265.422383][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1454'. [ 265.454885][T10707] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1454'. [ 265.469502][T10718] siw: device registration error -23 [ 265.507290][T10715] netlink: 'syz.0.1456': attribute type 12 has an invalid length. [ 265.524405][T10670] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.541170][T10670] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.548799][T10670] bridge_slave_0: entered allmulticast mode [ 265.569187][T10670] bridge_slave_0: entered promiscuous mode [ 265.594418][T10670] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.603114][T10670] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.610604][T10670] bridge_slave_1: entered allmulticast mode [ 265.619374][T10670] bridge_slave_1: entered promiscuous mode [ 265.650195][T10724] netlink: 368 bytes leftover after parsing attributes in process `syz.1.1459'. [ 265.668531][T10725] netlink: 'syz.4.1458': attribute type 1 has an invalid length. [ 265.697904][T10724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1459'. [ 265.913076][T10670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.945220][T10670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.211305][ T5149] Bluetooth: hci3: command tx timeout [ 266.263460][T10670] team0: Port device team_slave_0 added [ 266.305047][T10670] team0: Port device team_slave_1 added [ 266.328649][T10741] sctp: [Deprecated]: syz.4.1465 (pid 10741) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.328649][T10741] Use struct sctp_sack_info instead [ 266.484590][T10747] __nla_validate_parse: 5 callbacks suppressed [ 266.484611][T10747] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1466'. [ 266.512193][T10670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.521091][T10670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.553534][T10670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.556745][T10750] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1468'. [ 266.573136][T10752] netlink: 'syz.4.1467': attribute type 1 has an invalid length. [ 266.587023][T10752] netlink: 'syz.4.1467': attribute type 2 has an invalid length. [ 266.624421][T10744] netlink: 'syz.4.1467': attribute type 1 has an invalid length. [ 266.632999][T10744] netlink: 'syz.4.1467': attribute type 2 has an invalid length. [ 266.703547][T10670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.710660][T10670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.779173][T10670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.780449][T10755] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1469'. [ 267.157113][T10765] netlink: 'syz.0.1471': attribute type 4 has an invalid length. [ 267.180753][T10747] gretap0 speed is unknown, defaulting to 1000 [ 267.252667][ T5149] Bluetooth: hci4: command tx timeout [ 267.388995][T10670] hsr_slave_0: entered promiscuous mode [ 267.426654][T10670] hsr_slave_1: entered promiscuous mode [ 267.444309][T10670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.471744][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1472'. [ 267.480771][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1472'. [ 267.481333][T10670] Cannot create hsr debugfs directory [ 267.518167][T10700] chnl_net:caif_netlink_parms(): no params data found [ 267.645966][T10776] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1473'. [ 268.197252][T10785] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 268.297366][ T5149] Bluetooth: hci3: command tx timeout [ 268.436421][T10700] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.453561][T10700] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.470796][T10700] bridge_slave_0: entered allmulticast mode [ 268.483587][T10700] bridge_slave_0: entered promiscuous mode [ 268.541992][T10700] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.549432][T10700] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.591918][T10700] bridge_slave_1: entered allmulticast mode [ 268.613145][T10700] bridge_slave_1: entered promiscuous mode [ 268.667532][T10791] netlink: 368 bytes leftover after parsing attributes in process `syz.0.1477'. [ 268.694364][T10791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1477'. [ 268.787913][T10700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.875195][T10700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.089398][T10670] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.175251][T10700] team0: Port device team_slave_0 added [ 269.194429][T10700] team0: Port device team_slave_1 added [ 269.296691][T10670] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.334622][ T5149] Bluetooth: hci4: command tx timeout [ 269.354025][T10804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1482'. [ 269.397665][T10700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.421193][T10700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.452091][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1483'. [ 269.469195][T10700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.536482][T10670] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.573494][T10700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.580517][T10700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.608874][T10700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.629453][T10813] tipc: Started in network mode [ 269.637112][T10813] tipc: Node identity , cluster identity 4711 [ 269.643301][T10813] tipc: Failed to obtain node identity [ 269.648883][T10813] tipc: Enabling of bearer rejected, failed to enable media [ 269.677722][T10670] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.807555][T10700] hsr_slave_0: entered promiscuous mode [ 269.823258][T10700] hsr_slave_1: entered promiscuous mode [ 269.842743][T10700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.850376][T10700] Cannot create hsr debugfs directory [ 269.869369][T10819] netlink: 'syz.4.1488': attribute type 8 has an invalid length. [ 270.229354][T10824] gretap0 speed is unknown, defaulting to 1000 [ 270.330838][T10829] ªªªªªª: renamed from lo [ 270.346280][T10670] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 270.381206][ T5149] Bluetooth: hci3: command tx timeout [ 270.518861][T10670] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 270.734295][T10700] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.774884][T10670] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 270.836241][T10670] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 271.053466][T10700] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.237057][T10700] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.421417][ T5149] Bluetooth: hci4: command tx timeout [ 271.456012][T10864] netlink: 'syz.0.1499': attribute type 1 has an invalid length. [ 271.464223][T10864] netlink: 'syz.0.1499': attribute type 2 has an invalid length. [ 271.484327][T10700] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.558991][T10864] netlink: 'syz.0.1499': attribute type 1 has an invalid length. [ 271.581593][T10864] netlink: 'syz.0.1499': attribute type 2 has an invalid length. [ 271.622803][T10864] __nla_validate_parse: 9 callbacks suppressed [ 271.622825][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1499'. [ 271.847888][T10874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1502'. [ 271.857336][T10874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1502'. [ 271.869486][T10872] netlink: 'syz.0.1503': attribute type 1 has an invalid length. [ 271.885295][T10872] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1503'. [ 271.908563][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1503'. [ 271.977579][T10670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.027042][T10700] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 272.096706][T10700] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 272.160244][T10670] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.181523][T10700] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 272.233268][T10700] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 272.257309][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.264641][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.278014][T10879] netlink: 368 bytes leftover after parsing attributes in process `syz.4.1505'. [ 272.307863][T10879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1505'. [ 272.349517][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.356836][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.794514][T10886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1507'. [ 272.837965][T10700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.939769][T10700] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.019524][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.027023][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.052845][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.060204][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.164436][T10670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.325340][T10670] veth0_vlan: entered promiscuous mode [ 273.460101][T10670] veth1_vlan: entered promiscuous mode [ 273.492216][ T5149] Bluetooth: hci4: command tx timeout [ 273.637273][T10700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.652011][T10912] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1515'. [ 273.683095][T10910] gretap0 speed is unknown, defaulting to 1000 [ 273.742443][T10670] veth0_macvtap: entered promiscuous mode [ 273.761588][T10914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1516'. [ 273.770114][T10670] veth1_macvtap: entered promiscuous mode [ 273.784899][T10912] gretap0 speed is unknown, defaulting to 1000 [ 273.958915][T10670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.970375][T10670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.982709][T10670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.993847][T10670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.006596][T10670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.018045][T10670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.028330][T10670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.045007][T10670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.055760][T10670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.066692][T10670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.076867][T10670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.087568][T10670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.097791][T10670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.108805][T10670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.121991][T10670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.195915][T10670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.206964][T10670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.238215][T10670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.251741][T10670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.262182][T10670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.272786][T10670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.282895][T10670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.294079][T10670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.304208][T10670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.314816][T10670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.325242][T10670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.336165][T10670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.348925][T10670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.359599][T10670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.372161][T10670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.563170][T10670] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.572570][T10670] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.603354][T10670] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.623257][T10670] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.906317][T10700] veth0_vlan: entered promiscuous mode [ 274.993822][T10700] veth1_vlan: entered promiscuous mode [ 275.063138][ T6783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.074893][ T6783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.195914][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.209578][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.327419][T10700] veth0_macvtap: entered promiscuous mode [ 275.384690][T10700] veth1_macvtap: entered promiscuous mode [ 275.538188][T10950] netlink: 'syz.0.1523': attribute type 11 has an invalid length. [ 275.549912][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.598476][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.631672][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.653085][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.670148][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.683497][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.693582][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.704332][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.715441][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.727379][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.737784][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.748865][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.758933][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.769590][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.782701][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.793424][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.812866][T10700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.946670][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.971714][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.011766][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.041142][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.064368][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.091198][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.111401][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.122597][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.134973][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.145586][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.163074][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.184913][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.213219][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.271394][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.321481][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.347993][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.365707][T10700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.427160][T10962] FAULT_INJECTION: forcing a failure. [ 276.427160][T10962] name failslab, interval 1, probability 0, space 0, times 0 [ 276.444801][T10962] CPU: 1 UID: 0 PID: 10962 Comm: syz.1.1525 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 276.444832][T10962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 276.444844][T10962] Call Trace: [ 276.444852][T10962] [ 276.444861][T10962] dump_stack_lvl+0x241/0x360 [ 276.444897][T10962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.444923][T10962] ? __pfx__printk+0x10/0x10 [ 276.444954][T10962] ? __pfx___might_resched+0x10/0x10 [ 276.444981][T10962] should_fail_ex+0x424/0x570 [ 276.445017][T10962] should_failslab+0xac/0x100 [ 276.445042][T10962] __kvmalloc_node_noprof+0x170/0x5a0 [ 276.445066][T10962] ? alloc_netdev_mqs+0x92c/0x1210 [ 276.445096][T10962] alloc_netdev_mqs+0x92c/0x1210 [ 276.445127][T10962] rtnl_create_link+0x2f7/0xea0 [ 276.445151][T10962] ? nla_strscpy+0x115/0x180 [ 276.445174][T10962] rtnl_newlink_create+0x2f2/0xcb0 [ 276.445202][T10962] ? __mutex_lock+0xbe3/0x10c0 [ 276.445233][T10962] ? __mutex_lock+0x5f3/0x10c0 [ 276.445256][T10962] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 276.445286][T10962] ? __pfx___mutex_lock+0x10/0x10 [ 276.445317][T10962] ? nla_strscpy+0x102/0x180 [ 276.445339][T10962] ? full_name_hash+0x93/0xe0 [ 276.445370][T10962] rtnl_newlink+0x18b0/0x1fe0 [ 276.445413][T10962] ? __pfx_rtnl_newlink+0x10/0x10 [ 276.445435][T10962] ? unwind_get_return_address+0x4d/0x90 [ 276.445481][T10962] ? __lock_acquire+0xad5/0xd80 [ 276.445504][T10962] ? __lock_acquire+0xad5/0xd80 [ 276.445546][T10962] ? is_bpf_text_address+0x26/0x2a0 [ 276.445579][T10962] ? 0xffffffffa0000954 [ 276.445599][T10962] ? is_bpf_text_address+0x288/0x2a0 [ 276.445617][T10962] ? is_bpf_text_address+0x26/0x2a0 [ 276.445639][T10962] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 276.445667][T10962] ? kernel_text_address+0xa7/0xe0 [ 276.445696][T10962] ? __kernel_text_address+0xd/0x40 [ 276.445730][T10962] ? aa_get_newest_label+0x101/0x6f0 [ 276.445765][T10962] ? __lock_acquire+0xad5/0xd80 [ 276.445809][T10962] ? __pfx_rtnl_newlink+0x10/0x10 [ 276.445837][T10962] rtnetlink_rcv_msg+0x80f/0xd70 [ 276.445859][T10962] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 276.445891][T10962] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 276.445911][T10962] ? __lock_acquire+0xad5/0xd80 [ 276.445950][T10962] netlink_rcv_skb+0x208/0x480 [ 276.445977][T10962] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 276.446003][T10962] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 276.446051][T10962] ? netlink_deliver_tap+0x2e/0x1b0 [ 276.446079][T10962] ? netlink_deliver_tap+0x2e/0x1b0 [ 276.446107][T10962] netlink_unicast+0x7f8/0x9a0 [ 276.446142][T10962] ? __pfx_netlink_unicast+0x10/0x10 [ 276.446168][T10962] ? skb_put+0x114/0x1f0 [ 276.446201][T10962] netlink_sendmsg+0x8c3/0xcd0 [ 276.446243][T10962] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.446274][T10962] ? aa_sock_msg_perm+0x91/0x160 [ 276.446306][T10962] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.446329][T10962] __sock_sendmsg+0x221/0x270 [ 276.446357][T10962] ____sys_sendmsg+0x523/0x860 [ 276.446388][T10962] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.446404][T10962] ? __fget_files+0x2a/0x420 [ 276.446436][T10962] ? __fget_files+0x2a/0x420 [ 276.446475][T10962] __sys_sendmsg+0x271/0x360 [ 276.446501][T10962] ? __pfx___sys_sendmsg+0x10/0x10 [ 276.446591][T10962] ? do_syscall_64+0xb6/0x230 [ 276.446619][T10962] do_syscall_64+0xf3/0x230 [ 276.446644][T10962] ? clear_bhb_loop+0x45/0xa0 [ 276.446663][T10962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.446678][T10962] RIP: 0033:0x7fd92f98d169 [ 276.446694][T10962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.446708][T10962] RSP: 002b:00007fd930784038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.446731][T10962] RAX: ffffffffffffffda RBX: 00007fd92fba6160 RCX: 00007fd92f98d169 [ 276.446745][T10962] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000009 [ 276.446757][T10962] RBP: 00007fd930784090 R08: 0000000000000000 R09: 0000000000000000 [ 276.446769][T10962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.446780][T10962] R13: 0000000000000000 R14: 00007fd92fba6160 R15: 00007fffdba8bf88 [ 276.446813][T10962] [ 276.460882][T10700] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.512840][ T5149] block nbd0: Receive control failed (result -107) [ 276.534214][T10700] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.926681][T10700] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.936787][T10700] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.982312][T10971] nbd0: detected capacity change from 0 to 256 [ 277.161408][ T6779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.169744][ T6779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.216912][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.226551][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.471495][T10994] netlink: 'syz.1.1534': attribute type 10 has an invalid length. [ 278.633933][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.647562][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.656227][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.674266][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.699615][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.821801][ T5149] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.836022][ T5149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.845123][ T5149] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.845929][T11005] __nla_validate_parse: 8 callbacks suppressed [ 278.845946][T11005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1537'. [ 278.877560][ T5149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.882700][T10998] gretap0 speed is unknown, defaulting to 1000 [ 278.894865][ T5149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.097812][T11000] gretap0 speed is unknown, defaulting to 1000 [ 279.107126][T11010] bond2: (slave dummy0): Releasing backup interface [ 279.169462][T11010] bridge_slave_0: left allmulticast mode [ 279.181403][T11010] bridge_slave_0: left promiscuous mode [ 279.187423][T11010] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.201299][T11010] bond0: (slave c@ÿ,): Releasing backup interface [ 279.298647][T11010] bond0: (slave bond_slave_1): Releasing backup interface [ 279.312109][T11010] team0: Port device team_slave_0 removed [ 279.324275][T11018] netlink: 'syz.0.1538': attribute type 4 has an invalid length. [ 279.372324][T11010] team0: Port device team_slave_1 removed [ 279.378688][T11010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.398336][T11019] netlink: 'syz.0.1538': attribute type 4 has an invalid length. [ 279.407821][T11010] batman_adv: batadv0: Removing interface: vxlan0 [ 279.417450][T11010] batadv1: left allmulticast mode [ 279.422746][T11010] batadv1: left promiscuous mode [ 279.428255][T11010] bridge0: port 2(batadv1) entered disabled state [ 279.439105][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1540'. [ 279.448801][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1540'. [ 279.459105][T11010] bond2: (slave veth5): Releasing backup interface [ 280.663028][T11033] bond4 (unregistering): Released all slaves [ 280.756674][T11034] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 280.771143][ T5149] Bluetooth: hci3: command tx timeout [ 280.961996][T10998] chnl_net:caif_netlink_parms(): no params data found [ 281.011730][ T5149] Bluetooth: hci4: command tx timeout [ 281.058223][T11000] chnl_net:caif_netlink_parms(): no params data found [ 281.247948][T11061] netlink: 822 bytes leftover after parsing attributes in process `syz.0.1549'. [ 281.526556][T11076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1553'. [ 281.535691][T11076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1553'. [ 281.631160][T11076] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1553'. [ 281.832121][ T5149] block nbd3: Receive control failed (result -107) [ 281.888671][T10998] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.906816][T10998] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.915392][T10998] bridge_slave_0: entered allmulticast mode [ 281.933415][T10998] bridge_slave_0: entered promiscuous mode [ 282.232450][T11076] nbd3: detected capacity change from 0 to 256 [ 282.346074][T11000] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.381531][T11000] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.399612][T11000] bridge_slave_0: entered allmulticast mode [ 282.422586][T11000] bridge_slave_0: entered promiscuous mode [ 282.453934][T10998] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.471229][T10998] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.485184][T11089] netlink: 368 bytes leftover after parsing attributes in process `syz.0.1557'. [ 282.487213][T10998] bridge_slave_1: entered allmulticast mode [ 282.494842][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1557'. [ 282.551887][T10998] bridge_slave_1: entered promiscuous mode [ 282.851090][ T5149] Bluetooth: hci3: command tx timeout [ 283.061690][T11099] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1561'. [ 283.091143][ T5149] Bluetooth: hci4: command tx timeout [ 283.137303][T11000] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.147260][T11000] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.191413][T11000] bridge_slave_1: entered allmulticast mode [ 283.210085][T11000] bridge_slave_1: entered promiscuous mode [ 283.469192][T10998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.504655][T10998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.587683][T11000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.655946][T10998] team0: Port device team_slave_0 added [ 283.687544][T11000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.719951][T11099] gretap0 speed is unknown, defaulting to 1000 [ 283.723588][T10998] team0: Port device team_slave_1 added [ 284.014320][T10998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.029909][T11115] FAULT_INJECTION: forcing a failure. [ 284.029909][T11115] name failslab, interval 1, probability 0, space 0, times 0 [ 284.043597][T10998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.047661][T11115] CPU: 0 UID: 0 PID: 11115 Comm: syz.1.1567 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 284.047686][T11115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 284.047696][T11115] Call Trace: [ 284.047704][T11115] [ 284.047712][T11115] dump_stack_lvl+0x241/0x360 [ 284.047743][T11115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.047767][T11115] ? __pfx__printk+0x10/0x10 [ 284.047795][T11115] ? __pfx___might_resched+0x10/0x10 [ 284.047820][T11115] should_fail_ex+0x424/0x570 [ 284.047853][T11115] should_failslab+0xac/0x100 [ 284.047877][T11115] __kmalloc_noprof+0xdf/0x4d0 [ 284.047898][T11115] ? tomoyo_encode+0x26f/0x540 [ 284.047926][T11115] tomoyo_encode+0x26f/0x540 [ 284.047950][T11115] ? __pfx_sockfs_dname+0x10/0x10 [ 284.047974][T11115] tomoyo_realpath_from_path+0x59e/0x5e0 [ 284.048011][T11115] tomoyo_path_number_perm+0x245/0x790 [ 284.048036][T11115] ? tomoyo_path_number_perm+0x215/0x790 [ 284.048059][T11115] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 284.048087][T11115] ? ksys_write+0x24e/0x2d0 [ 284.048113][T11115] ? __lock_acquire+0xad5/0xd80 [ 284.048150][T11115] ? __fget_files+0x2a/0x420 [ 284.048173][T11115] ? __fget_files+0x2a/0x420 [ 284.048200][T11115] ? __fget_files+0x2a/0x420 [ 284.048229][T11115] security_file_ioctl+0xc6/0x2a0 [ 284.048249][T11115] __se_sys_ioctl+0x46/0x160 [ 284.048271][T11115] do_syscall_64+0xf3/0x230 [ 284.048293][T11115] ? clear_bhb_loop+0x45/0xa0 [ 284.048313][T11115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.048330][T11115] RIP: 0033:0x7fd92f98d169 [ 284.048346][T11115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.048361][T11115] RSP: 002b:00007fd9307c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.048381][T11115] RAX: ffffffffffffffda RBX: 00007fd92fba5fa0 RCX: 00007fd92f98d169 [ 284.048394][T11115] RDX: 0000200000000100 RSI: 00000000000089e8 RDI: 0000000000000004 [ 284.048413][T11115] RBP: 00007fd9307c6090 R08: 0000000000000000 R09: 0000000000000000 [ 284.048424][T11115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.048434][T11115] R13: 0000000000000000 R14: 00007fd92fba5fa0 R15: 00007fffdba8bf88 [ 284.048464][T11115] [ 284.048485][T11115] ERROR: Out of memory at tomoyo_realpath_from_path. [ 284.070354][T10998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.076321][T10998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.330215][T10998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.387415][T10998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.407027][T11000] team0: Port device team_slave_0 added [ 284.477954][T11000] team0: Port device team_slave_1 added [ 284.601914][T11123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1569'. [ 284.627520][T11125] netlink: 368 bytes leftover after parsing attributes in process `syz.4.1570'. [ 284.663914][T11125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1570'. [ 284.675716][T11000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.701293][T11000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.760222][T11000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.874755][T11000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.905425][T11000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.941203][ T5149] Bluetooth: hci3: command tx timeout [ 284.959934][T11000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.003781][T10998] hsr_slave_0: entered promiscuous mode [ 285.016565][T10998] hsr_slave_1: entered promiscuous mode [ 285.025247][T10998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.033258][T10998] Cannot create hsr debugfs directory [ 285.089753][T11137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1574'. [ 285.181574][ T5149] Bluetooth: hci4: command tx timeout [ 285.279967][T11000] hsr_slave_0: entered promiscuous mode [ 285.290309][T11000] hsr_slave_1: entered promiscuous mode [ 285.310556][T11000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.328673][T11000] Cannot create hsr debugfs directory [ 285.482345][T11142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1575'. [ 286.657609][T11151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1577'. [ 286.693288][T11151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1577'. [ 286.709998][T11152] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1578'. [ 286.711414][T11151] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1577'. [ 286.792821][ T5149] block nbd4: Receive control failed (result -107) [ 286.821088][T11151] nbd4: detected capacity change from 0 to 256 [ 287.015032][ T5149] Bluetooth: hci3: command tx timeout [ 287.097544][T10998] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.212849][T10998] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.238143][T11168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1582'. [ 287.251754][ T5149] Bluetooth: hci4: command tx timeout [ 287.366288][T10998] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.504609][T10998] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.653466][ T31] INFO: task udevd:5933 blocked for more than 143 seconds. [ 287.664418][ T31] Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 [ 287.674540][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.694557][ T31] task:udevd state:D stack:22192 pid:5933 tgid:5933 ppid:1 task_flags:0x400140 flags:0x00004002 [ 287.734938][ T31] Call Trace: [ 287.745119][ T31] [ 287.752230][ T31] __schedule+0x1b88/0x5240 [ 287.768719][ T31] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 287.785618][ T31] ? rcu_is_watching+0x15/0xb0 [ 287.793817][T10998] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 287.799531][ T31] ? schedule+0x163/0x360 [ 287.805592][ T31] ? __pfx___schedule+0x10/0x10 [ 287.810599][ T31] ? __blk_flush_plug+0x44b/0x500 [ 287.816015][ T31] ? schedule+0x90/0x360 [ 287.820413][ T31] ? schedule+0x90/0x360 [ 287.824831][ T31] schedule+0x163/0x360 [ 287.829012][ T31] schedule_timeout+0x15b/0x2b0 [ 287.836140][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 287.871074][ T31] ? __pfx_process_timeout+0x10/0x10 [ 287.876456][ T31] ? prepare_to_wait_event+0x3ac/0x460 [ 287.901165][ T31] ? prepare_to_wait_event+0x40c/0x460 [ 287.906728][ T31] nbd_queue_rq+0x773/0xf70 [ 287.920709][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 287.926223][ T31] ? rcu_is_watching+0x15/0xb0 [ 287.931139][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 287.941834][ T31] ? __lock_acquire+0xad5/0xd80 [ 287.946761][ T31] blk_mq_dispatch_rq_list+0xad8/0x19d0 [ 287.961545][ T31] ? sbitmap_get+0x289/0x3f0 [ 287.981152][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 287.987220][ T31] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 288.011341][ T31] __blk_mq_sched_dispatch_requests+0xb8c/0x1840 [ 288.017806][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 288.041245][ T31] ? __lock_acquire+0xad5/0xd80 [ 288.046296][ T31] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 288.061108][ T31] ? blk_mq_run_hw_queue+0x32b/0x500 [ 288.068884][ T31] blk_mq_run_hw_queue+0x354/0x500 [ 288.089407][ T31] blk_mq_flush_plug_list+0x1190/0x1880 [ 288.095412][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 288.101757][ T31] ? blk_mq_submit_bio+0xfbb/0x25e0 [ 288.107013][ T31] ? do_syscall_64+0xf3/0x230 [ 288.111882][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.118021][ T31] ? blk_mq_submit_bio+0x496/0x25e0 [ 288.123416][ T31] __blk_flush_plug+0x422/0x500 [ 288.128329][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 288.134051][ T31] __submit_bio+0x56d/0x6d0 [ 288.138629][ T31] ? __pfx___submit_bio+0x10/0x10 [ 288.143817][ T31] submit_bio_noacct_nocheck+0x4d5/0xe30 [ 288.149689][ T31] ? __pfx___might_resched+0x10/0x10 [ 288.155284][ T31] ? bio_associate_blkg+0x6c/0x230 [ 288.160538][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 288.167049][ T31] block_read_full_folio+0x7c1/0x850 [ 288.175898][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 288.181487][ T31] filemap_read_folio+0x14a/0x3b0 [ 288.186582][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 288.192146][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 288.197739][ T31] ? __filemap_get_folio+0x9d2/0xb40 [ 288.209456][ T31] ? __asan_memcpy+0x40/0x70 [ 288.214715][ T31] do_read_cache_folio+0x373/0x5b0 [ 288.220013][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 288.226240][ T31] read_part_sector+0xb3/0x260 [ 288.231237][ T31] adfspart_check_ICS+0xcd/0xa20 [ 288.236396][ T31] ? snprintf+0xdd/0x130 [ 288.241014][ T31] ? vsnprintf+0x114c/0x1230 [ 288.245850][ T31] ? vsnprintf+0x190/0x1230 [ 288.250566][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 288.256493][ T31] ? set_page_refcounted+0xa1/0x1e0 [ 288.261995][ T31] bdev_disk_changed+0x783/0x14e0 [ 288.267217][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 288.278207][ T31] ? wait_on_inode+0xc6/0x230 [ 288.283049][ T31] ? __pfx_wait_on_inode+0x10/0x10 [ 288.288327][ T31] blkdev_get_whole+0x36c/0x4f0 [ 288.298184][ T31] bdev_open+0x312/0xcd0 [ 288.302816][ T31] blkdev_open+0x38e/0x4e0 [ 288.307294][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 288.312403][ T31] do_dentry_open+0xdec/0x1960 [ 288.317276][ T31] ? vfs_open+0x31/0x370 [ 288.321617][ T31] vfs_open+0x3b/0x370 [ 288.325918][ T31] path_openat+0x2caf/0x35d0 [ 288.330665][ T31] ? __pfx___kfence_alloc+0x10/0x10 [ 288.336137][ T31] ? kmem_cache_alloc_noprof+0x2cf/0x390 [ 288.342018][ T31] ? do_sys_openat2+0xbf/0x1d0 [ 288.346847][ T31] ? __pfx_path_openat+0x10/0x10 [ 288.351979][ T31] do_filp_open+0x284/0x4e0 [ 288.356642][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 288.362059][ T31] ? do_raw_spin_lock+0x151/0x370 [ 288.367147][ T31] do_sys_openat2+0x12b/0x1d0 [ 288.377192][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 288.382890][ T31] __x64_sys_openat+0x249/0x2a0 [ 288.387798][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 288.393335][ T31] ? do_syscall_64+0xb6/0x230 [ 288.398052][ T31] do_syscall_64+0xf3/0x230 [ 288.402633][ T31] ? clear_bhb_loop+0x45/0xa0 [ 288.407535][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.413518][ T31] RIP: 0033:0x7feed97169a4 [ 288.417970][ T31] RSP: 002b:00007ffd39c9f110 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 288.426591][ T31] RAX: ffffffffffffffda RBX: 000055c7004c3e80 RCX: 00007feed97169a4 [ 288.434650][ T31] RDX: 00000000000a0800 RSI: 000055c7004bb470 RDI: 00000000ffffff9c [ 288.442871][ T31] RBP: 000055c7004bb470 R08: 0000000000000001 R09: 7fffffffffffffff [ 288.450884][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 288.459187][ T31] R13: 000055c7004c4320 R14: 0000000000000001 R15: 000055c7004a3910 [ 288.467471][ T31] [ 288.471764][ T31] INFO: task udevd:5934 blocked for more than 144 seconds. [ 288.490684][ T31] Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 [ 288.498380][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 288.507731][ T31] task:udevd state:D stack:22864 pid:5934 tgid:5934 ppid:1 task_flags:0x400140 flags:0x00004002 [ 288.519807][ T31] Call Trace: [ 288.523260][ T31] [ 288.526230][ T31] __schedule+0x1b88/0x5240 [ 288.530766][ T31] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 288.537742][ T31] ? rcu_is_watching+0x15/0xb0 [ 288.542825][ T31] ? schedule+0x163/0x360 [ 288.547287][ T31] ? __pfx___schedule+0x10/0x10 [ 288.552287][ T31] ? __blk_flush_plug+0x44b/0x500 [ 288.557456][ T31] ? schedule+0x90/0x360 [ 288.561933][ T31] ? schedule+0x90/0x360 [ 288.566297][ T31] schedule+0x163/0x360 [ 288.570503][ T31] schedule_timeout+0x15b/0x2b0 [ 288.575576][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 288.584978][ T31] ? __pfx_process_timeout+0x10/0x10 [ 288.590552][ T31] ? prepare_to_wait_event+0x3ac/0x460 [ 288.596379][ T31] ? prepare_to_wait_event+0x40c/0x460 [ 288.602135][ T31] nbd_queue_rq+0x773/0xf70 [ 288.606719][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 288.612577][ T31] ? rcu_is_watching+0x15/0xb0 [ 288.617387][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 288.623878][ T31] ? __lock_acquire+0xad5/0xd80 [ 288.628777][ T31] blk_mq_dispatch_rq_list+0xad8/0x19d0 [ 288.634569][ T31] ? sbitmap_get+0x289/0x3f0 [ 288.639215][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 288.645406][ T31] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 288.651322][ T31] __blk_mq_sched_dispatch_requests+0xb8c/0x1840 [ 288.657842][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 288.664910][ T31] ? __lock_acquire+0xad5/0xd80 [ 288.669909][ T31] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 288.676146][ T31] ? blk_mq_run_hw_queue+0x32b/0x500 [ 288.685755][ T31] blk_mq_run_hw_queue+0x354/0x500 [ 288.691466][ T31] blk_mq_flush_plug_list+0x1190/0x1880 [ 288.706244][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 288.712651][ T31] ? blk_mq_submit_bio+0xfbb/0x25e0 [ 288.718014][ T31] ? do_syscall_64+0xf3/0x230 [ 288.723095][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.729220][ T31] ? blk_mq_submit_bio+0x496/0x25e0 [ 288.734522][ T31] __blk_flush_plug+0x422/0x500 [ 288.739504][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 288.745173][ T31] __submit_bio+0x56d/0x6d0 [ 288.749708][ T31] ? __pfx___submit_bio+0x10/0x10 [ 288.754927][ T31] submit_bio_noacct_nocheck+0x4d5/0xe30 [ 288.760867][ T31] ? __pfx___might_resched+0x10/0x10 [ 288.766238][ T31] ? bio_associate_blkg+0x6c/0x230 [ 288.771791][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 288.778257][ T31] block_read_full_folio+0x7c1/0x850 [ 288.787085][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 288.792604][ T31] filemap_read_folio+0x14a/0x3b0 [ 288.797686][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 288.803416][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 288.809011][ T31] ? __filemap_get_folio+0x9d2/0xb40 [ 288.814589][ T31] ? __asan_memcpy+0x40/0x70 [ 288.819308][ T31] do_read_cache_folio+0x373/0x5b0 [ 288.824884][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 288.830667][ T31] read_part_sector+0xb3/0x260 [ 288.835571][ T31] adfspart_check_ICS+0xcd/0xa20 [ 288.840547][ T31] ? snprintf+0xdd/0x130 [ 288.844853][ T31] ? vsnprintf+0x114c/0x1230 [ 288.849557][ T31] ? vsnprintf+0x190/0x1230 [ 288.854164][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 288.859746][ T31] ? set_page_refcounted+0xa1/0x1e0 [ 288.865244][ T31] bdev_disk_changed+0x783/0x14e0 [ 288.870356][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 288.875974][ T31] ? wait_on_inode+0xc6/0x230 [ 288.880792][ T31] ? __pfx_wait_on_inode+0x10/0x10 [ 288.889549][ T31] blkdev_get_whole+0x36c/0x4f0 [ 288.894556][ T31] bdev_open+0x312/0xcd0 [ 288.898855][ T31] blkdev_open+0x38e/0x4e0 [ 288.903705][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 288.908679][ T31] do_dentry_open+0xdec/0x1960 [ 288.913591][ T31] ? vfs_open+0x31/0x370 [ 288.917884][ T31] vfs_open+0x3b/0x370 [ 288.922138][ T31] path_openat+0x2caf/0x35d0 [ 288.926758][ T31] ? stack_depot_save_flags+0x44/0x940 [ 288.939208][ T31] ? kasan_save_track+0x51/0x80 [ 288.944437][ T31] ? __pfx_path_openat+0x10/0x10 [ 288.949695][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.956018][ T31] do_filp_open+0x284/0x4e0 [ 288.960556][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 288.965672][ T31] ? do_raw_spin_lock+0x151/0x370 [ 288.970754][ T31] do_sys_openat2+0x12b/0x1d0 [ 288.975552][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 288.980796][ T31] __x64_sys_openat+0x249/0x2a0 [ 288.985819][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 288.994368][ T31] ? do_syscall_64+0xb6/0x230 [ 288.999114][ T31] do_syscall_64+0xf3/0x230 [ 289.003717][ T31] ? clear_bhb_loop+0x45/0xa0 [ 289.008623][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.014814][ T31] RIP: 0033:0x7feed97169a4 [ 289.019268][ T31] RSP: 002b:00007ffd39c9f110 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 289.027872][ T31] RAX: ffffffffffffffda RBX: 000055c7004c3e80 RCX: 00007feed97169a4 [ 289.035937][ T31] RDX: 00000000000a0800 RSI: 000055c7004c2df0 RDI: 00000000ffffff9c [ 289.044003][ T31] RBP: 000055c7004c2df0 R08: 0000000000000001 R09: 7fffffffffffffff [ 289.052055][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 289.060056][ T31] R13: 000055c7004c4320 R14: 0000000000000001 R15: 000055c7004a3910 [ 289.068223][ T31] [ 289.071443][ T31] [ 289.071443][ T31] Showing all locks held in the system: [ 289.100550][T10998] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 289.121449][ T31] 1 lock held by khungtaskd/31: [ 289.126373][ T31] #0: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 289.151216][ T31] 3 locks held by kworker/u8:3/53: [ 289.161004][ T31] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 289.182604][ T31] #1: ffffc90000bf7c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 289.197295][ T31] #2: ffffffff900fd448 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 289.206550][ T31] 2 locks held by kworker/u8:4/63: [ 289.216384][ T31] #0: ffff8880b8639b18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 289.226688][ T31] #1: ffff8880b8623b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41f/0x7a0 [ 289.238328][ T31] 3 locks held by kworker/u8:5/1010: [ 289.243689][ T31] #0: ffff88803157c148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 289.255576][ T31] #1: ffffc90003907c60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 289.268799][ T31] #2: ffffffff900fd448 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x110/0x16a0 [ 289.278507][ T31] 2 locks held by getty/5593: [ 289.283642][ T31] #0: ffff8880320860a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 289.293791][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 289.307244][ T31] 3 locks held by udevd/5888: [ 289.312017][ T31] #0: ffff888026393358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf7/0xcd0 [ 289.321479][ T31] #1: ffff8880260bac90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 289.331319][ T31] #2: ffff888026807178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc9/0xf70 [ 289.340485][ T31] 3 locks held by udevd/5889: [ 289.345284][ T31] #0: ffff88802613b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf7/0xcd0 [ 289.354662][ T31] #1: ffff888025e72290 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 289.364331][ T31] #2: ffff8880262d0178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc9/0xf70 [ 289.373468][ T31] 3 locks held by udevd/5933: [ 289.378174][ T31] #0: ffff88802600f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf7/0xcd0 [ 289.387597][ T31] #1: ffff888025e59b90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 289.401241][ T31] #2: ffff888026180178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc9/0xf70 [ 289.410424][ T31] 3 locks held by udevd/5934: [ 289.415681][ T31] #0: ffff888025fbb358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf7/0xcd0 [ 289.425201][ T31] #1: ffff888025f2eb10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 289.434896][ T31] #2: ffff8880262751f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc9/0xf70 [ 289.444006][ T31] 2 locks held by kworker/u8:9/6779: [ 289.449404][ T31] 4 locks held by kworker/u8:12/6788: [ 289.454845][ T31] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 289.466150][ T31] #1: ffffc9000bf9fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 289.476944][ T31] #2: ffffffff900f0910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 289.486459][ T31] #3: ffffffff900fd448 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x75c/0xf30 [ 289.495996][ T31] 3 locks held by udevd/7444: [ 289.504838][ T31] #0: ffff8880262cb358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf7/0xcd0 [ 289.514367][ T31] #1: ffff888025e72f10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x32b/0x500 [ 289.523985][ T31] #2: ffff8880263d7178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc9/0xf70 [ 289.533063][ T31] 3 locks held by syz-executor/10998: [ 289.538459][ T31] #0: ffffffff900fd448 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xd68/0x1fe0 [ 289.547734][ T31] #1: ffff88802996cd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: do_setlink+0x3c1/0x4390 [ 289.558068][ T31] #2: ffffffff8ed434f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x384/0x830 [ 289.569086][ T31] 7 locks held by syz-executor/11000: [ 289.582419][ T31] #0: ffff888031a04420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x23f/0xd10 [ 289.591936][ T31] #1: ffff888029327088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e2/0x510 [ 289.606864][ T31] #2: ffff888144f76008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x206/0x510 [ 289.617161][ T31] #3: ffffffff8f996ca8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfe/0x490 [ 289.627576][ T31] #4: ffff88805b37a0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xce/0x7c0 [ 289.638253][ T31] #5: ffff88805b379250 (&devlink->lock_key#15){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 289.648542][ T31] #6: ffffffff900fd448 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x271/0x320 [ 289.658310][ T31] [ 289.660903][ T31] ============================================= [ 289.660903][ T31] [ 289.708249][ T31] NMI backtrace for cpu 1 [ 289.708272][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 289.708297][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 289.708309][ T31] Call Trace: [ 289.708317][ T31] [ 289.708325][ T31] dump_stack_lvl+0x241/0x360 [ 289.708362][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.708388][ T31] ? __pfx__printk+0x10/0x10 [ 289.708432][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 289.708461][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 289.708477][ T31] ? _printk+0xd5/0x120 [ 289.708502][ T31] ? __wake_up_klogd+0xcc/0x110 [ 289.708529][ T31] ? __pfx__printk+0x10/0x10 [ 289.708557][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 289.708578][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 289.708603][ T31] watchdog+0x1058/0x10a0 [ 289.708624][ T31] ? watchdog+0x1ea/0x10a0 [ 289.708646][ T31] ? __pfx_watchdog+0x10/0x10 [ 289.708665][ T31] kthread+0x7b7/0x940 [ 289.708692][ T31] ? __pfx_watchdog+0x10/0x10 [ 289.708710][ T31] ? __pfx_kthread+0x10/0x10 [ 289.708732][ T31] ? __pfx_kthread+0x10/0x10 [ 289.708756][ T31] ? __pfx_kthread+0x10/0x10 [ 289.708778][ T31] ? __pfx_kthread+0x10/0x10 [ 289.708802][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 289.708821][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 289.708844][ T31] ? __pfx_kthread+0x10/0x10 [ 289.708869][ T31] ret_from_fork+0x4b/0x80 [ 289.708886][ T31] ? __pfx_kthread+0x10/0x10 [ 289.708910][ T31] ret_from_fork_asm+0x1a/0x30 [ 289.708951][ T31] [ 289.708959][ T31] Sending NMI from CPU 1 to CPUs 0: [ 289.876531][ C0] NMI backtrace for cpu 0 [ 289.876549][ C0] CPU: 0 UID: 0 PID: 3010 Comm: kworker/u8:7 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 289.876569][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 289.876579][ C0] Workqueue: bat_events batadv_nc_worker [ 289.876602][ C0] RIP: 0010:rcu_is_watching+0x74/0xb0 [ 289.876622][ C0] Code: 93 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 22 8b 03 65 ff 0d b9 4a be 11 74 10 83 e0 04 c1 e8 02 5b 41 5e 41 5f cc cc cc cc e8 32 c2 81 ff eb e9 89 d9 80 e1 07 80 c1 03 38 c1 [ 289.876635][ C0] RSP: 0018:ffffc9000bb07a48 EFLAGS: 00000202 [ 289.876656][ C0] RAX: 0000000000000001 RBX: ffffffff93670020 RCX: ffff888031125a00 [ 289.876667][ C0] RDX: 0000000000000000 RSI: ffffffff8ca1b6c0 RDI: ffffffff8ca1b680 [ 289.876677][ C0] RBP: ffffffff8bf60cab R08: ffffffff8bf60dde R09: 0000000000000000 [ 289.876688][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888030314d80 [ 289.876697][ C0] R13: 0000000000000177 R14: ffff88802fb659c0 R15: ffffffff8ed3dfe0 [ 289.876708][ C0] FS: 0000000000000000(0000) GS:ffff888124fb0000(0000) knlGS:0000000000000000 [ 289.876721][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 289.876733][ C0] CR2: 00007ffcaed62b38 CR3: 0000000032dc6000 CR4: 00000000003526f0 [ 289.876748][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 289.876757][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 289.876767][ C0] Call Trace: [ 289.876773][ C0] [ 289.876778][ C0] lock_release+0x4e/0x3e0 [ 289.876796][ C0] ? batadv_nc_worker+0xcb/0x610 [ 289.876812][ C0] batadv_nc_worker+0x28b/0x610 [ 289.876827][ C0] ? batadv_nc_worker+0xcb/0x610 [ 289.876842][ C0] ? process_scheduled_works+0x9cb/0x18e0 [ 289.876857][ C0] process_scheduled_works+0xac3/0x18e0 [ 289.876884][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 289.876903][ C0] ? assign_work+0x367/0x3d0 [ 289.876919][ C0] worker_thread+0x870/0xd50 [ 289.876945][ C0] ? __kthread_parkme+0x1a8/0x200 [ 289.876963][ C0] ? __pfx_worker_thread+0x10/0x10 [ 289.876978][ C0] kthread+0x7b7/0x940 [ 289.876996][ C0] ? __pfx_worker_thread+0x10/0x10 [ 289.877011][ C0] ? __pfx_kthread+0x10/0x10 [ 289.877027][ C0] ? __pfx_kthread+0x10/0x10 [ 289.877043][ C0] ? __pfx_kthread+0x10/0x10 [ 289.877060][ C0] ? __pfx_kthread+0x10/0x10 [ 289.877076][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 289.877091][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 289.877107][ C0] ? __pfx_kthread+0x10/0x10 [ 289.877125][ C0] ret_from_fork+0x4b/0x80 [ 289.877138][ C0] ? __pfx_kthread+0x10/0x10 [ 289.877155][ C0] ret_from_fork_asm+0x1a/0x30 [ 289.877182][ C0] [ 289.877613][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 290.150280][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 290.162604][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 290.172858][ T31] Call Trace: [ 290.176242][ T31] [ 290.179189][ T31] dump_stack_lvl+0x241/0x360 [ 290.184070][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.189292][ T31] ? __pfx__printk+0x10/0x10 [ 290.193914][ T31] ? vscnprintf+0x5d/0x90 [ 290.198262][ T31] panic+0x349/0x880 [ 290.202166][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 290.207636][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 290.213894][ T31] ? __pfx_panic+0x10/0x10 [ 290.218363][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 290.223816][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 290.229313][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 290.235596][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 290.241766][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 290.248277][ T31] watchdog+0x1097/0x10a0 [ 290.252620][ T31] ? watchdog+0x1ea/0x10a0 [ 290.257088][ T31] ? __pfx_watchdog+0x10/0x10 [ 290.262123][ T31] kthread+0x7b7/0x940 [ 290.266390][ T31] ? __pfx_watchdog+0x10/0x10 [ 290.271084][ T31] ? __pfx_kthread+0x10/0x10 [ 290.275768][ T31] ? __pfx_kthread+0x10/0x10 [ 290.280478][ T31] ? __pfx_kthread+0x10/0x10 [ 290.285085][ T31] ? __pfx_kthread+0x10/0x10 [ 290.289682][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.294973][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 290.300180][ T31] ? __pfx_kthread+0x10/0x10 [ 290.304873][ T31] ret_from_fork+0x4b/0x80 [ 290.309297][ T31] ? __pfx_kthread+0x10/0x10 [ 290.313908][ T31] ret_from_fork_asm+0x1a/0x30 [ 290.318712][ T31] [ 290.322079][ T31] Kernel Offset: disabled [ 290.326610][ T31] Rebooting in 86400 seconds..