last executing test programs: 4.187887497s ago: executing program 3 (id=152): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}, @NFTA_REJECT_TYPE={0x8}]}}}, {0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_SOCKET_KEY={0x8}]}}}]}]}], {0x14}}, 0xfc}}, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_tos_int={{0x14, 0x110}}], 0x18, 0x4c00}, 0x0) 3.935990504s ago: executing program 3 (id=158): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, 0x0) ppoll(&(0x7f0000000200)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x400) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r1, &(0x7f0000000380), 0x0}, 0x20) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x1a, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb19}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) 2.472435929s ago: executing program 2 (id=182): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000000, 0xedf, 0x20000000, 0x0, 0x1}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) close(r1) 2.377995173s ago: executing program 4 (id=184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x20, 0x0, 0x40000}, 0x800) 2.186732561s ago: executing program 1 (id=186): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0xfff) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0180f2", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @info_reply={0xd}}}}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000080)={0x9, 0x9, 0x8, 0x6, 0x101, 0x81}) socket$vsock_stream(0x28, 0x1, 0x0) 2.185880051s ago: executing program 4 (id=187): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x10001, 0xfffffffffffffe44, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x268040, 0x0) unshare(0x24020400) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r3}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)={0x88, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac0c, 0xfac10, 0xfac02, 0xfac03, 0xfac09]}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xf9}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xa01}, @NL80211_ATTR_AKM_SUITES={0x14, 0x4c, [0xfac09, 0xfac0e, 0xfac10, 0xfac14]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x10}, @NL80211_ATTR_PMK={0x28, 0xfe, "26cb87b2b2dfaa8ec33bcfe28bb3603f5b6abc041f22647095d67976cd4129b3139a9eae"}]]}, 0x88}, 0x1, 0x0, 0x0, 0x20044800}, 0x4008000) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) socketpair(0x22, 0x2, 0x4, &(0x7f0000000440)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x428481, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, 0x0, 0x0) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x890b, &(0x7f0000000100)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000008d080000711209000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@var={0x3, 0x0, 0x0, 0xe, 0x3}, @fwd={0x3}, @typedef={0x1, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x71, 0x0, 0x2e]}}, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x7fff, 0xfffffffffffffffc, 0x0, 0x8, 0x9}, 0x0, &(0x7f00000026c0)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x400000, 0x2}, 0x0, 0x0) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c020000", @ANYRES16=r7, @ANYBLOB="010000000000000000", @ANYRES32], 0x25c}}, 0x0) 2.185349168s ago: executing program 2 (id=188): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x98, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x7, 0x6e07, 0x94db, 0x2, 0xe26, 0x5}}, {0x4}}]}, @qdisc_kind_options=@q_cake={{0x9}, {0x44, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x1}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x89}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_MPU={0x8, 0xe, 0x5b}]}}]}, 0x98}}, 0x0) 2.154861813s ago: executing program 1 (id=189): syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa}}}}}}, 0x0) 2.124206712s ago: executing program 3 (id=190): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x64010102}, 0x4, 0x2, 0x3, 0x2}}, 0x26) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) (async) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=""/75, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0xf4}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000069cf2f6913c86d9df146f09461949cafcf0c99f40c43c57a2d4ce57f8a4bc1214688ad2f00"/71, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES8=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES8=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000440)=[{r6, 0x80}, {r1, 0xa8}, {r6, 0x3010}], 0x3, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000df00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000}}, 0x20}}, 0x20004030) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000480)='btrfs_qgroup_account_extent\x00', r1}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000480)='btrfs_qgroup_account_extent\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="efb000000000000000000000000000000000000038dbcdd76ab8877dfa5b3b3422d910abdcdba7ad9bedbfbaf948d5b87851e966a2ad0016c5a7a563c9252c7dff95fc39d153eb2ee43bcc237154513884c8a87c5a1313d4ac871e2de9ecee497d41004998430ebbb8691117a57f9097d12e962370a21ac9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 2.037984471s ago: executing program 2 (id=192): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x100000, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="140100002b0001000000000000000000040191800c0017"], 0x114}], 0x1, 0x0, 0x0, 0x4c010}, 0x0) 2.037580358s ago: executing program 1 (id=193): r0 = socket(0x200000000000011, 0x2, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) pwritev(r3, 0x0, 0x0, 0x1, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x190, 0x6c, 0x0, 0x0, 0x0, 0x2c0, 0x258, 0x258, 0x2c0, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0={0xfc, 0x0, '\x00', 0xfc}, [], [], 'wlan1\x00', '\x00', {}, {0xff}, 0x11}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@ipv6={@private0, @empty, [], [], 'lo\x00', 'erspan0\x00', {}, {0xff}}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@hl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3f0) 1.965429662s ago: executing program 2 (id=194): r0 = socket(0x10, 0x80002, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000540)={0x10, 0x2c, 0x1}, 0x10}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="180000007200010700000000000004000700000060"], 0x18}}, 0x0) 1.5433521s ago: executing program 1 (id=195): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="02030003130000000000000000000000010009000000000005000600000000000a004e21fffffffd00000000000000000080000000000001000000000000000003000100000000000000000b0100000005000500000000000a00000000000c6dfe80000000000000000000000000000000000000000000000400030000800000008000000000000005000000000000000600000000000000"], 0x98}, 0x1, 0x7}, 0x4c848) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="810f000000000000000001000000080001"], 0x30}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001e008d2a26bd7000000000000a000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4024) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[], 0x32600) socket$nl_generic(0x10, 0x3, 0x10) r10 = accept4(r7, &(0x7f0000000440)=@nfc, &(0x7f00000004c0)=0x80, 0x80800) setsockopt$RDS_RECVERR(r10, 0x114, 0x5, &(0x7f0000000500), 0x4) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r11, 0x103, 0x7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r11, &(0x7f0000000140)={0x80000006}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000400)=0x5, 0x4) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x24000018) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000016c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="350126bd70000000080003517a02d3a200", @ANYRES32=0x0, @ANYRESHEX], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) writev(r9, &(0x7f0000000380)=[{&(0x7f0000000200)="a8db5c7f317e673012cc24d1b5d7a75113e1d0ae18640efb5638ced8269dd3e47c935df9cc5e82f5a3a8b1ccc82edfd7cc528b6fa47858ad818bdf2fe92829939383d1ee202426dddad8d4a715b4b64bce702e90fb025205cd95e7dc30662fec4fcf4cdeb18773a53c543f5523009735349fe27bf4fb93c966968d22", 0x7c}, {&(0x7f00000006c0)="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", 0xc00}, {&(0x7f0000000180)="d9d054c5a604cd17f269409291bcd9ca8f403d3fa344cf155b", 0x19}, {&(0x7f0000000280)="ec0489d6459475fe39c8946ac9d77405dfbf8897f0ef0e9aa8f3c51cf4f184addb5acd7dc9829c5e65016b08408c5244668e73987efa1edc40c4d80a76511908b4f2c042bfe566d99f70b7cdeda51e855d2b0cf3732d680b8d2c3a6d319601fdac7c4b3ea7c89463944098e68a12b5d92d5c68b1269f26fdec60cfd3904d620072dc9a32e4f0df5a251b174b52f978e51824f99c20e2acdc5d811a3dfe1248e9b93ccf5dfee2de967a617791eeeff71f47c456bdfd1ba2b4d76a8d15ee5ac28164b2190f73748cd4b879734408317c3bf7030432a1ea0a70e0e9d1569084f4ac449c4edfd9e61aa271", 0xe9}], 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000f, 0x13, r7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 1.450677187s ago: executing program 3 (id=196): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000600)={@random="86f1477f043b", @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x2b, 0x0, @empty, @local, {[], {0x0, 0x3b, 0x8}}}}}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="59fc912ee24294a5a2ddd82c20cfbb68db36", @ANYRES64=0x0], 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x88, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040024}, 0x8000) 1.45026152s ago: executing program 2 (id=197): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x7) close(r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000300)='GPL\x00', 0x4, 0x14, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.406391617s ago: executing program 4 (id=199): r0 = socket(0x2000000015, 0x80005, 0x0) unshare(0x400) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xfffd, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x15}, @private=0xa010100, 0x19, 0x5}}) socket(0x18, 0x80000, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000200), 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x11c, 0x30, 0xb, 0x0, 0x25dfdbfe, {}, [{0x108, 0x1, [@m_ct={0x104, 0x4, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x4, 0x0, 0x7, 0x7, 0x2}}, @TCA_CT_MARK={0x8, 0x5, 0x1}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}, @TCA_CT_ZONE={0x6, 0x4, 0xd4c}]}, {0xab, 0x6, "ecbb4a4490ea0f8113db02da371a00b672e92de9e37a2d7210c43e26a370dff19c8ad35432b3d9e293ff9cf613331f37f700d273d3777c39e75e4e2d64dd4b7a51e47431d2283163b0564cf6574d6afe07290e94d1e8e3d66d8cb6e9c8efa3fc28af1436d86e2a6563b16e7b38bc7fd2c03c34e378a7223753b44872e1a491543ffb92c07b0a91431a80064a5a35a8704bf948a549c0eea336b56f64841931ad5d679e5ab5c130"}, {0xc}, {0xc}}}]}]}, 0x11c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) 1.359208013s ago: executing program 1 (id=200): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) (async) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000240)=0xffffffff, 0x4) unshare(0x68060200) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={r1, 0xfffffffffffffffe, 0x7fffffffffffffff, 0x6}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, 0x0, 0x1b) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000280), 0x10) (async, rerun: 64) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async, rerun: 64) sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x880, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "e34625d41f6c1f236a0586254d6b61cb7aea3d6e409c99992121dd08e1a1382000e47e0ef5f0965fe4a92c358e5306583cf579e0acc10591d1c893f84f3f3431"}}, 0x80}}, 0x0) (async) close(r4) (async, rerun: 32) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x1ff, 0xffffffff, 0x100000000000007, 0x8000460b, 0x0, 0x1], 0x3, 0x0, 0x0, [{}, {}, {}]}, 0xa8) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x8, 0x13, r5, 0x393a7000) (async, rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x30040100) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x0, 0xf9, 0xff, 0x0, 0x10, 0x0, 0x0, 0x8, 0x0, 0x6, 0x9c, 0x6}, 0xe) (async, rerun: 64) recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/120, 0x78}, 0x7fffffff}], 0x1, 0x10003, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16, @ANYRES8=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r6) 1.298730137s ago: executing program 2 (id=201): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x400) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r1, &(0x7f0000000380), 0x0}, 0x20) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x1a, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb19}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) 1.298156183s ago: executing program 0 (id=202): unshare(0x20000400) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockname(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 1.229682464s ago: executing program 4 (id=203): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x98, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x7, 0x6e07, 0x94db, 0x2, 0xe26, 0x5}}, {0x4}}]}, @qdisc_kind_options=@q_cake={{0x9}, {0x44, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x1}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x89}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_MPU={0x8, 0xe, 0x5b}]}}]}, 0x98}}, 0x0) 1.228802377s ago: executing program 0 (id=204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r4}, 0x18) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000d, 0x4016071, 0xffffffffffffffff, 0x75c4a000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000000)={'hsr0\x00', 0x6}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="05060000", @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x694}}, 0x0) 1.203336042s ago: executing program 3 (id=205): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xa094}, 0x0) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d0000000000f0ff0007000000080003", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) 1.077309981s ago: executing program 4 (id=206): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @info_reply={0xd}}}}}, 0x0) (fail_nth: 6) 892.384644ms ago: executing program 0 (id=207): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, 0x0, 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x1b8, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @private1, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @local}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff653b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffcf5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffff7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x48090}, 0x8000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000060000000000000000000850000001700000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000080)={@local, @dev={0xac, 0x14, 0x14, 0x19}, 0x9, 0x8}}) 714.528422ms ago: executing program 4 (id=208): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020040000200000800040001000000", 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000ec0)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000340), &(0x7f0000000380)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000800)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) close(0x3) r4 = socket$isdn(0x22, 0x2, 0x10) close(r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRES32=r9, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000077030000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) socket$unix(0x1, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg$unix(r8, &(0x7f0000000b40)=[{{&(0x7f0000000ac0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0}}], 0x1, 0x0) close(r8) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB='v\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="41630000000000000000190000010000000000000000000000003a9a6b46a77c1ded44a88d8ca4f7bea33c31bb2176484e33cda1b794b194cd167fbefa4f93b442fa70f46673e90daef709415de55d97a6029c814d039c59a922d498a27fb1816a478eae7b2ef4459c48633bafcf3883050017a0c287d4194c1004122b93e8350e1721b8783fa0132c34e1f91078cd58d1acc38582f68448226828ef0ee1026c24827df03e90b5be88a99ea142fcb493101c97b8d43e0fbb45489c75b370780dcfe42c71c3d3b4c52d778372d0019c9620de3087"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x10048085) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x44, 0x31, 0x200, 0xffe4, 0x25dfdbff, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1c, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x60004000}, 0x0) 713.870753ms ago: executing program 3 (id=209): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0xffffffff}, [@NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}], {0x14}}, 0x68}}, 0x80) 502.948426ms ago: executing program 0 (id=210): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x268040, 0x0) unshare(0x24020400) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r2}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)={0x88, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac0c, 0xfac10, 0xfac02, 0xfac03, 0xfac09]}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xf9}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xa01}, @NL80211_ATTR_AKM_SUITES={0x14, 0x4c, [0xfac09, 0xfac0e, 0xfac10, 0xfac14]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x10}, @NL80211_ATTR_PMK={0x28, 0xfe, "26cb87b2b2dfaa8ec33bcfe28bb3603f5b6abc041f22647095d67976cd4129b3139a9eae"}]]}, 0x88}, 0x1, 0x0, 0x0, 0x20044800}, 0x4008000) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) socketpair(0x22, 0x2, 0x4, &(0x7f0000000440)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x428481, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, 0x0, 0x0) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x890b, &(0x7f0000000100)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000008d080000711209000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@var={0x3, 0x0, 0x0, 0xe, 0x3}, @fwd={0x3}, @typedef={0x1, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x71, 0x0, 0x2e]}}, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x7fff, 0xfffffffffffffffc, 0x0, 0x8, 0x9}, 0x0, &(0x7f00000026c0)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x400000, 0x2}, 0x0, 0x0) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c020000", @ANYRES16=r6, @ANYBLOB="010000000000000000", @ANYRES32], 0x25c}}, 0x0) 256.327768ms ago: executing program 0 (id=211): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="02030003130000000000000000000000010009000000000005000600000000000a004e21fffffffd00000000000000000080000000000001000000000000000003000100000000000000000b0100000005000500000000000a00000000000c6dfe80000000000000000000000000000000000000000000000400030000800000008000000000000005000000000000000600000000000000"], 0x98}, 0x1, 0x7}, 0x4c848) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="810f000000000000000001000000080001"], 0x30}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001e008d2a26bd7000000000000a000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4024) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[], 0x32600) socket$nl_generic(0x10, 0x3, 0x10) r10 = accept4(r7, &(0x7f0000000440)=@nfc, &(0x7f00000004c0)=0x80, 0x80800) setsockopt$RDS_RECVERR(r10, 0x114, 0x5, &(0x7f0000000500), 0x4) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r11, 0x103, 0x7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r11, &(0x7f0000000140)={0x80000006}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000400)=0x5, 0x4) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x24000018) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000016c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="350126bd70000000080003517a02d3a200", @ANYRES32=0x0, @ANYRESHEX], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) writev(r9, &(0x7f0000000380)=[{&(0x7f0000000200)="a8db5c7f317e673012cc24d1b5d7a75113e1d0ae18640efb5638ced8269dd3e47c935df9cc5e82f5a3a8b1ccc82edfd7cc528b6fa47858ad818bdf2fe92829939383d1ee202426dddad8d4a715b4b64bce702e90fb025205cd95e7dc30662fec4fcf4cdeb18773a53c543f5523009735349fe27bf4fb93c966968d22", 0x7c}, {&(0x7f00000006c0)="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", 0xc00}, {&(0x7f0000000180)="d9d054c5a604cd17f269409291bcd9ca8f403d3fa344cf155b", 0x19}, {&(0x7f0000000280)="ec0489d6459475fe39c8946ac9d77405dfbf8897f0ef0e9aa8f3c51cf4f184addb5acd7dc9829c5e65016b08408c5244668e73987efa1edc40c4d80a76511908b4f2c042bfe566d99f70b7cdeda51e855d2b0cf3732d680b8d2c3a6d319601fdac7c4b3ea7c89463944098e68a12b5d92d5c68b1269f26fdec60cfd3904d620072dc9a32e4f0df5a251b174b52f978e51824f99c20e2acdc5d811a3dfe1248e9b93ccf5dfee2de967a617791eeeff71f47c456bdfd1ba2b4d76a8d15ee5ac28164b2190f73748cd4b879734408317c3bf7030432a1ea0a70e0e9d1569084f4ac449c4edfd9e61aa271", 0xe9}], 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000f, 0x13, r7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 166.771974ms ago: executing program 1 (id=212): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304, 0x38}, "837ad552eed22b08", "e20000000000000010000000002000", '\x00', "d647cb0002ff00"}, 0x28) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 0s ago: executing program 0 (id=213): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304, 0x38}, "837ad552eed22b08", "e20000000000000010000000002000", '\x00', "d647cb0002ff00"}, 0x28) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts. [ 52.681867][ T5834] cgroup: Unknown subsys name 'net' [ 52.814586][ T5834] cgroup: Unknown subsys name 'cpuset' [ 52.822362][ T5834] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.077380][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.699693][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.711823][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.722785][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.730550][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.738439][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.746996][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.754866][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.762929][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.770514][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.777924][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.786802][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.790323][ T5861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.796035][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.809795][ T5848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 57.830693][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.845291][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.855185][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.862722][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.872543][ T5160] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.874273][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.881577][ T5160] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.896849][ T5160] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.911636][ T5862] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 57.911858][ T5160] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.919012][ T5862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.926571][ T5160] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.939860][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.945684][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.973913][ T5862] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 57.981582][ T5862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.265945][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 58.362928][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 58.469448][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.477174][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.484702][ T5850] bridge_slave_0: entered allmulticast mode [ 58.492293][ T5850] bridge_slave_0: entered promiscuous mode [ 58.500662][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 58.522349][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.529486][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.538862][ T5845] bridge_slave_0: entered allmulticast mode [ 58.545647][ T5845] bridge_slave_0: entered promiscuous mode [ 58.555657][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.564893][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.572228][ T5845] bridge_slave_1: entered allmulticast mode [ 58.579205][ T5845] bridge_slave_1: entered promiscuous mode [ 58.587324][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.594788][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.602069][ T5850] bridge_slave_1: entered allmulticast mode [ 58.608668][ T5850] bridge_slave_1: entered promiscuous mode [ 58.646412][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.663185][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.682532][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 58.692430][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 58.717236][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.730546][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.791247][ T5850] team0: Port device team_slave_0 added [ 58.812452][ T5845] team0: Port device team_slave_0 added [ 58.853131][ T5850] team0: Port device team_slave_1 added [ 58.859035][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.866400][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.876431][ T5853] bridge_slave_0: entered allmulticast mode [ 58.883265][ T5853] bridge_slave_0: entered promiscuous mode [ 58.891377][ T5845] team0: Port device team_slave_1 added [ 58.923030][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.930199][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.937627][ T5853] bridge_slave_1: entered allmulticast mode [ 58.944658][ T5853] bridge_slave_1: entered promiscuous mode [ 58.994759][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.004694][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.031368][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.057558][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.064593][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.094221][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.116684][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.126740][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.134082][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.160372][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.171925][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.179090][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.186390][ T5854] bridge_slave_0: entered allmulticast mode [ 59.192984][ T5854] bridge_slave_0: entered promiscuous mode [ 59.208596][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.215720][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.242375][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.255341][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.278084][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.288699][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.295996][ T5854] bridge_slave_1: entered allmulticast mode [ 59.305581][ T5854] bridge_slave_1: entered promiscuous mode [ 59.319626][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.327345][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.334600][ T5844] bridge_slave_0: entered allmulticast mode [ 59.341192][ T5844] bridge_slave_0: entered promiscuous mode [ 59.348698][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.355908][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.368003][ T5844] bridge_slave_1: entered allmulticast mode [ 59.375157][ T5844] bridge_slave_1: entered promiscuous mode [ 59.397580][ T5853] team0: Port device team_slave_0 added [ 59.446755][ T5853] team0: Port device team_slave_1 added [ 59.454508][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.466562][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.484004][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.502794][ T5845] hsr_slave_0: entered promiscuous mode [ 59.509195][ T5845] hsr_slave_1: entered promiscuous mode [ 59.543228][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.583964][ T5850] hsr_slave_0: entered promiscuous mode [ 59.590294][ T5850] hsr_slave_1: entered promiscuous mode [ 59.596603][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.604748][ T5850] Cannot create hsr debugfs directory [ 59.628826][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.635903][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.661898][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.674573][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.681817][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.707964][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.723305][ T5854] team0: Port device team_slave_0 added [ 59.730748][ T5854] team0: Port device team_slave_1 added [ 59.738828][ T5844] team0: Port device team_slave_0 added [ 59.746859][ T5844] team0: Port device team_slave_1 added [ 59.836071][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.843252][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.869666][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.881414][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.888416][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.914498][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.927081][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.928010][ T5862] Bluetooth: hci1: command tx timeout [ 59.934110][ T5858] Bluetooth: hci2: command tx timeout [ 59.945331][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.971334][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.000755][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.001413][ T5858] Bluetooth: hci3: command tx timeout [ 60.007855][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.013481][ T5862] Bluetooth: hci0: command tx timeout [ 60.039188][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.062714][ T5853] hsr_slave_0: entered promiscuous mode [ 60.068984][ T5853] hsr_slave_1: entered promiscuous mode [ 60.075120][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.081570][ T5858] Bluetooth: hci4: command tx timeout [ 60.083307][ T5853] Cannot create hsr debugfs directory [ 60.233803][ T5854] hsr_slave_0: entered promiscuous mode [ 60.239901][ T5854] hsr_slave_1: entered promiscuous mode [ 60.248039][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.255884][ T5854] Cannot create hsr debugfs directory [ 60.278196][ T5844] hsr_slave_0: entered promiscuous mode [ 60.284674][ T5844] hsr_slave_1: entered promiscuous mode [ 60.291107][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.300532][ T5844] Cannot create hsr debugfs directory [ 60.400424][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.436558][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.472492][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.483023][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.556260][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.587155][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.610616][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.625947][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.677757][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.690409][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.704155][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.721388][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.814687][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.824650][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.836132][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.856676][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.905921][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.943356][ T5854] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.963699][ T5854] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.973545][ T5854] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.989169][ T5854] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.029950][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.044882][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.059805][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.079901][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.087370][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.125753][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.132925][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.152502][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.172774][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.179863][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.188778][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.195938][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.206022][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.278225][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.285384][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.295032][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.302173][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.349949][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.375465][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.417971][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.467581][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.474816][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.529611][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.567915][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.575101][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.634431][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.641587][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.680032][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.687342][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.752091][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.769720][ T5844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.782655][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.836213][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.860241][ T5845] veth0_vlan: entered promiscuous mode [ 61.915135][ T5845] veth1_vlan: entered promiscuous mode [ 61.970216][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.001918][ T5858] Bluetooth: hci2: command tx timeout [ 62.007332][ T5858] Bluetooth: hci1: command tx timeout [ 62.016572][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.084731][ T5858] Bluetooth: hci3: command tx timeout [ 62.090185][ T5858] Bluetooth: hci0: command tx timeout [ 62.117811][ T5845] veth0_macvtap: entered promiscuous mode [ 62.132040][ T5845] veth1_macvtap: entered promiscuous mode [ 62.147109][ T5850] veth0_vlan: entered promiscuous mode [ 62.160163][ T5850] veth1_vlan: entered promiscuous mode [ 62.166861][ T5858] Bluetooth: hci4: command tx timeout [ 62.196832][ T5853] veth0_vlan: entered promiscuous mode [ 62.218885][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.229135][ T5844] veth0_vlan: entered promiscuous mode [ 62.246038][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.258767][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.269420][ T5853] veth1_vlan: entered promiscuous mode [ 62.307552][ T5844] veth1_vlan: entered promiscuous mode [ 62.327063][ T5845] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.346682][ T5845] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.355984][ T5845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.365058][ T5845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.415214][ T5850] veth0_macvtap: entered promiscuous mode [ 62.458759][ T5853] veth0_macvtap: entered promiscuous mode [ 62.469489][ T5850] veth1_macvtap: entered promiscuous mode [ 62.524542][ T5853] veth1_macvtap: entered promiscuous mode [ 62.538173][ T5844] veth0_macvtap: entered promiscuous mode [ 62.554475][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.566708][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.580795][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.616470][ T5844] veth1_macvtap: entered promiscuous mode [ 62.631762][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.640040][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.673642][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.686333][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.697635][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.714397][ T5854] veth0_vlan: entered promiscuous mode [ 62.724464][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.735560][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.745514][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.758143][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.769486][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.779232][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.787968][ T5850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.797122][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.805526][ T5850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.814938][ T5850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.823891][ T5850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.844598][ T5854] veth1_vlan: entered promiscuous mode [ 62.853622][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.865590][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.875653][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.887803][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.898576][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.908816][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.919627][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.930766][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.941688][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.952528][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.963460][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.977512][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.002370][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.015628][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.024931][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.033790][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.053017][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.064346][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.074517][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.085326][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.095195][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.105654][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.117183][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.145049][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 63.207967][ T5854] veth0_macvtap: entered promiscuous mode [ 63.218831][ T5853] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.227946][ T5853] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.249113][ T5853] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.258897][ T5853] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.293864][ T5854] veth1_macvtap: entered promiscuous mode [ 63.318544][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.341000][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.380595][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.399459][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.418273][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.431752][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.437184][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.439582][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.449507][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.449527][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.449541][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.449554][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.449567][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.449581][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.450679][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.530136][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.540703][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.550870][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.561448][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.571546][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.582183][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.592125][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.609674][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.632765][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.683222][ T5854] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.694305][ T5854] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.703685][ T5854] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.712771][ T5854] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.752511][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.763265][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.771114][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.780707][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.888360][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.925085][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.964680][ T5944] FAULT_INJECTION: forcing a failure. [ 63.964680][ T5944] name failslab, interval 1, probability 0, space 0, times 1 [ 63.989598][ T5944] CPU: 1 UID: 0 PID: 5944 Comm: syz.3.8 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 64.000060][ T5944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 64.010162][ T5944] Call Trace: [ 64.013462][ T5944] [ 64.016412][ T5944] dump_stack_lvl+0x241/0x360 [ 64.021134][ T5944] ? __pfx_dump_stack_lvl+0x10/0x10 [ 64.026358][ T5944] ? __pfx__printk+0x10/0x10 [ 64.030970][ T5944] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 64.036978][ T5944] ? __pfx___might_resched+0x10/0x10 [ 64.042298][ T5944] should_fail_ex+0x3b0/0x4e0 [ 64.047000][ T5944] should_failslab+0xac/0x100 [ 64.051699][ T5944] ? __alloc_skb+0x1c3/0x440 [ 64.056315][ T5944] kmem_cache_alloc_node_noprof+0x71/0x320 [ 64.062157][ T5944] __alloc_skb+0x1c3/0x440 [ 64.066606][ T5944] ? __pfx___alloc_skb+0x10/0x10 [ 64.071574][ T5944] ? netlink_ack_tlv_len+0x6e/0x200 [ 64.076800][ T5944] netlink_ack+0x13f/0xa30 [ 64.081215][ T5944] ? ____sys_sendmsg+0x52a/0x7e0 [ 64.082746][ T5862] Bluetooth: hci2: command tx timeout [ 64.086150][ T5944] ? __sys_sendmsg+0x292/0x380 [ 64.086176][ T5944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.086207][ T5944] netlink_rcv_skb+0x262/0x430 [ 64.092948][ T5858] Bluetooth: hci1: command tx timeout [ 64.096288][ T5944] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 64.096319][ T5944] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 64.123222][ T5944] ? apparmor_capable+0x13b/0x1b0 [ 64.128275][ T5944] ? bpf_lsm_capable+0x9/0x10 [ 64.132959][ T5944] ? security_capable+0x7e/0x2d0 [ 64.137924][ T5944] nfnetlink_rcv+0x297/0x2ab0 [ 64.142621][ T5944] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 64.148371][ T5944] ? __dev_queue_xmit+0x2f4/0x3f50 [ 64.153500][ T5944] ? __dev_queue_xmit+0x1775/0x3f50 [ 64.158705][ T5944] ? kasan_save_track+0x51/0x80 [ 64.161701][ T5862] Bluetooth: hci3: command tx timeout [ 64.163562][ T5944] ? ____sys_sendmsg+0x52a/0x7e0 [ 64.163593][ T5944] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 64.168986][ T5858] Bluetooth: hci0: command tx timeout [ 64.173855][ T5944] ? __dev_queue_xmit+0x2f4/0x3f50 [ 64.173883][ T5944] ? __pfx___dev_queue_xmit+0x10/0x10 [ 64.173919][ T5944] ? ref_tracker_free+0x643/0x7e0 [ 64.173940][ T5944] ? __asan_memcpy+0x40/0x70 [ 64.173956][ T5944] ? __pfx_ref_tracker_free+0x10/0x10 [ 64.173986][ T5944] ? netlink_deliver_tap+0x2e/0x1b0 [ 64.174007][ T5944] ? skb_clone+0x240/0x390 [ 64.174030][ T5944] ? __pfx_lock_release+0x10/0x10 [ 64.174056][ T5944] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 64.174088][ T5944] ? netlink_deliver_tap+0x2e/0x1b0 [ 64.174113][ T5944] netlink_unicast+0x7f6/0x990 [ 64.174142][ T5944] ? __pfx_netlink_unicast+0x10/0x10 [ 64.174161][ T5944] ? __virt_addr_valid+0x183/0x530 [ 64.174183][ T5944] ? __check_object_size+0x48e/0x900 [ 64.174208][ T5944] netlink_sendmsg+0x8e4/0xcb0 [ 64.174241][ T5944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.174268][ T5944] ? aa_sock_msg_perm+0x91/0x160 [ 64.174294][ T5944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.174312][ T5944] __sock_sendmsg+0x221/0x270 [ 64.174336][ T5944] ____sys_sendmsg+0x52a/0x7e0 [ 64.174367][ T5944] ? __pfx_____sys_sendmsg+0x10/0x10 [ 64.242057][ T5858] Bluetooth: hci4: command tx timeout [ 64.245552][ T5944] __sys_sendmsg+0x292/0x380 [ 64.301118][ T5944] ? __pfx___sys_sendmsg+0x10/0x10 [ 64.306276][ T5944] ? __pfx_vfs_write+0x10/0x10 [ 64.311087][ T5944] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 64.317446][ T5944] ? do_syscall_64+0x100/0x230 [ 64.322238][ T5944] ? do_syscall_64+0xb6/0x230 [ 64.326944][ T5944] do_syscall_64+0xf3/0x230 [ 64.331470][ T5944] ? clear_bhb_loop+0x35/0x90 [ 64.336258][ T5944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.342185][ T5944] RIP: 0033:0x7f2cfa37e719 [ 64.346627][ T5944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.366258][ T5944] RSP: 002b:00007f2cfb23d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.374705][ T5944] RAX: ffffffffffffffda RBX: 00007f2cfa535f80 RCX: 00007f2cfa37e719 [ 64.382708][ T5944] RDX: 0000000000000004 RSI: 00000000200001c0 RDI: 0000000000000003 [ 64.390705][ T5944] RBP: 00007f2cfb23d090 R08: 0000000000000000 R09: 0000000000000000 [ 64.398710][ T5944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.406711][ T5944] R13: 0000000000000000 R14: 00007f2cfa535f80 R15: 00007ffd240377d8 [ 64.414726][ T5944] [ 64.506771][ T5953] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1'. [ 64.515903][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.530808][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.666769][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.682604][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.738406][ T5960] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 64.860591][ T5960] FAULT_INJECTION: forcing a failure. [ 64.860591][ T5960] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 64.923451][ T5964] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 64.925155][ T5960] CPU: 0 UID: 0 PID: 5960 Comm: syz.1.2 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 64.943442][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 64.953529][ T5960] Call Trace: [ 64.956826][ T5960] [ 64.959773][ T5960] dump_stack_lvl+0x241/0x360 [ 64.964490][ T5960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 64.969716][ T5960] ? __pfx__printk+0x10/0x10 [ 64.974333][ T5960] ? __pfx_lock_release+0x10/0x10 [ 64.979392][ T5960] should_fail_ex+0x3b0/0x4e0 [ 64.984093][ T5960] _copy_from_iter+0x21f/0x1e70 [ 64.988972][ T5960] ? __virt_addr_valid+0x183/0x530 [ 64.994112][ T5960] ? __pfx_lock_release+0x10/0x10 [ 64.999174][ T5960] ? __alloc_skb+0x28f/0x440 [ 65.003791][ T5960] ? __pfx__copy_from_iter+0x10/0x10 [ 65.009105][ T5960] ? __virt_addr_valid+0x183/0x530 [ 65.014238][ T5960] ? __virt_addr_valid+0x183/0x530 [ 65.019372][ T5960] ? __virt_addr_valid+0x45f/0x530 [ 65.024507][ T5960] ? __check_object_size+0x48e/0x900 [ 65.029819][ T5960] netlink_sendmsg+0x73d/0xcb0 [ 65.034615][ T5960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.039934][ T5960] ? aa_sock_msg_perm+0x91/0x160 [ 65.044904][ T5960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.050211][ T5960] __sock_sendmsg+0x221/0x270 [ 65.054919][ T5960] ____sys_sendmsg+0x52a/0x7e0 [ 65.059723][ T5960] ? __pfx_____sys_sendmsg+0x10/0x10 [ 65.065030][ T5960] __sys_sendmsg+0x292/0x380 [ 65.069624][ T5960] ? __pfx___sys_sendmsg+0x10/0x10 [ 65.074747][ T5960] ? __pfx_vfs_write+0x10/0x10 [ 65.079523][ T5960] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 65.085853][ T5960] ? do_syscall_64+0x100/0x230 [ 65.090612][ T5960] ? do_syscall_64+0xb6/0x230 [ 65.095288][ T5960] do_syscall_64+0xf3/0x230 [ 65.099804][ T5960] ? clear_bhb_loop+0x35/0x90 [ 65.104481][ T5960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.110371][ T5960] RIP: 0033:0x7f210077e719 [ 65.114783][ T5960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.134387][ T5960] RSP: 002b:00007f2101573038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.142798][ T5960] RAX: ffffffffffffffda RBX: 00007f2100935f80 RCX: 00007f210077e719 [ 65.150765][ T5960] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000008 [ 65.158748][ T5960] RBP: 00007f2101573090 R08: 0000000000000000 R09: 0000000000000000 [ 65.166714][ T5960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.174680][ T5960] R13: 0000000000000000 R14: 00007f2100935f80 R15: 00007fff4b35d178 [ 65.182658][ T5960] [ 65.221879][ T5967] batadv_slave_1: entered promiscuous mode [ 65.247662][ T5967] batadv_slave_1: left promiscuous mode [ 65.278897][ T5968] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 65.307270][ T5969] batadv_slave_1: entered promiscuous mode [ 65.326257][ T5968] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 65.359120][ T5968] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 65.388407][ T5968] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 65.399880][ T5963] batadv_slave_1: left promiscuous mode [ 65.740950][ T5982] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.806225][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.910764][ T5991] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18'. [ 65.959985][ T5989] netlink: 'syz.3.17': attribute type 23 has an invalid length. [ 65.994246][ T5989] netlink: 'syz.3.17': attribute type 11 has an invalid length. [ 66.035513][ T5989] netlink: 224 bytes leftover after parsing attributes in process `syz.3.17'. [ 66.154519][ T5995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20'. [ 66.164306][ T5858] Bluetooth: hci1: command tx timeout [ 66.170302][ T5858] Bluetooth: hci2: command tx timeout [ 66.227150][ T5999] netlink: 68 bytes leftover after parsing attributes in process `syz.3.21'. [ 66.257404][ T5862] Bluetooth: hci0: command tx timeout [ 66.263153][ T5862] Bluetooth: hci3: command tx timeout [ 66.341218][ T5858] Bluetooth: hci4: command tx timeout [ 66.653150][ T6008] FAULT_INJECTION: forcing a failure. [ 66.653150][ T6008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.693055][ T6008] CPU: 1 UID: 0 PID: 6008 Comm: syz.2.24 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 66.703618][ T6008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 66.713696][ T6008] Call Trace: [ 66.716997][ T6008] [ 66.719946][ T6008] dump_stack_lvl+0x241/0x360 [ 66.724651][ T6008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 66.729870][ T6008] ? __pfx__printk+0x10/0x10 [ 66.734503][ T6008] ? __pfx_lock_release+0x10/0x10 [ 66.739563][ T6008] should_fail_ex+0x3b0/0x4e0 [ 66.744263][ T6008] _copy_from_user+0x2f/0xc0 [ 66.748877][ T6008] copy_msghdr_from_user+0xae/0x680 [ 66.754096][ T6008] ? __pfx___might_resched+0x10/0x10 [ 66.759420][ T6008] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 66.765261][ T6008] ? rcu_is_watching+0x15/0xb0 [ 66.770134][ T6008] ? __might_fault+0xaa/0x120 [ 66.774839][ T6008] __sys_sendmmsg+0x36d/0x730 [ 66.779554][ T6008] ? __pfx___sys_sendmmsg+0x10/0x10 [ 66.784782][ T6008] ? __pfx_lock_release+0x10/0x10 [ 66.789824][ T6008] ? kstrtouint_from_user+0x128/0x190 [ 66.795236][ T6008] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 66.801153][ T6008] ? ksys_write+0x229/0x2b0 [ 66.805672][ T6008] ? __pfx_lock_release+0x10/0x10 [ 66.810728][ T6008] ? vfs_write+0x730/0xd30 [ 66.815185][ T6008] ? __mutex_unlock_slowpath+0x21d/0x750 [ 66.820862][ T6008] ? __fget_files+0x3f3/0x470 [ 66.825571][ T6008] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 66.831575][ T6008] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 66.837931][ T6008] ? do_syscall_64+0x100/0x230 [ 66.842717][ T6008] __x64_sys_sendmmsg+0xa0/0xb0 [ 66.847589][ T6008] do_syscall_64+0xf3/0x230 [ 66.852106][ T6008] ? clear_bhb_loop+0x35/0x90 [ 66.856799][ T6008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.862707][ T6008] RIP: 0033:0x7f955637e719 [ 66.867136][ T6008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.886760][ T6008] RSP: 002b:00007f95571a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 66.895217][ T6008] RAX: ffffffffffffffda RBX: 00007f9556535f80 RCX: 00007f955637e719 [ 66.903203][ T6008] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000003 [ 66.911186][ T6008] RBP: 00007f95571a3090 R08: 0000000000000000 R09: 0000000000000000 [ 66.919169][ T6008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.927150][ T6008] R13: 0000000000000000 R14: 00007f9556535f80 R15: 00007ffe6cc32a98 [ 66.935152][ T6008] [ 67.364134][ T6021] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.910890][ T6030] netlink: 'syz.4.32': attribute type 6 has an invalid length. [ 67.919255][ T6031] netlink: 68 bytes leftover after parsing attributes in process `syz.2.33'. [ 68.059599][ T6036] netlink: 40 bytes leftover after parsing attributes in process `syz.3.35'. [ 68.101405][ T6036] Zero length message leads to an empty skb [ 68.713369][ T6053] syz.2.41[6053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.714416][ T6053] syz.2.41[6053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.748891][ T6053] syz.2.41[6053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.819844][ T6053] netlink: 1497 bytes leftover after parsing attributes in process `syz.2.41'. [ 68.903870][ T6064] netlink: 'syz.4.44': attribute type 11 has an invalid length. [ 69.181280][ T6069] netlink: 'syz.1.48': attribute type 6 has an invalid length. [ 69.226355][ T6071] netlink: 68 bytes leftover after parsing attributes in process `syz.0.47'. [ 69.635691][ T6097] lo speed is unknown, defaulting to 1000 [ 69.654238][ T6097] lo speed is unknown, defaulting to 1000 [ 69.679112][ T6097] lo speed is unknown, defaulting to 1000 [ 69.719912][ T6097] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 69.750958][ T6097] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 69.837711][ T6097] lo speed is unknown, defaulting to 1000 [ 69.862362][ T6097] lo speed is unknown, defaulting to 1000 [ 69.889453][ T6097] lo speed is unknown, defaulting to 1000 [ 69.917407][ T6097] lo speed is unknown, defaulting to 1000 [ 69.961958][ T6097] lo speed is unknown, defaulting to 1000 [ 70.185641][ T6110] netlink: 'syz.4.60': attribute type 4 has an invalid length. [ 70.207734][ T6110] netlink: 'syz.4.60': attribute type 4 has an invalid length. [ 70.227379][ T6114] netlink: 20 bytes leftover after parsing attributes in process `syz.1.62'. [ 70.277141][ T6110] netlink: 52 bytes leftover after parsing attributes in process `syz.4.60'. [ 70.286810][ T6110] netlink: 36 bytes leftover after parsing attributes in process `syz.4.60'. [ 70.376275][ T6110] lo speed is unknown, defaulting to 1000 [ 70.455381][ T6122] netlink: 60 bytes leftover after parsing attributes in process `syz.0.64'. [ 70.470093][ T6120] syz.1.65 uses obsolete (PF_INET,SOCK_PACKET) [ 70.586387][ T6126] netlink: 'syz.1.65': attribute type 4 has an invalid length. [ 71.115537][ T6132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.69'. [ 71.417033][ T6149] netlink: 20 bytes leftover after parsing attributes in process `syz.0.75'. [ 71.437100][ T6151] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 71.690839][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.697741][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.726196][ T6159] Bluetooth: MGMT ver 1.23 [ 71.759069][ T6163] netlink: 80 bytes leftover after parsing attributes in process `syz.4.80'. [ 71.900900][ T6167] FAULT_INJECTION: forcing a failure. [ 71.900900][ T6167] name failslab, interval 1, probability 0, space 0, times 0 [ 71.913796][ T6167] CPU: 0 UID: 0 PID: 6167 Comm: syz.4.82 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 71.924329][ T6167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 71.934406][ T6167] Call Trace: [ 71.937700][ T6167] [ 71.940651][ T6167] dump_stack_lvl+0x241/0x360 [ 71.945359][ T6167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.950578][ T6167] ? __pfx__printk+0x10/0x10 [ 71.955198][ T6167] ? __pfx_fib_rules_lookup+0x10/0x10 [ 71.960599][ T6167] ? l3mdev_update_flow+0x29/0x5f0 [ 71.965737][ T6167] ? l3mdev_update_flow+0x4a8/0x5f0 [ 71.970959][ T6167] should_fail_ex+0x3b0/0x4e0 [ 71.975665][ T6167] ? dst_alloc+0x12b/0x190 [ 71.980109][ T6167] should_failslab+0xac/0x100 [ 71.984809][ T6167] ? dst_alloc+0x12b/0x190 [ 71.989260][ T6167] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 71.994670][ T6167] ? __pfx_make_kuid+0x10/0x10 [ 71.999469][ T6167] dst_alloc+0x12b/0x190 [ 72.003745][ T6167] ip_route_input_rcu+0x22fc/0x3830 [ 72.008981][ T6167] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 72.014573][ T6167] ? __pfx_lock_acquire+0x10/0x10 [ 72.019637][ T6167] ? ipt_do_table+0x157a/0x1860 [ 72.024524][ T6167] ? ip_route_input_noref+0xad/0x250 [ 72.029840][ T6167] ip_route_input_noref+0x167/0x250 [ 72.035073][ T6167] ? __pfx_ip_route_input_noref+0x10/0x10 [ 72.040829][ T6167] ? tcp_v4_early_demux+0x445/0x930 [ 72.046053][ T6167] ? tcp_v4_early_demux+0x56c/0x930 [ 72.051279][ T6167] ip_rcv_finish_core+0x5b1/0x1b50 [ 72.056428][ T6167] ip_rcv_finish+0x14a/0x560 [ 72.061047][ T6167] ? NF_HOOK+0x392/0x450 [ 72.065324][ T6167] ? __pfx_ip_rcv_finish+0x10/0x10 [ 72.070462][ T6167] NF_HOOK+0x3a4/0x450 [ 72.074570][ T6167] ? NF_HOOK+0x9a/0x450 [ 72.078751][ T6167] ? __pfx_NF_HOOK+0x10/0x10 [ 72.083366][ T6167] ? ip_rcv_core+0x801/0xd10 [ 72.087983][ T6167] ? __pfx_ip_rcv_finish+0x10/0x10 [ 72.093125][ T6167] ? __pfx_ip_rcv+0x10/0x10 [ 72.097653][ T6167] __netif_receive_skb+0x2bf/0x650 [ 72.102791][ T6167] ? __pfx_lock_acquire+0x10/0x10 [ 72.107841][ T6167] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 72.114123][ T6167] ? __pfx___netif_receive_skb+0x10/0x10 [ 72.119783][ T6167] ? __kasan_slab_alloc+0x66/0x80 [ 72.124843][ T6167] ? read_tsc+0x9/0x20 [ 72.128946][ T6167] ? timekeeping_get_ns+0x2c0/0x420 [ 72.134178][ T6167] ? netif_receive_skb+0x131/0x890 [ 72.139313][ T6167] ? netif_receive_skb+0x131/0x890 [ 72.144455][ T6167] netif_receive_skb+0x1e8/0x890 [ 72.149506][ T6167] ? tun_rx_batched+0x160/0x8f0 [ 72.154473][ T6167] ? __pfx_netif_receive_skb+0x10/0x10 [ 72.159988][ T6167] ? tun_rx_batched+0x160/0x8f0 [ 72.164876][ T6167] tun_rx_batched+0x1b7/0x8f0 [ 72.169577][ T6167] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.175941][ T6167] ? __pfx_lock_acquire+0x10/0x10 [ 72.181001][ T6167] ? __pfx_tun_rx_batched+0x10/0x10 [ 72.186247][ T6167] tun_get_user+0x30d6/0x4890 [ 72.190949][ T6167] ? tun_get_user+0x2bbe/0x4890 [ 72.195829][ T6167] ? tun_get_user+0x86e/0x4890 [ 72.200631][ T6167] ? __lock_acquire+0x1384/0x2050 [ 72.205691][ T6167] ? __pfx_tun_get_user+0x10/0x10 [ 72.210757][ T6167] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 72.216245][ T6167] ? tun_get+0x1e/0x2f0 [ 72.220429][ T6167] ? __pfx_lock_release+0x10/0x10 [ 72.225497][ T6167] ? tun_get+0x1e/0x2f0 [ 72.229678][ T6167] ? tun_get+0x27d/0x2f0 [ 72.233948][ T6167] tun_chr_write_iter+0x10d/0x1f0 [ 72.239002][ T6167] vfs_write+0xaeb/0xd30 [ 72.243271][ T6167] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 72.248855][ T6167] ? __pfx_vfs_write+0x10/0x10 [ 72.253661][ T6167] ? fdget_pos+0x19a/0x320 [ 72.258102][ T6167] ksys_write+0x183/0x2b0 [ 72.262457][ T6167] ? __pfx_ksys_write+0x10/0x10 [ 72.267330][ T6167] ? do_syscall_64+0x100/0x230 [ 72.272118][ T6167] ? do_syscall_64+0xb6/0x230 [ 72.276821][ T6167] do_syscall_64+0xf3/0x230 [ 72.281348][ T6167] ? clear_bhb_loop+0x35/0x90 [ 72.286045][ T6167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.291957][ T6167] RIP: 0033:0x7f3ac2d7d1ff [ 72.296393][ T6167] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 72.316024][ T6167] RSP: 002b:00007f3ac3bba000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 72.324473][ T6167] RAX: ffffffffffffffda RBX: 00007f3ac2f35f80 RCX: 00007f3ac2d7d1ff [ 72.332471][ T6167] RDX: 0000000000000052 RSI: 00000000200002c0 RDI: 00000000000000c8 [ 72.340473][ T6167] RBP: 00007f3ac3bba090 R08: 0000000000000000 R09: 0000000000000000 [ 72.348471][ T6167] R10: 0000000000000052 R11: 0000000000000293 R12: 0000000000000001 [ 72.356472][ T6167] R13: 0000000000000001 R14: 00007f3ac2f35f80 R15: 00007ffca9419768 [ 72.364488][ T6167] [ 72.502349][ T6171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.84'. [ 72.670622][ T6180] netlink: 60 bytes leftover after parsing attributes in process `syz.1.88'. [ 72.778021][ T6186] netlink: 24 bytes leftover after parsing attributes in process `syz.4.89'. [ 73.150698][ T6202] syz.1.96[6202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.150806][ T6202] syz.1.96[6202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.162388][ T6202] syz.1.96[6202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.643996][ T6207] ieee802154 phy0 wpan0: encryption failed: -22 [ 74.577828][ T6238] syz.3.108[6238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.577925][ T6238] syz.3.108[6238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.637521][ T6238] syz.3.108[6238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.822468][ T6245] FAULT_INJECTION: forcing a failure. [ 74.822468][ T6245] name failslab, interval 1, probability 0, space 0, times 0 [ 74.860634][ T6247] vxlan0: entered allmulticast mode [ 74.877417][ T6245] CPU: 0 UID: 0 PID: 6245 Comm: syz.0.111 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 74.888065][ T6245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 74.898157][ T6245] Call Trace: [ 74.901463][ T6245] [ 74.904423][ T6245] dump_stack_lvl+0x241/0x360 [ 74.909142][ T6245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.914386][ T6245] ? __pfx__printk+0x10/0x10 [ 74.919014][ T6245] ? ref_tracker_alloc+0x332/0x490 [ 74.924157][ T6245] should_fail_ex+0x3b0/0x4e0 [ 74.928866][ T6245] ? skb_clone+0x20c/0x390 [ 74.933314][ T6245] should_failslab+0xac/0x100 [ 74.938030][ T6245] ? skb_clone+0x20c/0x390 [ 74.942479][ T6245] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 74.947891][ T6245] skb_clone+0x20c/0x390 [ 74.952170][ T6245] __netlink_deliver_tap+0x3cc/0x7f0 [ 74.957503][ T6245] ? netlink_deliver_tap+0x2e/0x1b0 [ 74.962734][ T6245] netlink_deliver_tap+0x19d/0x1b0 [ 74.967969][ T6245] netlink_sendskb+0x68/0x140 [ 74.972682][ T6245] netlink_unicast+0x39d/0x990 [ 74.977478][ T6245] ? __asan_memcpy+0x40/0x70 [ 74.982106][ T6245] ? __pfx_netlink_unicast+0x10/0x10 [ 74.987431][ T6245] netlink_rcv_skb+0x262/0x430 [ 74.992229][ T6245] ? __pfx_genl_rcv_msg+0x10/0x10 [ 74.997296][ T6245] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 75.002618][ T6245] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 75.008103][ T6245] genl_rcv+0x28/0x40 [ 75.012091][ T6245] netlink_unicast+0x7f6/0x990 [ 75.016881][ T6245] ? __pfx_netlink_unicast+0x10/0x10 [ 75.022170][ T6245] ? __virt_addr_valid+0x183/0x530 [ 75.027290][ T6245] ? __check_object_size+0x48e/0x900 [ 75.032583][ T6245] netlink_sendmsg+0x8e4/0xcb0 [ 75.037367][ T6245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.042658][ T6245] ? aa_sock_msg_perm+0x91/0x160 [ 75.047599][ T6245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.052886][ T6245] __sock_sendmsg+0x221/0x270 [ 75.057566][ T6245] ____sys_sendmsg+0x52a/0x7e0 [ 75.062337][ T6245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.067755][ T6245] __sys_sendmsg+0x292/0x380 [ 75.072357][ T6245] ? __pfx___sys_sendmsg+0x10/0x10 [ 75.077481][ T6245] ? __pfx_vfs_write+0x10/0x10 [ 75.082268][ T6245] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 75.088689][ T6245] ? do_syscall_64+0x100/0x230 [ 75.093455][ T6245] ? do_syscall_64+0xb6/0x230 [ 75.098134][ T6245] do_syscall_64+0xf3/0x230 [ 75.102646][ T6245] ? clear_bhb_loop+0x35/0x90 [ 75.107334][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.113227][ T6245] RIP: 0033:0x7f1e2917e719 [ 75.117644][ T6245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.137285][ T6245] RSP: 002b:00007f1e29ef3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.145707][ T6245] RAX: ffffffffffffffda RBX: 00007f1e29335f80 RCX: 00007f1e2917e719 [ 75.153855][ T6245] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 75.161828][ T6245] RBP: 00007f1e29ef3090 R08: 0000000000000000 R09: 0000000000000000 [ 75.169795][ T6245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.177779][ T6245] R13: 0000000000000000 R14: 00007f1e29335f80 R15: 00007ffc0efe3258 [ 75.185772][ T6245] [ 75.539671][ T6267] __nla_validate_parse: 8 callbacks suppressed [ 75.539690][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.120'. [ 75.833346][ T6283] RDS: rds_bind could not find a transport for 1400::, load rds_tcp or rds_rdma? [ 75.856034][ T6281] FAULT_INJECTION: forcing a failure. [ 75.856034][ T6281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.888505][ T6281] CPU: 0 UID: 0 PID: 6281 Comm: syz.0.124 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 75.899164][ T6281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 75.909252][ T6281] Call Trace: [ 75.912559][ T6281] [ 75.915523][ T6281] dump_stack_lvl+0x241/0x360 [ 75.920236][ T6281] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.925462][ T6281] ? __pfx__printk+0x10/0x10 [ 75.930086][ T6281] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 75.936357][ T6281] ? __pfx_lock_release+0x10/0x10 [ 75.941418][ T6281] ? ktime_get_ts64+0xa8/0x2b0 [ 75.946318][ T6281] should_fail_ex+0x3b0/0x4e0 [ 75.951025][ T6281] _copy_from_user+0x2f/0xc0 [ 75.955823][ T6281] copy_msghdr_from_user+0xae/0x680 [ 75.961057][ T6281] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 75.966883][ T6281] ? set_normalized_timespec64+0x160/0x1e0 [ 75.972712][ T6281] ? rcu_is_watching+0x15/0xb0 [ 75.977472][ T6281] ? __might_fault+0xaa/0x120 [ 75.982162][ T6281] do_recvmmsg+0x3f9/0xad0 [ 75.986582][ T6281] ? mark_lock+0x9a/0x360 [ 75.990912][ T6281] ? __pfx_do_recvmmsg+0x10/0x10 [ 75.995866][ T6281] ? __pfx___might_resched+0x10/0x10 [ 76.001152][ T6281] ? __might_fault+0xaa/0x120 [ 76.005830][ T6281] ? __pfx_lock_release+0x10/0x10 [ 76.010853][ T6281] ? vfs_write+0x730/0xd30 [ 76.015273][ T6281] ? get_timespec64+0x19c/0x280 [ 76.020133][ T6281] __x64_sys_recvmmsg+0x1b8/0x250 [ 76.025161][ T6281] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 76.030705][ T6281] ? do_syscall_64+0x100/0x230 [ 76.035475][ T6281] ? do_syscall_64+0xb6/0x230 [ 76.040160][ T6281] do_syscall_64+0xf3/0x230 [ 76.044662][ T6281] ? clear_bhb_loop+0x35/0x90 [ 76.049335][ T6281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.055226][ T6281] RIP: 0033:0x7f1e2917e719 [ 76.059638][ T6281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.079244][ T6281] RSP: 002b:00007f1e29ef3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 76.087659][ T6281] RAX: ffffffffffffffda RBX: 00007f1e29335f80 RCX: 00007f1e2917e719 [ 76.095623][ T6281] RDX: 00000000000006f5 RSI: 0000000020000440 RDI: 0000000000000003 [ 76.103591][ T6281] RBP: 00007f1e29ef3090 R08: 0000000020000480 R09: 0000000000000000 [ 76.111562][ T6281] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 76.119527][ T6281] R13: 0000000000000000 R14: 00007f1e29335f80 R15: 00007ffc0efe3258 [ 76.127508][ T6281] [ 77.446163][ T5858] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 77.537739][ T6320] FAULT_INJECTION: forcing a failure. [ 77.537739][ T6320] name failslab, interval 1, probability 0, space 0, times 0 [ 77.550674][ T6320] CPU: 0 UID: 0 PID: 6320 Comm: syz.0.132 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 77.561286][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 77.571366][ T6320] Call Trace: [ 77.574661][ T6320] [ 77.577604][ T6320] dump_stack_lvl+0x241/0x360 [ 77.582306][ T6320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.587525][ T6320] ? __pfx__printk+0x10/0x10 [ 77.592141][ T6320] ? fib6_rule_lookup+0x58c/0x790 [ 77.597190][ T6320] ? lockdep_hardirqs_on+0x99/0x150 [ 77.602413][ T6320] should_fail_ex+0x3b0/0x4e0 [ 77.607114][ T6320] should_failslab+0xac/0x100 [ 77.611811][ T6320] __kmalloc_node_noprof+0xdf/0x440 [ 77.617164][ T6320] ? alloc_slab_obj_exts+0x3a/0xa0 [ 77.622300][ T6320] alloc_slab_obj_exts+0x3a/0xa0 [ 77.627249][ T6320] __memcg_slab_post_alloc_hook+0x319/0x7e0 [ 77.633168][ T6320] ? dst_alloc+0x12b/0x190 [ 77.637600][ T6320] kmem_cache_alloc_noprof+0x1de/0x2a0 [ 77.643078][ T6320] ? __pfx_ip6_dst_gc+0x10/0x10 [ 77.647938][ T6320] dst_alloc+0x12b/0x190 [ 77.652204][ T6320] ip6_pol_route+0xb87/0x15d0 [ 77.656902][ T6320] ? ip6_pol_route+0x198/0x15d0 [ 77.661773][ T6320] ? __pfx_ip6_pol_route+0x10/0x10 [ 77.666896][ T6320] ? validate_chain+0x11e/0x5920 [ 77.671865][ T6320] fib6_rule_lookup+0x58c/0x790 [ 77.676733][ T6320] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 77.682397][ T6320] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 77.687798][ T6320] ? __local_bh_enable_ip+0x168/0x200 [ 77.693198][ T6320] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 77.699027][ T6320] ? ip6t_do_table+0x205/0x18a0 [ 77.703914][ T6320] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 77.709666][ T6320] ip6_route_input+0x859/0xd90 [ 77.714463][ T6320] ? __pfx_ip6_route_input+0x10/0x10 [ 77.719788][ T6320] ? __pfx_lock_release+0x10/0x10 [ 77.724843][ T6320] ? ip6_rcv_finish_core+0x20f/0x410 [ 77.730148][ T6320] ip6_rcv_finish+0x144/0x180 [ 77.734847][ T6320] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 77.740062][ T6320] NF_HOOK+0x3a4/0x450 [ 77.744149][ T6320] ? skb_orphan+0x4b/0xd0 [ 77.748497][ T6320] ? NF_HOOK+0x9a/0x450 [ 77.752670][ T6320] ? __pfx_NF_HOOK+0x10/0x10 [ 77.757281][ T6320] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 77.762515][ T6320] ? __pfx_ipv6_rcv+0x10/0x10 [ 77.767206][ T6320] __netif_receive_skb+0x1ea/0x650 [ 77.772343][ T6320] ? __pfx_lock_acquire+0x10/0x10 [ 77.777388][ T6320] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 77.783649][ T6320] ? __pfx___netif_receive_skb+0x10/0x10 [ 77.789291][ T6320] ? __kasan_slab_alloc+0x66/0x80 [ 77.794350][ T6320] ? read_tsc+0x9/0x20 [ 77.798449][ T6320] ? timekeeping_get_ns+0x2c0/0x420 [ 77.803671][ T6320] ? netif_receive_skb+0x131/0x890 [ 77.808793][ T6320] ? netif_receive_skb+0x131/0x890 [ 77.813936][ T6320] netif_receive_skb+0x1e8/0x890 [ 77.818893][ T6320] ? tun_rx_batched+0x160/0x8f0 [ 77.823779][ T6320] ? __pfx_netif_receive_skb+0x10/0x10 [ 77.829261][ T6320] ? tun_rx_batched+0x160/0x8f0 [ 77.834132][ T6320] tun_rx_batched+0x1b7/0x8f0 [ 77.838833][ T6320] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 77.845189][ T6320] ? __pfx_lock_acquire+0x10/0x10 [ 77.850229][ T6320] ? __pfx_tun_rx_batched+0x10/0x10 [ 77.855468][ T6320] tun_get_user+0x30d6/0x4890 [ 77.860194][ T6320] ? tun_get_user+0x2bbe/0x4890 [ 77.865067][ T6320] ? tun_get_user+0x86e/0x4890 [ 77.869852][ T6320] ? __lock_acquire+0x1384/0x2050 [ 77.874908][ T6320] ? __pfx_tun_get_user+0x10/0x10 [ 77.879984][ T6320] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 77.885458][ T6320] ? tun_get+0x1e/0x2f0 [ 77.889633][ T6320] ? __pfx_lock_release+0x10/0x10 [ 77.894697][ T6320] ? tun_get+0x1e/0x2f0 [ 77.898878][ T6320] ? tun_get+0x27d/0x2f0 [ 77.903146][ T6320] tun_chr_write_iter+0x10d/0x1f0 [ 77.908192][ T6320] vfs_write+0xaeb/0xd30 [ 77.912453][ T6320] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 77.918017][ T6320] ? __pfx_vfs_write+0x10/0x10 [ 77.922811][ T6320] ? fdget_pos+0x19a/0x320 [ 77.927247][ T6320] ksys_write+0x183/0x2b0 [ 77.931592][ T6320] ? __pfx_ksys_write+0x10/0x10 [ 77.936459][ T6320] ? do_syscall_64+0x100/0x230 [ 77.941246][ T6320] ? do_syscall_64+0xb6/0x230 [ 77.945939][ T6320] do_syscall_64+0xf3/0x230 [ 77.950454][ T6320] ? clear_bhb_loop+0x35/0x90 [ 77.955150][ T6320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.961061][ T6320] RIP: 0033:0x7f1e2917d1ff [ 77.965495][ T6320] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 77.985117][ T6320] RSP: 002b:00007f1e29ef3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 77.993558][ T6320] RAX: ffffffffffffffda RBX: 00007f1e29335f80 RCX: 00007f1e2917d1ff [ 78.001550][ T6320] RDX: 000000000000003e RSI: 0000000020000000 RDI: 00000000000000c8 [ 78.009550][ T6320] RBP: 00007f1e29ef3090 R08: 0000000000000000 R09: 0000000000000000 [ 78.017536][ T6320] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 78.025523][ T6320] R13: 0000000000000001 R14: 00007f1e29335f80 R15: 00007ffc0efe3258 [ 78.033530][ T6320] [ 78.196265][ T6323] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 78.202103][ T1198] cfg80211: failed to load regulatory.db [ 78.249404][ T6322] netlink: 'syz.3.138': attribute type 10 has an invalid length. [ 78.304676][ T6322] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.313040][ T6322] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.367205][ T6322] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.374702][ T6322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.382789][ T6322] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.389944][ T6322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.456471][ T6322] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 78.483463][ T11] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 78.514483][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.142'. [ 78.541385][ T6332] netlink: 120 bytes leftover after parsing attributes in process `syz.0.142'. [ 78.826440][ T6342] FAULT_INJECTION: forcing a failure. [ 78.826440][ T6342] name failslab, interval 1, probability 0, space 0, times 0 [ 78.848762][ T6342] CPU: 1 UID: 0 PID: 6342 Comm: syz.0.146 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 78.859408][ T6342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 78.869481][ T6342] Call Trace: [ 78.872778][ T6342] [ 78.875723][ T6342] dump_stack_lvl+0x241/0x360 [ 78.880424][ T6342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.885646][ T6342] ? __pfx__printk+0x10/0x10 [ 78.890270][ T6342] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 78.895951][ T6342] ? __pfx___might_resched+0x10/0x10 [ 78.901277][ T6342] should_fail_ex+0x3b0/0x4e0 [ 78.905983][ T6342] ? sk_prot_alloc+0x58/0x210 [ 78.910687][ T6342] should_failslab+0xac/0x100 [ 78.915398][ T6342] ? sk_prot_alloc+0x58/0x210 [ 78.920140][ T6342] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 78.925548][ T6342] sk_prot_alloc+0x58/0x210 [ 78.930072][ T6342] ? sk_alloc+0x26/0x370 [ 78.934340][ T6342] sk_alloc+0x38/0x370 [ 78.938437][ T6342] inet6_create+0x6ce/0x10f0 [ 78.943137][ T6342] ? inet6_create+0x78/0x10f0 [ 78.947849][ T6342] __sock_create+0x4c0/0xa30 [ 78.952472][ T6342] udp_sock_create6+0xe7/0x870 [ 78.957255][ T6342] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 78.963095][ T6342] ? __pfx_udp_sock_create6+0x10/0x10 [ 78.968497][ T6342] ? rxrpc_lookup_local+0xcdb/0x1890 [ 78.973827][ T6342] rxrpc_lookup_local+0xd86/0x1890 [ 78.978974][ T6342] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 78.984547][ T6342] ? __local_bh_enable_ip+0x168/0x200 [ 78.989946][ T6342] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 78.995681][ T6342] ? do_raw_spin_unlock+0x13c/0x8b0 [ 79.000922][ T6342] rxrpc_sendmsg+0x4d9/0x920 [ 79.005542][ T6342] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 79.010671][ T6342] __sock_sendmsg+0x221/0x270 [ 79.015371][ T6342] ____sys_sendmsg+0x52a/0x7e0 [ 79.020162][ T6342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 79.025492][ T6342] __sys_sendmsg+0x292/0x380 [ 79.030115][ T6342] ? __pfx___sys_sendmsg+0x10/0x10 [ 79.035260][ T6342] ? __pfx_vfs_write+0x10/0x10 [ 79.040068][ T6342] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 79.046417][ T6342] ? do_syscall_64+0x100/0x230 [ 79.051202][ T6342] ? do_syscall_64+0xb6/0x230 [ 79.055901][ T6342] do_syscall_64+0xf3/0x230 [ 79.060430][ T6342] ? clear_bhb_loop+0x35/0x90 [ 79.065136][ T6342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.071046][ T6342] RIP: 0033:0x7f1e2917e719 [ 79.075488][ T6342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.095115][ T6342] RSP: 002b:00007f1e29ef3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.103552][ T6342] RAX: ffffffffffffffda RBX: 00007f1e29335f80 RCX: 00007f1e2917e719 [ 79.111541][ T6342] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 79.119525][ T6342] RBP: 00007f1e29ef3090 R08: 0000000000000000 R09: 0000000000000000 [ 79.127512][ T6342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.135498][ T6342] R13: 0000000000000000 R14: 00007f1e29335f80 R15: 00007ffc0efe3258 [ 79.143501][ T6342] [ 80.710147][ T6416] netlink: 'syz.1.171': attribute type 6 has an invalid length. [ 81.028452][ T6435] vlan2: entered promiscuous mode [ 81.061763][ T6435] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 81.097592][ T6435] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 81.338415][ T6454] netlink: 'syz.2.182': attribute type 4 has an invalid length. [ 81.572590][ T6468] FAULT_INJECTION: forcing a failure. [ 81.572590][ T6468] name failslab, interval 1, probability 0, space 0, times 0 [ 81.610963][ T6471] netlink: 'syz.2.192': attribute type 23 has an invalid length. [ 81.620480][ T6471] netlink: 244 bytes leftover after parsing attributes in process `syz.2.192'. [ 81.621415][ T6468] CPU: 1 UID: 0 PID: 6468 Comm: syz.0.191 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 81.640053][ T6468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 81.650140][ T6468] Call Trace: [ 81.653445][ T6468] [ 81.656394][ T6468] dump_stack_lvl+0x241/0x360 [ 81.661108][ T6468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.666327][ T6468] ? __pfx__printk+0x10/0x10 [ 81.670923][ T6468] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 81.676390][ T6468] ? __pfx___might_resched+0x10/0x10 [ 81.681690][ T6468] should_fail_ex+0x3b0/0x4e0 [ 81.686376][ T6468] should_failslab+0xac/0x100 [ 81.691055][ T6468] ? netdevice_event+0x37d/0x950 [ 81.696007][ T6468] __kmalloc_cache_noprof+0x6c/0x2c0 [ 81.701302][ T6468] netdevice_event+0x37d/0x950 [ 81.706099][ T6468] ? __up_read+0x2c2/0x6b0 [ 81.710514][ T6468] ? __pfx_netdevice_event+0x10/0x10 [ 81.715859][ T6468] ? __pfx_del_netdev_upper_ips+0x10/0x10 [ 81.721593][ T6468] ? __pfx_upper_device_filter+0x10/0x10 [ 81.727241][ T6468] ? __pfx_add_netdev_ips+0x10/0x10 [ 81.732442][ T6468] ? __pfx_is_eth_port_of_netdev_filter+0x10/0x10 [ 81.738862][ T6468] ? cfg802154_netdev_notifier_call+0xde/0x910 [ 81.745026][ T6468] notifier_call_chain+0x19f/0x3e0 [ 81.750147][ T6468] __netdev_upper_dev_unlink+0x2ba/0x8e0 [ 81.755790][ T6468] ? __pfx___netdev_upper_dev_unlink+0x10/0x10 [ 81.761950][ T6468] ? unregister_netdevice_queue+0x26b/0x370 [ 81.767847][ T6468] ? netdev_upper_dev_unlink+0x84/0xd0 [ 81.773312][ T6468] netdev_upper_dev_unlink+0x92/0xd0 [ 81.778598][ T6468] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 81.784583][ T6468] ? macvlan_dellink+0x404/0x4a0 [ 81.789530][ T6468] ? __pfx_macvlan_dellink+0x10/0x10 [ 81.794822][ T6468] rtnl_dellink+0x518/0x8d0 [ 81.799330][ T6468] ? __pfx_rtnl_dellink+0x10/0x10 [ 81.804367][ T6468] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.810752][ T6468] ? __pfx_rtnl_dellink+0x10/0x10 [ 81.815779][ T6468] rtnetlink_rcv_msg+0x791/0xcf0 [ 81.820711][ T6468] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 81.825824][ T6468] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 81.831286][ T6468] ? ref_tracker_free+0x643/0x7e0 [ 81.836313][ T6468] netlink_rcv_skb+0x1e3/0x430 [ 81.841077][ T6468] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 81.846532][ T6468] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 81.851836][ T6468] ? netlink_deliver_tap+0x2e/0x1b0 [ 81.857035][ T6468] netlink_unicast+0x7f6/0x990 [ 81.861806][ T6468] ? __pfx_netlink_unicast+0x10/0x10 [ 81.867086][ T6468] ? __virt_addr_valid+0x183/0x530 [ 81.872371][ T6468] ? __check_object_size+0x48e/0x900 [ 81.877655][ T6468] netlink_sendmsg+0x8e4/0xcb0 [ 81.882426][ T6468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.887713][ T6468] ? aa_sock_msg_perm+0x91/0x160 [ 81.892663][ T6468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.897949][ T6468] __sock_sendmsg+0x221/0x270 [ 81.902631][ T6468] ____sys_sendmsg+0x52a/0x7e0 [ 81.907429][ T6468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.912726][ T6468] __sys_sendmsg+0x292/0x380 [ 81.917325][ T6468] ? __pfx___sys_sendmsg+0x10/0x10 [ 81.922445][ T6468] ? __pfx_vfs_write+0x10/0x10 [ 81.927225][ T6468] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.933561][ T6468] ? do_syscall_64+0x100/0x230 [ 81.938323][ T6468] ? do_syscall_64+0xb6/0x230 [ 81.942997][ T6468] do_syscall_64+0xf3/0x230 [ 81.947499][ T6468] ? clear_bhb_loop+0x35/0x90 [ 81.952173][ T6468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.958062][ T6468] RIP: 0033:0x7f1e2917e719 [ 81.962474][ T6468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.982106][ T6468] RSP: 002b:00007f1e29ef3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.990521][ T6468] RAX: ffffffffffffffda RBX: 00007f1e29335f80 RCX: 00007f1e2917e719 [ 81.998497][ T6468] RDX: 0000000000040010 RSI: 00000000200001c0 RDI: 0000000000000003 [ 82.006469][ T6468] RBP: 00007f1e29ef3090 R08: 0000000000000000 R09: 0000000000000000 [ 82.014434][ T6468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.022399][ T6468] R13: 0000000000000000 R14: 00007f1e29335f80 R15: 00007ffc0efe3258 [ 82.030381][ T6468] [ 82.044686][ T5858] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 82.148289][ T6484] netlink: 20 bytes leftover after parsing attributes in process `syz.1.195'. [ 82.267918][ T6489] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -1 [ 82.443323][ T6501] lo speed is unknown, defaulting to 1000 [ 82.490190][ T6507] syz.0.204[6507] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.490298][ T6507] syz.0.204[6507] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.502267][ T6507] syz.0.204[6507] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.526672][ T6507] netlink: 1497 bytes leftover after parsing attributes in process `syz.0.204'. [ 82.599818][ T6512] FAULT_INJECTION: forcing a failure. [ 82.599818][ T6512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.629615][ T6512] CPU: 0 UID: 0 PID: 6512 Comm: syz.4.206 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 82.640271][ T6512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 82.650360][ T6512] Call Trace: [ 82.653667][ T6512] [ 82.656623][ T6512] dump_stack_lvl+0x241/0x360 [ 82.661340][ T6512] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.666609][ T6512] ? __pfx__printk+0x10/0x10 [ 82.671235][ T6512] ? snprintf+0xda/0x120 [ 82.675518][ T6512] should_fail_ex+0x3b0/0x4e0 [ 82.680235][ T6512] _copy_to_user+0x31/0xb0 [ 82.684694][ T6512] simple_read_from_buffer+0xca/0x150 [ 82.690115][ T6512] proc_fail_nth_read+0x1e9/0x250 [ 82.695184][ T6512] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.700770][ T6512] ? rw_verify_area+0x55e/0x6f0 [ 82.705652][ T6512] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.711233][ T6512] vfs_read+0x1fc/0xb70 [ 82.715425][ T6512] ? fdget_pos+0x24e/0x320 [ 82.719868][ T6512] ? __pfx_vfs_read+0x10/0x10 [ 82.724582][ T6512] ? __fget_files+0x3f3/0x470 [ 82.729289][ T6512] ? fdget_pos+0x24e/0x320 [ 82.733736][ T6512] ksys_read+0x183/0x2b0 [ 82.738007][ T6512] ? __pfx_ksys_read+0x10/0x10 [ 82.742792][ T6512] ? do_syscall_64+0x100/0x230 [ 82.747588][ T6512] ? do_syscall_64+0xb6/0x230 [ 82.752292][ T6512] do_syscall_64+0xf3/0x230 [ 82.756822][ T6512] ? clear_bhb_loop+0x35/0x90 [ 82.761526][ T6512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.767451][ T6512] RIP: 0033:0x7f3ac2d7d15c [ 82.771888][ T6512] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 82.791696][ T6512] RSP: 002b:00007f3ac3bba030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.800148][ T6512] RAX: ffffffffffffffda RBX: 00007f3ac2f35f80 RCX: 00007f3ac2d7d15c [ 82.808150][ T6512] RDX: 000000000000000f RSI: 00007f3ac3bba0a0 RDI: 0000000000000003 [ 82.816155][ T6512] RBP: 00007f3ac3bba090 R08: 0000000000000000 R09: 0000000000000000 [ 82.824160][ T6512] R10: 000000000000002e R11: 0000000000000246 R12: 0000000000000001 [ 82.832169][ T6512] R13: 0000000000000000 R14: 00007f3ac2f35f80 R15: 00007ffca9419768 [ 82.840186][ T6512] [ 83.005974][ T66] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.010435][ T6519] delete_channel: no stack [ 83.150071][ T66] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.263829][ T66] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.423701][ T66] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.462744][ T6526] netlink: 20 bytes leftover after parsing attributes in process `syz.0.211'. [ 83.580911][ T66] bridge_slave_1: left allmulticast mode [ 83.595563][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.608133][ T66] bridge_slave_1: left promiscuous mode [ 83.614265][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.645064][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.663082][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.673470][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.682027][ T5858] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.690876][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.706073][ T66] bridge_slave_0: left allmulticast mode [ 83.736624][ T66] bridge_slave_0: left promiscuous mode [ 83.742767][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.759804][ T53] [ 83.760600][ T66] ------------[ cut here ]------------ [ 83.762563][ T53] ============================= [ 83.767687][ T66] DEBUG_LOCKS_WARN_ON(1) [ 83.767768][ T66] WARNING: CPU: 1 PID: 66 at kernel/locking/lockdep.c:232 __lock_acquire+0x58c/0x2050 [ 83.772851][ T53] WARNING: suspicious RCU usage [ 83.776737][ T66] Modules linked in: [ 83.786506][ T53] 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 Not tainted [ 83.791106][ T66] CPU: 1 UID: 0 PID: 66 Comm: kworker/u8:4 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 83.791127][ T66] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 83.791138][ T66] Workqueue: netns cleanup_net [ 83.791162][ T66] RIP: 0010:__lock_acquire+0x58c/0x2050 [ 83.791187][ T66] Code: 00 00 83 3d 55 46 ad 0e 00 75 23 90 48 c7 c7 60 c9 0a 8c 48 c7 c6 00 cc 0a 8c e8 bf 7c e5 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 83.791201][ T66] RSP: 0018:ffffc900020bf3f0 EFLAGS: 00010046 [ 83.791214][ T66] RAX: 54dd5a7d0b4a5400 RBX: 0000000000000eac RCX: ffff88801cf60000 [ 83.791225][ T66] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 83.791235][ T66] RBP: 0000000000000014 R08: ffffffff8155d312 R09: 1ffffffff1d02658 [ 83.791246][ T66] R10: dffffc0000000000 R11: fffffbfff1d02659 R12: ffff88801cf60000 [ 83.791257][ T66] R13: 0000000000000eac R14: 1ffff110039ec174 R15: ffff88801cf60ba0 [ 83.791268][ T66] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 83.791282][ T66] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.791293][ T66] CR2: 00007f8524a65000 CR3: 0000000027e0e000 CR4: 00000000003526f0 [ 83.791309][ T66] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 83.791321][ T66] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 83.791333][ T66] Call Trace: [ 83.791340][ T66] [ 83.791348][ T66] ? __warn+0x168/0x4e0 [ 83.791367][ T66] ? __lock_acquire+0x58c/0x2050 [ 83.791390][ T66] ? report_bug+0x2b3/0x500 [ 83.791412][ T66] ? __lock_acquire+0x58c/0x2050 [ 83.791435][ T66] ? handle_bug+0x60/0x90 [ 83.791453][ T66] ? exc_invalid_op+0x1a/0x50 [ 83.791469][ T66] ? asm_exc_invalid_op+0x1a/0x20 [ 83.791489][ T66] ? __warn_printk+0x292/0x360 [ 83.795363][ T53] ----------------------------- [ 83.795371][ T53] net/sched/sch_generic.c:1290 suspicious rcu_dereference_protected() usage! [ 83.802451][ T66] ? __lock_acquire+0x58c/0x2050 [ 83.802480][ T66] lock_acquire+0x1ed/0x550 [ 83.802501][ T66] ? down+0x39/0xc0 [ 83.802518][ T66] ? ib_device_get_by_netdev+0x85/0x5e0 [ 83.802540][ T66] ? __pfx_lock_acquire+0x10/0x10 [ 83.802567][ T66] _raw_spin_lock_irqsave+0xd5/0x120 [ 83.802589][ T66] ? down+0x39/0xc0 [ 83.802606][ T66] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 83.802632][ T66] down+0x39/0xc0 [ 83.802651][ T66] __dev_close_many+0x107/0x300 [ 83.802670][ T66] ? __pfx___dev_close_many+0x10/0x10 [ 83.802690][ T66] ? mark_lock+0x9a/0x360 [ 83.802707][ T66] dev_close_many+0x24e/0x4c0 [ 83.802734][ T66] ? __pfx_dev_close_many+0x10/0x10 [ 83.802755][ T66] unregister_netdevice_many_notify+0x530/0x1da0 [ 83.802785][ T66] ? net_generic+0x1f/0x240 [ 83.802803][ T66] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 83.813736][ T53] [ 83.813736][ T53] other info that might help us debug this: [ 83.813736][ T53] [ 83.823490][ T66] ? unregister_netdevice_queue+0x26b/0x370 [ 83.823520][ T66] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 83.823545][ T66] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 83.823565][ T66] cleanup_net+0x75d/0xcc0 [ 83.823587][ T66] ? __pfx_cleanup_net+0x10/0x10 [ 83.823610][ T66] ? process_scheduled_works+0x976/0x1850 [ 83.823630][ T66] process_scheduled_works+0xa63/0x1850 [ 83.823660][ T66] ? __pfx_process_scheduled_works+0x10/0x10 [ 83.823684][ T66] ? assign_work+0x364/0x3d0 [ 83.823703][ T66] worker_thread+0x870/0xd30 [ 83.823734][ T66] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 83.828517][ T53] [ 83.828517][ T53] rcu_scheduler_active = 2, debug_locks = 1 [ 83.834042][ T66] ? __kthread_parkme+0x169/0x1d0 [ 83.834069][ T66] ? __pfx_worker_thread+0x10/0x10 [ 83.834089][ T66] kthread+0x2f0/0x390 [ 83.834103][ T66] ? __pfx_worker_thread+0x10/0x10 [ 83.834121][ T66] ? __pfx_kthread+0x10/0x10 [ 83.834135][ T66] ret_from_fork+0x4b/0x80 [ 83.834157][ T66] ? __pfx_kthread+0x10/0x10 [ 83.834171][ T66] ret_from_fork_asm+0x1a/0x30 [ 83.834197][ T66] [ 83.834208][ T66] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 83.834219][ T66] CPU: 1 UID: 0 PID: 66 Comm: kworker/u8:4 Not tainted 6.12.0-rc6-syzkaller-01561-ga71c69f51d11 #0 [ 83.834240][ T66] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 83.834251][ T66] Workqueue: netns cleanup_net [ 83.834272][ T66] Call Trace: [ 83.834279][ T66] [ 83.834286][ T66] dump_stack_lvl+0x241/0x360 [ 83.834307][ T66] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.834325][ T66] ? __pfx__printk+0x10/0x10 [ 83.834340][ T66] ? _printk+0xd5/0x120 [ 83.834357][ T66] ? __init_begin+0x41000/0x41000 [ 83.834378][ T66] ? vscnprintf+0x5d/0x90 [ 83.834399][ T66] panic+0x349/0x880 [ 83.834415][ T66] ? __warn+0x177/0x4e0 [ 83.834433][ T66] ? __pfx_panic+0x10/0x10 [ 83.834448][ T66] ? show_trace_log_lvl+0x3b2/0x410 [ 83.834469][ T66] ? ret_from_fork_asm+0x1a/0x30 [ 83.834492][ T66] __warn+0x34b/0x4e0 [ 83.834509][ T66] ? __lock_acquire+0x58c/0x2050 [ 83.834534][ T66] report_bug+0x2b3/0x500 [ 83.834556][ T66] ? __lock_acquire+0x58c/0x2050 [ 83.834579][ T66] handle_bug+0x60/0x90 [ 83.834598][ T66] exc_invalid_op+0x1a/0x50 [ 83.834617][ T66] asm_exc_invalid_op+0x1a/0x20 [ 83.834635][ T66] RIP: 0010:__lock_acquire+0x58c/0x2050 [ 83.834659][ T66] Code: 00 00 83 3d 55 46 ad 0e 00 75 23 90 48 c7 c7 60 c9 0a 8c 48 c7 c6 00 cc 0a 8c e8 bf 7c e5 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 83.834673][ T66] RSP: 0018:ffffc900020bf3f0 EFLAGS: 00010046 [ 83.834688][ T66] RAX: 54dd5a7d0b4a5400 RBX: 0000000000000eac RCX: ffff88801cf60000 [ 83.834702][ T66] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 83.834722][ T66] RBP: 0000000000000014 R08: ffffffff8155d312 R09: 1ffffffff1d02658 [ 83.834735][ T66] R10: dffffc0000000000 R11: fffffbfff1d02659 R12: ffff88801cf60000 [ 83.834748][ T66] R13: 0000000000000eac R14: 1ffff110039ec174 R15: ffff88801cf60ba0 [ 83.834764][ T66] ? __warn_printk+0x292/0x360 [ 83.834792][ T66] lock_acquire+0x1ed/0x550 [ 83.834814][ T66] ? down+0x39/0xc0 [ 83.834833][ T66] ? ib_device_get_by_netdev+0x85/0x5e0 [ 83.834858][ T66] ? __pfx_lock_acquire+0x10/0x10 [ 83.834888][ T66] _raw_spin_lock_irqsave+0xd5/0x120 [ 83.834910][ T66] ? down+0x39/0xc0 [ 83.834927][ T66] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 83.834953][ T66] down+0x39/0xc0 [ 83.834972][ T66] __dev_close_many+0x107/0x300 [ 83.834992][ T66] ? __pfx___dev_close_many+0x10/0x10 [ 83.835012][ T66] ? mark_lock+0x9a/0x360 [ 83.835029][ T66] dev_close_many+0x24e/0x4c0 [ 83.835048][ T66] ? __pfx_dev_close_many+0x10/0x10 [ 83.835070][ T66] unregister_netdevice_many_notify+0x530/0x1da0 [ 83.835099][ T66] ? net_generic+0x1f/0x240 [ 83.835116][ T66] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 83.835142][ T66] ? unregister_netdevice_queue+0x26b/0x370 [ 83.835165][ T66] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 83.835192][ T66] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 83.835211][ T66] cleanup_net+0x75d/0xcc0 [ 83.835232][ T66] ? __pfx_cleanup_net+0x10/0x10 [ 83.835255][ T66] ? process_scheduled_works+0x976/0x1850 [ 83.835277][ T66] process_scheduled_works+0xa63/0x1850 [ 83.835309][ T66] ? __pfx_process_scheduled_works+0x10/0x10 [ 83.835334][ T66] ? assign_work+0x364/0x3d0 [ 83.835356][ T66] worker_thread+0x870/0xd30 [ 83.835380][ T66] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 83.835405][ T66] ? __kthread_parkme+0x169/0x1d0 [ 83.835428][ T66] ? __pfx_worker_thread+0x10/0x10 [ 83.835449][ T66] kthread+0x2f0/0x390 [ 83.835464][ T66] ? __pfx_worker_thread+0x10/0x10 [ 83.835486][ T66] ? __pfx_kthread+0x10/0x10 [ 83.835502][ T66] ret_from_fork+0x4b/0x80 [ 83.835523][ T66] ? __pfx_kthread+0x10/0x10 [ 83.835538][ T66] ret_from_fork_asm+0x1a/0x30 [ 83.835566][ T66] [ 83.854553][ T66] Kernel Offset: disabled